Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          M2lC8bxgEvg/asz2tNlKvjRD0Zow6TLlwRBlVsV7NgQ=
Subject key identifier:   E5:19:B6:32:04:DD:C6:97:85:4D:78:0E:EB:9E:74:1F:A6:4A:46:7C
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       018F86DA6CE77BEACC3CD2E6E8B8AE3CDA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          0145
Signing time:             Fri 17 May 2024 14:00:12 +0000
Manifest this update:     Fri 17 May 2024 14:00:12 +0000
Manifest next update:     Sat 18 May 2024 14:00:12 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: 7jal+bwGR3QL4UUG8K1fiE9tj2cisuMpZvL1XWzs0BI=)
                          2: NOMFHSKn28UQ7K4Dtdoj183-0t8.roa (hash: ptKU/dHNhdedl7I5+D8rtah2J2aYeoxZoKg5mv5YlsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:6c:e7:7b:ea:cc:3c:d2:e6:e8:b8:ae:3c:da:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: May 17 14:00:12 2024 GMT
            Not After : May 18 14:00:12 2024 GMT
        Subject: CN=e519b63204ddc697854d780eeb9e741fa64a467c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:39:1c:c5:6c:29:0b:28:8e:66:c2:4c:da:
                    b4:01:f8:05:bc:90:b9:87:a4:f1:da:f5:b9:f7:4a:
                    a7:09:e3:5d:dc:98:d6:a6:cf:d8:c0:8b:e7:f0:d8:
                    b0:2a:3b:0a:fc:ae:d9:a2:af:d9:81:88:cd:26:99:
                    7d:d1:aa:e7:48:09:bf:a3:db:c0:00:a4:88:5d:29:
                    6b:0a:b5:aa:fc:44:ee:a0:3c:e7:5f:20:5c:92:26:
                    9c:7c:e8:83:14:f8:5e:70:b2:d1:61:4c:fb:f4:be:
                    16:7e:56:e8:bc:07:d3:2d:c2:88:65:5f:df:c2:4b:
                    6f:7e:d1:bd:01:d8:97:4d:82:34:b0:f0:77:25:01:
                    b4:1d:11:99:84:cd:2c:4b:c2:cb:35:b3:c7:eb:14:
                    54:f9:40:7a:5f:e7:ed:e8:0c:8c:0d:4d:7e:33:e2:
                    2a:1b:97:f1:28:48:f0:ff:69:39:4c:e4:c3:0d:45:
                    de:47:24:1d:f9:53:cf:58:77:c8:c6:cc:39:7f:0c:
                    a8:d1:b0:e9:93:e2:26:2f:ee:ac:53:c3:e4:c5:0c:
                    f0:1f:bf:a2:63:e7:97:4f:30:17:02:d7:68:e8:8e:
                    23:a8:0d:15:70:cb:fb:68:5d:c2:56:1d:4b:9a:45:
                    c2:08:a6:92:5a:0e:a8:48:2d:b9:2d:f6:91:90:07:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:19:B6:32:04:DD:C6:97:85:4D:78:0E:EB:9E:74:1F:A6:4A:46:7C
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:46:5e:85:69:5e:28:29:76:6b:6c:68:93:00:a2:91:8c:
         9c:8b:0c:61:4f:67:3c:2f:9a:cc:a8:97:00:fe:05:25:4d:e6:
         fd:fd:c2:9e:b9:5b:31:84:f9:64:b1:9a:94:ea:69:d1:c4:fa:
         51:3b:2a:c3:cb:a4:bb:ef:fd:d6:b9:7a:44:72:8a:e1:cb:f8:
         1a:8d:25:fd:72:46:c2:54:53:b8:1a:25:9e:d5:7c:fb:ef:ef:
         30:85:92:33:f2:61:71:49:2d:ae:0a:0b:4c:e6:84:9e:d6:e7:
         7a:a9:c8:ac:42:9d:87:01:9c:b3:a0:89:f2:17:14:e1:26:3a:
         18:c5:e2:1d:30:53:5b:77:c8:1e:dd:fc:eb:03:36:6a:c1:da:
         98:3e:23:dd:66:d1:1b:2f:aa:d9:b4:13:a2:8c:69:ef:af:6e:
         16:91:43:f8:4e:f1:4b:ae:07:a9:89:72:b8:a9:cd:f7:49:7f:
         0d:7c:c0:d0:2c:e0:6f:ea:90:51:ea:ea:7b:6b:ad:16:b8:24:
         da:d3:e8:8d:97:e1:55:92:db:a0:db:fb:1e:5e:ed:9a:0e:1e:
         b9:80:8a:88:e0:fa:fa:ff:f3:b7:36:a0:32:26:17:ba:cc:2a:
         9f:4d:9a:23:fa:ad:d2:26:73:84:22:df:9e:92:c9:f5:3c:b7:
         de:35:fc:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2mzne+rMPNLm6LiuPNoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4
NmVlZjQwHhcNMjQwNTE3MTQwMDEyWhcNMjQwNTE4MTQwMDEyWjAzMTEwLwYDVQQD
EyhlNTE5YjYzMjA0ZGRjNjk3ODU0ZDc4MGVlYjllNzQxZmE2NGE0NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cM5HMVsKQsojmbCTNq0AfgFvJC5
h6Tx2vW590qnCeNd3JjWps/YwIvn8NiwKjsK/K7Zoq/ZgYjNJpl90arnSAm/o9vA
AKSIXSlrCrWq/ETuoDznXyBckiacfOiDFPhecLLRYUz79L4WflbovAfTLcKIZV/f
wktvftG9AdiXTYI0sPB3JQG0HRGZhM0sS8LLNbPH6xRU+UB6X+ft6AyMDU1+M+Iq
G5fxKEjw/2k5TOTDDUXeRyQd+VPPWHfIxsw5fwyo0bDpk+ImL+6sU8PkxQzwH7+i
Y+eXTzAXAtdo6I4jqA0VcMv7aF3CVh1LmkXCCKaSWg6oSC25LfaRkAfcfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUZtjIE3caXhU14DuuedB+mSkZ8MB8GA1UdIwQY
MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et
ZDUxNmYwZTE0ODdiLzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi
LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvdGXoVp
XigpdmtsaJMAopGMnIsMYU9nPC+azKiXAP4FJU3m/f3CnrlbMYT5ZLGalOpp0cT6
UTsqw8uku+/91rl6RHKK4cv4Go0l/XJGwlRTuBolntV8++/vMIWSM/JhcUktrgoL
TOaEntbneqnIrEKdhwGcs6CJ8hcU4SY6GMXiHTBTW3fIHt386wM2asHamD4j3WbR
Gy+q2bQTooxp769uFpFD+E7xS64HqYlyuKnN90l/DXzA0Czgb+qQUerqe2utFrgk
2tPojZfhVZLboNv7Hl7tmg4euYCKiOD6+v/ztzagMiYXuswqn02aI/qt0iZzhCLf
npLJ9Ty33jX8wg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:04:12 2024 by rpki-client on console-ams.rpki-client.org