Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft
File:                     II-iuHM_UxgmetE77AeUNGJ3zyU.mft (raw, json)
Hash identifier:          AR7GtAnqwGeJqTNKgAdcG/CFTj70Xc+z5u534XLVMtU=
Subject key identifier:   49:FA:DE:FF:A3:13:96:05:D0:9B:05:2D:B1:3E:94:45:CA:77:DA:EF
Authority key identifier: 20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
Certificate issuer:       /CN=208fa2b8733f5318267ad13bec0794346277cf25
Certificate serial:       018F22DCE5C498D02BDF227D92A111ED9011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft
Manifest number:          058F
Signing time:             Sun 28 Apr 2024 04:00:53 +0000
Manifest this update:     Sun 28 Apr 2024 04:00:53 +0000
Manifest next update:     Mon 29 Apr 2024 04:00:53 +0000
Files and hashes:         1: II-iuHM_UxgmetE77AeUNGJ3zyU.crl (hash: 0xk0JHgE7r/eNJjFGFAkdVbyfk4nD5C9//8wszeHOJs=)
                          2: ijMYKwVZbAAZrdZptviKTEZvnVY.roa (hash: OxoQD51UrXnFyvu84u1jrO2MPkgfET5BwUDpVIlTwvs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dc:e5:c4:98:d0:2b:df:22:7d:92:a1:11:ed:90:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208fa2b8733f5318267ad13bec0794346277cf25
        Validity
            Not Before: Apr 28 04:00:53 2024 GMT
            Not After : Apr 29 04:00:53 2024 GMT
        Subject: CN=49fadeffa3139605d09b052db13e9445ca77daef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:81:08:00:9e:4c:b2:22:80:eb:7e:e0:d6:
                    08:6d:52:6b:99:9c:15:25:2c:42:50:82:85:5e:a3:
                    ef:24:fe:5a:dd:d1:cd:a0:a4:57:8d:5e:90:76:e2:
                    09:79:4d:40:aa:50:5b:f0:f2:28:9f:ca:c9:c2:c8:
                    f4:66:62:51:32:fa:ba:cd:50:3e:28:b8:fd:01:3c:
                    bf:cb:46:96:73:25:e5:e0:ce:06:25:8d:cb:b9:ed:
                    af:d3:63:57:dc:18:eb:bc:cc:7a:8a:55:40:50:8b:
                    3d:fd:93:17:53:36:45:bf:08:72:c4:b3:8e:f6:f0:
                    5f:b1:49:1a:35:76:36:0c:eb:2a:63:85:42:fe:1d:
                    81:01:a4:85:78:4e:c1:80:43:38:fc:0f:cd:51:7e:
                    9e:a6:38:15:e4:af:25:ac:29:27:be:94:55:6e:0e:
                    38:62:50:16:8b:53:11:21:46:5c:b5:47:2d:2d:a6:
                    e7:7a:ab:94:92:ca:ba:ff:38:5c:58:34:be:ae:79:
                    b4:56:74:e7:a5:13:60:06:da:70:36:f4:bb:02:2a:
                    71:c5:6e:e0:f5:53:0f:64:77:3a:c6:d8:fa:66:e2:
                    87:3b:41:b7:8a:91:ac:29:ce:d6:09:b1:42:e7:f1:
                    b2:96:b0:bb:34:3c:7f:c4:8c:f6:46:db:a4:ef:2c:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:DE:FF:A3:13:96:05:D0:9B:05:2D:B1:3E:94:45:CA:77:DA:EF
            X509v3 Authority Key Identifier:
                keyid:20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:38:6d:39:9b:95:4d:ac:30:32:c8:4e:e6:48:12:66:49:
         d8:6f:93:63:d9:de:98:aa:b4:d3:ba:ef:34:59:87:c7:35:39:
         3b:00:ee:0e:32:1b:de:c7:a8:30:aa:b3:49:c1:7e:e9:fe:78:
         8a:f3:45:b8:3c:b7:da:25:eb:1c:bf:33:e4:d9:92:d3:76:4e:
         b4:14:a8:9a:88:08:f0:bd:c6:d7:b8:7b:52:4f:41:3a:c0:db:
         65:20:e9:02:e5:61:89:35:12:f4:44:0a:2d:31:62:31:64:b7:
         3c:5f:b3:40:09:da:5a:1a:9c:ef:b4:01:e0:f2:cf:68:8d:97:
         1b:f6:94:dd:e2:e6:10:ca:eb:e7:25:e1:d7:0d:7f:59:4a:7a:
         ce:25:5c:82:c8:94:e3:53:12:71:03:b1:21:4d:00:19:7a:40:
         93:db:2e:92:e6:42:82:f4:ca:e0:17:45:ec:e7:dc:28:c0:c5:
         3e:b3:5d:c0:9d:23:86:2e:71:45:fb:6b:18:2f:81:52:f8:26:
         34:0c:5a:e8:63:b2:3a:e9:fc:5d:11:4d:b0:7a:01:19:fd:73:
         cf:40:2f:e2:27:8a:5f:3b:ae:c1:02:8b:64:19:5a:46:fe:d3:
         52:27:af:5f:fc:72:b5:8c:81:46:c0:8d:72:0a:20:66:34:70:
         20:1a:7b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8i3OXEmNAr3yJ9kqER7ZARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGZhMmI4NzMzZjUzMTgyNjdhZDEzYmVjMDc5NDM0NjI3
N2NmMjUwHhcNMjQwNDI4MDQwMDUzWhcNMjQwNDI5MDQwMDUzWjAzMTEwLwYDVQQD
Eyg0OWZhZGVmZmEzMTM5NjA1ZDA5YjA1MmRiMTNlOTQ0NWNhNzdkYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsiBCACeTLIigOt+4NYIbVJrmZwV
JSxCUIKFXqPvJP5a3dHNoKRXjV6QduIJeU1AqlBb8PIon8rJwsj0ZmJRMvq6zVA+
KLj9ATy/y0aWcyXl4M4GJY3Lue2v02NX3BjrvMx6ilVAUIs9/ZMXUzZFvwhyxLOO
9vBfsUkaNXY2DOsqY4VC/h2BAaSFeE7BgEM4/A/NUX6epjgV5K8lrCknvpRVbg44
YlAWi1MRIUZctUctLabnequUksq6/zhcWDS+rnm0VnTnpRNgBtpwNvS7AipxxW7g
9VMPZHc6xtj6ZuKHO0G3ipGsKc7WCbFC5/GylrC7NDx/xIz2Rtuk7yzDrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn63v+jE5YF0JsFLbE+lEXKd9rvMB8GA1UdIwQY
MBaAFCCPorhzP1MYJnrRO+wHlDRid88lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktaXVITV9VeGdtZXRFNzdBZVVOR0ozenlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84ZDFlMmItMzE5Zi00NGFjLWI5Njkt
ZTRhNTBmNzFkYTBjLzEvSUktaXVITV9VeGdtZXRFNzdBZVVOR0ozenlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84ZDFlMmItMzE5Zi00NGFjLWI5NjktZTRhNTBmNzFkYTBj
LzEvSUktaXVITV9VeGdtZXRFNzdBZVVOR0ozenlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTk4bTmb
lU2sMDLITuZIEmZJ2G+TY9nemKq007rvNFmHxzU5OwDuDjIb3seoMKqzScF+6f54
ivNFuDy32iXrHL8z5NmS03ZOtBSomogI8L3G17h7Uk9BOsDbZSDpAuVhiTUS9EQK
LTFiMWS3PF+zQAnaWhqc77QB4PLPaI2XG/aU3eLmEMrr5yXh1w1/WUp6ziVcgsiU
41MScQOxIU0AGXpAk9sukuZCgvTK4BdF7OfcKMDFPrNdwJ0jhi5xRftrGC+BUvgm
NAxa6GOyOun8XRFNsHoBGf1zz0Av4ieKXzuuwQKLZBlaRv7TUievX/xytYyBRsCN
cgogZjRwIBp7KQ==
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:38:47 2024 by rpki-client on console-ams.rpki-client.org