Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
File:                     IY2yiCPzcIslWqEkum73QdET6vM.mft (raw, json)
Hash identifier:          RBT1WqVel1AeuP0IWmI6elWnML37uP6WcDkAN53kSvI=
Subject key identifier:   68:0F:98:98:F0:CE:D9:E7:34:77:00:A6:9C:30:BC:1A:63:80:83:F0
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Certificate issuer:       /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial:       018F381B6200FB5E42FA0570A61E74DE2554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
Manifest number:          0949
Signing time:             Thu 02 May 2024 07:01:09 +0000
Manifest this update:     Thu 02 May 2024 07:01:09 +0000
Manifest next update:     Fri 03 May 2024 07:01:09 +0000
Files and hashes:         1: IY2yiCPzcIslWqEkum73QdET6vM.crl (hash: 9J8YWht3O4V2AWv96DuxOsmhotERFrHNj5bBEEAqMkQ=)
                          2: h7cyKYfKECsIXGbnMqRJOhgVdEA.roa (hash: gZxvdiwKvx4MGlDyuTctCKSYRKfgsKR0fcmwBR+uBdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:62:00:fb:5e:42:fa:05:70:a6:1e:74:de:25:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
        Validity
            Not Before: May  2 07:01:09 2024 GMT
            Not After : May  3 07:01:09 2024 GMT
        Subject: CN=680f9898f0ced9e7347700a69c30bc1a638083f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:06:40:a2:de:8b:c9:f6:d3:14:f4:34:ff:
                    34:26:8f:07:9c:02:67:39:1e:96:32:d1:e9:c2:69:
                    41:af:35:ce:d5:ed:61:6a:d5:b3:a0:6e:58:28:37:
                    1c:86:fa:69:8c:d0:12:99:0a:91:7c:f2:7d:9b:e8:
                    c5:cb:39:e1:12:b5:fd:dd:c8:d2:1a:b0:c5:ae:75:
                    1f:9e:2e:cb:1e:b1:c2:c0:d2:87:1c:3d:c0:7d:f0:
                    ba:68:b4:d0:e0:6f:db:a7:a6:7a:93:94:3f:4e:6d:
                    5c:f5:80:83:45:1a:51:ca:c0:b1:05:09:9a:fa:5f:
                    6e:ec:24:cc:74:41:b7:f3:91:ba:4e:f8:25:a0:20:
                    df:0a:ff:23:62:40:49:6c:b5:77:39:b2:81:40:85:
                    71:18:5e:50:b9:34:9c:ca:41:c3:5a:b7:97:78:11:
                    80:8a:19:cc:08:40:b9:c1:0e:b5:5c:83:69:e6:e8:
                    9a:7a:51:a1:ce:52:c5:15:28:46:e1:b8:bb:e6:49:
                    15:35:01:a4:b6:20:49:c1:f8:4e:9a:1c:90:98:7b:
                    f0:29:de:04:99:af:9b:46:a8:82:88:dc:5e:cd:65:
                    5e:86:6d:eb:13:03:8b:bf:90:a4:8d:8c:05:8c:c5:
                    d0:fd:d2:07:86:03:75:05:61:2e:87:4d:33:6e:58:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:98:98:F0:CE:D9:E7:34:77:00:A6:9C:30:BC:1A:63:80:83:F0
            X509v3 Authority Key Identifier:
                keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:71:f1:4a:0e:f9:6f:04:2e:e5:aa:d3:a5:11:ff:ed:72:
         ff:c8:ed:7c:83:06:b7:df:a8:88:58:4e:cd:2e:e5:24:de:75:
         61:d5:b8:80:f0:10:c6:53:fd:4e:c6:b5:16:74:0f:fd:5c:1c:
         63:44:5e:e4:38:94:e4:8d:66:4c:60:57:ca:44:2f:d2:e1:fe:
         5c:b1:c2:cd:19:46:b9:30:04:a0:de:2a:7a:95:60:1d:52:bb:
         ee:b6:42:d4:7b:bd:4a:6f:4b:ff:bb:17:b3:70:1c:68:2e:21:
         0d:24:1f:ee:2b:ef:20:3c:46:4f:ee:db:e9:1d:ad:0e:70:18:
         a7:cf:5e:b1:df:e7:43:92:73:a4:28:b0:9c:8d:36:bc:28:83:
         e5:d9:75:1c:41:e3:12:fd:e4:ff:91:3c:95:58:0e:1d:16:a6:
         ef:63:65:0b:7b:75:00:1f:4e:4f:b5:c6:9b:19:90:48:2e:5f:
         e3:9f:49:a9:7e:36:20:5a:92:db:fd:de:d6:96:f8:65:4c:2f:
         65:7e:3b:c2:a1:29:14:a6:b1:2b:91:3e:4e:2d:64:b1:9f:01:
         e4:b9:1d:36:a9:be:6f:c9:00:a4:c2:a8:42:3d:58:78:61:b0:
         49:36:c5:e0:fa:9e:be:28:88:c9:70:d2:d3:d7:35:16:e8:fd:
         06:13:b6:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84G2IA+15C+gVwph503iVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRiMjg4MjNmMzcwOGIyNTVhYTEyNGJhNmVmNzQxZDEx
M2VhZjMwHhcNMjQwNTAyMDcwMTA5WhcNMjQwNTAzMDcwMTA5WjAzMTEwLwYDVQQD
Eyg2ODBmOTg5OGYwY2VkOWU3MzQ3NzAwYTY5YzMwYmMxYTYzODA4M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLIGQKLei8n20xT0NP80Jo8HnAJn
OR6WMtHpwmlBrzXO1e1hatWzoG5YKDcchvppjNASmQqRfPJ9m+jFyznhErX93cjS
GrDFrnUfni7LHrHCwNKHHD3AffC6aLTQ4G/bp6Z6k5Q/Tm1c9YCDRRpRysCxBQma
+l9u7CTMdEG385G6TvgloCDfCv8jYkBJbLV3ObKBQIVxGF5QuTScykHDWreXeBGA
ihnMCEC5wQ61XINp5uiaelGhzlLFFShG4bi75kkVNQGktiBJwfhOmhyQmHvwKd4E
ma+bRqiCiNxezWVehm3rEwOLv5CkjYwFjMXQ/dIHhgN1BWEuh00zbliVCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgPmJjwztnnNHcAppwwvBpjgIPwMB8GA1UdIwQY
MBaAFCGNsogj83CLJVqhJLpu90HRE+rzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NTIxMWUtMzYxOS00MjVmLWJhYmQt
NzlkYzNkMGJiZWQ4LzEvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NTIxMWUtMzYxOS00MjVmLWJhYmQtNzlkYzNkMGJiZWQ4
LzEvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm1x8UoO
+W8ELuWq06UR/+1y/8jtfIMGt9+oiFhOzS7lJN51YdW4gPAQxlP9Tsa1FnQP/Vwc
Y0Re5DiU5I1mTGBXykQv0uH+XLHCzRlGuTAEoN4qepVgHVK77rZC1Hu9Sm9L/7sX
s3AcaC4hDSQf7ivvIDxGT+7b6R2tDnAYp89esd/nQ5JzpCiwnI02vCiD5dl1HEHj
Ev3k/5E8lVgOHRam72NlC3t1AB9OT7XGmxmQSC5f459JqX42IFqS2/3e1pb4ZUwv
ZX47wqEpFKaxK5E+Ti1ksZ8B5LkdNqm+b8kApMKoQj1YeGGwSTbF4PqeviiIyXDS
09c1Fuj9BhO2lg==
-----END CERTIFICATE-----
Generated at Thu May 2 12:51:02 2024 by rpki-client on console-ams.rpki-client.org