Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File:                     9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier:          1tOeQAg2sDiPp1qnhwOF0KemnbowyMO3OkVGg47DX0g=
Subject key identifier:   24:D7:E6:4D:F5:83:BF:DD:7E:FD:D0:5D:27:98:AE:B8:49:13:0C:67
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer:       /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial:       018F46B2C6EEB4E9B2A0885508D4EC98DCA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number:          0E92
Signing time:             Sun 05 May 2024 03:01:12 +0000
Manifest this update:     Sun 05 May 2024 03:01:12 +0000
Manifest next update:     Mon 06 May 2024 03:01:12 +0000
Files and hashes:         1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: L/rA6D+ipNLiGcy8Dq4TE3wnhLroStFFil61DRs0FKE=)
                          2: NKvD7dWzJyl94jet9t6Za4d6Q2E.roa (hash: APhtdoDNbRZ278hdn2mfToQe+aDKzPJo9sexZBY+TYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:c6:ee:b4:e9:b2:a0:88:55:08:d4:ec:98:dc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f501b9e20616d686b405da906afa597635063640
        Validity
            Not Before: May  5 03:01:12 2024 GMT
            Not After : May  6 03:01:12 2024 GMT
        Subject: CN=24d7e64df583bfdd7efdd05d2798aeb849130c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:5e:8d:6e:59:14:a6:4d:ef:ae:e1:eb:94:
                    f9:ab:18:93:41:c1:8b:fa:ba:ae:18:1f:0e:cb:f0:
                    2f:09:57:eb:04:03:41:bf:bd:10:cb:e0:34:f1:74:
                    ba:eb:3a:38:90:a7:7d:cf:56:51:8b:b1:bc:8c:88:
                    71:01:6f:58:33:ad:d9:1f:c1:01:93:82:0e:8b:b1:
                    8d:3f:ee:c7:5d:45:d8:4e:b1:77:84:b4:c9:19:9a:
                    f3:5f:31:b3:d8:0f:3d:b9:e6:bf:3c:36:61:8c:8e:
                    21:50:17:ce:b9:61:58:dd:fc:95:9e:21:f8:b9:fa:
                    53:8a:8a:ee:1b:76:10:e1:17:25:79:bf:ae:10:4e:
                    a6:71:d6:11:a8:80:09:1c:a8:d0:03:9d:24:73:2e:
                    42:7e:54:e2:b7:a0:e1:ed:6f:b7:15:91:78:83:6c:
                    aa:ee:a8:d9:31:81:72:6e:e3:87:90:37:80:94:2f:
                    73:68:d9:f1:16:34:3c:bc:f5:67:cc:8b:be:e4:3e:
                    58:0d:f8:c3:85:1e:c1:07:7c:16:c8:69:a9:ea:b5:
                    bd:d1:64:3e:1d:e1:11:ec:0a:46:e0:76:72:b5:99:
                    19:65:61:d8:51:ec:db:4f:45:80:66:70:b8:49:d6:
                    a0:31:7a:1d:00:23:a6:b1:31:59:23:53:9a:f1:cc:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:E6:4D:F5:83:BF:DD:7E:FD:D0:5D:27:98:AE:B8:49:13:0C:67
            X509v3 Authority Key Identifier:
                keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:c7:dd:97:b4:47:e1:6a:af:b4:b0:8a:bd:50:bb:12:7f:
         44:71:47:d5:08:ca:01:b0:e7:a9:44:4a:cc:cc:78:25:24:d0:
         38:b4:b6:20:86:d3:03:21:06:8a:d0:70:af:94:26:9e:09:d9:
         38:66:d8:8c:34:83:35:b7:c2:d6:18:26:cd:26:b6:31:f2:ae:
         8c:c4:7b:c1:99:56:bd:2d:e2:74:df:b0:02:44:4a:30:80:57:
         e6:09:f3:23:62:02:83:02:06:4b:fa:44:50:cb:2b:52:61:b3:
         6e:6b:d1:ef:de:e9:48:9c:0b:5f:95:2f:b1:77:c6:19:c0:b1:
         dc:72:ad:4a:87:99:c9:e9:16:af:ef:b8:8b:e9:6d:8a:e9:23:
         a4:de:79:e7:a6:b3:25:af:d9:d8:bd:9e:1e:62:e4:29:d4:d2:
         9c:12:87:bc:14:44:ff:40:0b:e1:fc:8f:54:35:40:3e:81:5e:
         a5:28:7c:e3:2f:ed:3d:a8:91:19:ec:8f:69:c2:76:e5:ce:9e:
         78:44:00:50:b7:e4:3a:4d:a7:1d:5d:25:9a:8f:1d:aa:e7:bb:
         51:9f:c5:16:11:1f:c7:69:02:44:3c:3d:fa:6c:45:64:8f:8b:
         cc:62:f8:b8:61:fe:52:94:c8:af:29:d1:dd:1e:36:27:d5:f2:
         ea:c8:9d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GssbutOmyoIhVCNTsmNyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjQwNTA1MDMwMTEyWhcNMjQwNTA2MDMwMTEyWjAzMTEwLwYDVQQD
EygyNGQ3ZTY0ZGY1ODNiZmRkN2VmZGQwNWQyNzk4YWViODQ5MTMwYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4hejW5ZFKZN767h65T5qxiTQcGL
+rquGB8Oy/AvCVfrBANBv70Qy+A08XS66zo4kKd9z1ZRi7G8jIhxAW9YM63ZH8EB
k4IOi7GNP+7HXUXYTrF3hLTJGZrzXzGz2A89uea/PDZhjI4hUBfOuWFY3fyVniH4
ufpTioruG3YQ4Rcleb+uEE6mcdYRqIAJHKjQA50kcy5CflTit6Dh7W+3FZF4g2yq
7qjZMYFybuOHkDeAlC9zaNnxFjQ8vPVnzIu+5D5YDfjDhR7BB3wWyGmp6rW90WQ+
HeER7ApG4HZytZkZZWHYUezbT0WAZnC4SdagMXodACOmsTFZI1Oa8cxKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTX5k31g7/dfv3QXSeYrrhJEwxnMB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSrH3Ze0
R+Fqr7Swir1QuxJ/RHFH1QjKAbDnqURKzMx4JSTQOLS2IIbTAyEGitBwr5QmngnZ
OGbYjDSDNbfC1hgmzSa2MfKujMR7wZlWvS3idN+wAkRKMIBX5gnzI2ICgwIGS/pE
UMsrUmGzbmvR797pSJwLX5UvsXfGGcCx3HKtSoeZyekWr++4i+ltiukjpN5556az
Ja/Z2L2eHmLkKdTSnBKHvBRE/0AL4fyPVDVAPoFepSh84y/tPaiRGeyPacJ25c6e
eEQAULfkOk2nHV0lmo8dque7UZ/FFhEfx2kCRDw9+mxFZI+LzGL4uGH+UpTIrynR
3R42J9Xy6sidGQ==
-----END CERTIFICATE-----
Generated at Sun May 5 03:53:53 2024 by rpki-client on console-ams.rpki-client.org