Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File:                     IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier:          v3xSzXl9BQQqe89FUwlMQ+GBuQy922ObtwUl3BlTkrk=
Subject key identifier:   97:10:4A:2D:3A:27:91:0D:6C:01:A1:ED:2F:65:89:76:47:04:41:7D
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer:       /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial:       018F4644E3165E8BFC648F9C01ABFC29C365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number:          0EF7
Signing time:             Sun 05 May 2024 01:01:10 +0000
Manifest this update:     Sun 05 May 2024 01:01:10 +0000
Manifest next update:     Mon 06 May 2024 01:01:10 +0000
Files and hashes:         1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: DDkTeI6H4+TXy3EpJYoJhO8HZbRigI+rcEUzOD8Li7U=)
                          2: UE38ewqN7mH2-FdBgI3rRa_w11I.roa (hash: mg/VPZ4ICLhYibqNNIrfv7wxzMmY3tjTor27KEsspNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:44:e3:16:5e:8b:fc:64:8f:9c:01:ab:fc:29:c3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
        Validity
            Not Before: May  5 01:01:10 2024 GMT
            Not After : May  6 01:01:10 2024 GMT
        Subject: CN=97104a2d3a27910d6c01a1ed2f6589764704417d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:f7:aa:a8:9d:01:1b:f5:15:f6:2b:5a:42:
                    bc:5e:e3:62:90:af:c3:a5:7e:5a:9e:5e:50:3b:20:
                    69:a9:4e:68:33:ac:52:09:34:1b:75:3a:49:6f:0c:
                    ee:51:23:44:b0:dd:29:fb:2e:28:39:06:41:e6:2b:
                    a9:3d:b7:1a:ff:9a:4b:97:ac:18:51:87:f6:11:9f:
                    a6:4f:0e:21:13:ef:87:b7:2c:a3:2f:66:5d:ef:69:
                    e2:3a:fb:2a:0c:93:39:98:b2:af:e5:82:00:56:8e:
                    ab:dd:bd:c0:59:cd:53:96:61:bf:ce:74:47:10:cd:
                    cb:e0:e6:8d:25:96:dd:88:01:34:53:0f:96:9d:8b:
                    45:8f:ef:96:cb:74:b7:5f:09:77:5c:19:63:88:9a:
                    b8:45:04:f9:4f:93:e7:b9:ce:97:e3:c1:4c:af:c2:
                    a4:60:bd:f0:2a:a4:f5:2d:d7:97:d6:3d:d0:eb:4a:
                    f4:60:db:49:fe:5d:bb:0d:b3:10:5a:6b:96:34:55:
                    b7:9f:ea:1d:a7:63:f1:09:01:75:37:de:e8:41:12:
                    74:6f:80:5c:90:79:b7:f4:e2:23:6c:05:38:c8:e3:
                    37:60:b3:c8:ca:27:3a:0a:72:85:6c:63:d6:82:71:
                    f1:0c:47:6e:78:81:9c:36:9d:a4:df:2e:1c:2c:6f:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:10:4A:2D:3A:27:91:0D:6C:01:A1:ED:2F:65:89:76:47:04:41:7D
            X509v3 Authority Key Identifier:
                keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:12:64:c4:af:41:f5:07:7b:ce:3f:67:d4:eb:be:9f:08:cb:
         35:9a:e1:5a:6a:c2:bc:24:3f:16:58:93:99:f6:68:9d:ca:bd:
         76:b6:16:85:3b:fa:80:1b:94:d0:8f:5f:93:2c:05:50:72:15:
         69:00:12:a2:a9:15:b7:e5:5f:32:b8:5b:58:0a:f7:61:3d:bc:
         3d:91:a5:04:c1:4e:6f:30:bd:76:2a:9d:76:d6:cc:87:87:81:
         3e:c8:bd:75:06:e1:45:0c:d4:2e:30:36:08:d5:52:be:89:e6:
         5b:4c:68:ed:da:c5:e6:70:a2:65:0b:24:3f:37:a5:97:ca:c7:
         0e:5d:24:c6:c6:8b:6b:32:4d:23:fd:6a:51:3e:0c:92:13:45:
         e5:7e:2c:0c:78:93:88:1e:89:4e:2c:be:9f:22:9a:e9:69:95:
         c0:da:3b:03:18:2f:9d:82:b6:d3:57:70:62:8c:d0:ea:0d:62:
         f5:a5:d4:5a:ad:16:c0:4a:88:49:74:63:80:a6:00:91:20:62:
         a9:c0:83:9c:0d:b8:18:8b:fb:5f:d5:82:c7:4c:47:aa:a7:2c:
         6f:b5:92:c3:3d:f0:5f:a1:2a:76:41:11:60:d7:7b:45:de:8b:
         8a:84:6f:8b:73:9b:05:ab:b9:72:97:7b:34:fc:21:7d:22:23:
         43:60:b9:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GROMWXov8ZI+cAav8KcNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNTRiY2MwMzI5M2UzYWQwZTE5YTdhM2ZkMWIxY2ZiZDM0
YzA5OTAwHhcNMjQwNTA1MDEwMTEwWhcNMjQwNTA2MDEwMTEwWjAzMTEwLwYDVQQD
Eyg5NzEwNGEyZDNhMjc5MTBkNmMwMWExZWQyZjY1ODk3NjQ3MDQ0MTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2r3qqidARv1FfYrWkK8XuNikK/D
pX5anl5QOyBpqU5oM6xSCTQbdTpJbwzuUSNEsN0p+y4oOQZB5iupPbca/5pLl6wY
UYf2EZ+mTw4hE++HtyyjL2Zd72niOvsqDJM5mLKv5YIAVo6r3b3AWc1TlmG/znRH
EM3L4OaNJZbdiAE0Uw+WnYtFj++Wy3S3Xwl3XBljiJq4RQT5T5Pnuc6X48FMr8Kk
YL3wKqT1LdeX1j3Q60r0YNtJ/l27DbMQWmuWNFW3n+odp2PxCQF1N97oQRJ0b4Bc
kHm39OIjbAU4yOM3YLPIyic6CnKFbGPWgnHxDEdueIGcNp2k3y4cLG9lPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcQSi06J5ENbAGh7S9liXZHBEF9MB8GA1UdIwQY
MBaAFCJUvMAyk+OtDhmno/0bHPvTTAmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAt
NGUzNDdkNTUxYzNmLzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAtNGUzNDdkNTUxYzNm
LzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphJkxK9B
9Qd7zj9n1Ou+nwjLNZrhWmrCvCQ/FliTmfZoncq9drYWhTv6gBuU0I9fkywFUHIV
aQASoqkVt+VfMrhbWAr3YT28PZGlBMFObzC9diqddtbMh4eBPsi9dQbhRQzULjA2
CNVSvonmW0xo7drF5nCiZQskPzell8rHDl0kxsaLazJNI/1qUT4MkhNF5X4sDHiT
iB6JTiy+nyKa6WmVwNo7AxgvnYK201dwYozQ6g1i9aXUWq0WwEqISXRjgKYAkSBi
qcCDnA24GIv7X9WCx0xHqqcsb7WSwz3wX6EqdkERYNd7Rd6LioRvi3ObBau5cpd7
NPwhfSIjQ2C5qw==
-----END CERTIFICATE-----
Generated at Sun May 5 06:27:29 2024 by rpki-client on console-ams.rpki-client.org