Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File:                     Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier:          A0pdF1OQ3+RyAiK9tAV+RRlFkLu4sazDrydroYdEjrU=
Subject key identifier:   05:DC:E9:4D:1F:56:6D:DB:A3:B7:3A:AE:C9:74:65:D1:D0:6C:00:3C
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer:       /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial:       018F90F23C187458FF9D3D5FA701A70210E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number:          02BE
Signing time:             Sun 19 May 2024 13:02:25 +0000
Manifest this update:     Sun 19 May 2024 13:02:25 +0000
Manifest next update:     Mon 20 May 2024 13:02:25 +0000
Files and hashes:         1: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: biO4XrRFf8twhBBMkSKw8NRKVIYBQWDQp8JAJ3X2C+Y=)
                          2: Hj8lCfhk8UlyDRy2SdzKYU1HO-8.roa (hash: rJwL29Y+L0t0Qjmu5lP5g2foQXjICP0ESpFOud75b1c=)
                          3: ciedX7S1XTHKydUA2FMhFyCP-m8.roa (hash: MKQM3q6Xs5cfwEC0u49HBKGyLgEM+9k5qXBcfdpD5+o=)
                          4: sGDVRpDcbpuSElpzOrLFjkgXHEk.roa (hash: NUCurmhcPlWXWolm+kOjRUe4ntTvuPzcU9fd7aLcLVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f2:3c:18:74:58:ff:9d:3d:5f:a7:01:a7:02:10:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
        Validity
            Not Before: May 19 13:02:25 2024 GMT
            Not After : May 20 13:02:25 2024 GMT
        Subject: CN=05dce94d1f566ddba3b73aaec97465d1d06c003c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:42:e2:26:50:87:06:57:d4:d9:c2:cb:b1:
                    46:34:a9:ec:73:42:29:bd:1b:6e:07:7f:13:9c:21:
                    d4:34:c8:d6:1a:49:da:41:19:10:d1:a2:91:e0:db:
                    63:41:19:32:d5:5d:3b:5a:42:72:08:79:b1:09:09:
                    38:59:a4:83:43:90:01:3d:70:c6:63:af:43:0c:28:
                    16:e5:03:76:1e:3d:02:18:ec:3b:c2:e1:2c:b3:5c:
                    5e:4b:c9:0a:d7:d5:91:d7:5f:0d:d7:0f:52:67:f0:
                    81:fe:69:14:d3:7f:80:c3:02:a7:e9:22:5c:df:cf:
                    5d:cf:1e:c9:38:a3:f2:f0:99:cd:7d:ba:cb:e4:3a:
                    89:52:5a:87:05:7f:97:a5:fb:d0:b0:b2:ab:6b:c2:
                    79:ef:0f:cc:33:ca:41:d9:96:3c:4f:76:56:b6:64:
                    c3:cd:40:ea:a2:f4:e9:c6:a3:23:16:8d:29:09:5f:
                    7c:38:89:ec:91:b6:d1:08:70:90:93:91:b1:e4:de:
                    2a:45:01:a5:8c:ec:44:2f:3f:a8:0a:38:25:bd:76:
                    f9:da:ad:28:2a:54:e5:7f:11:0e:14:6f:74:34:36:
                    dd:9c:5c:b5:ff:87:87:44:72:17:86:ab:1a:bb:20:
                    d9:dc:53:d4:db:58:77:d2:59:87:6a:8f:a1:61:76:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:E9:4D:1F:56:6D:DB:A3:B7:3A:AE:C9:74:65:D1:D0:6C:00:3C
            X509v3 Authority Key Identifier:
                keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:83:6c:32:9d:2a:4b:8d:d6:6c:73:2a:5f:f4:66:6f:60:3a:
         bd:88:71:08:4f:d4:53:7c:13:3a:f2:d4:b1:b4:2b:1a:50:cf:
         40:5c:31:49:45:fd:f5:9d:07:2a:8b:0a:12:90:e7:8e:27:71:
         b6:b0:59:e6:34:74:69:51:71:1c:a4:ca:9d:90:03:6d:0b:d2:
         1b:88:1c:fe:2c:47:56:30:dc:3d:a4:22:e5:20:1e:02:f3:ef:
         30:72:13:e0:01:64:0a:ea:ec:83:54:f4:3f:63:73:b3:c3:a6:
         92:43:cb:ea:bc:f3:16:94:04:50:7f:92:ef:4b:58:75:5e:16:
         26:79:90:f6:bc:b4:d4:c2:cd:c9:f4:06:ce:a1:28:e9:3f:76:
         d3:1c:4f:fd:0b:5c:00:ba:8a:3a:bf:65:33:0b:b2:45:e9:c8:
         89:13:0e:74:e7:15:86:a3:ba:09:a2:1d:b3:6e:3d:8c:74:3a:
         76:b3:e8:12:79:55:2c:c3:9f:f8:37:e6:2a:8d:b0:5b:ed:72:
         19:a4:2f:2b:78:0d:26:50:af:af:64:7a:e6:a3:1d:20:2d:04:
         38:5f:d1:eb:82:84:56:f0:e8:77:b0:2b:6c:cb:1c:6c:2c:de:
         9b:3a:3e:23:a6:8a:8b:e6:ef:5c:5b:fd:78:7b:b2:bf:5f:9e:
         18:60:57:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Q8jwYdFj/nT1fpwGnAhDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWNhYWYzYTA5OTNiNzZhZTEzZTExOTEzNmRiZjAwNjk2
OTg5MTEwHhcNMjQwNTE5MTMwMjI1WhcNMjQwNTIwMTMwMjI1WjAzMTEwLwYDVQQD
EygwNWRjZTk0ZDFmNTY2ZGRiYTNiNzNhYWVjOTc0NjVkMWQwNmMwMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla1C4iZQhwZX1NnCy7FGNKnsc0Ip
vRtuB38TnCHUNMjWGknaQRkQ0aKR4NtjQRky1V07WkJyCHmxCQk4WaSDQ5ABPXDG
Y69DDCgW5QN2Hj0CGOw7wuEss1xeS8kK19WR118N1w9SZ/CB/mkU03+AwwKn6SJc
389dzx7JOKPy8JnNfbrL5DqJUlqHBX+XpfvQsLKra8J57w/MM8pB2ZY8T3ZWtmTD
zUDqovTpxqMjFo0pCV98OInskbbRCHCQk5Gx5N4qRQGljOxELz+oCjglvXb52q0o
KlTlfxEOFG90NDbdnFy1/4eHRHIXhqsauyDZ3FPU21h30lmHao+hYXZjmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXc6U0fVm3bo7c6rsl0ZdHQbAA8MB8GA1UdIwQY
MBaAFBpcqvOgmTt2rhPhGRNtvwBpaYkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUt
N2M1OTBiY2Y5ODFhLzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUtN2M1OTBiY2Y5ODFh
LzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoNsMp0q
S43WbHMqX/Rmb2A6vYhxCE/UU3wTOvLUsbQrGlDPQFwxSUX99Z0HKosKEpDnjidx
trBZ5jR0aVFxHKTKnZADbQvSG4gc/ixHVjDcPaQi5SAeAvPvMHIT4AFkCursg1T0
P2Nzs8OmkkPL6rzzFpQEUH+S70tYdV4WJnmQ9ry01MLNyfQGzqEo6T920xxP/Qtc
ALqKOr9lMwuyRenIiRMOdOcVhqO6CaIds249jHQ6drPoEnlVLMOf+DfmKo2wW+1y
GaQvK3gNJlCvr2R65qMdIC0EOF/R64KEVvDod7ArbMscbCzemzo+I6aKi+bvXFv9
eHuyv1+eGGBXEA==
-----END CERTIFICATE-----
Generated at Sun May 19 14:57:17 2024 by rpki-client on console-ams.rpki-client.org