Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          p7IOudiX3OuSvhZEB8i8S/22wgarwPwur+wQ4d1ANL4=
Subject key identifier:   CB:02:B6:80:23:1B:77:A8:44:C5:D1:EA:A1:B7:02:8D:42:D1:8C:05
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       018F4E3565B64E868FDF9DB4E4E287E03F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          0B54
Signing time:             Mon 06 May 2024 14:01:13 +0000
Manifest this update:     Mon 06 May 2024 14:01:13 +0000
Manifest next update:     Tue 07 May 2024 14:01:13 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: JP04FUIpCmc0TJeVajBxJLMy32FZeRa3QSzx3ALV0Rg=)
                          2: REcM1tZVxLJoXhs1p-nBsTmsWxo.roa (hash: gmLJ5AAEQWGAWXMZ78FYLEb7869uhdCGKs6yxHjx+y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:65:b6:4e:86:8f:df:9d:b4:e4:e2:87:e0:3f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: May  6 14:01:13 2024 GMT
            Not After : May  7 14:01:13 2024 GMT
        Subject: CN=cb02b680231b77a844c5d1eaa1b7028d42d18c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:c3:57:a0:ea:10:3a:7f:69:b3:b7:63:8a:
                    24:3c:c1:3e:91:bc:d6:8a:f3:9c:45:7d:14:9d:0b:
                    56:6a:32:8d:71:89:12:1b:97:88:0b:5a:3e:9f:f2:
                    36:0f:aa:79:f1:b6:17:a7:4a:14:10:2e:32:69:50:
                    5f:48:48:ed:4a:ac:b9:01:cd:ee:25:13:30:bf:04:
                    8f:2f:a5:bd:ea:bd:dc:f7:80:ed:50:78:29:4d:24:
                    3c:5d:59:a5:0b:dc:3a:74:15:e9:b6:97:f2:51:a3:
                    79:5c:77:4e:4f:66:fe:f4:14:b0:91:62:9f:22:62:
                    59:07:18:1d:2c:99:4d:c1:2c:f4:2b:07:db:84:c2:
                    1b:f9:21:34:75:6b:fd:b9:79:39:44:88:14:a6:e8:
                    4b:46:cb:99:ea:e0:05:07:e7:f3:41:23:64:c5:29:
                    94:29:34:f5:c0:e9:d9:aa:77:f8:5d:a0:4f:75:3b:
                    30:6f:7f:74:a8:12:d4:da:d5:de:f0:c4:a9:00:31:
                    63:46:38:b8:7a:56:68:da:85:49:b4:48:6f:2d:0d:
                    e4:af:37:f0:86:4c:b5:8b:59:1c:4f:5d:ff:7a:61:
                    b2:3f:1d:65:7e:a8:73:37:92:65:94:14:53:d5:8f:
                    44:9d:59:1e:bd:7f:ee:01:79:3a:e3:0d:2e:2c:9c:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:02:B6:80:23:1B:77:A8:44:C5:D1:EA:A1:B7:02:8D:42:D1:8C:05
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:69:10:8b:90:28:10:48:33:ac:5d:8e:f5:d0:69:9a:5c:c6:
         a7:7b:4c:f8:d9:1b:8a:4f:17:0e:98:5d:12:99:aa:cd:cd:64:
         ba:86:50:ec:07:d5:14:13:3f:09:72:4e:74:12:5b:cc:3d:03:
         09:d1:b8:f5:84:82:56:ed:15:6b:f3:c5:f8:42:64:63:e3:e2:
         1f:c3:da:f3:f0:5f:66:81:95:2f:11:72:8f:69:2b:10:9e:27:
         e1:25:20:41:40:cc:50:b4:6e:31:f7:61:f9:c6:92:65:6f:d7:
         08:38:8a:a9:af:64:22:77:d8:9b:9f:b3:f9:82:dd:9c:06:77:
         71:43:46:4b:0d:b4:28:ad:a2:88:93:20:9d:76:86:a7:7b:84:
         81:45:4d:dd:f7:04:cf:2c:63:9a:17:37:d0:b1:94:ce:8d:7f:
         cc:65:a8:b6:70:6a:2a:e7:7c:aa:97:fe:52:79:91:84:3f:d2:
         1e:9a:1e:7c:f0:6b:6e:de:31:df:1b:5c:e5:fb:64:ff:5d:1f:
         45:c2:eb:33:8e:2a:26:61:bd:5a:20:d0:b6:42:84:cd:e4:85:
         83:4d:13:49:25:95:80:1e:2a:3a:14:1a:df:bc:52:98:0c:d0:
         68:a5:f1:c8:65:eb:0d:ee:61:2c:fc:79:b3:39:3c:3a:32:32:
         8c:77:71:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ONWW2ToaP35205OKH4D8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmNlZjk3NjY0MmQ1NGI0YjRhMTk5OGYwYjNmZjQ4ODQ1
YTkyNmQwHhcNMjQwNTA2MTQwMTEzWhcNMjQwNTA3MTQwMTEzWjAzMTEwLwYDVQQD
EyhjYjAyYjY4MDIzMWI3N2E4NDRjNWQxZWFhMWI3MDI4ZDQyZDE4YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrbDV6DqEDp/abO3Y4okPME+kbzW
ivOcRX0UnQtWajKNcYkSG5eIC1o+n/I2D6p58bYXp0oUEC4yaVBfSEjtSqy5Ac3u
JRMwvwSPL6W96r3c94DtUHgpTSQ8XVmlC9w6dBXptpfyUaN5XHdOT2b+9BSwkWKf
ImJZBxgdLJlNwSz0KwfbhMIb+SE0dWv9uXk5RIgUpuhLRsuZ6uAFB+fzQSNkxSmU
KTT1wOnZqnf4XaBPdTswb390qBLU2tXe8MSpADFjRji4elZo2oVJtEhvLQ3krzfw
hky1i1kcT13/emGyPx1lfqhzN5JllBRT1Y9EnVkevX/uAXk64w0uLJxwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsCtoAjG3eoRMXR6qG3Ao1C0YwFMB8GA1UdIwQY
MBaAFAO875dmQtVLS0oZmPCz/0iEWpJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYt
ZjFlOWJmMmJmZjIxLzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYtZjFlOWJmMmJmZjIx
LzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmkQi5Ao
EEgzrF2O9dBpmlzGp3tM+Nkbik8XDphdEpmqzc1kuoZQ7AfVFBM/CXJOdBJbzD0D
CdG49YSCVu0Va/PF+EJkY+PiH8Pa8/BfZoGVLxFyj2krEJ4n4SUgQUDMULRuMfdh
+caSZW/XCDiKqa9kInfYm5+z+YLdnAZ3cUNGSw20KK2iiJMgnXaGp3uEgUVN3fcE
zyxjmhc30LGUzo1/zGWotnBqKud8qpf+UnmRhD/SHpoefPBrbt4x3xtc5ftk/10f
RcLrM44qJmG9WiDQtkKEzeSFg00TSSWVgB4qOhQa37xSmAzQaKXxyGXrDe5hLPx5
szk8OjIyjHdxEg==
-----END CERTIFICATE-----
Generated at Mon May 6 23:39:40 2024 by rpki-client on console-fra.rpki-client.org