Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File:                     CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier:          B9bow4vX3StUHhbT3Y79XxlnT2RpVqqD95N4icdXp+Y=
Subject key identifier:   CF:0B:E4:05:EA:81:8B:58:EC:E1:12:28:6C:BE:08:EF:97:27:92:C6
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer:       /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial:       018F3AAE721CF8695B6DB2B232A00486C115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number:          0E9C
Signing time:             Thu 02 May 2024 19:01:01 +0000
Manifest this update:     Thu 02 May 2024 19:01:01 +0000
Manifest next update:     Fri 03 May 2024 19:01:01 +0000
Files and hashes:         1: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: +UOJ0kd6Id2ZO0yIpICA1D7qWm5MzW7WvoTro37X4TI=)
                          2: OdRlvRThVqtUOPnrWUbN0Sw5suc.roa (hash: 4qkGZCeCgWuQLgHUssa1QmwENMJDvAamh4TvwhwvfME=)
                          3: VpkumwRpPkerIRTvGF2Z0yKaUUI.roa (hash: rkI1AqxbfcLx/cSJqHBjlWxNS74Qh9/B/JvQrdVgtGY=)
                          4: Yp56FONBGOQSX3T0s6VQvQ7_ILg.roa (hash: Y1SjFvgwwVJz78xigK+kqjYU8zcaVkgvWxWJnZ2scFw=)
                          5: cPCmmEZLQBEPkXcziSUSzgr9A8M.roa (hash: 9oHg9VMQIEZDDm9PNgCyWP6uwuVuI5uEg0oqSov1DY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:72:1c:f8:69:5b:6d:b2:b2:32:a0:04:86:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
        Validity
            Not Before: May  2 19:01:01 2024 GMT
            Not After : May  3 19:01:01 2024 GMT
        Subject: CN=cf0be405ea818b58ece112286cbe08ef972792c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:e4:60:d8:fc:81:ba:88:ba:8a:3b:79:aa:
                    72:89:0c:8b:4f:cb:7a:11:8b:8f:ee:d2:b0:5e:e3:
                    95:1b:7b:e8:1e:e8:27:04:59:6b:5b:27:17:b6:eb:
                    ac:4c:56:c0:0b:4c:fb:92:24:5e:d4:62:e5:fa:83:
                    aa:af:2f:22:ef:73:50:2a:d3:ec:ce:36:40:5f:6f:
                    75:0f:31:c8:4d:33:46:6e:1a:95:01:f3:b4:5e:f0:
                    e1:d6:7e:cf:a4:c9:d8:c1:b7:c1:94:f3:36:d5:61:
                    ea:3e:c2:17:86:63:81:16:63:aa:e6:92:b9:90:c3:
                    f3:19:0c:d0:41:36:f9:35:88:ed:44:0d:de:a0:cf:
                    2d:ed:54:32:84:1b:a2:60:65:81:e3:2f:fc:6d:af:
                    d0:e2:45:9a:67:b4:5d:16:19:0e:6a:a4:3e:45:d4:
                    ee:e3:48:fc:00:ac:49:ce:e6:ed:49:34:58:f0:43:
                    6a:2c:dd:94:6e:75:db:12:bb:e1:28:c8:5a:b0:eb:
                    1c:5e:75:88:ee:bc:8a:de:af:59:db:31:3a:57:4a:
                    6e:39:7f:bb:e8:44:be:c4:33:60:b6:4d:08:22:e9:
                    ee:9c:3e:46:fd:4f:e5:92:a0:d8:c8:26:0b:3c:77:
                    1b:5d:75:6b:53:17:46:15:0b:56:31:31:ba:4a:4c:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0B:E4:05:EA:81:8B:58:EC:E1:12:28:6C:BE:08:EF:97:27:92:C6
            X509v3 Authority Key Identifier:
                keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:ee:94:76:18:86:ba:51:9a:3f:0f:d9:7f:65:2e:7e:6f:
         54:ed:c7:35:fe:53:45:22:84:54:25:57:65:7c:94:5f:b2:60:
         c6:26:80:25:0a:af:9a:db:2a:33:65:8a:10:ea:21:03:d4:6e:
         fd:a3:18:30:d3:00:34:2f:fa:25:da:42:37:d3:15:a1:23:e4:
         09:7f:c1:c0:35:b7:30:99:63:e0:fe:c5:3e:f5:e9:29:94:ae:
         da:96:77:3d:36:aa:fa:c5:3d:1e:19:14:09:65:fc:99:78:45:
         18:23:a5:72:9c:38:e5:69:ad:0b:55:ef:60:e0:59:79:99:a4:
         9a:3e:61:ab:e5:fe:c0:cc:fb:db:2c:3e:f5:5e:49:d8:f9:c6:
         7d:5f:33:d3:a9:4c:a1:ad:c9:39:b7:7c:c3:8e:5d:f6:e8:a0:
         18:49:11:9c:86:1e:ad:5b:8c:36:c5:a6:7d:6c:6c:5e:1f:db:
         dc:20:4d:22:47:63:fc:de:97:d3:fb:1d:d8:ba:55:26:d4:1e:
         ea:b0:36:0a:ed:fc:df:cc:0f:5f:1b:65:7f:47:fe:70:b9:82:
         fb:93:b2:ca:60:0e:29:81:32:da:a8:0f:7f:ee:1c:20:df:04:
         fc:24:c8:c7:b3:ab:c1:1f:eb:b3:8c:eb:19:62:45:af:9d:f4:
         13:8b:88:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86rnIc+GlbbbKyMqAEhsEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx
Y2IzNzgwHhcNMjQwNTAyMTkwMTAxWhcNMjQwNTAzMTkwMTAxWjAzMTEwLwYDVQQD
EyhjZjBiZTQwNWVhODE4YjU4ZWNlMTEyMjg2Y2JlMDhlZjk3Mjc5MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB/kYNj8gbqIuoo7eapyiQyLT8t6
EYuP7tKwXuOVG3voHugnBFlrWycXtuusTFbAC0z7kiRe1GLl+oOqry8i73NQKtPs
zjZAX291DzHITTNGbhqVAfO0XvDh1n7PpMnYwbfBlPM21WHqPsIXhmOBFmOq5pK5
kMPzGQzQQTb5NYjtRA3eoM8t7VQyhBuiYGWB4y/8ba/Q4kWaZ7RdFhkOaqQ+RdTu
40j8AKxJzubtSTRY8ENqLN2UbnXbErvhKMhasOscXnWI7ryK3q9Z2zE6V0puOX+7
6ES+xDNgtk0IIununD5G/U/lkqDYyCYLPHcbXXVrUxdGFQtWMTG6SkxB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8L5AXqgYtY7OESKGy+CO+XJ5LGMB8GA1UdIwQY
MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt
ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0
LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKjulHYY
hrpRmj8P2X9lLn5vVO3HNf5TRSKEVCVXZXyUX7JgxiaAJQqvmtsqM2WKEOohA9Ru
/aMYMNMANC/6JdpCN9MVoSPkCX/BwDW3MJlj4P7FPvXpKZSu2pZ3PTaq+sU9HhkU
CWX8mXhFGCOlcpw45WmtC1XvYOBZeZmkmj5hq+X+wMz72yw+9V5J2PnGfV8z06lM
oa3JObd8w45d9uigGEkRnIYerVuMNsWmfWxsXh/b3CBNIkdj/N6X0/sd2LpVJtQe
6rA2Cu3838wPXxtlf0f+cLmC+5OyymAOKYEy2qgPf+4cIN8E/CTIx7OrwR/rs4zr
GWJFr530E4uIPw==
-----END CERTIFICATE-----
Generated at Fri May 3 01:18:57 2024 by rpki-client on console-ams.rpki-client.org