Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          mDz2QBuSNi4C61UekYUkK+x56Um0uIG3ngk/1cZb5Q8=
Subject key identifier:   9B:83:50:68:83:F9:50:7B:4E:C4:DB:7F:FA:7D:47:FA:DB:B5:75:B4
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       018F45A2B11BD02F97A063D934D4A022226E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 22:04:01 +0000
Manifest this update:     Sat 04 May 2024 22:04:01 +0000
Manifest next update:     Sun 05 May 2024 22:04:01 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: y5AShEC7bTsQ+vD7UNnbjZe8puwTZqh8H6uICeFqPdE=)
                          2: U7GUOGhgPGBAOmT1VU18V3rUV-0.roa (hash: XwstNEXzkzcmI2WrrGV+xdW2ZaCqeIIIwgy10/ghYBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:b1:1b:d0:2f:97:a0:63:d9:34:d4:a0:22:22:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: May  4 22:04:01 2024 GMT
            Not After : May  5 22:04:01 2024 GMT
        Subject: CN=9b83506883f9507b4ec4db7ffa7d47fadbb575b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:9a:e9:22:1b:dc:f9:a8:a9:f1:88:18:ea:
                    df:41:69:e2:3d:cc:f3:a4:22:a8:7a:19:8b:2e:74:
                    fc:6b:de:6b:b5:e8:3a:37:19:38:c1:da:61:d1:3e:
                    44:94:82:6e:29:e7:c5:c4:08:96:28:88:36:e5:d5:
                    d2:0c:90:6e:89:95:86:ce:bf:ea:6b:27:00:25:0b:
                    10:95:3d:dd:7e:5a:e5:2b:7d:06:d1:f0:1e:c5:df:
                    80:9d:bc:6c:07:0e:ea:f2:1d:46:08:67:ad:c8:dc:
                    c9:9a:19:2d:55:63:54:75:94:15:dc:b7:1c:71:2a:
                    78:4f:6e:47:93:71:56:42:49:29:8c:da:99:29:a7:
                    08:c3:66:fa:f6:92:41:c2:94:dd:fa:ac:cd:74:26:
                    98:2a:89:d1:26:19:6b:3f:cc:e7:c3:73:77:31:96:
                    ab:71:bb:6d:f6:b9:0b:b5:c1:53:e0:75:28:cd:d1:
                    30:f9:fd:ce:e5:b9:c9:7f:7f:e8:ce:36:c5:a8:c8:
                    0d:c7:87:20:d4:e4:d8:4f:f1:06:7a:dc:26:78:a7:
                    d3:87:42:2a:02:a2:47:a1:95:0a:c0:7b:65:52:98:
                    ac:5c:30:fc:7a:51:ab:46:95:c3:72:be:6b:98:f2:
                    3e:b7:83:7f:b2:c0:02:9a:cc:a0:d6:0b:48:24:15:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:83:50:68:83:F9:50:7B:4E:C4:DB:7F:FA:7D:47:FA:DB:B5:75:B4
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:45:ff:8c:97:55:dc:1b:a2:75:50:38:a7:af:88:9f:b4:
         e4:26:3a:67:e1:a7:68:5a:8b:6e:a7:85:ca:0d:25:26:31:60:
         1a:4b:8c:44:f2:22:f9:be:ed:60:16:d9:21:30:9b:02:51:a1:
         47:fa:de:a4:0e:3a:42:a8:15:6e:35:cd:c7:c8:69:82:92:f5:
         7e:20:94:d6:a6:0d:54:45:3b:9a:3b:a1:be:d7:b2:6d:23:fc:
         ad:e9:79:34:fb:b0:86:5a:27:4a:30:4b:42:37:4b:17:54:de:
         20:6b:51:4e:51:22:ed:ca:db:9e:39:47:59:d3:3e:06:2c:c4:
         4b:06:35:72:2f:3c:28:47:94:84:9c:a8:de:fb:72:c4:60:6a:
         7f:bc:3e:e6:d7:53:6d:1d:14:32:5e:ae:c6:6a:35:2f:d5:5f:
         e0:ac:d9:6d:87:6d:f8:c7:f8:24:ee:fc:4a:fb:22:b0:6f:27:
         0e:50:b0:57:29:e0:d9:fd:15:7a:34:1a:84:27:fe:e9:dd:1b:
         68:0c:f6:ea:3e:50:7c:91:23:60:cf:aa:42:ba:03:24:5c:ad:
         11:3f:cb:bd:ff:03:e6:a7:de:66:e3:25:55:64:cb:31:e8:9e:
         7e:7b:84:d8:cf:8f:43:46:8e:bd:c1:90:c2:8f:fb:7b:62:06:
         96:5e:c4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ForEb0C+XoGPZNNSgIiJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy
ZWE3NTYwHhcNMjQwNTA0MjIwNDAxWhcNMjQwNTA1MjIwNDAxWjAzMTEwLwYDVQQD
Eyg5YjgzNTA2ODgzZjk1MDdiNGVjNGRiN2ZmYTdkNDdmYWRiYjU3NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJua6SIb3PmoqfGIGOrfQWniPczz
pCKoehmLLnT8a95rteg6Nxk4wdph0T5ElIJuKefFxAiWKIg25dXSDJBuiZWGzr/q
aycAJQsQlT3dflrlK30G0fAexd+AnbxsBw7q8h1GCGetyNzJmhktVWNUdZQV3Lcc
cSp4T25Hk3FWQkkpjNqZKacIw2b69pJBwpTd+qzNdCaYKonRJhlrP8znw3N3MZar
cbtt9rkLtcFT4HUozdEw+f3O5bnJf3/ozjbFqMgNx4cg1OTYT/EGetwmeKfTh0Iq
AqJHoZUKwHtlUpisXDD8elGrRpXDcr5rmPI+t4N/ssACmsyg1gtIJBV1sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuDUGiD+VB7TsTbf/p9R/rbtXW0MB8GA1UdIwQY
MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt
ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz
LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJ9F/4yX
VdwbonVQOKeviJ+05CY6Z+GnaFqLbqeFyg0lJjFgGkuMRPIi+b7tYBbZITCbAlGh
R/repA46QqgVbjXNx8hpgpL1fiCU1qYNVEU7mjuhvteybSP8rel5NPuwhlonSjBL
QjdLF1TeIGtRTlEi7crbnjlHWdM+BizESwY1ci88KEeUhJyo3vtyxGBqf7w+5tdT
bR0UMl6uxmo1L9Vf4KzZbYdt+Mf4JO78SvsisG8nDlCwVyng2f0VejQahCf+6d0b
aAz26j5QfJEjYM+qQroDJFytET/Lvf8D5qfeZuMlVWTLMeiefnuE2M+PQ0aOvcGQ
wo/7e2IGll7EIA==
-----END CERTIFICATE-----
Generated at Sun May 5 06:29:35 2024 by rpki-client on console-ams.rpki-client.org