Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          1UWXoeT9XxHY8K0cH9WyqsOFwHzVFjDm1xxk91zjmhU=
Subject key identifier:   62:B3:CC:C2:3E:41:92:AE:03:12:03:BB:44:65:59:F3:08:B7:6A:E1
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       018F5091D41FCA5E740D0E8CCCB9C2B6186A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          115D
Signing time:             Tue 07 May 2024 01:01:25 +0000
Manifest this update:     Tue 07 May 2024 01:01:25 +0000
Manifest next update:     Wed 08 May 2024 01:01:25 +0000
Files and hashes:         1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: Z7UY/92fto15D+NwO4JJjZs69sRCFr445FFY1C6SiXY=)
                          2: ZiY2ltCBtALEYj2L80HrBY1atNI.roa (hash: r4AvWv8vnOF2W1jziJhJWuD4ZBM2XbmusVuYtPqhCJM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:91:d4:1f:ca:5e:74:0d:0e:8c:cc:b9:c2:b6:18:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: May  7 01:01:25 2024 GMT
            Not After : May  8 01:01:25 2024 GMT
        Subject: CN=62b3ccc23e4192ae031203bb446559f308b76ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:02:59:b0:78:24:c0:60:10:77:02:f0:47:
                    a1:36:5d:1c:21:73:3e:30:86:b8:fb:97:3b:74:9c:
                    0d:4f:dc:aa:8d:77:a3:d7:60:53:e8:46:06:a4:98:
                    39:1f:10:f7:f5:5d:ff:7f:8a:2a:0d:aa:35:c1:ec:
                    94:44:79:ff:04:0b:88:af:28:47:78:34:f5:76:7f:
                    27:fc:2b:62:c7:07:18:c9:b4:39:6b:ee:7f:2c:13:
                    15:01:7e:e6:45:78:61:e6:69:9e:8d:21:03:53:8b:
                    ee:58:44:bf:18:b8:fd:9a:7a:b9:88:f3:ee:20:83:
                    ad:b3:da:12:cc:ed:b5:1d:1d:4d:b2:13:be:a6:2c:
                    b4:f6:09:b1:79:b3:b3:f8:bc:98:47:3e:69:14:89:
                    84:84:54:70:c9:f9:a1:8d:6d:d2:f0:70:87:ce:3f:
                    4c:e5:b0:12:55:87:5f:31:56:98:11:82:4c:11:7b:
                    19:01:29:f5:93:8d:88:ed:2a:84:c4:eb:8c:32:80:
                    2d:89:ca:d1:16:9b:b5:a5:5d:35:23:86:a8:3d:c7:
                    55:fc:82:db:e4:69:3a:b7:8e:b6:65:8e:80:96:59:
                    4b:ef:68:35:48:f3:83:37:e9:48:95:a9:ff:25:1c:
                    e5:50:85:c9:6c:c6:f0:1d:04:5b:7c:6e:2b:17:98:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B3:CC:C2:3E:41:92:AE:03:12:03:BB:44:65:59:F3:08:B7:6A:E1
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:8f:45:56:c9:41:17:6a:08:dd:65:45:99:c4:7b:d0:f1:
         25:de:f4:e5:70:55:ae:ce:b2:65:0c:8f:16:a5:bd:09:e0:bc:
         e5:61:1d:10:9d:97:ed:bd:07:10:37:e8:4d:03:fc:2b:20:10:
         48:0b:fb:60:dd:ff:4c:6a:49:b7:08:ce:a9:0f:05:7b:24:2e:
         d4:12:d6:ce:b1:e4:c6:37:9e:a3:a1:fe:7f:2b:a9:bc:80:74:
         94:3b:87:09:2e:4c:cb:2a:6b:73:4f:cc:e5:c8:fb:6e:5d:92:
         28:ef:92:82:93:99:f4:3d:8e:88:b3:9c:3f:92:b7:dd:e5:85:
         fa:a3:3d:e0:9c:06:6a:70:b6:92:a8:7a:75:d0:b7:a3:aa:10:
         cd:a7:17:b9:a3:e4:5e:4c:fb:2e:71:c3:d0:53:c3:9a:53:24:
         07:62:ae:de:2b:6f:f7:03:ad:f6:27:c4:65:e3:5b:65:a7:fc:
         20:0c:a9:aa:17:8a:b8:4c:58:93:91:a8:43:36:97:20:78:a9:
         00:5a:bc:e4:a9:b5:ec:32:55:29:6e:fa:2b:f6:05:05:0b:0d:
         9c:82:7f:66:8f:9a:ef:81:e8:fe:b2:cb:85:46:d2:27:58:8a:
         c0:b9:ee:e0:b2:52:db:48:b4:4d:cf:c2:3e:38:7c:c3:47:ac:
         79:bc:b4:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9QkdQfyl50DQ6MzLnCthhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5
YWFlNTEwHhcNMjQwNTA3MDEwMTI1WhcNMjQwNTA4MDEwMTI1WjAzMTEwLwYDVQQD
Eyg2MmIzY2NjMjNlNDE5MmFlMDMxMjAzYmI0NDY1NTlmMzA4Yjc2YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveECWbB4JMBgEHcC8EehNl0cIXM+
MIa4+5c7dJwNT9yqjXej12BT6EYGpJg5HxD39V3/f4oqDao1weyURHn/BAuIryhH
eDT1dn8n/CtixwcYybQ5a+5/LBMVAX7mRXhh5mmejSEDU4vuWES/GLj9mnq5iPPu
IIOts9oSzO21HR1NshO+piy09gmxebOz+LyYRz5pFImEhFRwyfmhjW3S8HCHzj9M
5bASVYdfMVaYEYJMEXsZASn1k42I7SqExOuMMoAticrRFpu1pV01I4aoPcdV/ILb
5Gk6t462ZY6AlllL72g1SPODN+lIlan/JRzlUIXJbMbwHQRbfG4rF5gKAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKzzMI+QZKuAxIDu0RlWfMIt2rhMB8GA1UdIwQY
MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt
ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4
LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLePRVbJ
QRdqCN1lRZnEe9DxJd705XBVrs6yZQyPFqW9CeC85WEdEJ2X7b0HEDfoTQP8KyAQ
SAv7YN3/TGpJtwjOqQ8FeyQu1BLWzrHkxjeeo6H+fyupvIB0lDuHCS5Myyprc0/M
5cj7bl2SKO+SgpOZ9D2OiLOcP5K33eWF+qM94JwGanC2kqh6ddC3o6oQzacXuaPk
Xkz7LnHD0FPDmlMkB2Ku3itv9wOt9ifEZeNbZaf8IAypqheKuExYk5GoQzaXIHip
AFq85Km17DJVKW76K/YFBQsNnIJ/Zo+a74Ho/rLLhUbSJ1iKwLnu4LJS20i0Tc/C
Pjh8w0eseby0RQ==
-----END CERTIFICATE-----
Generated at Tue May 7 02:19:53 2024 by rpki-client on console-fra.rpki-client.org