Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
File:                     CDMy0vYHhPErstIQrsgKtBu_EVk.mft (raw, json)
Hash identifier:          Z86AnAcGK8MQpKsuW4aByz8PnkP45yGSxeCmNT4sjBE=
Subject key identifier:   9D:34:ED:BA:C7:60:ED:4B:88:77:01:B3:D2:CD:69:DE:30:1F:6C:E5
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Certificate issuer:       /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial:       018F57025E2D610B8B46606E7B4A6935C0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
Manifest number:          0952
Signing time:             Wed 08 May 2024 07:02:03 +0000
Manifest this update:     Wed 08 May 2024 07:02:03 +0000
Manifest next update:     Thu 09 May 2024 07:02:03 +0000
Files and hashes:         1: CDMy0vYHhPErstIQrsgKtBu_EVk.crl (hash: gaVtN3I/joJLq2onubIZzZ+G2U5/gk9Uxz+Yuh0UVNg=)
                          2: iZdALZgWTcZE0rmj6oYqygFYrko.roa (hash: 7mFxFgkTd6jM+S66gZcpfFjY8tzvlzxOjAqjRTKPbWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:5e:2d:61:0b:8b:46:60:6e:7b:4a:69:35:c0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
        Validity
            Not Before: May  8 07:02:03 2024 GMT
            Not After : May  9 07:02:03 2024 GMT
        Subject: CN=9d34edbac760ed4b887701b3d2cd69de301f6ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:e6:55:1b:3b:31:d7:d6:1c:7b:90:d5:e2:
                    ae:7b:b8:7c:a8:b7:a0:d5:69:bc:f3:4c:30:7f:47:
                    1e:34:c0:81:c3:94:5a:11:25:a8:88:f2:86:f2:ee:
                    52:33:f3:aa:e7:c2:14:0f:df:2d:09:57:28:f4:fa:
                    96:40:0c:a3:e6:50:23:7d:a7:6f:81:40:eb:ee:64:
                    28:0e:72:d0:52:e0:6d:53:06:6d:b3:8c:63:38:4a:
                    4d:69:09:6c:14:f8:bb:d7:e8:45:9b:80:70:0b:dd:
                    f0:f1:5a:1e:a8:ed:35:b9:1b:a2:7a:32:cf:11:1c:
                    15:57:7c:c4:33:9b:a1:03:c5:39:af:c9:00:c4:b5:
                    4d:47:b8:6e:a3:6d:31:07:48:48:33:c7:48:b8:a9:
                    e1:8a:db:cb:e4:da:b6:9d:06:d6:8e:47:eb:09:eb:
                    0a:36:c9:dc:09:95:5d:4c:b3:56:8d:e7:f3:4e:24:
                    bd:15:64:25:57:49:d0:ae:b9:81:cb:6c:5e:d5:44:
                    33:cd:da:6b:ae:ad:6e:71:10:d1:c4:ba:29:9e:e7:
                    cd:8d:05:b9:72:9b:fb:59:a3:e4:de:55:a5:15:6b:
                    cb:46:78:b3:1e:8d:54:ec:7e:6e:d0:24:b4:66:bd:
                    cb:5b:c4:42:df:93:37:72:e6:0a:80:3e:ef:74:3b:
                    e7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:34:ED:BA:C7:60:ED:4B:88:77:01:B3:D2:CD:69:DE:30:1F:6C:E5
            X509v3 Authority Key Identifier:
                keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c2:77:7c:8a:3b:8a:20:4b:8c:ad:5b:57:25:53:f3:da:8b:
         5a:e7:81:b4:0e:3c:2b:b6:71:5b:70:88:b5:b6:7f:be:87:2a:
         29:56:7f:c6:94:a8:32:6c:91:b4:2f:98:d9:c6:3c:02:c9:59:
         ee:03:3e:eb:de:ba:db:85:20:fb:36:10:f4:cd:33:50:bd:fc:
         cd:23:ac:fa:f6:f8:20:f1:89:02:c6:4b:57:40:16:dd:59:f1:
         3a:7b:a0:1a:cd:ca:e3:c0:4a:cc:3c:53:3b:8d:0c:70:5e:66:
         e9:f8:cc:80:4a:1b:10:3f:f8:65:a2:38:d3:f2:58:cd:f6:65:
         3d:47:5d:45:74:42:c5:30:30:0f:f5:2c:0e:47:0c:8c:ec:4b:
         3c:23:8d:ae:55:b5:ac:b0:0a:c9:92:23:dc:5e:ff:e8:2d:e7:
         91:88:53:8a:e3:6f:bd:49:5c:06:64:1c:83:1d:1d:5e:f3:88:
         c7:30:65:56:ba:3c:9a:a1:7f:8b:48:34:df:5c:bb:d2:6c:35:
         9e:83:d7:f7:2a:e4:b6:e9:04:6e:71:2e:3f:b0:82:d6:6a:88:
         fb:3b:3c:36:26:66:a0:1c:29:14:53:33:9f:e8:1b:ec:ef:51:
         dd:d3:01:f9:10:33:df:64:c0:f1:d2:60:29:f6:cd:46:f6:c5:
         35:38:82:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XAl4tYQuLRmBue0ppNcDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzMzMmQyZjYwNzg0ZjEyYmIyZDIxMGFlYzgwYWI0MWJi
ZjExNTkwHhcNMjQwNTA4MDcwMjAzWhcNMjQwNTA5MDcwMjAzWjAzMTEwLwYDVQQD
Eyg5ZDM0ZWRiYWM3NjBlZDRiODg3NzAxYjNkMmNkNjlkZTMwMWY2Y2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZzmVRs7MdfWHHuQ1eKue7h8qLeg
1Wm880wwf0ceNMCBw5RaESWoiPKG8u5SM/Oq58IUD98tCVco9PqWQAyj5lAjfadv
gUDr7mQoDnLQUuBtUwZts4xjOEpNaQlsFPi71+hFm4BwC93w8VoeqO01uRuiejLP
ERwVV3zEM5uhA8U5r8kAxLVNR7huo20xB0hIM8dIuKnhitvL5Nq2nQbWjkfrCesK
NsncCZVdTLNWjefzTiS9FWQlV0nQrrmBy2xe1UQzzdprrq1ucRDRxLopnufNjQW5
cpv7WaPk3lWlFWvLRnizHo1U7H5u0CS0Zr3LW8RC35M3cuYKgD7vdDvnawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ007brHYO1LiHcBs9LNad4wH2zlMB8GA1UdIwQY
MBaAFAgzMtL2B4TxK7LSEK7ICrQbvxFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RNeTB2WUhoUEVyc3RJUXJzZ0t0QnVfRVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWExYWUtMWY4Ny00Y2ZiLTk0MTIt
ZGY1NDJjZGMzOTc2LzEvQ0RNeTB2WUhoUEVyc3RJUXJzZ0t0QnVfRVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWExYWUtMWY4Ny00Y2ZiLTk0MTItZGY1NDJjZGMzOTc2
LzEvQ0RNeTB2WUhoUEVyc3RJUXJzZ0t0QnVfRVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMJ3fIo7
iiBLjK1bVyVT89qLWueBtA48K7ZxW3CItbZ/vocqKVZ/xpSoMmyRtC+Y2cY8AslZ
7gM+696624Ug+zYQ9M0zUL38zSOs+vb4IPGJAsZLV0AW3VnxOnugGs3K48BKzDxT
O40McF5m6fjMgEobED/4ZaI40/JYzfZlPUddRXRCxTAwD/UsDkcMjOxLPCONrlW1
rLAKyZIj3F7/6C3nkYhTiuNvvUlcBmQcgx0dXvOIxzBlVro8mqF/i0g031y70mw1
noPX9yrktukEbnEuP7CC1mqI+zs8NiZmoBwpFFMzn+gb7O9R3dMB+RAz32TA8dJg
KfbNRvbFNTiCHg==
-----END CERTIFICATE-----
Generated at Wed May 8 08:06:52 2024 by rpki-client on console-ams.rpki-client.org