Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File:                     ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier:          Uc/IUij07iG4MFso72dgCQRY+GharB+pM048PeqI4Pc=
Subject key identifier:   4B:60:83:52:7A:7E:6D:C7:05:1C:65:A0:EB:5D:CD:A7:36:58:7D:46
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer:       /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial:       018F59CB7C26362525E30029BD77EDC6A489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number:          07E1
Signing time:             Wed 08 May 2024 20:00:58 +0000
Manifest this update:     Wed 08 May 2024 20:00:58 +0000
Manifest next update:     Thu 09 May 2024 20:00:58 +0000
Files and hashes:         1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: KxwZu4SyjCXe/N0unUr34a5UZDX9DXF5P+w6J+tD8Nc=)
                          2: Y6HKDCtmBuK-kk8uYn5aeockMdc.roa (hash: fWu97cW7VyYrBSI1r4SDkYh45x2JR71i5IhwQ7tOYCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:cb:7c:26:36:25:25:e3:00:29:bd:77:ed:c6:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
        Validity
            Not Before: May  8 20:00:58 2024 GMT
            Not After : May  9 20:00:58 2024 GMT
        Subject: CN=4b6083527a7e6dc7051c65a0eb5dcda736587d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:11:63:c1:fe:50:92:61:81:fc:00:15:ff:
                    52:ac:af:d7:6d:0c:d2:69:4d:cf:b7:80:e0:3e:30:
                    91:93:78:ab:34:aa:59:fd:2f:d9:44:8c:db:d8:c0:
                    05:3d:bf:ea:ca:17:87:ca:15:0d:8d:0f:3d:57:89:
                    4e:51:bc:6b:16:66:e6:b8:5e:a2:3a:42:ab:8b:61:
                    7a:63:1c:02:16:a9:f5:7f:be:28:14:29:51:8b:d7:
                    55:35:d6:34:9a:24:cd:83:51:de:98:9b:c1:57:61:
                    8b:a6:76:06:c3:86:8b:cc:4f:3d:b5:e0:49:98:98:
                    02:3c:30:f7:0a:09:f1:43:17:17:e2:ca:7f:7c:8a:
                    b3:fa:02:0a:2c:a5:2a:4d:56:b5:e2:88:50:5e:00:
                    11:f7:e1:5d:05:72:0e:8f:fe:3b:aa:fd:db:3c:03:
                    32:a2:30:20:9b:c7:1b:9a:07:2d:9f:c9:a3:64:19:
                    70:ab:be:ec:b9:17:47:d2:5e:50:81:e0:0f:8d:be:
                    b9:dc:41:db:67:de:bf:8f:cf:8e:35:83:ff:a3:a0:
                    9d:74:81:1f:02:e2:8c:6c:76:1a:f1:49:2d:8c:c4:
                    9f:32:50:4c:00:56:7f:1a:db:e9:de:ec:c2:76:1b:
                    87:c9:9b:4a:43:72:8d:2a:38:1c:e2:a5:ef:fa:58:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:83:52:7A:7E:6D:C7:05:1C:65:A0:EB:5D:CD:A7:36:58:7D:46
            X509v3 Authority Key Identifier:
                keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:bc:12:3a:34:a3:3c:28:d1:d8:09:2d:41:fd:07:31:d4:cb:
         70:45:29:72:68:74:be:0a:25:06:03:c1:66:d6:7c:5a:83:e7:
         eb:0e:d7:19:19:36:53:d0:51:ca:5e:72:9b:d1:dd:10:10:d9:
         cf:17:67:27:31:ab:70:1c:c0:13:72:d3:b0:6c:68:e7:16:a9:
         da:bc:7d:ad:e4:2a:da:ea:76:b4:3d:47:63:56:49:15:87:5e:
         b0:f8:db:74:7c:ab:19:f6:6b:e0:06:29:d3:75:bf:bd:17:de:
         d4:b9:0d:7a:5e:55:a3:b1:c1:17:51:5b:e5:f5:56:ea:02:41:
         12:25:c8:26:d9:84:57:8d:74:1f:61:f4:b9:94:37:47:25:f9:
         8d:55:31:32:3c:2a:a3:aa:3b:49:db:53:ed:7c:8b:96:ee:7a:
         e7:92:73:e6:a0:fa:5c:e5:7a:4e:da:e1:9d:9a:31:c7:97:c5:
         0f:f1:d0:e8:cb:b5:bc:77:2f:0e:29:04:fb:7d:c4:ed:82:72:
         60:c0:8e:36:d6:88:f5:48:4f:f6:f7:96:50:6b:98:d1:44:52:
         fb:cc:ba:89:57:e0:9a:69:1e:a4:94:84:c3:39:21:7d:62:d0:
         13:53:11:f9:fd:a3:5d:e8:0c:2a:39:53:4f:77:46:8e:40:60:
         68:49:89:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Zy3wmNiUl4wApvXftxqSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxM2M3NDEzMjU5NzE2MmNkYjJkZDYzNzYwYWJkOTk3MWUz
MGJmNjMwHhcNMjQwNTA4MjAwMDU4WhcNMjQwNTA5MjAwMDU4WjAzMTEwLwYDVQQD
Eyg0YjYwODM1MjdhN2U2ZGM3MDUxYzY1YTBlYjVkY2RhNzM2NTg3ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PgRY8H+UJJhgfwAFf9SrK/XbQzS
aU3Pt4DgPjCRk3irNKpZ/S/ZRIzb2MAFPb/qyheHyhUNjQ89V4lOUbxrFmbmuF6i
OkKri2F6YxwCFqn1f74oFClRi9dVNdY0miTNg1HemJvBV2GLpnYGw4aLzE89teBJ
mJgCPDD3CgnxQxcX4sp/fIqz+gIKLKUqTVa14ohQXgAR9+FdBXIOj/47qv3bPAMy
ojAgm8cbmgctn8mjZBlwq77suRdH0l5QgeAPjb653EHbZ96/j8+ONYP/o6CddIEf
AuKMbHYa8UktjMSfMlBMAFZ/Gtvp3uzCdhuHyZtKQ3KNKjgc4qXv+liAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtgg1J6fm3HBRxloOtdzac2WH1GMB8GA1UdIwQY
MBaAFAE8dBMllxYs2y3WN2Cr2ZceML9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2Yt
MDY4Yjc3ZTkwM2EwLzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2YtMDY4Yjc3ZTkwM2Ew
LzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7wSOjSj
PCjR2AktQf0HMdTLcEUpcmh0vgolBgPBZtZ8WoPn6w7XGRk2U9BRyl5ym9HdEBDZ
zxdnJzGrcBzAE3LTsGxo5xap2rx9reQq2up2tD1HY1ZJFYdesPjbdHyrGfZr4AYp
03W/vRfe1LkNel5Vo7HBF1Fb5fVW6gJBEiXIJtmEV410H2H0uZQ3RyX5jVUxMjwq
o6o7SdtT7XyLlu5655Jz5qD6XOV6TtrhnZoxx5fFD/HQ6Mu1vHcvDikE+33E7YJy
YMCONtaI9UhP9veWUGuY0URS+8y6iVfgmmkepJSEwzkhfWLQE1MR+f2jXegMKjlT
T3dGjkBgaEmJbw==
-----END CERTIFICATE-----
Generated at Wed May 8 21:34:41 2024 by rpki-client on console-fra.rpki-client.org