Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
File:                     9Z1WxSx3M_g753SvpHu9VdKHl6w.mft (raw, json)
Hash identifier:          siKHbYP/CyT/Y3LjoM3+egcyP3+1/1pZJybpnPDGhlI=
Subject key identifier:   2D:20:31:E6:D9:81:F4:5E:9F:BA:13:3B:F8:98:99:0F:80:D8:11:25
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Certificate issuer:       /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial:       018F497F43CA8D47186E9F09C3906CC218D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
Manifest number:          10E4
Signing time:             Sun 05 May 2024 16:03:48 +0000
Manifest this update:     Sun 05 May 2024 16:03:48 +0000
Manifest next update:     Mon 06 May 2024 16:03:48 +0000
Files and hashes:         1: 9Z1WxSx3M_g753SvpHu9VdKHl6w.crl (hash: LqRcOiVRkoRt710QyZEO2t6igEnPu8GDsBzMnTJxO9Y=)
                          2: F1dpFz4ou2fZEkl15Q7vC2eC0Uw.roa (hash: OAmB0h7Kuc44sCPwt7l21mGz22qtPJY1Wx6xM6dYSfw=)
                          3: K084RyfRCndbjs6w8W5rg18iTnk.roa (hash: zrORFVcsKtH0V7ay4cvTJUFjn1MBnh64WsuVTjYo5kA=)
                          4: XmHvyFbs-t7Bsyvl2szoQbIm-_Q.roa (hash: 9U018il846o2Yf2EG6RaV6mdphp8P/rOKaFe5b2qZTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:43:ca:8d:47:18:6e:9f:09:c3:90:6c:c2:18:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
        Validity
            Not Before: May  5 16:03:48 2024 GMT
            Not After : May  6 16:03:48 2024 GMT
        Subject: CN=2d2031e6d981f45e9fba133bf898990f80d81125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:00:82:69:a2:b9:28:d7:62:9a:ec:b5:1f:
                    b0:44:2d:a6:d7:8d:30:2e:a0:ce:4d:e8:cd:c4:ea:
                    0d:de:82:c8:e7:fe:df:ee:b4:fe:6a:db:78:d4:e5:
                    ff:1d:02:63:3b:d5:85:fd:34:4a:c9:23:5b:07:6a:
                    f1:52:59:ef:57:6d:6e:c9:81:22:d6:1a:00:77:7c:
                    f5:84:2a:d8:15:7e:5b:44:b4:c1:16:ed:2c:b0:c3:
                    a0:bc:a9:17:e5:a6:30:e4:64:88:f9:3e:d4:2d:08:
                    65:91:29:2f:51:25:ee:97:68:89:43:84:58:77:b4:
                    3a:c8:64:4d:4b:5a:8c:bb:db:2b:72:2d:0a:b4:4d:
                    45:29:6f:34:90:4b:47:25:07:50:75:86:44:06:60:
                    1e:1a:7b:7f:87:f7:75:35:d1:35:0e:cc:02:31:c6:
                    44:25:8f:f5:89:db:eb:10:05:a6:7a:e1:5b:13:30:
                    7e:52:a7:ab:42:2c:6f:db:76:f2:30:17:f0:73:2d:
                    6e:7b:85:96:7d:e8:73:d5:ab:cf:3e:eb:f1:b1:5d:
                    82:69:5f:d2:81:dc:aa:e2:74:4b:2b:dd:86:fc:8e:
                    22:f3:da:bc:9a:67:5a:79:ef:8b:40:25:8e:4b:78:
                    17:79:74:70:e3:1c:82:a7:b4:6e:e2:96:6a:c8:71:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:31:E6:D9:81:F4:5E:9F:BA:13:3B:F8:98:99:0F:80:D8:11:25
            X509v3 Authority Key Identifier:
                keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ec:ad:d9:c3:71:0c:0c:7d:b2:a5:d3:c1:80:79:41:3f:2b:
         cb:e7:61:ee:94:cf:c9:f3:71:ea:39:6a:64:23:bc:8a:08:df:
         43:f3:1e:3c:3a:62:5a:2e:9d:3d:47:76:46:50:2c:b3:f1:f5:
         3c:54:19:25:31:83:fe:11:90:7d:7b:f2:20:65:e2:1d:ac:39:
         77:4b:e2:ff:c6:51:e1:f0:72:3e:5a:10:f1:73:8d:a1:8f:b7:
         cd:71:99:fb:cd:e5:f2:aa:85:d0:21:d0:53:be:15:c2:c9:62:
         7d:91:3a:5d:7a:90:b0:77:2b:7b:b6:61:3c:6b:1f:0e:15:44:
         11:04:5a:fa:0d:f9:4f:4e:59:34:18:c3:1a:d2:b2:c9:c5:67:
         46:61:96:42:af:77:53:75:9a:97:a9:10:b7:e6:23:ea:e8:e2:
         2b:5a:49:49:1f:f4:f5:55:73:5a:49:f4:35:fc:5d:83:c6:b2:
         68:8b:0a:fa:8d:59:07:9d:25:1f:d3:75:45:2e:b1:46:a4:c5:
         c4:a3:8c:43:3e:cc:e5:6b:e0:1b:1b:a2:40:d0:5c:71:e0:61:
         62:b4:6f:c1:c1:1d:3d:90:c9:88:44:65:4d:8f:35:41:64:2f:
         c3:a8:4c:56:db:5e:79:39:9c:e9:3d:a1:3c:5f:35:da:fb:6d:
         5b:b2:a7:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Jf0PKjUcYbp8Jw5BswhjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWQ1NmM1MmM3NzMzZjgzYmU3NzRhZmE0N2JiZDU1ZDI4
Nzk3YWMwHhcNMjQwNTA1MTYwMzQ4WhcNMjQwNTA2MTYwMzQ4WjAzMTEwLwYDVQQD
EygyZDIwMzFlNmQ5ODFmNDVlOWZiYTEzM2JmODk4OTkwZjgwZDgxMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fQAgmmiuSjXYprstR+wRC2m140w
LqDOTejNxOoN3oLI5/7f7rT+att41OX/HQJjO9WF/TRKySNbB2rxUlnvV21uyYEi
1hoAd3z1hCrYFX5bRLTBFu0ssMOgvKkX5aYw5GSI+T7ULQhlkSkvUSXul2iJQ4RY
d7Q6yGRNS1qMu9srci0KtE1FKW80kEtHJQdQdYZEBmAeGnt/h/d1NdE1DswCMcZE
JY/1idvrEAWmeuFbEzB+UqerQixv23byMBfwcy1ue4WWfehz1avPPuvxsV2CaV/S
gdyq4nRLK92G/I4i89q8mmdaee+LQCWOS3gXeXRw4xyCp7Ru4pZqyHE1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0gMebZgfRen7oTO/iYmQ+A2BElMB8GA1UdIwQY
MBaAFPWdVsUsdzP4O+d0r6R7vVXSh5esMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUt
NWMwNjdiOGI5MWE1LzEvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUtNWMwNjdiOGI5MWE1
LzEvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceyt2cNx
DAx9sqXTwYB5QT8ry+dh7pTPyfNx6jlqZCO8igjfQ/MePDpiWi6dPUd2RlAss/H1
PFQZJTGD/hGQfXvyIGXiHaw5d0vi/8ZR4fByPloQ8XONoY+3zXGZ+83l8qqF0CHQ
U74VwslifZE6XXqQsHcre7ZhPGsfDhVEEQRa+g35T05ZNBjDGtKyycVnRmGWQq93
U3Wal6kQt+Yj6ujiK1pJSR/09VVzWkn0Nfxdg8ayaIsK+o1ZB50lH9N1RS6xRqTF
xKOMQz7M5WvgGxuiQNBcceBhYrRvwcEdPZDJiERlTY81QWQvw6hMVtteeTmc6T2h
PF812vttW7Knbw==
-----END CERTIFICATE-----
Generated at Sun May 5 19:03:52 2024 by rpki-client on console-fra.rpki-client.org