Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File:                     4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier:          dVUtiZQ4ImcAlys9s02jj7DpF7TP2xjLQBKtw4XcpsU=
Subject key identifier:   1B:B6:DF:22:18:F1:9E:83:32:EF:2D:F0:33:0F:A7:09:8B:E2:1A:BB
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer:       /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial:       018F467BA8C252AC76E9EB9FFC74947564C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number:          04CB
Signing time:             Sun 05 May 2024 02:01:00 +0000
Manifest this update:     Sun 05 May 2024 02:01:00 +0000
Manifest next update:     Mon 06 May 2024 02:01:00 +0000
Files and hashes:         1: 1-LQTI-rnfNlpZG1Cxm7OTRsUPnA.roa (hash: zzlyMmpSzjs3KTIFEAomAJoBbSJB1D+DoHudQuvZ610=)
                          2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: 6r1e9c0NE5WUty33/cCwAoGxRUleqm4VQmtm8qR+Ias=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7b:a8:c2:52:ac:76:e9:eb:9f:fc:74:94:75:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
        Validity
            Not Before: May  5 02:01:00 2024 GMT
            Not After : May  6 02:01:00 2024 GMT
        Subject: CN=1bb6df2218f19e8332ef2df0330fa7098be21abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:ca:74:8a:b3:32:5f:c4:86:ad:89:e0:b0:
                    a3:ed:c8:20:6e:e5:eb:9b:5c:eb:16:89:7c:47:3b:
                    97:3e:ca:9b:f0:4e:a9:d8:7f:06:82:a7:9f:7b:21:
                    4a:4a:0d:5d:6d:03:ff:c9:a2:76:ce:84:c1:c9:8a:
                    63:5c:b9:e4:8b:f4:52:31:b1:eb:f6:7a:25:d3:f6:
                    58:96:7b:22:36:8e:ef:ba:36:cb:5a:44:a8:ec:81:
                    73:2e:35:bf:64:3c:09:eb:0a:75:f3:bf:73:2c:71:
                    76:ca:28:2e:40:e7:7b:cb:5a:f9:1a:7d:70:2d:f8:
                    ab:ca:44:b2:a4:7b:77:7b:68:0d:f5:25:e0:a3:33:
                    59:c6:1c:1c:30:e2:a7:95:14:75:1d:cf:5c:17:8d:
                    95:38:17:fd:aa:24:1a:6d:c1:3e:79:ec:5b:aa:fa:
                    37:4b:36:42:bb:28:65:9a:66:2c:ac:d1:d1:5e:a0:
                    40:ae:94:a4:65:d8:9a:b6:d7:51:08:49:81:6e:cc:
                    e5:89:32:aa:93:99:48:de:4e:4f:18:78:2f:a3:30:
                    9b:20:4b:64:88:40:cf:4e:8e:c2:e9:1e:0a:75:ed:
                    4a:e2:4d:ab:ee:6b:1b:0a:20:5e:97:33:8a:e9:bb:
                    d9:0f:c8:08:c1:ae:99:4f:d4:ce:46:65:3c:7f:c9:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:DF:22:18:F1:9E:83:32:EF:2D:F0:33:0F:A7:09:8B:E2:1A:BB
            X509v3 Authority Key Identifier:
                keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:4c:e5:5d:66:03:3c:5d:aa:97:46:26:89:a8:2c:49:f0:
         65:7e:44:ac:be:31:7d:dc:5e:44:69:7b:be:5e:79:e3:cf:25:
         2e:70:31:7e:34:e0:7c:a5:68:45:57:ad:8a:9c:d8:fc:60:b4:
         c0:10:0f:19:88:1e:76:7e:5c:94:9a:92:f1:ec:86:9f:7f:8e:
         d5:14:5e:79:7a:3a:7f:42:05:af:54:b8:97:8d:9f:9c:e6:72:
         63:27:f2:32:5e:6c:c3:7a:84:31:16:4f:07:e2:11:e0:62:b4:
         63:72:cf:7b:6f:19:6b:23:4d:c8:e2:dd:de:d5:ad:d4:6e:fe:
         19:57:19:9b:9a:1f:04:66:dd:08:58:2f:b1:f4:b3:e0:62:47:
         3c:7e:68:9b:fa:e2:f8:ed:e1:eb:c5:69:db:00:4d:12:eb:58:
         36:e4:2b:91:52:43:4f:81:ef:7e:b0:57:8f:a4:bc:40:89:bf:
         2b:f9:fb:e0:6b:2b:c0:3a:2a:1d:76:e7:ba:c0:66:c1:0d:bc:
         32:e2:19:fc:72:95:9f:69:6f:2c:7e:c2:86:eb:0a:d1:56:e0:
         76:c9:e2:1d:29:73:e3:64:1b:0f:0d:e1:03:1e:a7:18:60:56:
         83:35:ee:e1:38:07:38:dc:e9:f9:79:c0:b9:7a:32:64:41:ec:
         7d:85:a9:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Ge6jCUqx26euf/HSUdWTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTZjMDNjZmFmZmUxMzRjN2JlZGE0ODg2YWI4YjA5Y2Y0
NWZiYzQwHhcNMjQwNTA1MDIwMTAwWhcNMjQwNTA2MDIwMTAwWjAzMTEwLwYDVQQD
EygxYmI2ZGYyMjE4ZjE5ZTgzMzJlZjJkZjAzMzBmYTcwOThiZTIxYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvHKdIqzMl/Ehq2J4LCj7cggbuXr
m1zrFol8RzuXPsqb8E6p2H8GgqefeyFKSg1dbQP/yaJ2zoTByYpjXLnki/RSMbHr
9nol0/ZYlnsiNo7vujbLWkSo7IFzLjW/ZDwJ6wp1879zLHF2yiguQOd7y1r5Gn1w
LfirykSypHt3e2gN9SXgozNZxhwcMOKnlRR1Hc9cF42VOBf9qiQabcE+eexbqvo3
SzZCuyhlmmYsrNHRXqBArpSkZdiattdRCEmBbszliTKqk5lI3k5PGHgvozCbIEtk
iEDPTo7C6R4Kde1K4k2r7msbCiBelzOK6bvZD8gIwa6ZT9TORmU8f8mCmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu23yIY8Z6DMu8t8DMPpwmL4hq7MB8GA1UdIwQY
MBaAFOMWwDz6/+E0x77aSIariwnPRfvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTIt
ZTRkNjRkY2E2N2FjLzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTItZTRkNjRkY2E2N2Fj
LzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSVM5V1m
AzxdqpdGJomoLEnwZX5ErL4xfdxeRGl7vl55488lLnAxfjTgfKVoRVetipzY/GC0
wBAPGYgedn5clJqS8eyGn3+O1RReeXo6f0IFr1S4l42fnOZyYyfyMl5sw3qEMRZP
B+IR4GK0Y3LPe28ZayNNyOLd3tWt1G7+GVcZm5ofBGbdCFgvsfSz4GJHPH5om/ri
+O3h68Vp2wBNEutYNuQrkVJDT4HvfrBXj6S8QIm/K/n74GsrwDoqHXbnusBmwQ28
MuIZ/HKVn2lvLH7ChusK0VbgdsniHSlz42QbDw3hAx6nGGBWgzXu4TgHONzp+XnA
uXoyZEHsfYWpOg==
-----END CERTIFICATE-----
Generated at Sun May 5 06:33:15 2024 by rpki-client on console-ams.rpki-client.org