Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File:                     4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier:          rclyvBVRAN/qMP1TVhoKPDGtOJvZ/+voWmUIsF9EOIM=
Subject key identifier:   D7:50:01:AA:26:EF:81:C6:03:74:B2:F5:FC:5D:6D:72:42:6E:68:60
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer:       /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial:       018F4B6C17C52F2382FCC1B379CF2E03B5E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number:          10EB
Signing time:             Mon 06 May 2024 01:02:06 +0000
Manifest this update:     Mon 06 May 2024 01:02:06 +0000
Manifest next update:     Tue 07 May 2024 01:02:06 +0000
Files and hashes:         1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: hk85A970Z2OrWzgn4XofBTwo49xq6Ii0J+FSjaDE/Ro=)
                          2: CnU95XBTfEx5k-doevJJry6xCoU.roa (hash: VxQ2KvcDUFNtVmP9lttzcAGHuxXCmygabX9aG7Yg4K8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:17:c5:2f:23:82:fc:c1:b3:79:cf:2e:03:b5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
        Validity
            Not Before: May  6 01:02:06 2024 GMT
            Not After : May  7 01:02:06 2024 GMT
        Subject: CN=d75001aa26ef81c60374b2f5fc5d6d72426e6860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:f0:cb:ce:e2:f1:1a:7e:7f:27:27:02:f4:
                    42:56:7b:65:34:78:76:72:08:82:eb:f9:ce:2b:ee:
                    6f:8c:31:1a:a4:99:c9:dd:ff:96:2e:79:f6:1e:d3:
                    f6:79:23:88:e6:30:38:27:23:20:df:e6:6c:d5:46:
                    d4:79:4d:a3:4f:8b:62:cf:b4:e6:19:63:bb:82:a7:
                    9b:da:24:84:c7:75:c4:5f:cd:55:85:aa:7e:13:28:
                    11:2a:80:5a:83:89:db:7c:0e:93:91:1d:32:5a:ae:
                    bb:52:9d:76:d2:12:db:27:a3:c2:27:46:33:e8:0b:
                    cf:77:4b:4f:68:54:0f:d1:94:92:f5:82:a9:b5:80:
                    02:44:f3:98:ad:09:13:35:2d:96:a6:c7:c7:0c:6e:
                    b5:7c:69:ef:41:2c:74:f1:ec:fc:5c:63:39:2d:e1:
                    07:a0:9c:70:48:14:f4:87:46:d0:54:5e:11:24:af:
                    75:98:13:00:c9:ac:a7:4b:ac:c2:c9:99:8c:1a:f6:
                    3c:66:3e:f3:61:72:0e:e6:eb:cb:ea:5a:9a:e6:6f:
                    5b:be:30:ee:9b:5b:ec:72:9d:71:17:c0:a4:0c:a3:
                    b6:98:f7:9d:65:f9:2a:b2:89:0d:f0:49:c2:a5:d1:
                    61:e4:50:1c:36:b1:62:1b:91:22:eb:3d:88:88:95:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:50:01:AA:26:EF:81:C6:03:74:B2:F5:FC:5D:6D:72:42:6E:68:60
            X509v3 Authority Key Identifier:
                keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:31:6b:67:23:d7:d5:74:a6:d3:f7:03:3e:f1:5d:5b:38:64:
         c4:28:47:06:27:4b:4f:45:4c:3a:a1:bd:97:5c:97:19:ab:d4:
         60:56:4e:bf:86:ef:a0:a5:af:ff:e2:51:13:73:f5:e8:a3:03:
         3e:83:e4:7b:53:3f:27:99:c3:bf:d7:7b:b8:fc:7e:0f:91:1e:
         60:1e:de:fe:87:91:5e:8a:a6:f6:36:c3:96:9d:69:75:9b:e1:
         ba:c4:3b:17:a3:73:0a:1c:18:fb:6b:52:05:2d:3f:ed:ac:52:
         f4:81:c5:64:65:3f:3f:7e:db:f1:fa:a6:29:90:7a:30:7f:e1:
         be:cf:62:9f:f3:3b:94:17:b2:f7:12:a1:8b:be:64:40:36:13:
         a9:c6:f0:c8:62:83:cc:31:02:05:7f:7e:f8:d3:2c:a4:9a:f4:
         b7:95:d1:d5:0a:23:15:1f:2c:21:10:c9:bd:87:68:de:05:17:
         81:9c:66:b4:54:fa:40:8a:04:24:14:54:d3:a5:1f:63:11:5c:
         ab:c4:71:a4:32:2c:49:a8:ca:3f:3d:fe:98:81:7c:9d:06:15:
         d1:3e:9d:bc:81:94:9f:17:02:ab:90:92:b8:41:d4:0e:8e:e8:
         dc:11:34:1b:f2:f0:fc:d1:12:3b:e7:56:34:bd:ed:a6:7e:69:
         41:32:54:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9LbBfFLyOC/MGzec8uA7XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw
NjMxYjkwHhcNMjQwNTA2MDEwMjA2WhcNMjQwNTA3MDEwMjA2WjAzMTEwLwYDVQQD
EyhkNzUwMDFhYTI2ZWY4MWM2MDM3NGIyZjVmYzVkNmQ3MjQyNmU2ODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Twy87i8Rp+fycnAvRCVntlNHh2
cgiC6/nOK+5vjDEapJnJ3f+WLnn2HtP2eSOI5jA4JyMg3+Zs1UbUeU2jT4tiz7Tm
GWO7gqeb2iSEx3XEX81Vhap+EygRKoBag4nbfA6TkR0yWq67Up120hLbJ6PCJ0Yz
6AvPd0tPaFQP0ZSS9YKptYACRPOYrQkTNS2WpsfHDG61fGnvQSx08ez8XGM5LeEH
oJxwSBT0h0bQVF4RJK91mBMAyaynS6zCyZmMGvY8Zj7zYXIO5uvL6lqa5m9bvjDu
m1vscp1xF8CkDKO2mPedZfkqsokN8EnCpdFh5FAcNrFiG5Ei6z2IiJVu+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdQAaom74HGA3Sy9fxdbXJCbmhgMB8GA1UdIwQY
MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt
ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy
LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTFrZyPX
1XSm0/cDPvFdWzhkxChHBidLT0VMOqG9l1yXGavUYFZOv4bvoKWv/+JRE3P16KMD
PoPke1M/J5nDv9d7uPx+D5EeYB7e/oeRXoqm9jbDlp1pdZvhusQ7F6NzChwY+2tS
BS0/7axS9IHFZGU/P37b8fqmKZB6MH/hvs9in/M7lBey9xKhi75kQDYTqcbwyGKD
zDECBX9++NMspJr0t5XR1QojFR8sIRDJvYdo3gUXgZxmtFT6QIoEJBRU06UfYxFc
q8RxpDIsSajKPz3+mIF8nQYV0T6dvIGUnxcCq5CSuEHUDo7o3BE0G/Lw/NESO+dW
NL3tpn5pQTJUNw==
-----END CERTIFICATE-----
Generated at Mon May 6 04:10:13 2024 by rpki-client on console-ams.rpki-client.org