Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          xEYeISwEn/FQkiq/UzzWi1Q4qksFElIhdhBO51EhnMQ=
Subject key identifier:   73:2D:C5:AE:79:BB:A6:8A:C5:6F:AA:EA:AF:17:6A:38:C5:EE:91:7F
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       018F5703302990EE85A3888CD0C9B950DC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0929
Signing time:             Wed 08 May 2024 07:02:57 +0000
Manifest this update:     Wed 08 May 2024 07:02:57 +0000
Manifest next update:     Thu 09 May 2024 07:02:57 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: 77igYRCyoqrCpDAK1fmPeK+vB1an2wlG5VtsBQCmEto=)
                          2: yz75cZO2GDeEicvf-t9RijzfzsI.roa (hash: 8HETo+iUA07BzFPm8gkqRAcDovDHrF75qlrwxn9YRhY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:30:29:90:ee:85:a3:88:8c:d0:c9:b9:50:dc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: May  8 07:02:57 2024 GMT
            Not After : May  9 07:02:57 2024 GMT
        Subject: CN=732dc5ae79bba68ac56faaeaaf176a38c5ee917f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:bc:40:0f:c0:bd:24:65:3f:f2:6b:5a:34:
                    24:40:bb:c1:96:09:fb:99:00:1f:fa:3c:ef:fc:82:
                    0f:3d:9a:bf:3a:88:7f:9a:9f:89:78:3e:13:4e:2f:
                    7c:ee:4e:da:05:22:22:ff:db:92:57:e9:18:f9:67:
                    fd:ef:02:d4:bb:a3:fb:c1:b3:03:7b:a0:c4:dc:b9:
                    20:22:19:fa:a3:e0:5f:a1:8e:f0:f6:86:09:c0:b9:
                    2e:ec:7b:f7:bb:0d:b1:5a:99:50:34:17:68:06:5a:
                    0e:cc:74:cb:53:01:6b:d3:25:e9:a4:0a:01:88:f1:
                    35:b7:83:b8:0e:ff:4a:c6:87:02:8f:b4:7e:61:33:
                    20:8f:4b:97:80:41:d5:f7:19:14:1f:1a:c7:03:b7:
                    e8:f0:a5:06:2b:71:2d:e6:71:27:91:f4:c4:8b:51:
                    31:40:58:2c:91:ee:fb:70:7b:e4:f2:b1:82:04:c6:
                    97:79:5a:f0:75:c6:1b:54:7f:3a:bc:e1:bd:59:8a:
                    9b:e6:6c:ce:ea:d8:8b:4d:84:ca:d2:2e:c9:6f:85:
                    25:77:e1:a3:a5:ae:95:ee:db:70:7a:50:2e:61:ad:
                    64:79:18:cc:5c:49:0a:ba:35:04:ca:74:de:2a:ab:
                    b7:10:c1:5a:77:33:9d:c6:16:fc:68:37:2d:48:aa:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:C5:AE:79:BB:A6:8A:C5:6F:AA:EA:AF:17:6A:38:C5:EE:91:7F
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:2e:5f:96:b3:2c:0f:a3:fb:14:3e:ad:cd:d0:2f:ff:a5:
         ec:30:ad:17:d5:af:02:a2:d0:8e:eb:bf:25:02:ad:25:67:83:
         80:a2:08:b1:d1:fe:ec:8b:15:d0:8f:c7:95:6a:af:37:32:05:
         4d:57:4d:de:17:2b:9c:12:e5:ec:3a:2e:07:0b:fb:a5:71:4a:
         81:5c:24:a5:3f:81:48:1e:ea:1b:85:b4:5b:ee:63:cf:f3:dc:
         89:29:ed:9d:7e:b2:c9:0c:bf:eb:6f:d3:b1:cc:f0:42:1a:49:
         6f:de:62:6c:9d:8d:0d:02:31:c1:53:3e:f1:1f:0d:aa:ac:22:
         6d:94:80:7b:98:01:89:85:3b:56:cb:3d:9d:03:cb:42:7c:33:
         f0:91:d4:5e:32:75:d6:27:fc:af:b6:10:b5:10:1a:c9:9c:e3:
         d5:2f:ac:f7:42:54:43:9e:de:95:7d:91:03:83:23:e0:56:fe:
         36:51:27:40:2e:02:ee:ec:8b:a3:ba:05:e1:1f:03:39:d9:ee:
         fb:5f:54:d2:36:ee:0d:d0:1a:89:9c:7f:3f:be:02:6f:ae:b2:
         0e:39:d6:df:b8:e3:16:57:92:fd:27:c0:06:57:2a:bb:5b:0d:
         12:ee:de:82:d5:fc:55:3e:a3:f0:b2:6d:fd:68:d9:fa:c1:2d:
         fb:97:b3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XAzApkO6Fo4iM0Mm5UNxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTUzNjQzOTVjY2ZkODU0Mzk3NzM1OGZhOWI3MWY5Mjcx
NTQ0ZjYwHhcNMjQwNTA4MDcwMjU3WhcNMjQwNTA5MDcwMjU3WjAzMTEwLwYDVQQD
Eyg3MzJkYzVhZTc5YmJhNjhhYzU2ZmFhZWFhZjE3NmEzOGM1ZWU5MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9a8QA/AvSRlP/JrWjQkQLvBlgn7
mQAf+jzv/IIPPZq/Ooh/mp+JeD4TTi987k7aBSIi/9uSV+kY+Wf97wLUu6P7wbMD
e6DE3LkgIhn6o+BfoY7w9oYJwLku7Hv3uw2xWplQNBdoBloOzHTLUwFr0yXppAoB
iPE1t4O4Dv9KxocCj7R+YTMgj0uXgEHV9xkUHxrHA7fo8KUGK3Et5nEnkfTEi1Ex
QFgske77cHvk8rGCBMaXeVrwdcYbVH86vOG9WYqb5mzO6tiLTYTK0i7Jb4Uld+Gj
pa6V7ttwelAuYa1keRjMXEkKujUEynTeKqu3EMFadzOdxhb8aDctSKqDTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMtxa55u6aKxW+q6q8XajjF7pF/MB8GA1UdIwQY
MBaAFNCVNkOVzP2FQ5dzWPqbcfknFUT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kYWM3MzItNGFjYS00YmY4LWE2ZGIt
ZTA3OTUyZGI5NjdiLzEvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9kYWM3MzItNGFjYS00YmY4LWE2ZGItZTA3OTUyZGI5Njdi
LzEvMEpVMlE1WE1fWVZEbDNOWS1wdHgtU2NWUlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrMuX5az
LA+j+xQ+rc3QL/+l7DCtF9WvAqLQjuu/JQKtJWeDgKIIsdH+7IsV0I/HlWqvNzIF
TVdN3hcrnBLl7DouBwv7pXFKgVwkpT+BSB7qG4W0W+5jz/PciSntnX6yyQy/62/T
sczwQhpJb95ibJ2NDQIxwVM+8R8NqqwibZSAe5gBiYU7Vss9nQPLQnwz8JHUXjJ1
1if8r7YQtRAayZzj1S+s90JUQ57elX2RA4Mj4Fb+NlEnQC4C7uyLo7oF4R8DOdnu
+19U0jbuDdAaiZx/P74Cb66yDjnW37jjFleS/SfABlcqu1sNEu7egtX8VT6j8LJt
/WjZ+sEt+5ezcA==
-----END CERTIFICATE-----
Generated at Wed May 8 13:18:11 2024 by rpki-client on console-fra.rpki-client.org