Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File:                     2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier:          2nSaEkuu42KkIpGUleuUdwcSDPOCiS4kgVyWIrYBjdI=
Subject key identifier:   D0:9A:E5:1D:89:4C:4A:FF:28:87:6D:18:56:28:3C:93:50:B4:DD:05
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer:       /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial:       018F4C46D8C47CD93E598A8B17D89C39D50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number:          05E6
Signing time:             Mon 06 May 2024 05:01:02 +0000
Manifest this update:     Mon 06 May 2024 05:01:02 +0000
Manifest next update:     Tue 07 May 2024 05:01:02 +0000
Files and hashes:         1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: P7yG9YLnvTJA+o4Z7BvtDFFFctck6Y4O98VP64TtJnY=)
                          2: Mc_2LCsor_-TWbuKIOc95aPKozA.roa (hash: X/m2hulSUwfitrU/Y/HVu2I0MkVxZSeG3vrMtVhXV8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:46:d8:c4:7c:d9:3e:59:8a:8b:17:d8:9c:39:d5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
        Validity
            Not Before: May  6 05:01:02 2024 GMT
            Not After : May  7 05:01:02 2024 GMT
        Subject: CN=d09ae51d894c4aff28876d1856283c9350b4dd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:f7:83:39:8c:e4:b3:18:c2:a9:0e:c1:ec:
                    15:e1:8c:8b:bc:27:cc:2f:f4:cd:0d:6d:02:76:50:
                    7e:9d:61:ee:fc:e2:ad:a6:8d:b3:ad:1e:e4:57:92:
                    e6:92:75:71:90:cb:b5:f7:48:6d:5a:25:7e:83:5c:
                    e9:be:e7:64:28:7d:68:96:35:f7:9f:9f:dd:4c:c5:
                    30:b0:54:6b:03:ef:4b:3b:cf:cb:c9:85:9a:9e:8d:
                    16:9d:d4:ca:98:e8:54:13:7c:e5:8b:16:cf:1a:73:
                    d1:9a:71:b3:d0:13:f4:24:51:6c:36:51:57:9c:cc:
                    ee:33:12:64:d4:bb:33:e0:81:ed:01:6d:b5:19:99:
                    d7:95:11:ba:b4:fb:30:b4:8f:19:a3:6f:5c:95:7f:
                    6d:09:47:43:33:e9:cf:22:56:78:12:e3:db:bc:3d:
                    30:df:b2:cf:84:ee:b1:37:0e:d7:21:03:b2:a5:37:
                    cc:dd:85:ea:2d:00:d0:d3:7e:13:e2:e5:80:91:6d:
                    d8:b3:b3:9a:b9:91:49:5d:a8:f7:21:e8:8e:13:e9:
                    88:8d:1b:c8:91:f7:2c:47:30:fb:3a:3e:10:da:be:
                    81:30:af:80:d3:43:40:87:6a:27:38:42:69:a5:93:
                    b0:5e:ba:20:f3:65:93:37:1c:cb:66:e1:72:24:a9:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:E5:1D:89:4C:4A:FF:28:87:6D:18:56:28:3C:93:50:B4:DD:05
            X509v3 Authority Key Identifier:
                keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:04:97:04:22:06:33:9e:27:ed:9d:d9:f9:e7:68:87:2a:
         8c:a9:f5:bc:70:8c:7b:cd:7f:e4:4f:63:7e:cd:6c:e4:e0:68:
         d1:ac:4b:ef:a7:b4:a6:3c:62:c1:db:02:4e:dc:c3:51:8e:44:
         58:e5:28:de:21:32:7c:32:ee:13:ca:83:53:7d:6f:85:91:64:
         19:25:f5:65:30:f5:bb:68:23:fd:4a:23:36:fa:b9:32:fa:92:
         15:28:50:90:2f:63:e2:fa:62:c4:a8:48:4f:b1:59:b6:81:9b:
         1e:b6:ed:f8:6e:ba:2d:65:5c:7d:1a:a5:b3:d4:bd:9a:79:7f:
         8b:1c:ea:be:67:50:3f:2d:f2:b5:d5:16:d5:7f:89:53:7c:34:
         8a:1c:0a:93:44:4f:73:88:bc:32:80:7e:f5:48:a6:8b:d7:63:
         38:3f:76:e9:e6:c4:96:f2:2a:b3:dd:65:ef:c6:aa:90:f6:6b:
         25:37:c0:1c:ee:f8:ab:42:92:9e:10:47:80:e0:4b:be:84:5b:
         43:46:94:4b:a0:89:fd:45:fc:b4:da:69:d0:e1:80:98:6c:fd:
         e5:5e:1d:81:55:60:bf:56:fb:93:5b:dc:59:7a:ad:8c:6f:0d:
         34:6f:77:88:7e:39:0b:b2:c5:0a:af:13:f7:bd:bd:e8:44:80:
         68:e4:22:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MRtjEfNk+WYqLF9icOdULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDFlMjIwYjYwMWI2N2ZlMzBjYmI3YjdjMWJmMjJmYmUy
MmZiNGYwHhcNMjQwNTA2MDUwMTAyWhcNMjQwNTA3MDUwMTAyWjAzMTEwLwYDVQQD
EyhkMDlhZTUxZDg5NGM0YWZmMjg4NzZkMTg1NjI4M2M5MzUwYjRkZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdf3gzmM5LMYwqkOwewV4YyLvCfM
L/TNDW0CdlB+nWHu/OKtpo2zrR7kV5LmknVxkMu190htWiV+g1zpvudkKH1oljX3
n5/dTMUwsFRrA+9LO8/LyYWano0WndTKmOhUE3zlixbPGnPRmnGz0BP0JFFsNlFX
nMzuMxJk1Lsz4IHtAW21GZnXlRG6tPswtI8Zo29clX9tCUdDM+nPIlZ4EuPbvD0w
37LPhO6xNw7XIQOypTfM3YXqLQDQ034T4uWAkW3Ys7OauZFJXaj3IeiOE+mIjRvI
kfcsRzD7Oj4Q2r6BMK+A00NAh2onOEJppZOwXrog82WTNxzLZuFyJKnlwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCa5R2JTEr/KIdtGFYoPJNQtN0FMB8GA1UdIwQY
MBaAFNnR4iC2AbZ/4wy7e3wb8i++IvtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzIt
YWYyN2Q3Y2ExYmY2LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzItYWYyN2Q3Y2ExYmY2
LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3cElwQi
BjOeJ+2d2fnnaIcqjKn1vHCMe81/5E9jfs1s5OBo0axL76e0pjxiwdsCTtzDUY5E
WOUo3iEyfDLuE8qDU31vhZFkGSX1ZTD1u2gj/UojNvq5MvqSFShQkC9j4vpixKhI
T7FZtoGbHrbt+G66LWVcfRqls9S9mnl/ixzqvmdQPy3ytdUW1X+JU3w0ihwKk0RP
c4i8MoB+9Uimi9djOD926ebElvIqs91l78aqkPZrJTfAHO74q0KSnhBHgOBLvoRb
Q0aUS6CJ/UX8tNpp0OGAmGz95V4dgVVgv1b7k1vcWXqtjG8NNG93iH45C7LFCq8T
97296ESAaOQi8w==
-----END CERTIFICATE-----
Generated at Mon May 6 09:48:59 2024 by rpki-client on console-fra.rpki-client.org