Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File:                     4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier:          jPUvCRwYvnkd0Kr40DniYW2M1EqnZhrsl433v1a+rHM=
Subject key identifier:   4D:5F:B8:6A:97:0F:E5:39:EE:96:66:E2:C8:5C:78:E7:61:63:05:27
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer:       /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial:       018F464569DBC43B2378E30D6B9C6DE7BA40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number:          0A06
Signing time:             Sun 05 May 2024 01:01:45 +0000
Manifest this update:     Sun 05 May 2024 01:01:45 +0000
Manifest next update:     Mon 06 May 2024 01:01:45 +0000
Files and hashes:         1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: peBVQ5U/n4r72E1e/qxJO+q1YB0sQItkh6SjlxTPl28=)
                          2: MSaw9NQnLz6kTuyanTxRP0mAGwE.roa (hash: XhH1DiNXVf5mp9fkKhR8TWcE9Gj3Tw2CSJhdH8s+Y9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:45:69:db:c4:3b:23:78:e3:0d:6b:9c:6d:e7:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
        Validity
            Not Before: May  5 01:01:45 2024 GMT
            Not After : May  6 01:01:45 2024 GMT
        Subject: CN=4d5fb86a970fe539ee9666e2c85c78e761630527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:4c:aa:f8:e9:5b:c5:07:fa:69:fa:9c:5c:
                    92:36:11:3c:a4:bd:49:09:e1:c3:18:4e:67:5b:37:
                    e6:de:10:da:db:98:24:cd:7c:f7:cf:84:cf:08:1b:
                    27:03:77:1d:37:0c:36:a8:03:9c:a7:11:c0:8f:5e:
                    f8:0d:2f:49:b9:44:f9:60:11:5b:31:97:6c:68:35:
                    1f:68:1c:4d:6e:89:78:44:a4:66:fa:35:f8:6d:d3:
                    99:fc:bf:4f:b4:1e:c6:7c:e4:8f:94:de:39:01:b0:
                    89:5a:0b:7d:3b:37:7a:55:45:7a:25:d1:36:ae:da:
                    77:79:0e:49:61:a7:f3:6e:72:32:eb:04:3c:43:5e:
                    15:01:df:34:31:6d:a0:d3:8c:db:4c:b0:da:62:87:
                    5e:a9:14:e9:a0:ca:1d:9f:5c:d4:97:a2:72:b8:75:
                    5c:11:df:e7:14:29:82:de:a9:26:66:28:57:55:1a:
                    64:09:99:84:91:f4:61:e1:01:44:f5:74:6c:0a:a3:
                    3a:b3:9b:ac:15:3a:c9:d0:0b:cd:06:4a:6d:34:5c:
                    51:bc:56:a4:e7:cb:77:d9:8e:4a:d2:25:45:eb:e5:
                    b8:00:2c:2d:d0:14:49:e7:cf:0c:99:f0:e1:89:c8:
                    3a:a6:95:77:e2:4d:16:d1:00:79:ab:78:cc:5b:30:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:B8:6A:97:0F:E5:39:EE:96:66:E2:C8:5C:78:E7:61:63:05:27
            X509v3 Authority Key Identifier:
                keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:b6:2f:07:90:7a:ce:1c:0a:14:0d:d2:6e:f2:5d:32:15:
         de:d4:99:d2:05:7b:4c:3b:39:1d:f2:72:b2:ea:6d:58:fb:bc:
         12:26:91:e8:00:bf:6b:41:eb:f0:5b:e3:85:56:52:3a:b1:30:
         6c:25:50:bd:27:83:9b:e0:df:dc:33:10:c4:28:a9:58:6d:2b:
         83:88:af:46:df:9a:e2:20:f7:f1:5e:26:04:62:26:d6:4f:18:
         d0:2f:a2:8c:a7:a8:6a:7b:6f:2b:74:77:c7:04:1b:dc:40:f8:
         a2:5a:1b:e3:27:aa:b0:12:7b:44:1c:3e:91:5f:2c:ab:58:22:
         52:80:35:93:62:7c:50:1c:69:66:82:f9:ac:7a:df:6d:f3:67:
         7f:43:6d:41:e4:39:24:e6:a8:03:32:29:b9:38:45:41:c7:2b:
         ba:ac:ce:70:e1:db:ef:02:9e:05:12:1e:23:2c:67:e8:4a:65:
         3e:00:9d:b2:6b:63:71:db:86:03:00:5e:bf:dc:ba:3c:d4:48:
         32:fe:fc:64:07:d9:f7:45:e3:b1:67:63:6f:ea:81:6d:4c:8d:
         18:9c:c9:e9:a2:45:e3:74:28:fe:18:72:65:57:58:79:48:92:
         b6:90:66:f3:10:9d:de:fb:ee:d7:98:f6:47:d6:b4:5b:09:b8:
         6c:15:92:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GRWnbxDsjeOMNa5xt57pAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjhiOWU0Nzg1NmNiYmEwODJiN2FmNDI5N2ExYjcyM2Rh
ZmM0MDIwHhcNMjQwNTA1MDEwMTQ1WhcNMjQwNTA2MDEwMTQ1WjAzMTEwLwYDVQQD
Eyg0ZDVmYjg2YTk3MGZlNTM5ZWU5NjY2ZTJjODVjNzhlNzYxNjMwNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE9MqvjpW8UH+mn6nFySNhE8pL1J
CeHDGE5nWzfm3hDa25gkzXz3z4TPCBsnA3cdNww2qAOcpxHAj174DS9JuUT5YBFb
MZdsaDUfaBxNbol4RKRm+jX4bdOZ/L9PtB7GfOSPlN45AbCJWgt9Ozd6VUV6JdE2
rtp3eQ5JYafzbnIy6wQ8Q14VAd80MW2g04zbTLDaYodeqRTpoModn1zUl6JyuHVc
Ed/nFCmC3qkmZihXVRpkCZmEkfRh4QFE9XRsCqM6s5usFTrJ0AvNBkptNFxRvFak
58t32Y5K0iVF6+W4ACwt0BRJ588MmfDhicg6ppV34k0W0QB5q3jMWzDyowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1fuGqXD+U57pZm4shceOdhYwUnMB8GA1UdIwQY
MBaAFOD4ueR4Vsu6CCt69Cl6G3I9r8QCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUt
YTU3OTY2MmYwOTUwLzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUtYTU3OTY2MmYwOTUw
LzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofW2LweQ
es4cChQN0m7yXTIV3tSZ0gV7TDs5HfJysuptWPu8EiaR6AC/a0Hr8FvjhVZSOrEw
bCVQvSeDm+Df3DMQxCipWG0rg4ivRt+a4iD38V4mBGIm1k8Y0C+ijKeoantvK3R3
xwQb3ED4olob4yeqsBJ7RBw+kV8sq1giUoA1k2J8UBxpZoL5rHrfbfNnf0NtQeQ5
JOaoAzIpuThFQccruqzOcOHb7wKeBRIeIyxn6EplPgCdsmtjcduGAwBev9y6PNRI
Mv78ZAfZ90XjsWdjb+qBbUyNGJzJ6aJF43Qo/hhyZVdYeUiStpBm8xCd3vvu15j2
R9a0Wwm4bBWSOA==
-----END CERTIFICATE-----
Generated at Sun May 5 02:29:16 2024 by rpki-client on console-ams.rpki-client.org