Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File:                     0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier:          W8vCmL+qtr+2Nxlh5VtxdiNn3QhDRC108fyH43TBBF8=
Subject key identifier:   8C:24:82:EC:66:98:A5:2A:84:61:D8:0F:61:CB:DD:C7:36:3C:C3:33
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer:       /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial:       018F50240A43AAAF6587C02071B9639F7BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number:          08A9
Signing time:             Mon 06 May 2024 23:01:30 +0000
Manifest this update:     Mon 06 May 2024 23:01:30 +0000
Manifest next update:     Tue 07 May 2024 23:01:30 +0000
Files and hashes:         1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: 5DDFAAcUS8zLhA6CFwFhJiqeaJesu0XOYfDE545oJho=)
                          2: tAq3dHhGNVzX9E5zheb9qYACMZY.roa (hash: YFS8kZ7OnJ2UPUy9s6w+Qv1vtpeAIlN8yahl9L9I8T4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:24:0a:43:aa:af:65:87:c0:20:71:b9:63:9f:7b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
        Validity
            Not Before: May  6 23:01:30 2024 GMT
            Not After : May  7 23:01:30 2024 GMT
        Subject: CN=8c2482ec6698a52a8461d80f61cbddc7363cc333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:9b:fb:dc:b1:b5:c7:bc:ed:87:ed:8b:e6:
                    8b:9b:e8:77:bf:11:ec:f9:51:8a:72:07:1b:11:44:
                    73:cc:df:91:a3:31:e7:eb:b0:00:ca:30:8c:dd:e0:
                    ce:c4:3f:66:c9:41:6a:2f:f0:ef:06:48:ff:14:80:
                    6d:38:63:6b:26:1a:8b:fa:1c:00:15:d5:73:1b:3e:
                    5b:c5:23:d5:49:63:7a:f6:eb:23:73:1a:11:fe:1a:
                    4b:b6:b3:1e:73:2c:11:fc:b8:0e:a2:b2:a8:2c:37:
                    bd:70:3b:f9:10:07:0b:bb:cf:1a:e8:e8:70:d3:d7:
                    a4:0a:82:8c:10:6d:29:31:31:9a:13:0e:e8:c3:fa:
                    b2:fb:54:77:a3:2a:e7:ac:4e:29:da:2b:82:12:7b:
                    9e:5c:bd:82:7e:a8:4d:5b:b2:ff:b1:4f:a6:e7:13:
                    4b:b0:dc:9e:9e:25:ac:ef:ac:08:d9:56:38:4a:96:
                    2f:69:52:98:1c:90:89:c0:37:75:8b:e0:82:bc:14:
                    17:58:30:a3:e9:e0:18:65:35:63:ca:9a:ff:ed:ec:
                    71:54:a6:2d:f3:a7:d7:39:28:38:c2:64:1e:0b:2b:
                    1d:5c:2c:e3:c5:ec:19:18:fe:21:a7:cd:06:a6:28:
                    c9:86:85:d7:cb:c4:43:7b:33:3c:6b:e3:64:95:5a:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:24:82:EC:66:98:A5:2A:84:61:D8:0F:61:CB:DD:C7:36:3C:C3:33
            X509v3 Authority Key Identifier:
                keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:37:be:fd:5b:2a:81:91:3a:c7:a4:22:f6:eb:8b:9b:5e:7e:
         f3:e0:ea:69:4c:80:e4:e2:1a:e4:5b:cd:b0:c3:1f:d9:92:c0:
         57:d2:c9:a4:f2:e1:46:1d:fa:52:42:61:0b:a0:ee:32:ee:da:
         91:07:65:a4:06:87:ca:da:d3:86:b7:23:51:22:c7:7f:74:2d:
         20:b7:4b:c8:51:5a:fe:f3:f2:42:66:4f:bc:fc:83:a7:61:9c:
         41:ba:5d:67:46:a5:c9:48:79:f5:90:a8:03:0e:72:0a:23:c6:
         28:82:58:bf:2c:18:c1:18:cd:89:e7:2d:fa:03:13:ee:0e:24:
         b2:f8:de:54:16:10:84:aa:84:0e:5f:04:02:f0:bf:fa:56:24:
         a1:25:df:f5:60:de:33:2e:70:10:80:73:8a:6c:88:d9:89:ca:
         18:f0:43:19:69:1b:43:74:d5:47:22:53:5d:63:f9:ed:0d:c2:
         30:19:ae:f6:c0:b8:4f:cf:4c:41:5d:9d:f4:bb:cb:da:6a:b9:
         0f:7f:10:1d:e9:9a:f7:a2:05:59:5f:dd:0e:7b:08:be:d2:34:
         59:1c:b2:8a:9b:03:64:93:33:0e:a3:fd:ad:99:d5:7d:ef:52:
         14:0d:dd:0a:cd:b5:79:8c:b1:4c:df:83:1e:7f:aa:6d:42:d8:
         67:55:84:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9QJApDqq9lh8Agcbljn3vmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2
NjBiOTUwHhcNMjQwNTA2MjMwMTMwWhcNMjQwNTA3MjMwMTMwWjAzMTEwLwYDVQQD
Eyg4YzI0ODJlYzY2OThhNTJhODQ2MWQ4MGY2MWNiZGRjNzM2M2NjMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV2b+9yxtce87Yfti+aLm+h3vxHs
+VGKcgcbEURzzN+RozHn67AAyjCM3eDOxD9myUFqL/DvBkj/FIBtOGNrJhqL+hwA
FdVzGz5bxSPVSWN69usjcxoR/hpLtrMecywR/LgOorKoLDe9cDv5EAcLu88a6Ohw
09ekCoKMEG0pMTGaEw7ow/qy+1R3oyrnrE4p2iuCEnueXL2CfqhNW7L/sU+m5xNL
sNyeniWs76wI2VY4SpYvaVKYHJCJwDd1i+CCvBQXWDCj6eAYZTVjypr/7exxVKYt
86fXOSg4wmQeCysdXCzjxewZGP4hp80GpijJhoXXy8RDezM8a+NklVqhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwkguxmmKUqhGHYD2HL3cc2PMMzMB8GA1UdIwQY
MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt
ZmRjMWRjZGEyOTYxLzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx
LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETe+/Vsq
gZE6x6Qi9uuLm15+8+DqaUyA5OIa5FvNsMMf2ZLAV9LJpPLhRh36UkJhC6DuMu7a
kQdlpAaHytrThrcjUSLHf3QtILdLyFFa/vPyQmZPvPyDp2GcQbpdZ0alyUh59ZCo
Aw5yCiPGKIJYvywYwRjNiect+gMT7g4ksvjeVBYQhKqEDl8EAvC/+lYkoSXf9WDe
My5wEIBzimyI2YnKGPBDGWkbQ3TVRyJTXWP57Q3CMBmu9sC4T89MQV2d9LvL2mq5
D38QHema96IFWV/dDnsIvtI0WRyyipsDZJMzDqP9rZnVfe9SFA3dCs21eYyxTN+D
Hn+qbULYZ1WE+A==
-----END CERTIFICATE-----
Generated at Tue May 7 01:07:24 2024 by rpki-client on console-ams.rpki-client.org