Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          7GYbf5WEBUipnCVntKSl3M9C86MMrGZZuvUB2cWbsag=
Subject key identifier:   4F:FE:2A:A7:DC:46:64:82:A9:B4:25:B5:ED:EB:8A:F3:52:A4:D8:DF
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       018F3CD44F7812C39C437E87D825189ECF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          114E
Signing time:             Fri 03 May 2024 05:01:37 +0000
Manifest this update:     Fri 03 May 2024 05:01:37 +0000
Manifest next update:     Sat 04 May 2024 05:01:37 +0000
Files and hashes:         1: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: snPUV4/EwBss7NPcRFdD5ZRxU/GUg2uoMW6uxtoBOqE=)
                          2: 8_G6IHmRdBeB3QiyDvUZZpgyVQU.roa (hash: xSLC6irzImwmI7neuKxHz8TOX3NpvdgENe0MpYyxPbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 05:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:4f:78:12:c3:9c:43:7e:87:d8:25:18:9e:cf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: May  3 05:01:37 2024 GMT
            Not After : May  4 05:01:37 2024 GMT
        Subject: CN=4ffe2aa7dc466482a9b425b5edeb8af352a4d8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:fb:cb:85:68:fa:a0:a2:7d:38:17:2a:06:
                    82:44:ab:eb:d6:4b:d9:2c:47:ce:2f:25:b0:94:63:
                    68:80:56:ad:3d:b4:08:1d:59:42:7d:d8:80:b3:13:
                    80:90:45:ea:7b:c1:d1:46:0b:35:7a:6f:0e:a5:dc:
                    0e:e0:96:4f:83:2b:35:ca:47:7a:f3:fa:f3:51:b5:
                    ff:08:38:69:5c:3d:f9:db:ff:03:68:1c:33:cb:bf:
                    61:a5:a0:29:41:68:9c:b5:cd:3d:48:83:49:75:99:
                    84:be:19:74:fc:6c:72:a7:58:09:55:e8:67:4c:cd:
                    7b:26:a2:56:8f:54:9c:7d:75:ef:d3:bf:cb:3a:43:
                    6f:b7:e4:79:9c:54:b0:99:d4:97:f4:d1:c0:53:64:
                    cb:a9:8d:91:ee:2c:ff:f5:bb:e2:77:27:eb:1a:7a:
                    db:5b:f3:81:11:e7:09:25:db:63:18:68:6b:05:f8:
                    21:d4:dd:5c:c5:19:af:d6:90:5c:64:67:3b:fe:7d:
                    56:c3:ae:dc:e2:66:e7:e2:c0:8b:d0:48:0f:b0:bb:
                    3c:c3:9c:25:ad:96:55:2d:2b:e8:10:35:fd:d0:69:
                    94:7f:66:3b:28:81:b3:d5:91:53:ff:18:88:92:05:
                    31:e9:3c:27:f1:f6:5d:0c:21:dd:b5:ba:d9:44:77:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FE:2A:A7:DC:46:64:82:A9:B4:25:B5:ED:EB:8A:F3:52:A4:D8:DF
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:6e:98:46:5d:48:3f:99:35:ae:06:6f:99:c2:68:98:32:
         b2:4e:15:88:7d:f9:df:2b:3e:36:33:ae:88:41:58:11:70:40:
         ac:94:8f:8f:e7:53:a4:60:6a:d2:13:78:9c:39:27:c1:0d:aa:
         47:a4:a0:a2:ac:e7:35:52:c7:d9:a2:b9:30:1c:80:93:50:47:
         73:f1:c5:0f:c6:56:2f:46:0e:a8:da:a9:a9:5c:b8:e6:b5:f1:
         b1:5e:f9:29:ee:11:fc:e5:3a:be:c6:65:cd:49:36:99:3b:43:
         77:91:20:54:5f:76:2f:ce:93:3b:df:a3:cc:32:27:9f:34:56:
         96:74:5b:85:70:c4:6d:83:06:41:fa:ae:d5:c5:0c:30:c4:ee:
         63:02:d7:2f:9a:3a:9d:46:30:76:ea:3d:92:2d:36:85:04:80:
         01:bb:ac:21:66:ec:dd:f7:cc:f3:fd:0a:86:ed:a8:04:61:97:
         8e:94:0d:07:11:c8:1f:ab:cc:ed:8c:b1:21:e5:90:aa:3c:d7:
         56:a0:85:ac:a2:0b:34:d5:e9:3b:6d:2d:62:eb:ec:1c:f5:df:
         17:13:20:f5:5f:93:fb:a8:3f:08:c2:78:c6:b2:be:18:6c:58:
         18:ba:32:e9:b8:c4:57:f8:04:50:76:68:db:68:f2:20:6b:e3:
         ce:ab:2c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY881E94EsOcQ36H2CUYns9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjQwNTAzMDUwMTM3WhcNMjQwNTA0MDUwMTM3WjAzMTEwLwYDVQQD
Eyg0ZmZlMmFhN2RjNDY2NDgyYTliNDI1YjVlZGViOGFmMzUyYTRkOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ov7y4Vo+qCifTgXKgaCRKvr1kvZ
LEfOLyWwlGNogFatPbQIHVlCfdiAsxOAkEXqe8HRRgs1em8OpdwO4JZPgys1ykd6
8/rzUbX/CDhpXD352/8DaBwzy79hpaApQWictc09SINJdZmEvhl0/Gxyp1gJVehn
TM17JqJWj1ScfXXv07/LOkNvt+R5nFSwmdSX9NHAU2TLqY2R7iz/9bvidyfrGnrb
W/OBEecJJdtjGGhrBfgh1N1cxRmv1pBcZGc7/n1Ww67c4mbn4sCL0EgPsLs8w5wl
rZZVLSvoEDX90GmUf2Y7KIGz1ZFT/xiIkgUx6Twn8fZdDCHdtbrZRHegmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/+KqfcRmSCqbQlte3rivNSpNjfMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizdumEZd
SD+ZNa4Gb5nCaJgysk4ViH353ys+NjOuiEFYEXBArJSPj+dTpGBq0hN4nDknwQ2q
R6SgoqznNVLH2aK5MByAk1BHc/HFD8ZWL0YOqNqpqVy45rXxsV75Ke4R/OU6vsZl
zUk2mTtDd5EgVF92L86TO9+jzDInnzRWlnRbhXDEbYMGQfqu1cUMMMTuYwLXL5o6
nUYwduo9ki02hQSAAbusIWbs3ffM8/0Khu2oBGGXjpQNBxHIH6vM7YyxIeWQqjzX
VqCFrKILNNXpO20tYuvsHPXfFxMg9V+T+6g/CMJ4xrK+GGxYGLoy6bjEV/gEUHZo
22jyIGvjzqssGw==
-----END CERTIFICATE-----
Generated at Fri May 3 13:26:21 2024 by rpki-client on console-ams.rpki-client.org