Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File:                     20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier:          NZ1P43cmJ8YwtUcCAY+hh4cqQlw6kZw+5+qPUn6kOYo=
Subject key identifier:   94:0E:78:37:3A:B9:2C:1A:FA:07:67:03:C3:25:D0:53:2D:97:E5:BB
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer:       /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial:       018F58F1027B113DB33A66A9CBCF75182749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 16:02:20 +0000
Manifest this update:     Wed 08 May 2024 16:02:20 +0000
Manifest next update:     Thu 09 May 2024 16:02:20 +0000
Files and hashes:         1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: zhENrJIyZz/8lmAXMUkJY5AOi6wMpclr3JV8cMtwmzY=)
                          2: 4Jo91k0Wf4KG5UqL4eI7iinWrLg.roa (hash: ClqMRuYCbruqmgad7CYiZk1I6wffjCiR5odxvh+olsQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f1:02:7b:11:3d:b3:3a:66:a9:cb:cf:75:18:27:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
        Validity
            Not Before: May  8 16:02:20 2024 GMT
            Not After : May  9 16:02:20 2024 GMT
        Subject: CN=940e78373ab92c1afa076703c325d0532d97e5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:67:9c:1e:fb:71:a3:0d:4d:5e:84:4d:e4:
                    47:1d:82:ae:ef:2c:bd:90:e1:bc:25:e1:23:b7:4f:
                    96:b0:09:d1:93:a9:ed:bb:c4:53:f4:60:d3:4e:b8:
                    8d:80:06:49:72:bd:3d:1d:ab:f3:89:ea:50:4b:fc:
                    8b:8c:a4:46:82:f8:3d:41:01:c0:ed:bc:da:eb:19:
                    00:67:56:8b:42:21:cb:a7:3b:c5:f5:bf:ff:6b:8d:
                    b2:05:ef:cd:9b:e3:03:7f:99:83:5c:d4:08:28:07:
                    7e:0f:ba:be:dd:ad:cf:8f:9b:53:e7:ce:5a:3a:29:
                    ce:29:5b:40:43:b4:97:f7:a2:11:72:7a:36:a5:0f:
                    a4:3a:da:7d:41:f7:b5:53:f0:b1:af:df:8d:fd:05:
                    72:86:d4:8c:67:b4:a4:20:e6:b4:8d:25:1b:b5:6d:
                    47:23:46:3e:bb:60:d0:37:c5:90:23:16:c9:db:b0:
                    0f:83:88:22:d7:fc:8f:b7:ba:40:e1:c3:d4:63:7a:
                    3d:76:f7:14:eb:1f:8d:3c:c6:a4:9f:9d:28:e8:8f:
                    3b:a9:8c:cb:4c:89:5f:c0:b6:fc:1f:0e:f5:4b:1f:
                    b2:6f:05:c1:f9:53:dd:6c:c4:a5:31:e6:a0:17:a4:
                    97:4f:fc:9b:01:f9:30:8b:3b:56:f0:69:3e:16:30:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:78:37:3A:B9:2C:1A:FA:07:67:03:C3:25:D0:53:2D:97:E5:BB
            X509v3 Authority Key Identifier:
                keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:9d:46:62:7c:ca:d2:50:d7:5c:0a:ec:53:b4:11:58:68:
         af:a3:f5:e1:f1:8c:45:2d:ee:59:05:21:ee:bc:f8:8d:d9:80:
         c8:d5:61:01:78:69:79:c5:89:40:8e:60:5c:71:45:e6:b7:77:
         6c:04:65:73:76:2e:a4:4a:42:89:2e:57:6b:d4:33:13:43:a8:
         b3:44:df:a0:a0:e7:73:ef:7e:25:cf:d4:fa:04:7b:2a:5c:0e:
         47:a6:0a:7e:9e:72:9a:cf:89:10:0c:55:89:65:97:c8:03:0d:
         4c:bf:54:d1:86:c4:c7:fc:27:ce:4b:02:3d:0e:77:6a:71:d7:
         70:b5:73:3e:8d:c6:c9:4a:41:0c:5b:8d:27:cd:5a:e4:b4:cc:
         ac:06:93:51:e1:fe:89:75:81:b6:9e:93:0d:e9:7e:80:04:01:
         8b:80:4b:e5:bd:57:02:9d:11:42:81:e3:a8:f5:0b:6b:92:18:
         b0:3f:b7:75:f6:a8:c4:27:3b:95:6c:3e:c2:d6:16:cd:ba:fc:
         1b:46:cf:f2:40:a7:03:d0:09:ff:2c:5a:23:c8:9f:a9:dc:78:
         68:5a:cf:e9:e2:da:6b:0d:fd:e3:2a:cb:f3:bf:23:68:fa:e1:
         30:9a:e7:b0:30:53:9e:fe:9b:fa:d3:5c:27:a8:e2:a7:74:74:
         da:4c:8c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Y8QJ7ET2zOmapy891GCdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm
ZDllZWUwHhcNMjQwNTA4MTYwMjIwWhcNMjQwNTA5MTYwMjIwWjAzMTEwLwYDVQQD
Eyg5NDBlNzgzNzNhYjkyYzFhZmEwNzY3MDNjMzI1ZDA1MzJkOTdlNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoJnnB77caMNTV6ETeRHHYKu7yy9
kOG8JeEjt0+WsAnRk6ntu8RT9GDTTriNgAZJcr09HavziepQS/yLjKRGgvg9QQHA
7bza6xkAZ1aLQiHLpzvF9b//a42yBe/Nm+MDf5mDXNQIKAd+D7q+3a3Pj5tT585a
OinOKVtAQ7SX96IRcno2pQ+kOtp9Qfe1U/Cxr9+N/QVyhtSMZ7SkIOa0jSUbtW1H
I0Y+u2DQN8WQIxbJ27APg4gi1/yPt7pA4cPUY3o9dvcU6x+NPMakn50o6I87qYzL
TIlfwLb8Hw71Sx+ybwXB+VPdbMSlMeagF6SXT/ybAfkwiztW8Gk+FjALdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQOeDc6uSwa+gdnA8Ml0FMtl+W7MB8GA1UdIwQY
MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt
ZTI5ZWUzZDkxMzk1LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1
LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1adRmJ8
ytJQ11wK7FO0EVhor6P14fGMRS3uWQUh7rz4jdmAyNVhAXhpecWJQI5gXHFF5rd3
bARlc3YupEpCiS5Xa9QzE0Oos0TfoKDnc+9+Jc/U+gR7KlwOR6YKfp5yms+JEAxV
iWWXyAMNTL9U0YbEx/wnzksCPQ53anHXcLVzPo3GyUpBDFuNJ81a5LTMrAaTUeH+
iXWBtp6TDel+gAQBi4BL5b1XAp0RQoHjqPULa5IYsD+3dfaoxCc7lWw+wtYWzbr8
G0bP8kCnA9AJ/yxaI8ifqdx4aFrP6eLaaw394yrL878jaPrhMJrnsDBTnv6b+tNc
J6jip3R02kyMPA==
-----END CERTIFICATE-----
Generated at Wed May 8 21:08:00 2024 by rpki-client on console-ams.rpki-client.org