Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File:                     HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier:          irgwe2CGVInCZeebfO2Zk+JLcuICWWmGDPhe9U2KOI8=
Subject key identifier:   16:73:5B:E0:05:A2:4A:1E:FA:0D:C1:4F:09:25:1B:F2:A0:25:63:74
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer:       /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial:       018F5325653A7B35C9D5393ECAF22F9F7516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number:          08D0
Signing time:             Tue 07 May 2024 13:01:50 +0000
Manifest this update:     Tue 07 May 2024 13:01:50 +0000
Manifest next update:     Wed 08 May 2024 13:01:50 +0000
Files and hashes:         1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: jngqmeTuyVTOn4Pr3XYpffUrXMkZVKIkBMFPoDEhLaA=)
                          2: kmUznj93NrBEDPEQxHEBiFPEov0.roa (hash: 7hMm5lB3CYUGyGQn3La+LwTMQ8taZmjZp0ZSG54mR4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:65:3a:7b:35:c9:d5:39:3e:ca:f2:2f:9f:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
        Validity
            Not Before: May  7 13:01:50 2024 GMT
            Not After : May  8 13:01:50 2024 GMT
        Subject: CN=16735be005a24a1efa0dc14f09251bf2a0256374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:ff:6b:45:b6:32:7a:9a:93:f7:e2:9d:d3:
                    a9:ee:66:31:ee:3e:aa:a2:17:a2:4a:01:d7:fe:8f:
                    da:6a:c2:8c:a3:9f:c8:04:26:fc:92:f5:b5:f1:4e:
                    76:f9:f7:fb:4a:c2:67:e3:a5:23:03:cc:df:25:53:
                    44:82:f6:27:2e:59:a4:95:c1:64:65:4a:b4:99:d5:
                    89:e9:63:f3:73:af:ad:8e:4e:d2:79:42:58:59:e2:
                    8d:73:4b:95:06:71:a9:65:8c:c7:14:6b:46:87:23:
                    33:c3:50:3e:7d:11:df:b9:14:c8:2a:c6:ab:c0:db:
                    58:28:57:81:d3:5d:37:0e:b2:2f:f7:42:b1:37:5a:
                    ce:04:9f:29:fa:2c:a8:12:ad:94:58:a8:26:10:4f:
                    0b:fc:c7:f2:11:03:bb:44:e3:d4:85:f0:5e:bf:f9:
                    20:ea:82:3f:18:b3:c4:53:1f:e9:ab:ee:03:c2:3b:
                    cd:3f:29:1a:ac:7e:b2:a0:9f:6f:28:d8:39:76:31:
                    dc:f1:61:64:ca:4f:e9:02:81:0e:0f:e8:31:fa:88:
                    88:0a:62:ce:dc:95:c7:eb:c3:e6:ab:d4:fc:67:d2:
                    5c:6c:94:e1:f4:4c:c9:73:5c:ac:a9:bf:d6:2e:a7:
                    1f:7c:62:ad:58:1e:f7:20:58:46:d9:20:a5:3f:2b:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:73:5B:E0:05:A2:4A:1E:FA:0D:C1:4F:09:25:1B:F2:A0:25:63:74
            X509v3 Authority Key Identifier:
                keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:38:1d:78:09:9f:ef:eb:cf:ff:9f:41:30:74:15:a2:da:
         bf:b0:14:79:32:52:87:b6:83:13:6c:c6:2c:c5:6b:6e:75:79:
         0d:df:2c:77:82:d5:5c:c3:0f:ae:68:90:71:4d:99:88:b5:cf:
         8c:af:74:95:e4:bd:88:5f:05:29:08:88:68:01:91:5d:9e:56:
         d9:58:4b:82:7c:b7:d3:00:5e:9f:0b:55:ae:ee:a3:69:cb:34:
         a7:c3:9a:2f:ef:65:75:bd:e1:eb:9a:45:4d:ca:2f:07:4a:85:
         a3:db:b7:ad:b3:d4:a3:34:f1:4b:f3:a7:4e:5c:47:fb:d2:d9:
         47:db:93:b8:a8:74:c3:60:d0:e6:4c:d5:73:e3:af:05:93:65:
         31:0d:45:66:0d:bf:0e:34:3f:b2:bb:b6:85:a1:15:c7:2b:ee:
         dd:7e:de:89:86:c9:fc:3b:64:bf:7b:c9:12:bf:ab:15:67:a7:
         be:d1:65:ca:62:b2:1f:46:44:c6:ef:d4:4b:6d:50:cf:23:7e:
         d2:9d:e9:09:7d:ad:67:97:ab:f9:76:a2:c2:c4:d6:3e:cc:3f:
         62:0b:ab:ac:05:41:12:ab:a7:13:14:fb:4d:a0:27:0c:99:20:
         fb:7b:a6:e4:a9:1b:4b:71:a9:ac:3d:1a:bd:b3:ca:27:f0:60:
         14:20:fc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TJWU6ezXJ1Tk+yvIvn3UWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDhhNTllZDk4ZjU5YTBlYTBlNmM0Mzc5YzMwZjViZDVm
MjA4MjEwHhcNMjQwNTA3MTMwMTUwWhcNMjQwNTA4MTMwMTUwWjAzMTEwLwYDVQQD
EygxNjczNWJlMDA1YTI0YTFlZmEwZGMxNGYwOTI1MWJmMmEwMjU2Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIn/a0W2Mnqak/findOp7mYx7j6q
oheiSgHX/o/aasKMo5/IBCb8kvW18U52+ff7SsJn46UjA8zfJVNEgvYnLlmklcFk
ZUq0mdWJ6WPzc6+tjk7SeUJYWeKNc0uVBnGpZYzHFGtGhyMzw1A+fRHfuRTIKsar
wNtYKFeB0103DrIv90KxN1rOBJ8p+iyoEq2UWKgmEE8L/MfyEQO7ROPUhfBev/kg
6oI/GLPEUx/pq+4DwjvNPykarH6yoJ9vKNg5djHc8WFkyk/pAoEOD+gx+oiICmLO
3JXH68Pmq9T8Z9JcbJTh9EzJc1ysqb/WLqcffGKtWB73IFhG2SClPyt7cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZzW+AFokoe+g3BTwklG/KgJWN0MB8GA1UdIwQY
MBaAFB4IpZ7Zj1mg6g5sQ3nDD1vV8gghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDct
MWY0MDczYmE0MzZmLzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDctMWY0MDczYmE0MzZm
LzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7I4HXgJ
n+/rz/+fQTB0FaLav7AUeTJSh7aDE2zGLMVrbnV5Dd8sd4LVXMMPrmiQcU2ZiLXP
jK90leS9iF8FKQiIaAGRXZ5W2VhLgny30wBenwtVru6jacs0p8OaL+9ldb3h65pF
TcovB0qFo9u3rbPUozTxS/OnTlxH+9LZR9uTuKh0w2DQ5kzVc+OvBZNlMQ1FZg2/
DjQ/sru2haEVxyvu3X7eiYbJ/Dtkv3vJEr+rFWenvtFlymKyH0ZExu/US21QzyN+
0p3pCX2tZ5er+XaiwsTWPsw/YgurrAVBEqunExT7TaAnDJkg+3um5KkbS3GprD0a
vbPKJ/BgFCD8wA==
-----END CERTIFICATE-----
Generated at Tue May 7 14:49:42 2024 by rpki-client on console-ams.rpki-client.org