Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File:                     6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier:          wWbHE6cpQbdFrCA7zi/tc9tKZkR0MXeej8SWRH9yGw8=
Subject key identifier:   F3:0C:58:51:32:E1:98:49:FD:AD:67:0B:13:7C:B4:5C:95:94:AD:FB
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer:       /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial:       018F43B3E32C196C3E3D54C9D12775796C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number:          115D
Signing time:             Sat 04 May 2024 13:03:33 +0000
Manifest this update:     Sat 04 May 2024 13:03:33 +0000
Manifest next update:     Sun 05 May 2024 13:03:33 +0000
Files and hashes:         1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: 8PPlgSz+WhMGYxqPCKKbGRXHnjoPeAkm5FOxUiHNPHU=)
                          2: llapNPL9DGx0qPng0fF9tpjao2o.roa (hash: u9bVmMP1x5/NE2SlQbyeQ69m7P2qQ7pRBIIvVZ5cfT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:e3:2c:19:6c:3e:3d:54:c9:d1:27:75:79:6c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
        Validity
            Not Before: May  4 13:03:33 2024 GMT
            Not After : May  5 13:03:33 2024 GMT
        Subject: CN=f30c585132e19849fdad670b137cb45c9594adfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:38:e8:5a:b5:8d:34:7e:dc:1b:2d:b4:4d:
                    2d:a4:99:cf:b8:20:d9:ca:6f:46:30:02:d1:de:54:
                    48:95:f1:47:b0:81:20:ae:c8:a2:84:1f:29:20:a4:
                    e3:77:37:c9:f8:5a:15:cf:d6:37:64:5f:58:e8:d6:
                    85:d4:09:93:0d:c4:06:ea:4e:ab:21:dd:f6:72:ee:
                    26:2f:d3:94:a4:92:bb:81:ad:77:ec:84:5f:93:dd:
                    19:7b:b2:a3:1e:58:15:79:96:87:98:75:4f:27:17:
                    66:06:38:8d:36:5b:a5:2f:4c:cc:b0:37:55:9b:3c:
                    03:87:dd:c1:cc:db:87:a6:d7:54:30:be:d7:83:c9:
                    23:2e:66:11:34:2c:66:ef:66:54:a9:32:37:7f:e7:
                    50:7a:38:9f:1f:98:59:e8:14:54:88:6e:06:67:d8:
                    e2:da:87:a1:51:05:0c:84:40:4e:b1:9f:83:a9:03:
                    bd:99:5f:be:db:3a:24:3d:0b:7b:ba:3d:16:81:6e:
                    39:04:ba:93:4b:3a:ef:e7:28:5d:5e:8c:64:a1:09:
                    d8:f1:6a:3c:19:74:85:ef:2c:db:44:94:5b:f7:1d:
                    03:af:b3:61:bf:80:b4:ec:8d:35:e5:96:ab:74:15:
                    b8:1f:63:0a:3a:3f:9a:3c:7b:b5:3e:45:3d:29:76:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:58:51:32:E1:98:49:FD:AD:67:0B:13:7C:B4:5C:95:94:AD:FB
            X509v3 Authority Key Identifier:
                keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3b:20:c7:4f:60:3f:98:19:b9:6b:74:7b:0f:84:d2:76:6b:
         02:fe:84:19:1c:d9:28:62:52:81:50:f2:53:59:81:b2:95:1d:
         72:54:20:01:6e:f4:e0:4f:bd:b7:03:25:00:de:ec:cb:84:81:
         3f:24:a5:e0:bc:cc:ce:1f:ee:a0:f2:53:46:33:50:2f:c9:1e:
         39:24:96:a5:9f:2a:8a:4a:a8:a6:ad:f4:d0:7d:f2:cc:1e:9c:
         c4:8c:6d:f3:b7:46:76:07:2d:82:48:73:05:56:2e:ff:41:0c:
         4b:5c:c6:8c:09:10:31:49:29:26:e7:23:bf:f3:ce:4d:f9:3a:
         a7:8b:07:5e:db:40:a6:b1:53:e0:54:d2:7c:c0:98:21:fa:2b:
         e7:bb:88:46:9b:73:8c:fa:8c:a6:f8:e2:7f:a1:c2:16:05:cc:
         41:4d:a8:f3:65:bd:f2:6e:7b:9c:97:12:fd:ff:36:e9:97:14:
         31:5e:6c:44:cc:fa:5a:ef:1b:7b:38:82:b2:b9:15:a3:38:03:
         0e:f5:49:fd:67:1b:41:a1:2c:4b:46:b7:79:4b:22:44:96:be:
         49:ac:bd:86:14:1e:cc:06:9a:e8:44:89:c4:e2:c4:a1:24:90:
         f2:2d:24:77:5f:f9:b8:c2:dc:40:1c:08:39:a3:9b:38:74:68:
         9f:38:84:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Ds+MsGWw+PVTJ0Sd1eWwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5
N2MxYTMwHhcNMjQwNTA0MTMwMzMzWhcNMjQwNTA1MTMwMzMzWjAzMTEwLwYDVQQD
EyhmMzBjNTg1MTMyZTE5ODQ5ZmRhZDY3MGIxMzdjYjQ1Yzk1OTRhZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9s46Fq1jTR+3BsttE0tpJnPuCDZ
ym9GMALR3lRIlfFHsIEgrsiihB8pIKTjdzfJ+FoVz9Y3ZF9Y6NaF1AmTDcQG6k6r
Id32cu4mL9OUpJK7ga137IRfk90Ze7KjHlgVeZaHmHVPJxdmBjiNNlulL0zMsDdV
mzwDh93BzNuHptdUML7Xg8kjLmYRNCxm72ZUqTI3f+dQejifH5hZ6BRUiG4GZ9ji
2oehUQUMhEBOsZ+DqQO9mV++2zokPQt7uj0WgW45BLqTSzrv5yhdXoxkoQnY8Wo8
GXSF7yzbRJRb9x0Dr7Nhv4C07I015ZardBW4H2MKOj+aPHu1PkU9KXaxUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMMWFEy4ZhJ/a1nCxN8tFyVlK37MB8GA1UdIwQY
MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt
Yzk4YTFiZGU2NDc2LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2
LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTsgx09g
P5gZuWt0ew+E0nZrAv6EGRzZKGJSgVDyU1mBspUdclQgAW704E+9twMlAN7sy4SB
PySl4LzMzh/uoPJTRjNQL8keOSSWpZ8qikqopq300H3yzB6cxIxt87dGdgctgkhz
BVYu/0EMS1zGjAkQMUkpJucjv/POTfk6p4sHXttAprFT4FTSfMCYIfor57uIRptz
jPqMpvjif6HCFgXMQU2o82W98m57nJcS/f826ZcUMV5sRMz6Wu8beziCsrkVozgD
DvVJ/WcbQaEsS0a3eUsiRJa+Say9hhQezAaa6ESJxOLEoSSQ8i0kd1/5uMLcQBwI
OaObOHRonziElA==
-----END CERTIFICATE-----
Generated at Sat May 4 13:53:40 2024 by rpki-client on console-ams.rpki-client.org