Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File:                     HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier:          s3XFi5kq2Vi8T1HkcPCXENXJmAavl/1H2TfevjtEGI0=
Subject key identifier:   7A:C1:F3:B9:39:A7:38:18:BD:B2:E4:3A:52:24:1D:AE:76:9C:3E:53
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer:       /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial:       018F3DE67681C69307A222652B58B2D385BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number:          0C98
Signing time:             Fri 03 May 2024 10:01:04 +0000
Manifest this update:     Fri 03 May 2024 10:01:04 +0000
Manifest next update:     Sat 04 May 2024 10:01:04 +0000
Files and hashes:         1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: XmEZtMTwFhCT7fPHPf9khVTa45sSgZd/cOw2dK6rpfM=)
                          2: N6FbEhrmlwrPH0a-lL0_2pklkCs.roa (hash: 9Jb307uMw7xAEOullrKFrMlSAqQ1S6RUYWgoKFYGXFU=)
                          3: Y04UYrB5MeJKDFKsj2OKdmrEof4.roa (hash: ZJsENIGC6KjW1tXkh1q4N7OsqR/WR4NZRsjqvqxwIUI=)
                          4: _Lp28N5uSIsMygtBTs2j8aSjatA.roa (hash: TsUMRvL0QS251fu6aevz87QvZZIW8eHWURsmjwWdw7Y=)
                          5: ntO8i1HcHhaY3BpmjL4PCzV-OkI.roa (hash: MDlSKIEnwZnHcClE0/IidM/980MMkhPGrzWnRvjCtq4=)
                          6: rSVmk2MkKTAEWLbQYFF7hpXHx7g.roa (hash: 4wVDdHTde2CXd7XubFnG6UvyGcKJ4FGZ6/P+q8IUIzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:76:81:c6:93:07:a2:22:65:2b:58:b2:d3:85:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
        Validity
            Not Before: May  3 10:01:04 2024 GMT
            Not After : May  4 10:01:04 2024 GMT
        Subject: CN=7ac1f3b939a73818bdb2e43a52241dae769c3e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:62:97:23:7a:c3:fb:06:8b:8f:69:79:a6:
                    e3:ec:f8:33:3c:b6:3a:ec:07:14:76:a1:22:0c:d9:
                    4c:bd:41:5c:a3:a7:6f:b1:79:d9:d2:f9:56:38:6e:
                    1d:bb:8f:a6:65:4e:fd:e4:fe:99:e7:07:35:2d:56:
                    98:e5:6f:17:fb:e9:9e:12:a2:e6:06:41:77:9d:99:
                    a8:17:eb:71:9f:e9:9a:a9:ba:50:1a:96:d4:fe:30:
                    25:18:5d:ff:c2:5b:2f:94:5d:d1:3e:7d:d8:36:a1:
                    89:e1:b4:a8:eb:85:4f:b4:29:d3:bf:4b:d9:02:66:
                    30:bf:33:14:cd:9a:20:5e:e0:fe:21:36:1f:66:4b:
                    e6:a6:a6:1b:34:e0:b6:1f:65:f2:c7:94:76:bd:8b:
                    db:b2:88:13:5c:61:56:e2:29:4f:ba:ab:d6:6f:90:
                    d2:04:a1:8a:18:03:2e:20:11:15:bb:e0:77:f5:0e:
                    f5:54:f3:a9:b9:01:e3:2b:16:76:7b:91:a3:24:bc:
                    c8:01:de:a6:dc:df:95:05:b7:49:b4:dc:f5:c3:3e:
                    3b:e9:7e:bb:2a:0f:9d:64:37:71:83:1f:c9:1a:1b:
                    c5:02:93:ec:3a:d0:e1:ed:a4:2d:00:0f:e5:f4:40:
                    a6:6e:3b:f3:43:de:2f:02:e8:f4:28:df:90:3d:32:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:F3:B9:39:A7:38:18:BD:B2:E4:3A:52:24:1D:AE:76:9C:3E:53
            X509v3 Authority Key Identifier:
                keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:75:5f:d3:01:7a:1e:41:b8:d4:4c:71:63:f6:73:be:2f:
         95:09:a9:47:e1:33:41:29:11:dc:23:cf:91:bf:74:59:c3:6f:
         7e:62:77:7f:18:bb:41:9d:b6:7d:d8:5a:ba:e1:c9:a0:73:00:
         c6:de:ff:ef:6a:31:1f:26:0a:6d:f8:27:ad:0e:6b:29:43:8a:
         fb:52:5e:00:46:b6:ee:76:39:3a:d4:b6:7a:db:d5:17:88:c9:
         db:be:0a:e0:c9:2c:4f:3b:16:27:7f:29:1c:1f:ac:c8:eb:ad:
         5e:3d:b4:c7:c2:fb:63:2e:8a:45:31:28:e4:83:86:4e:d9:48:
         5d:e6:42:9f:0d:b1:51:e8:bf:47:55:3d:4a:1a:58:35:f6:fc:
         0b:7b:0b:77:04:18:ec:0c:42:20:88:c2:27:91:c8:ed:06:85:
         6d:f0:37:ca:f1:6b:58:6f:f7:cf:69:1c:b5:2d:83:5d:3d:e4:
         14:8f:ed:54:6d:cc:0c:db:2f:6e:4b:d4:37:1e:4a:d5:55:85:
         ff:e6:0d:94:5d:25:95:15:1b:d8:fc:3c:27:2b:5d:e1:74:a6:
         42:ff:68:2e:68:4e:14:d7:04:2d:d3:fb:c2:c5:cd:d7:17:45:
         db:16:1b:f1:05:91:f3:51:a0:c1:d1:f4:a9:81:2f:c8:e5:ab:
         d2:4e:fe:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY895naBxpMHoiJlK1iy04W7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx
YTA0MTAwHhcNMjQwNTAzMTAwMTA0WhcNMjQwNTA0MTAwMTA0WjAzMTEwLwYDVQQD
Eyg3YWMxZjNiOTM5YTczODE4YmRiMmU0M2E1MjI0MWRhZTc2OWMzZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHFilyN6w/sGi49peabj7PgzPLY6
7AcUdqEiDNlMvUFco6dvsXnZ0vlWOG4du4+mZU795P6Z5wc1LVaY5W8X++meEqLm
BkF3nZmoF+txn+maqbpQGpbU/jAlGF3/wlsvlF3RPn3YNqGJ4bSo64VPtCnTv0vZ
AmYwvzMUzZogXuD+ITYfZkvmpqYbNOC2H2Xyx5R2vYvbsogTXGFW4ilPuqvWb5DS
BKGKGAMuIBEVu+B39Q71VPOpuQHjKxZ2e5GjJLzIAd6m3N+VBbdJtNz1wz476X67
Kg+dZDdxgx/JGhvFApPsOtDh7aQtAA/l9ECmbjvzQ94vAuj0KN+QPTIQYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrB87k5pzgYvbLkOlIkHa52nD5TMB8GA1UdIwQY
MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt
YTA1NjBhYzgyYmE3LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3
LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaB1X9MB
eh5BuNRMcWP2c74vlQmpR+EzQSkR3CPPkb90WcNvfmJ3fxi7QZ22fdhauuHJoHMA
xt7/72oxHyYKbfgnrQ5rKUOK+1JeAEa27nY5OtS2etvVF4jJ274K4MksTzsWJ38p
HB+syOutXj20x8L7Yy6KRTEo5IOGTtlIXeZCnw2xUei/R1U9ShpYNfb8C3sLdwQY
7AxCIIjCJ5HI7QaFbfA3yvFrWG/3z2kctS2DXT3kFI/tVG3MDNsvbkvUNx5K1VWF
/+YNlF0llRUb2Pw8Jytd4XSmQv9oLmhOFNcELdP7wsXN1xdF2xYb8QWR81GgwdH0
qYEvyOWr0k7+EA==
-----END CERTIFICATE-----
Generated at Fri May 3 15:59:09 2024 by rpki-client on console-fra.rpki-client.org