Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
File:                     9kUNLQIT7kyfMYHv7rLWY_4NNls.mft (raw, json)
Hash identifier:          WaJOJdXXyEHDPc278CpoJkJVtOPVnz2I1vXg34iwJs4=
Subject key identifier:   51:E0:BE:27:9A:3B:32:47:9B:2F:50:EF:9F:32:DF:90:E2:5F:88:4F
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Certificate issuer:       /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial:       018EFE996D4B778218ACD0DB08026A1FB07E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
Manifest number:          0831
Signing time:             Sun 21 Apr 2024 03:00:51 +0000
Manifest this update:     Sun 21 Apr 2024 03:00:51 +0000
Manifest next update:     Mon 22 Apr 2024 03:00:51 +0000
Files and hashes:         1: 9kUNLQIT7kyfMYHv7rLWY_4NNls.crl (hash: D1O5jRNKncf7DQQJcJYcOwNS5Seeizh6q85USx7Ab24=)
                          2: SC2U3RjtOTEevPflXlMHUn0bkD4.roa (hash: JbmqT1i1wjLtGBzmy4bfghjunV4N2wGXbbBzPyasfwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fe:99:6d:4b:77:82:18:ac:d0:db:08:02:6a:1f:b0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
        Validity
            Not Before: Apr 21 03:00:51 2024 GMT
            Not After : Apr 22 03:00:51 2024 GMT
        Subject: CN=51e0be279a3b32479b2f50ef9f32df90e25f884f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:2f:f4:19:45:a2:be:65:a2:f6:a2:5c:2d:
                    15:33:4e:c1:83:77:70:bb:c5:29:1d:b1:5c:ac:67:
                    5e:61:fd:8f:27:d8:a6:9c:61:c4:2a:78:d5:9f:b3:
                    76:f6:af:3b:a8:d9:8e:61:87:db:75:5c:d6:0f:93:
                    fc:69:ef:04:f2:22:4a:46:29:96:9b:a4:00:cd:02:
                    08:8c:6d:98:f7:62:d2:ae:d7:eb:de:99:cb:28:66:
                    23:9f:4c:5e:d3:4a:84:3d:23:91:8a:7c:61:03:7e:
                    3c:5c:d0:c8:6a:11:98:60:47:a3:1b:17:4d:51:79:
                    79:e1:86:6d:7b:51:d4:cb:4d:c7:7b:70:b8:94:61:
                    15:c9:a1:19:af:19:28:97:1a:90:64:ac:79:59:81:
                    be:b5:9c:32:0f:e6:ae:04:f7:63:cd:6b:1c:10:81:
                    a7:84:ff:4a:65:80:64:ea:5b:df:13:04:ec:d6:14:
                    98:f2:1c:3e:f6:90:da:ce:d3:f8:cc:d9:cd:96:0c:
                    5d:5f:17:36:26:12:76:7b:4e:5f:23:6e:2a:69:0c:
                    ca:8a:85:d5:67:73:d7:a3:d9:d4:c1:2e:7b:08:e4:
                    64:e5:16:3b:56:fd:5c:5a:32:a2:a9:70:48:b1:14:
                    94:d5:0f:2e:02:f4:32:40:cb:32:b5:16:12:a2:1b:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E0:BE:27:9A:3B:32:47:9B:2F:50:EF:9F:32:DF:90:E2:5F:88:4F
            X509v3 Authority Key Identifier:
                keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:31:1c:7a:a6:50:72:18:5a:f8:1c:70:9a:5b:f9:78:f7:c1:
         20:e5:4c:b3:4d:7b:9e:9c:0d:e2:9f:f2:c0:aa:f5:45:4e:f5:
         e0:87:ab:a1:f7:73:89:1a:55:1f:dd:9f:91:db:4b:93:ac:dc:
         27:f7:c7:be:39:51:65:84:83:05:ab:b5:5d:74:cb:f8:20:33:
         5c:01:ec:1e:74:05:89:6a:c4:ea:44:12:58:77:85:3d:9a:92:
         53:4c:d1:ce:d5:1e:cc:ac:dc:56:4f:3e:47:81:4b:e6:a8:de:
         0d:e6:94:60:46:0c:11:cd:29:78:1c:f1:98:04:ac:0f:ee:b4:
         de:eb:6d:4d:4f:b5:53:5f:4a:0c:ea:64:1f:71:60:f1:ce:29:
         eb:b8:c5:68:78:29:07:9d:a7:4a:30:36:82:0f:ab:68:bc:11:
         58:19:00:95:ff:22:b8:fc:37:ad:52:2b:e2:bc:39:6f:78:bf:
         e5:0b:bb:76:48:77:4b:5e:4a:ab:d3:9c:ba:35:89:86:a7:f3:
         72:ea:84:1b:b9:27:26:a2:bb:97:08:a9:5f:dd:0d:df:4a:ac:
         34:38:94:e0:5b:43:4b:17:f1:60:73:c5:d4:cd:85:3f:ae:53:
         53:5c:e8:bb:4d:21:f7:0f:7d:20:d9:55:7e:52:56:3f:2f:aa:
         2c:8f:e3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7+mW1Ld4IYrNDbCAJqH7B+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDUwZDJkMDIxM2VlNGM5ZjMxODFlZmVlYjJkNjYzZmUw
ZDM2NWIwHhcNMjQwNDIxMDMwMDUxWhcNMjQwNDIyMDMwMDUxWjAzMTEwLwYDVQQD
Eyg1MWUwYmUyNzlhM2IzMjQ3OWIyZjUwZWY5ZjMyZGY5MGUyNWY4ODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hsv9BlFor5lovaiXC0VM07Bg3dw
u8UpHbFcrGdeYf2PJ9imnGHEKnjVn7N29q87qNmOYYfbdVzWD5P8ae8E8iJKRimW
m6QAzQIIjG2Y92LSrtfr3pnLKGYjn0xe00qEPSORinxhA348XNDIahGYYEejGxdN
UXl54YZte1HUy03He3C4lGEVyaEZrxkolxqQZKx5WYG+tZwyD+auBPdjzWscEIGn
hP9KZYBk6lvfEwTs1hSY8hw+9pDaztP4zNnNlgxdXxc2JhJ2e05fI24qaQzKioXV
Z3PXo9nUwS57CORk5RY7Vv1cWjKiqXBIsRSU1Q8uAvQyQMsytRYSohtKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHgvieaOzJHmy9Q758y35DiX4hPMB8GA1UdIwQY
MBaAFPZFDS0CE+5MnzGB7+6y1mP+DTZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtVTkxRSVQ3a3lmTVlIdjdyTFdZXzROTmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82Mzc4YmItNTJjZS00NmFmLTk1OWMt
YTkwNTQ5MjhiNTQ0LzEvOWtVTkxRSVQ3a3lmTVlIdjdyTFdZXzROTmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82Mzc4YmItNTJjZS00NmFmLTk1OWMtYTkwNTQ5MjhiNTQ0
LzEvOWtVTkxRSVQ3a3lmTVlIdjdyTFdZXzROTmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzEceqZQ
chha+Bxwmlv5ePfBIOVMs017npwN4p/ywKr1RU714IerofdziRpVH92fkdtLk6zc
J/fHvjlRZYSDBau1XXTL+CAzXAHsHnQFiWrE6kQSWHeFPZqSU0zRztUezKzcVk8+
R4FL5qjeDeaUYEYMEc0peBzxmASsD+603uttTU+1U19KDOpkH3Fg8c4p67jFaHgp
B52nSjA2gg+raLwRWBkAlf8iuPw3rVIr4rw5b3i/5Qu7dkh3S15Kq9OcujWJhqfz
cuqEG7knJqK7lwipX90N30qsNDiU4FtDSxfxYHPF1M2FP65TU1zou00h9w99INlV
flJWPy+qLI/jFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:51:25 2024 by rpki-client on console-ams.rpki-client.org