Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File:                     DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier:          aVLU0ydpZPWPBLzD4muYWhv41HGicPqDQnWmMANPoAc=
Subject key identifier:   29:CC:A6:90:4D:D8:6B:F1:E1:B0:87:6B:D8:D5:91:90:EE:58:AA:93
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       018F3CD40427CAD947BAA86FA3056BAD53C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number:          0B4C
Signing time:             Fri 03 May 2024 05:01:18 +0000
Manifest this update:     Fri 03 May 2024 05:01:18 +0000
Manifest next update:     Sat 04 May 2024 05:01:18 +0000
Files and hashes:         1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: ag/98Hslh8gIXCIHmrdBEFS4Vp/MBUcwgX1P2Q8Xg2A=)
                          2: ps_iNrzQkUXwUMHemqACih1KZBA.roa (hash: SWbGQ9YJKlbg7m0dMbHigimDeD0vhZfQ7uUkxGVR1RU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:04:27:ca:d9:47:ba:a8:6f:a3:05:6b:ad:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: May  3 05:01:18 2024 GMT
            Not After : May  4 05:01:18 2024 GMT
        Subject: CN=29cca6904dd86bf1e1b0876bd8d59190ee58aa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:21:f8:ea:ff:e1:3f:73:20:d3:ff:cd:ab:
                    d0:1b:fc:24:37:29:2f:5a:c4:6e:07:bd:84:15:fa:
                    da:f5:4f:ff:7f:37:93:6f:67:6d:22:f3:86:83:5a:
                    f2:d7:e9:d9:cc:39:8f:d9:50:22:16:c0:37:d6:8f:
                    1d:10:8c:c8:34:03:cc:f3:73:0b:93:35:ac:e4:eb:
                    a4:65:46:66:d2:b0:ff:cf:f9:e8:c9:aa:9a:03:b4:
                    91:1f:31:45:0f:e5:75:b8:2d:38:90:fc:86:db:e2:
                    66:77:e5:81:94:2a:80:44:4d:36:5c:b9:a3:fa:e9:
                    72:d4:d4:15:b1:61:a7:ac:87:03:4d:08:bf:bd:7c:
                    29:d1:1b:85:a6:e3:98:21:8b:e3:1b:b9:b5:47:f1:
                    6a:d1:f8:6b:b3:eb:dc:01:f6:2c:75:4f:29:b3:57:
                    ad:7e:34:b4:00:86:c7:d7:c4:c3:1a:ed:11:8b:f9:
                    d7:43:16:c6:cf:a0:9a:bd:db:26:e9:2f:82:8d:42:
                    55:69:12:ce:e6:9e:72:71:a4:0a:80:ae:01:b1:a9:
                    7f:17:62:99:72:ee:37:c2:6a:a3:a6:a6:ab:25:5d:
                    80:21:e8:c5:f6:49:67:3a:6c:e9:ba:30:c8:79:1e:
                    3f:ab:49:8f:07:6e:65:e4:6d:eb:0c:f7:58:3a:dd:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:A6:90:4D:D8:6B:F1:E1:B0:87:6B:D8:D5:91:90:EE:58:AA:93
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:54:0e:a1:94:d4:8b:38:8f:58:66:5d:29:45:48:95:c8:8e:
         5e:c0:d9:4b:62:de:e9:7f:09:d8:44:31:31:3e:c3:d8:a3:30:
         02:23:16:68:03:40:a9:59:18:8d:f6:f5:64:49:10:4e:c8:70:
         ed:65:fe:15:32:f2:54:1f:20:66:65:fd:53:80:f9:06:bb:eb:
         e6:7e:c2:54:a3:b0:f0:35:a3:0e:86:07:71:13:ed:d3:27:a2:
         16:45:61:62:4d:8c:cd:1d:6a:47:76:2d:7b:b0:ff:c6:f6:32:
         a2:91:ca:f2:8d:12:5a:74:90:ce:55:a9:17:e5:d6:25:1d:f8:
         e5:b2:7c:23:eb:2b:af:8b:f4:99:81:d6:35:62:e0:96:1e:34:
         09:4a:ec:d2:97:b3:43:cc:1d:5f:cf:6b:03:02:bf:b6:84:f3:
         9f:bb:34:21:7f:d3:ec:dd:1c:ac:87:cd:3e:3b:78:9e:71:8f:
         a1:37:7c:ac:dd:1c:cf:38:59:e5:e8:6b:5d:63:f8:1c:d1:76:
         6d:19:62:ee:84:93:8d:20:f1:04:3d:3f:fe:57:73:e4:de:25:
         3e:82:2d:f8:7c:9b:61:d5:14:f9:5f:32:c0:20:e9:54:d3:90:
         a4:5e:f4:c8:64:ea:ab:ee:d6:5b:74:bc:5e:d0:75:d1:72:6d:
         c1:8f:4c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY881AQnytlHuqhvowVrrVPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmJhZDNmM2RkMGFjNTU2ZjNmN2E4MGQxYzY5YjlmZDk2
NGRkNmMwHhcNMjQwNTAzMDUwMTE4WhcNMjQwNTA0MDUwMTE4WjAzMTEwLwYDVQQD
EygyOWNjYTY5MDRkZDg2YmYxZTFiMDg3NmJkOGQ1OTE5MGVlNThhYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMUh+Or/4T9zINP/zavQG/wkNykv
WsRuB72EFfra9U//fzeTb2dtIvOGg1ry1+nZzDmP2VAiFsA31o8dEIzINAPM83ML
kzWs5OukZUZm0rD/z/noyaqaA7SRHzFFD+V1uC04kPyG2+Jmd+WBlCqARE02XLmj
+uly1NQVsWGnrIcDTQi/vXwp0RuFpuOYIYvjG7m1R/Fq0fhrs+vcAfYsdU8ps1et
fjS0AIbH18TDGu0Ri/nXQxbGz6Cavdsm6S+CjUJVaRLO5p5ycaQKgK4Bsal/F2KZ
cu43wmqjpqarJV2AIejF9klnOmzpujDIeR4/q0mPB25l5G3rDPdYOt2IIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnMppBN2Gvx4bCHa9jVkZDuWKqTMB8GA1UdIwQY
MBaAFA1rrT890KxVbz96gNHGm5/ZZN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYt
ODliNmMyMTlkOTBiLzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYtODliNmMyMTlkOTBi
LzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVQOoZTU
iziPWGZdKUVIlciOXsDZS2Le6X8J2EQxMT7D2KMwAiMWaANAqVkYjfb1ZEkQTshw
7WX+FTLyVB8gZmX9U4D5Brvr5n7CVKOw8DWjDoYHcRPt0yeiFkVhYk2MzR1qR3Yt
e7D/xvYyopHK8o0SWnSQzlWpF+XWJR345bJ8I+srr4v0mYHWNWLglh40CUrs0pez
Q8wdX89rAwK/toTzn7s0IX/T7N0crIfNPjt4nnGPoTd8rN0czzhZ5ehrXWP4HNF2
bRli7oSTjSDxBD0//ldz5N4lPoIt+HybYdUU+V8ywCDpVNOQpF70yGTqq+7WW3S8
XtB10XJtwY9MWA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:55:47 2024 by rpki-client on console-fra.rpki-client.org