Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File:                     Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier:          krU8r/N9KuMaOvdxBXAM3KBEaJhet8k+8u0xLsbi4pM=
Subject key identifier:   E2:D5:2C:F5:06:07:E4:8E:A0:51:89:49:F4:14:CA:29:70:F6:BF:2A
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer:       /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial:       018F885B42FCF80AE920B4ADB10B14178732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:33 +0000
Manifest this update:     Fri 17 May 2024 21:00:33 +0000
Manifest next update:     Sat 18 May 2024 21:00:33 +0000
Files and hashes:         1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: A3atvilta7jYnciLnod5ZRq40xZklFLHLqgT7x+7RVE=)
                          2: bMeOR0h3i3Seg-HvC3T2pglXsqY.roa (hash: hXhpU2Yt2TGN6MC/EQyLtdcesAZ1TeDrMLfUPE6rF3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:42:fc:f8:0a:e9:20:b4:ad:b1:0b:14:17:87:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
        Validity
            Not Before: May 17 21:00:33 2024 GMT
            Not After : May 18 21:00:33 2024 GMT
        Subject: CN=e2d52cf50607e48ea0518949f414ca2970f6bf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:fb:98:0f:c7:36:4d:f0:de:ea:05:65:f7:
                    78:1d:ba:a5:f0:4e:b7:04:22:ac:e3:55:72:88:72:
                    66:8a:04:91:25:90:2d:05:79:a7:7b:99:92:50:94:
                    79:17:ee:ab:28:1d:30:28:f8:c6:09:69:1c:14:9a:
                    68:5a:91:b9:5e:f0:74:a5:6f:a5:84:b2:32:76:b0:
                    b4:64:95:f4:53:fb:d8:65:7a:07:ff:d9:4a:94:09:
                    2b:93:91:98:f4:22:6d:17:90:c7:40:85:ef:b9:b0:
                    a3:59:e0:32:1a:1f:41:f2:ec:f1:60:d0:b5:9f:76:
                    66:69:50:0c:dc:93:4c:4d:f2:5a:89:cb:a7:60:50:
                    dd:8f:4f:41:02:f5:e9:51:d2:6e:0c:cb:e5:85:5e:
                    a8:13:ed:7d:5c:bc:c6:26:cf:2f:fb:57:cf:89:aa:
                    8c:48:d3:c7:de:7f:c1:c8:4b:b7:24:70:cc:1f:51:
                    45:63:9e:db:65:b8:bf:15:89:b6:ef:1a:55:20:75:
                    d1:4c:b9:6c:ab:93:d4:40:c7:d6:6d:7e:c2:c1:5f:
                    55:bd:eb:49:6c:cc:1a:f4:44:1f:be:0d:d8:ed:d3:
                    ba:69:5d:34:17:a8:5d:50:65:20:61:1f:ab:00:65:
                    48:68:3b:38:29:84:83:8b:b4:1a:e2:b6:bd:9e:63:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:2C:F5:06:07:E4:8E:A0:51:89:49:F4:14:CA:29:70:F6:BF:2A
            X509v3 Authority Key Identifier:
                keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:82:d4:9e:d6:26:48:52:d5:da:e5:9d:30:7d:d0:15:18:04:
         15:86:20:1f:66:3e:1b:7c:15:a9:0a:6f:29:cb:2a:3b:4e:8a:
         be:37:43:78:5a:87:af:d3:97:99:50:62:32:c5:a6:3c:c8:b0:
         52:7b:ba:67:fc:a0:9e:c8:cb:ea:e9:ee:29:e1:1e:9d:38:8e:
         c0:3e:4e:d5:34:5c:7a:61:88:ae:3a:6d:99:79:74:3a:0a:58:
         5c:52:a2:ac:ca:1a:e5:af:3b:2f:af:e5:d9:9b:34:75:5a:18:
         ca:ae:d4:58:bf:f4:df:4e:8f:bf:f6:46:b2:c4:8c:74:56:7f:
         1b:47:da:84:5e:cc:98:cd:04:9a:cf:ad:92:12:e1:37:72:9f:
         33:bd:a7:40:41:58:be:02:85:d3:20:b6:34:eb:0a:4f:63:0e:
         d7:88:37:84:62:1d:47:ed:7b:75:7d:ee:82:51:cd:e8:1d:47:
         b8:2d:7a:c5:54:29:61:8e:b1:a9:44:08:9b:57:5c:26:60:96:
         ad:87:4d:ab:13:10:a1:d7:6e:b4:25:e1:4e:de:16:94:f9:dc:
         5b:55:ac:c8:d9:39:d0:d9:06:32:71:1b:6f:20:24:16:f9:17:
         d2:c9:6c:05:b9:a4:68:86:f9:46:65:e3:de:a4:6b:a5:fa:7c:
         b4:99:ec:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW0L8+ArpILStsQsUF4cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODFmNzIwODJlMzEyMDY5ZDgzZDlhZjRmMzE5Y2YwYWY4
MDM2NDcwHhcNMjQwNTE3MjEwMDMzWhcNMjQwNTE4MjEwMDMzWjAzMTEwLwYDVQQD
EyhlMmQ1MmNmNTA2MDdlNDhlYTA1MTg5NDlmNDE0Y2EyOTcwZjZiZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/r7mA/HNk3w3uoFZfd4Hbql8E63
BCKs41VyiHJmigSRJZAtBXmne5mSUJR5F+6rKB0wKPjGCWkcFJpoWpG5XvB0pW+l
hLIydrC0ZJX0U/vYZXoH/9lKlAkrk5GY9CJtF5DHQIXvubCjWeAyGh9B8uzxYNC1
n3ZmaVAM3JNMTfJaicunYFDdj09BAvXpUdJuDMvlhV6oE+19XLzGJs8v+1fPiaqM
SNPH3n/ByEu3JHDMH1FFY57bZbi/FYm27xpVIHXRTLlsq5PUQMfWbX7CwV9VvetJ
bMwa9EQfvg3Y7dO6aV00F6hdUGUgYR+rAGVIaDs4KYSDi7Qa4ra9nmN7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLVLPUGB+SOoFGJSfQUyilw9r8qMB8GA1UdIwQY
MBaAFGOB9yCC4xIGnYPZr08xnPCvgDZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAt
MjBlZjQyYzliYzM4LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAtMjBlZjQyYzliYzM4
LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWILUntYm
SFLV2uWdMH3QFRgEFYYgH2Y+G3wVqQpvKcsqO06KvjdDeFqHr9OXmVBiMsWmPMiw
Unu6Z/ygnsjL6unuKeEenTiOwD5O1TRcemGIrjptmXl0OgpYXFKirMoa5a87L6/l
2Zs0dVoYyq7UWL/0306Pv/ZGssSMdFZ/G0fahF7MmM0Ems+tkhLhN3KfM72nQEFY
vgKF0yC2NOsKT2MO14g3hGIdR+17dX3uglHN6B1HuC16xVQpYY6xqUQIm1dcJmCW
rYdNqxMQoddutCXhTt4WlPncW1WsyNk50NkGMnEbbyAkFvkX0slsBbmkaIb5RmXj
3qRrpfp8tJnsCg==
-----END CERTIFICATE-----
Generated at Fri May 17 22:06:16 2024 by rpki-client on console-ams.rpki-client.org