Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
File:                     x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json)
Hash identifier:          QKjtDTAV78gtOvMFZojuNSf0AOkp+3rmvFDnb8PQTHE=
Subject key identifier:   93:C9:EE:DD:F8:70:9A:23:9D:81:B6:82:6A:1F:61:91:E3:BB:25:7A
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Certificate issuer:       /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial:       018F87ED4AD7834443C07CEF25CDD90A1925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
Manifest number:          0A40
Signing time:             Fri 17 May 2024 19:00:26 +0000
Manifest this update:     Fri 17 May 2024 19:00:26 +0000
Manifest next update:     Sat 18 May 2024 19:00:26 +0000
Files and hashes:         1: VdKdMvVou4TygVLVFMddeRt7Cvs.roa (hash: VXAiLf72jI/25hySB2Uy1T5UV5MK6NrZ1MoDOnFbfQc=)
                          2: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: lkjPewy89yv0LO6aNXfh//1/dXFNfqWXfbAu5netz6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4a:d7:83:44:43:c0:7c:ef:25:cd:d9:0a:19:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
        Validity
            Not Before: May 17 19:00:26 2024 GMT
            Not After : May 18 19:00:26 2024 GMT
        Subject: CN=93c9eeddf8709a239d81b6826a1f6191e3bb257a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:ae:e7:55:35:18:9a:3a:c9:c0:d1:7d:2e:
                    c4:03:c3:0c:ea:a0:8d:ab:06:7b:b7:bc:5c:d5:90:
                    8b:00:86:9a:80:f8:eb:ae:d8:75:53:8e:69:f0:8c:
                    e5:cb:14:f0:9c:f9:34:ef:29:a5:c9:a2:ef:42:9a:
                    3a:cf:ad:1b:b5:45:e1:d4:e9:33:37:d7:0a:fc:2d:
                    0f:df:2b:fe:0f:b7:73:20:dc:89:5e:ec:b4:0a:3e:
                    bd:57:83:a0:97:ef:b0:8b:3a:1a:c3:6a:58:9c:6b:
                    69:52:60:1e:21:13:4e:f8:7c:5a:3c:37:73:74:2f:
                    33:a4:10:95:5d:c7:ad:85:dd:69:04:5f:e6:9b:3d:
                    68:33:4f:db:53:3b:85:7b:61:7d:21:36:ce:dc:2e:
                    d3:9c:fa:1e:4e:9f:80:87:c8:bf:8c:c1:38:58:3b:
                    89:a7:84:99:1d:b1:5a:c0:dd:9f:38:64:72:f7:db:
                    75:18:c1:18:b0:be:0d:ac:ea:93:b3:d8:15:20:af:
                    55:30:6d:dc:e9:0c:10:54:00:b9:89:9d:9a:8f:b7:
                    68:2b:ca:24:9f:90:76:2f:b8:71:7e:5a:d0:86:96:
                    11:af:05:39:6a:64:79:c6:41:e8:1b:3d:84:27:eb:
                    b7:f6:5f:07:c7:3d:56:c7:0d:88:e7:0e:f5:36:34:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C9:EE:DD:F8:70:9A:23:9D:81:B6:82:6A:1F:61:91:E3:BB:25:7A
            X509v3 Authority Key Identifier:
                keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:76:5f:74:f5:91:4f:1e:38:c9:76:c3:67:5e:09:55:bd:dc:
         99:9b:73:56:fe:df:11:45:58:84:73:0d:36:07:0f:97:c1:7e:
         79:16:8b:a0:d6:7a:c3:c7:46:e7:f9:2e:78:8a:75:6b:46:cf:
         7b:61:cc:0c:fe:78:bc:ab:74:85:97:4b:f3:aa:35:ad:57:0c:
         cd:1b:d4:3a:2f:d4:a4:70:e1:db:67:bc:d6:6b:77:87:03:0c:
         34:c7:85:54:1b:6b:a6:1f:06:ed:ff:a9:c7:5a:ba:32:68:da:
         58:05:70:4c:7a:70:8b:14:53:69:0d:06:c0:96:91:de:92:d9:
         0a:d6:a3:f0:ca:40:8e:f5:e3:c8:05:62:b6:82:14:35:2f:f1:
         0e:55:90:b4:d9:b2:6a:d2:2f:a1:f1:c0:d4:02:3b:fd:a5:8a:
         39:42:1e:84:1c:ba:5f:f8:72:24:37:23:b0:1e:13:cd:8a:e9:
         c3:80:13:fb:93:83:d9:62:d2:d0:7f:f5:b0:24:53:b4:54:bd:
         a1:d5:58:48:34:1f:f3:39:73:87:61:35:ea:5d:02:cc:ee:5b:
         e2:3a:d5:46:c0:43:e7:aa:d1:66:7a:7d:40:59:1f:2f:2f:4c:
         f3:01:b0:fc:6e:ec:af:a1:cf:17:37:61:9a:79:63:cb:b4:fc:
         ec:d4:26:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7UrXg0RDwHzvJc3ZChklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk
NTA1YmIwHhcNMjQwNTE3MTkwMDI2WhcNMjQwNTE4MTkwMDI2WjAzMTEwLwYDVQQD
Eyg5M2M5ZWVkZGY4NzA5YTIzOWQ4MWI2ODI2YTFmNjE5MWUzYmIyNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGuu51U1GJo6ycDRfS7EA8MM6qCN
qwZ7t7xc1ZCLAIaagPjrrth1U45p8IzlyxTwnPk07ymlyaLvQpo6z60btUXh1Okz
N9cK/C0P3yv+D7dzINyJXuy0Cj69V4Ogl++wizoaw2pYnGtpUmAeIRNO+HxaPDdz
dC8zpBCVXcethd1pBF/mmz1oM0/bUzuFe2F9ITbO3C7TnPoeTp+Ah8i/jME4WDuJ
p4SZHbFawN2fOGRy99t1GMEYsL4NrOqTs9gVIK9VMG3c6QwQVAC5iZ2aj7doK8ok
n5B2L7hxflrQhpYRrwU5amR5xkHoGz2EJ+u39l8Hxz1Wxw2I5w71NjQWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPJ7t34cJojnYG2gmofYZHjuyV6MB8GA1UdIwQY
MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt
Y2U1MDA4MjdmZjdmLzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm
LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHZfdPWR
Tx44yXbDZ14JVb3cmZtzVv7fEUVYhHMNNgcPl8F+eRaLoNZ6w8dG5/kueIp1a0bP
e2HMDP54vKt0hZdL86o1rVcMzRvUOi/UpHDh22e81mt3hwMMNMeFVBtrph8G7f+p
x1q6MmjaWAVwTHpwixRTaQ0GwJaR3pLZCtaj8MpAjvXjyAVitoIUNS/xDlWQtNmy
atIvofHA1AI7/aWKOUIehBy6X/hyJDcjsB4TzYrpw4AT+5OD2WLS0H/1sCRTtFS9
odVYSDQf8zlzh2E16l0CzO5b4jrVRsBD56rRZnp9QFkfLy9M8wGw/G7sr6HPFzdh
mnljy7T87NQmqQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:11:08 2024 by rpki-client on console-ams.rpki-client.org