Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File:                     4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier:          BYcR5ndl1iaj1G+1GCWaGdcqSlEqgXwRHOqulkqEuNg=
Subject key identifier:   D3:6E:B1:DD:FA:69:ED:A3:9E:4B:00:4B:C1:A4:58:BC:AA:02:5F:30
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer:       /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial:       018F3B1C896131FDC3EF00B8C5379C9C4346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number:          096B
Signing time:             Thu 02 May 2024 21:01:16 +0000
Manifest this update:     Thu 02 May 2024 21:01:16 +0000
Manifest next update:     Fri 03 May 2024 21:01:16 +0000
Files and hashes:         1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: BfLOQ4EE40CdVA/u11fKECScNrJv40gefXIIPDo3uQE=)
                          2: IJjuMuD9LExPcQ2GEfyG8I4DQ5E.roa (hash: QmXKZimEA4Ngtjg2ZdYcXuxxxYpr0Wi2yuDSbZpDfBI=)
                          3: V-Oh9-iBy5SPjZ5yHk5zXD1T98s.roa (hash: 4wqzVTsR1NlJjYmMe/uoOExAU6umOUIyuNom8VGcmAE=)
                          4: YZ_uk0AwzR-Ff0OiZRuw41qX0vQ.roa (hash: zLbmqPhAX0Q+0UEUIc+q46B1jtxYkovpa3rZPy/6Cd0=)
                          5: dbYnx4iYb9WYJAumHyCMIYsUECY.roa (hash: mJdK9SfFJEXfCgq16GSe1e4bH053bLTJoJCo2qrmAuw=)
                          6: qW8uj814qLw3SY6PDe8Zmlyj0Ls.roa (hash: wRvHUWiO9P1aGJMVjBkUsPEGRX6tArewRGfuGHnOCRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:89:61:31:fd:c3:ef:00:b8:c5:37:9c:9c:43:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
        Validity
            Not Before: May  2 21:01:16 2024 GMT
            Not After : May  3 21:01:16 2024 GMT
        Subject: CN=d36eb1ddfa69eda39e4b004bc1a458bcaa025f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:53:cf:04:28:23:89:42:86:e1:73:13:9b:
                    c1:83:ad:af:60:ea:0a:5f:13:d2:fe:6f:01:e2:a6:
                    21:30:2f:64:0e:91:33:c2:6f:47:df:fb:6e:89:f5:
                    86:88:64:8b:ca:49:89:46:25:30:8c:3c:b0:97:13:
                    32:7d:51:06:24:6d:41:82:42:ad:3a:7f:45:df:36:
                    fe:26:60:dd:b9:c3:9e:65:cd:ae:62:30:fb:3c:d3:
                    cc:eb:76:d8:b1:6f:bb:78:69:8f:dc:2d:71:15:b5:
                    a6:90:4d:5e:7a:d1:10:78:4d:16:cd:c2:a1:6d:dd:
                    ff:b6:f5:3a:8c:ea:dd:96:6d:1a:5c:b3:b0:45:a3:
                    39:d4:0f:8c:af:1f:20:9d:6a:d2:af:54:d7:53:e0:
                    24:ac:15:89:36:7b:67:e0:ee:5f:c7:50:b7:7d:34:
                    98:3c:98:a0:bf:1d:ea:2e:87:b3:67:81:54:bf:4c:
                    84:4c:b1:e4:1b:4b:27:6b:bd:be:e4:b8:06:a9:c1:
                    a1:2e:0f:6c:19:c9:20:51:07:fa:ca:3c:e1:83:ff:
                    4f:39:08:68:97:a8:35:e8:d0:01:0b:73:90:02:12:
                    f1:a5:b1:dd:0e:b2:26:e5:ba:33:3c:e8:15:6f:5f:
                    c0:33:18:dd:ab:97:37:45:45:42:c5:63:bb:7c:42:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:B1:DD:FA:69:ED:A3:9E:4B:00:4B:C1:A4:58:BC:AA:02:5F:30
            X509v3 Authority Key Identifier:
                keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:bf:f8:04:ab:2e:72:8b:4d:07:dc:26:13:eb:82:54:14:
         ba:b9:45:4f:dc:47:d1:c7:72:1c:5d:c4:d5:fb:8b:a4:e5:9f:
         1b:03:b1:02:54:10:c7:ad:25:ea:9b:8c:44:5e:a5:6e:d0:0e:
         aa:69:ec:16:8d:2b:c8:0e:65:bd:07:44:3e:ce:76:4d:33:20:
         55:68:e9:e8:e5:c1:16:f0:b0:6d:57:f0:aa:9c:05:38:88:7d:
         42:25:7e:3a:9f:de:04:d0:e7:5c:c9:61:8f:d6:3f:ca:44:67:
         39:f2:7b:df:5f:8f:5d:60:02:cb:fe:3e:a8:7d:d9:e7:aa:c2:
         70:a3:2c:08:06:c5:81:29:22:87:f8:9b:a2:89:8c:ac:cb:9c:
         46:76:ba:09:a0:90:00:21:6a:37:71:45:29:31:d6:b5:95:1d:
         5a:00:03:7a:a6:3c:16:5f:b4:54:95:48:c7:e9:33:8c:92:24:
         e0:be:e8:11:f8:7c:f8:e7:93:9a:59:75:67:f3:2f:b1:9f:3c:
         00:51:8b:d9:34:b8:ba:3a:eb:4a:5e:5a:d3:57:05:8b:0c:ee:
         a7:3c:95:36:9f:3e:82:c3:30:e0:28:88:0f:d2:7b:a0:b6:d0:
         01:1d:8d:60:c6:9e:c7:51:cd:8e:ea:92:2f:8e:bc:8f:13:2e:
         ea:ee:1d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87HIlhMf3D7wC4xTecnENGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi
NDg2ZjIwHhcNMjQwNTAyMjEwMTE2WhcNMjQwNTAzMjEwMTE2WjAzMTEwLwYDVQQD
EyhkMzZlYjFkZGZhNjllZGEzOWU0YjAwNGJjMWE0NThiY2FhMDI1ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZhTzwQoI4lChuFzE5vBg62vYOoK
XxPS/m8B4qYhMC9kDpEzwm9H3/tuifWGiGSLykmJRiUwjDywlxMyfVEGJG1BgkKt
On9F3zb+JmDducOeZc2uYjD7PNPM63bYsW+7eGmP3C1xFbWmkE1eetEQeE0WzcKh
bd3/tvU6jOrdlm0aXLOwRaM51A+Mrx8gnWrSr1TXU+AkrBWJNntn4O5fx1C3fTSY
PJigvx3qLoezZ4FUv0yETLHkG0sna72+5LgGqcGhLg9sGckgUQf6yjzhg/9POQho
l6g16NABC3OQAhLxpbHdDrIm5bozPOgVb1/AMxjdq5c3RUVCxWO7fELJqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNusd36ae2jnksAS8GkWLyqAl8wMB8GA1UdIwQY
MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt
ZWMyODdlMWQzN2U1LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1
LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARay/+ASr
LnKLTQfcJhPrglQUurlFT9xH0cdyHF3E1fuLpOWfGwOxAlQQx60l6puMRF6lbtAO
qmnsFo0ryA5lvQdEPs52TTMgVWjp6OXBFvCwbVfwqpwFOIh9QiV+Op/eBNDnXMlh
j9Y/ykRnOfJ731+PXWACy/4+qH3Z56rCcKMsCAbFgSkih/iboomMrMucRna6CaCQ
ACFqN3FFKTHWtZUdWgADeqY8Fl+0VJVIx+kzjJIk4L7oEfh8+OeTmll1Z/MvsZ88
AFGL2TS4ujrrSl5a01cFiwzupzyVNp8+gsMw4CiID9J7oLbQAR2NYMaex1HNjuqS
L468jxMu6u4dAQ==
-----END CERTIFICATE-----
Generated at Fri May 3 02:41:07 2024 by rpki-client on console-fra.rpki-client.org