Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File:                     I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier:          TglrLFgdBsNaTegfYmlq/WUkGS2WzT3cO8IGM8ddRP4=
Subject key identifier:   3F:9A:95:E7:E2:DA:E5:19:53:A1:69:40:73:DF:DD:7A:3A:E5:DE:D8
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer:       /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial:       018F532573289ADBF3339301EA49D4FDB39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number:          115E
Signing time:             Tue 07 May 2024 13:01:54 +0000
Manifest this update:     Tue 07 May 2024 13:01:54 +0000
Manifest next update:     Wed 08 May 2024 13:01:54 +0000
Files and hashes:         1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: ZJffvt5u+c3o6DGTxqL/qm/TiaASoHdnWWyFAP9O2Lw=)
                          2: dPRGSxF8Jun1BG0qHd4WbhuUpV4.roa (hash: B4uFRpML8rK79qrZE1e3fB7UXX7FSvIZ9nOW5dZN1+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:73:28:9a:db:f3:33:93:01:ea:49:d4:fd:b3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
        Validity
            Not Before: May  7 13:01:54 2024 GMT
            Not After : May  8 13:01:54 2024 GMT
        Subject: CN=3f9a95e7e2dae51953a1694073dfdd7a3ae5ded8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:29:f4:f1:ed:90:02:90:a5:56:3c:4b:2f:
                    52:d9:8d:36:29:1c:17:02:97:11:53:74:80:4c:56:
                    44:7a:81:52:93:ce:bf:57:e8:4b:ae:22:1d:89:29:
                    fd:d3:15:3b:77:98:39:f6:3e:4f:e5:99:c4:31:02:
                    5e:5c:b8:b6:18:c3:18:5b:26:17:b9:c8:64:db:af:
                    02:55:72:a0:9a:32:0f:0d:36:fd:47:6f:b7:67:4a:
                    b4:75:61:61:c1:30:08:65:3c:a3:bf:b4:41:38:dd:
                    1c:26:4e:fd:29:a6:c0:e4:c1:c4:b3:fa:75:9d:6b:
                    6f:24:d9:63:49:d9:b6:71:cd:62:b3:02:09:98:a7:
                    31:8c:dd:5b:2a:7a:4e:e8:1c:91:58:9d:5f:84:3a:
                    d9:55:30:2e:0e:6f:7e:8b:83:65:da:59:d9:2f:9e:
                    f7:3a:7e:36:74:97:02:2f:23:f5:34:01:0e:02:ed:
                    a1:92:c7:93:fd:e1:d2:0d:33:90:9b:04:34:6a:fe:
                    0b:6c:24:b7:f6:b8:97:99:28:70:be:8a:b3:bc:1b:
                    5b:96:76:3d:f3:b7:33:c1:f3:15:33:42:5e:e4:35:
                    bb:2c:c8:89:c3:a0:92:9b:8c:3c:b7:fb:7d:4f:20:
                    bc:dd:a9:2b:0a:bd:21:c9:d7:da:89:75:6a:d0:cb:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:95:E7:E2:DA:E5:19:53:A1:69:40:73:DF:DD:7A:3A:E5:DE:D8
            X509v3 Authority Key Identifier:
                keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:69:31:f6:7e:98:43:49:db:b7:93:87:9f:44:c3:da:17:93:
         da:ad:34:40:81:92:f3:28:58:d9:f9:2a:42:34:87:9c:90:52:
         b0:38:7e:54:2d:91:c4:f9:0f:68:f9:a6:43:1b:ad:fd:9b:62:
         78:de:e5:26:f3:d9:11:17:f2:d5:ae:25:45:2d:11:52:c3:e6:
         69:7b:e7:50:cb:8f:a4:52:ca:3f:4a:c3:b9:a5:df:3d:3a:24:
         69:9d:0d:40:43:34:bf:9b:fb:b6:0e:df:3c:88:dc:6f:4a:ae:
         d1:be:a1:75:c4:b9:a3:8b:d0:13:e2:8e:62:65:90:6e:57:41:
         2b:24:28:d8:d0:88:9d:e8:b9:93:39:0a:82:ee:1e:cf:55:be:
         0e:d3:5c:5e:87:5a:1a:d1:a4:97:ec:4f:d1:26:51:08:1c:cc:
         ea:bf:18:af:0d:3c:fb:56:7c:d8:52:e5:f0:53:81:bb:ab:f3:
         db:35:13:dc:2b:ea:8d:e4:86:bf:d1:74:ed:4f:37:41:73:6c:
         15:0e:ac:1b:5c:f0:42:65:53:1a:25:91:2a:63:9c:e9:5a:e2:
         96:94:a1:31:49:8d:b1:a3:d9:6b:f9:20:ee:b6:bc:fc:08:f6:
         e2:df:af:5a:42:6f:0f:a3:4b:a7:d3:8f:a9:7c:e6:d8:91:d2:
         7d:ec:ef:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TJXMomtvzM5MB6knU/bOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOTU3MmRkZmNhYjYyOTFlNjQxMGNjZDRlODYwZWUzNjAw
MGU2NjgwHhcNMjQwNTA3MTMwMTU0WhcNMjQwNTA4MTMwMTU0WjAzMTEwLwYDVQQD
EygzZjlhOTVlN2UyZGFlNTE5NTNhMTY5NDA3M2RmZGQ3YTNhZTVkZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJgp9PHtkAKQpVY8Sy9S2Y02KRwX
ApcRU3SATFZEeoFSk86/V+hLriIdiSn90xU7d5g59j5P5ZnEMQJeXLi2GMMYWyYX
uchk268CVXKgmjIPDTb9R2+3Z0q0dWFhwTAIZTyjv7RBON0cJk79KabA5MHEs/p1
nWtvJNljSdm2cc1iswIJmKcxjN1bKnpO6ByRWJ1fhDrZVTAuDm9+i4Nl2lnZL573
On42dJcCLyP1NAEOAu2hkseT/eHSDTOQmwQ0av4LbCS39riXmShwvoqzvBtblnY9
87czwfMVM0Je5DW7LMiJw6CSm4w8t/t9TyC83akrCr0hydfaiXVq0Mt1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+alefi2uUZU6FpQHPf3Xo65d7YMB8GA1UdIwQY
MBaAFCOVct38q2KR5kEMzU6GDuNgAOZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzkt
OGUxOWMwZGI4NmMyLzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzktOGUxOWMwZGI4NmMy
LzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mkx9n6Y
Q0nbt5OHn0TD2heT2q00QIGS8yhY2fkqQjSHnJBSsDh+VC2RxPkPaPmmQxut/Zti
eN7lJvPZERfy1a4lRS0RUsPmaXvnUMuPpFLKP0rDuaXfPTokaZ0NQEM0v5v7tg7f
PIjcb0qu0b6hdcS5o4vQE+KOYmWQbldBKyQo2NCInei5kzkKgu4ez1W+DtNcXoda
GtGkl+xP0SZRCBzM6r8Yrw08+1Z82FLl8FOBu6vz2zUT3CvqjeSGv9F07U83QXNs
FQ6sG1zwQmVTGiWRKmOc6VrilpShMUmNsaPZa/kg7ra8/Aj24t+vWkJvD6NLp9OP
qXzm2JHSfezvQg==
-----END CERTIFICATE-----
Generated at Tue May 7 19:24:25 2024 by rpki-client on console-fra.rpki-client.org