Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File:                     5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier:          NctQbggCop5JqnB69cT79BMDMswfCDoXQyFLFbwIHlc=
Subject key identifier:   2C:3C:42:A2:AA:23:BB:DF:94:4F:89:6F:18:06:61:1B:72:5D:FF:29
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer:       /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial:       018F90F2093D464B3EA44B79AD1F23A6B583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number:          0D61
Signing time:             Sun 19 May 2024 13:02:12 +0000
Manifest this update:     Sun 19 May 2024 13:02:12 +0000
Manifest next update:     Mon 20 May 2024 13:02:12 +0000
Files and hashes:         1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: wb8zkR9jIQqzAQXZLzEM1RE72YlOg1XQjWCj+tWHTbU=)
                          2: IDZ3zAcfEPYAW1n6JNz7dHyIIgc.roa (hash: /qjhxYat//PDNXtvAVmfESvFTcBOFuFblShVjVaTPMs=)
                          3: Q41Bh49j8x0Af-AolPps_Lyk9UA.roa (hash: c7nudvfhvDMN6k28jSggayeWQx0ztUGba2F28gZAKY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f2:09:3d:46:4b:3e:a4:4b:79:ad:1f:23:a6:b5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
        Validity
            Not Before: May 19 13:02:12 2024 GMT
            Not After : May 20 13:02:12 2024 GMT
        Subject: CN=2c3c42a2aa23bbdf944f896f1806611b725dff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:a6:6d:a2:2f:86:4b:aa:fa:a7:c4:e7:08:
                    48:59:0d:dd:dc:89:54:11:70:d3:7e:a6:ff:f8:82:
                    24:db:4c:e1:41:af:96:e4:68:4d:43:92:ee:aa:b8:
                    75:f9:eb:80:f8:62:c8:a7:1e:24:04:23:9c:6f:15:
                    4e:39:95:91:ea:7d:33:d5:e1:df:53:96:92:68:12:
                    b4:82:82:78:af:e8:84:ae:a6:ae:89:eb:c2:db:9e:
                    e4:57:d0:b2:df:39:8c:1b:e0:60:05:f1:22:38:bf:
                    3c:f2:0e:c7:ff:55:dc:77:32:1e:ee:ee:7b:17:0e:
                    71:23:97:0a:c1:0c:dd:d7:cc:33:24:ba:b3:88:4b:
                    7e:58:4b:57:31:26:7e:4b:85:27:1b:7f:6b:b2:d4:
                    e0:69:b4:ee:45:b3:f6:34:02:ef:a0:4b:0e:a1:ca:
                    c4:ae:81:5e:fb:35:6c:2b:a9:e4:73:8e:5c:83:14:
                    07:2c:37:68:29:b9:74:21:61:5d:7a:c1:b0:c3:d8:
                    67:28:95:f4:d3:56:16:ef:0c:5f:7f:7e:28:65:90:
                    7f:82:e1:e7:3c:9f:42:31:46:bb:83:03:f2:d1:9a:
                    4c:db:b5:0d:43:c4:9f:23:26:c4:81:21:9b:7d:ba:
                    29:7c:c7:3f:3b:32:15:cf:cf:d6:65:46:60:e2:5a:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3C:42:A2:AA:23:BB:DF:94:4F:89:6F:18:06:61:1B:72:5D:FF:29
            X509v3 Authority Key Identifier:
                keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:a9:bc:f4:0f:cf:a2:92:0a:ca:99:08:5c:d0:f0:5e:d3:
         89:1a:95:76:c0:4c:fd:1e:75:77:57:12:68:a8:e4:c3:c8:29:
         36:b6:ae:33:0b:79:aa:b2:4e:79:49:3a:5c:7b:6e:92:24:a9:
         83:1e:dd:8a:89:c2:78:c1:bf:4d:f9:09:0e:82:af:c5:b4:d9:
         2e:62:6b:39:92:32:4c:56:4f:8f:cb:2f:8e:99:9c:bf:9e:10:
         c0:df:3d:84:be:e2:49:53:66:2a:78:30:2e:8a:bb:c1:63:26:
         fd:47:eb:f1:ad:f8:a5:16:af:f1:5f:66:58:82:9f:95:71:75:
         e0:3a:d5:3e:b2:2b:9e:49:73:45:46:7c:4d:a9:c8:6f:db:08:
         55:ad:09:78:2d:0d:16:b0:0e:c2:7c:52:45:90:26:ee:dd:e6:
         db:cd:dd:ca:b9:bf:a6:89:ca:44:bb:e8:8f:cb:6b:78:c5:3d:
         36:28:11:aa:5b:39:cf:5a:0e:8e:e3:54:80:f1:f7:49:c2:ee:
         5c:27:c8:84:21:c2:32:33:da:41:d0:75:3c:d9:b1:5c:a9:eb:
         68:4e:28:3b:23:08:98:20:85:72:d6:92:e6:d7:2e:54:83:02:
         be:87:a8:ba:0b:96:79:d9:13:a4:7e:bf:05:ac:fa:4a:e1:b0:
         85:06:86:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Q8gk9Rks+pEt5rR8jprWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjQwNTE5MTMwMjEyWhcNMjQwNTIwMTMwMjEyWjAzMTEwLwYDVQQD
EygyYzNjNDJhMmFhMjNiYmRmOTQ0Zjg5NmYxODA2NjExYjcyNWRmZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WumbaIvhkuq+qfE5whIWQ3d3IlU
EXDTfqb/+IIk20zhQa+W5GhNQ5Luqrh1+euA+GLIpx4kBCOcbxVOOZWR6n0z1eHf
U5aSaBK0goJ4r+iErqauievC257kV9Cy3zmMG+BgBfEiOL888g7H/1XcdzIe7u57
Fw5xI5cKwQzd18wzJLqziEt+WEtXMSZ+S4UnG39rstTgabTuRbP2NALvoEsOocrE
roFe+zVsK6nkc45cgxQHLDdoKbl0IWFdesGww9hnKJX001YW7wxff34oZZB/guHn
PJ9CMUa7gwPy0ZpM27UNQ8SfIybEgSGbfbopfMc/OzIVz8/WZUZg4lrAmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw8QqKqI7vflE+JbxgGYRtyXf8pMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCupvPQP
z6KSCsqZCFzQ8F7TiRqVdsBM/R51d1cSaKjkw8gpNrauMwt5qrJOeUk6XHtukiSp
gx7dionCeMG/TfkJDoKvxbTZLmJrOZIyTFZPj8svjpmcv54QwN89hL7iSVNmKngw
Loq7wWMm/Ufr8a34pRav8V9mWIKflXF14DrVPrIrnklzRUZ8TanIb9sIVa0JeC0N
FrAOwnxSRZAm7t3m283dyrm/ponKRLvoj8treMU9NigRqls5z1oOjuNUgPH3ScLu
XCfIhCHCMjPaQdB1PNmxXKnraE4oOyMImCCFctaS5tcuVIMCvoeouguWedkTpH6/
Baz6SuGwhQaGUA==
-----END CERTIFICATE-----
Generated at Sun May 19 21:44:17 2024 by rpki-client on console-ams.rpki-client.org