Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File:                     5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier:          vtKXFEOHmWOoC7n0qplK/Lwg7+Y3+jqpl2KVxhmkoAM=
Subject key identifier:   CB:0D:2D:E7:C9:6B:98:72:6A:34:83:86:A2:6B:2E:28:24:0A:DF:85
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer:       /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial:       018F20F0E6D0352884388E6A47461F3F97B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number:          10D5
Signing time:             Sat 27 Apr 2024 19:03:29 +0000
Manifest this update:     Sat 27 Apr 2024 19:03:29 +0000
Manifest next update:     Sun 28 Apr 2024 19:03:29 +0000
Files and hashes:         1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: kszED9o7VpvRv1ED+5MUFpkCoD9qtls/2rLXHAsWC6g=)
                          2: C5PK4Ga1J4eM_PlL4iXyti7PUGQ.roa (hash: murrn21WpnEtRaHZqaCXNmy46KUwbO4f0bujUGowI64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:f0:e6:d0:35:28:84:38:8e:6a:47:46:1f:3f:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
        Validity
            Not Before: Apr 27 19:03:29 2024 GMT
            Not After : Apr 28 19:03:29 2024 GMT
        Subject: CN=cb0d2de7c96b98726a348386a26b2e28240adf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:2c:23:d4:c4:3d:1e:a0:f9:18:97:9f:be:
                    0e:0b:79:b7:e1:b9:d7:72:83:10:84:7f:97:54:b3:
                    cd:fb:38:99:44:0b:a0:e8:fe:0b:b3:00:3b:7f:9a:
                    cf:b4:f9:28:96:3b:55:0a:5d:0c:db:f5:33:9f:92:
                    fd:06:d3:80:3d:89:e4:0a:9b:4b:fd:f1:77:f3:7a:
                    91:9d:bb:7b:4b:88:df:5b:8f:1c:0b:f5:0d:4c:66:
                    38:fc:4c:51:15:51:4e:7c:a7:1a:76:73:ee:a7:3e:
                    fd:1f:51:77:3a:39:53:7e:39:10:e0:64:9a:37:ac:
                    ab:2f:43:62:4e:ec:2e:95:b0:b7:5c:ad:f8:6a:8e:
                    4f:6d:fd:33:1e:77:65:b2:f4:82:97:c3:7e:2c:74:
                    b2:07:fa:7f:53:bb:6f:df:2f:d8:34:09:18:d9:81:
                    35:f0:8c:39:9b:0d:19:16:c1:10:5e:c5:71:11:89:
                    05:bd:c1:a6:9b:73:93:6b:87:00:7f:84:ed:a8:c2:
                    ab:5e:f0:2c:e7:1b:71:08:2c:5b:76:93:e9:d7:fb:
                    45:82:8c:61:5e:d8:4e:7b:a1:09:42:9c:66:04:ed:
                    93:a4:43:b8:2f:6e:ba:d8:f2:5d:72:1b:57:34:ca:
                    f2:72:5f:e4:35:76:ae:d2:18:f5:5a:88:da:56:eb:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0D:2D:E7:C9:6B:98:72:6A:34:83:86:A2:6B:2E:28:24:0A:DF:85
            X509v3 Authority Key Identifier:
                keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:46:ad:6a:7e:e6:f0:b3:80:81:94:b3:fe:9c:fe:f5:58:
         86:a8:73:4f:36:57:b4:cd:5b:9b:64:c3:1c:6e:72:61:5a:74:
         02:e2:37:3d:74:df:9b:74:6d:1d:58:22:c6:b8:12:9e:5b:88:
         b1:2e:f2:22:f4:82:6b:3d:6f:0b:a9:65:9f:0b:34:aa:0c:92:
         9c:61:62:cd:b5:7c:12:c4:9c:12:5b:1a:ea:55:de:09:2a:96:
         37:cb:11:45:af:d4:19:c7:2e:b5:6d:ab:7f:9f:ed:13:0c:ce:
         80:b3:d8:fb:7f:80:ee:50:2d:2f:d8:b6:62:32:a8:35:1a:14:
         cf:00:8c:16:8c:09:98:b0:3f:c1:15:bf:a6:75:42:52:49:29:
         ff:8a:7d:41:11:94:19:af:86:84:22:4c:0c:12:e6:95:8b:3d:
         19:e0:14:17:da:10:36:59:3d:21:8d:3a:0e:9d:4c:4b:1a:a7:
         2b:e6:06:46:8c:76:61:ba:fc:81:f2:2c:eb:ab:c7:96:0d:63:
         ff:5c:5e:97:e4:f7:36:67:51:90:a6:bf:72:3c:ec:d7:bf:2a:
         b2:6d:20:4e:45:73:83:9c:a8:c9:e5:81:f0:01:44:55:71:00:
         01:ba:04:ea:81:10:6a:a3:ba:40:9c:2c:e1:a5:02:23:2a:c4:
         0d:0f:d6:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8g8ObQNSiEOI5qR0YfP5ewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDQ5Y2Y4N2RkOGYxZmQ0YzgwMjRiNWE2YzllYTk0ZjE3
YjZmYmQwHhcNMjQwNDI3MTkwMzI5WhcNMjQwNDI4MTkwMzI5WjAzMTEwLwYDVQQD
EyhjYjBkMmRlN2M5NmI5ODcyNmEzNDgzODZhMjZiMmUyODI0MGFkZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N0sI9TEPR6g+RiXn74OC3m34bnX
coMQhH+XVLPN+ziZRAug6P4LswA7f5rPtPkoljtVCl0M2/Uzn5L9BtOAPYnkCptL
/fF383qRnbt7S4jfW48cC/UNTGY4/ExRFVFOfKcadnPupz79H1F3OjlTfjkQ4GSa
N6yrL0NiTuwulbC3XK34ao5Pbf0zHndlsvSCl8N+LHSyB/p/U7tv3y/YNAkY2YE1
8Iw5mw0ZFsEQXsVxEYkFvcGmm3OTa4cAf4TtqMKrXvAs5xtxCCxbdpPp1/tFgoxh
XthOe6EJQpxmBO2TpEO4L2662PJdchtXNMrycl/kNXau0hj1WojaVutdtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsNLefJa5hyajSDhqJrLigkCt+FMB8GA1UdIwQY
MBaAFOYEnPh92PH9TIAktabJ6pTxe2+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt
OGQ0OWViY2FlOWIzLzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz
LzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvFGrWp+
5vCzgIGUs/6c/vVYhqhzTzZXtM1bm2TDHG5yYVp0AuI3PXTfm3RtHVgixrgSnluI
sS7yIvSCaz1vC6llnws0qgySnGFizbV8EsScElsa6lXeCSqWN8sRRa/UGccutW2r
f5/tEwzOgLPY+3+A7lAtL9i2YjKoNRoUzwCMFowJmLA/wRW/pnVCUkkp/4p9QRGU
Ga+GhCJMDBLmlYs9GeAUF9oQNlk9IY06Dp1MSxqnK+YGRox2Ybr8gfIs66vHlg1j
/1xel+T3NmdRkKa/cjzs178qsm0gTkVzg5yoyeWB8AFEVXEAAboE6oEQaqO6QJws
4aUCIyrEDQ/W9w==
-----END CERTIFICATE-----
Generated at Sat Apr 27 20:35:56 2024 by rpki-client on console-ams.rpki-client.org