Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File:                     aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier:          cZdYlZ8lawlHd5WUTlVo8lGm5w7yL2qXXAFUYyJOh/I=
Subject key identifier:   3C:95:15:6B:84:6B:14:93:8C:7C:12:A5:CC:12:25:1D:CC:CB:88:2C
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer:       /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial:       018F96BD0508D8111F86F8BD779C7E5450E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number:          107D
Signing time:             Mon 20 May 2024 16:02:00 +0000
Manifest this update:     Mon 20 May 2024 16:02:00 +0000
Manifest next update:     Tue 21 May 2024 16:02:00 +0000
Files and hashes:         1: 0sCxeLC1lr1CiKr74K8HFobwJVY.roa (hash: ckGfmNUsGKqvSHaUmphTELFhvUlhAbtP7fwhglj5wZg=)
                          2: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: vroStffbj8j6KP/1EYD3gACdX3TEOgRKSzhJoHsTjIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:05:08:d8:11:1f:86:f8:bd:77:9c:7e:54:50:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
        Validity
            Not Before: May 20 16:02:00 2024 GMT
            Not After : May 21 16:02:00 2024 GMT
        Subject: CN=3c95156b846b14938c7c12a5cc12251dcccb882c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:de:29:98:b2:76:e3:24:dd:a6:ba:62:53:
                    d4:06:08:be:eb:a4:33:89:e0:32:1e:2b:79:19:a0:
                    40:51:db:a2:db:6a:1b:32:60:ed:ab:c0:10:76:3f:
                    16:47:bf:05:52:ae:25:ef:b2:04:ec:c7:c6:52:f9:
                    c8:ec:2a:9c:0a:fd:da:3e:2e:00:46:a8:7d:47:cc:
                    cb:46:aa:ac:ca:58:a7:ed:16:58:1b:89:1e:e0:2b:
                    b3:39:40:90:10:86:6b:bc:91:ce:c1:b6:81:c5:18:
                    8d:c6:59:35:b8:c6:3d:da:7a:15:00:24:53:dd:e0:
                    89:6f:9d:82:b0:14:25:74:c0:69:42:bf:10:09:ee:
                    b3:4c:77:fc:37:1a:ee:2a:17:f7:99:79:f1:44:4c:
                    0b:d5:fc:ab:af:c7:fe:cb:62:a6:b6:68:63:d4:8e:
                    e2:22:7c:72:47:c6:ec:ef:60:14:72:36:92:51:68:
                    28:cc:7f:76:3a:1f:21:2c:5f:4f:84:09:df:69:da:
                    23:46:a0:6e:5c:cb:97:8b:9e:f3:c7:38:f8:e8:03:
                    ce:a6:5a:04:4c:38:4d:59:98:b1:37:a9:9c:d2:db:
                    b0:e3:53:70:a7:71:9d:95:02:62:2b:46:35:cb:51:
                    6a:12:b7:8a:6c:d2:35:d7:f9:15:60:d0:ce:af:4a:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:15:6B:84:6B:14:93:8C:7C:12:A5:CC:12:25:1D:CC:CB:88:2C
            X509v3 Authority Key Identifier:
                keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:59:cc:b6:89:23:70:1b:4a:b4:5f:42:b8:11:e2:c5:45:
         76:34:ba:ae:66:df:45:b7:43:82:2d:81:b0:3d:85:49:7a:40:
         3a:99:22:2d:1e:a9:2b:ea:2d:73:d2:45:de:11:d9:54:61:ee:
         ea:c8:ca:1e:9f:a7:bc:c2:c6:54:b8:49:b2:57:29:a1:94:b5:
         98:24:a5:6a:10:b1:ea:25:3a:76:68:d9:95:6a:cd:22:b4:67:
         10:a8:f9:13:10:84:14:42:ab:7e:71:33:51:63:f0:17:64:f8:
         22:65:55:3d:1d:b6:6a:e4:df:7a:b5:72:54:5b:e6:14:86:95:
         21:de:bc:ae:f4:3d:03:5d:84:e7:98:08:ce:4e:6b:d3:e5:77:
         10:d9:db:43:46:34:4c:40:87:40:6b:7a:5f:c8:a1:3a:04:90:
         e3:a6:ba:fb:ce:58:18:9d:63:43:07:38:5d:4b:17:6c:6a:bb:
         4b:a1:8b:ee:ea:70:b8:09:3b:03:cd:ce:86:46:47:d2:87:2b:
         93:91:a7:99:e2:60:60:aa:70:b6:d8:22:6a:e8:7f:b2:b0:88:
         43:f7:fc:88:e3:af:cb:c9:d6:d2:86:e9:22:69:fc:08:b2:c7:
         05:8e:4c:00:10:0a:a0:d9:ff:6f:22:c6:fd:be:ef:52:15:7a:
         72:e5:c0:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+WvQUI2BEfhvi9d5x+VFDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjA2M2VkMmUwYTI2NzRiYzQ3MTAxMDE4OWZjNzdhZGIz
MWMxN2YwHhcNMjQwNTIwMTYwMjAwWhcNMjQwNTIxMTYwMjAwWjAzMTEwLwYDVQQD
EygzYzk1MTU2Yjg0NmIxNDkzOGM3YzEyYTVjYzEyMjUxZGNjY2I4ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmveKZiyduMk3aa6YlPUBgi+66Qz
ieAyHit5GaBAUdui22obMmDtq8AQdj8WR78FUq4l77IE7MfGUvnI7CqcCv3aPi4A
Rqh9R8zLRqqsylin7RZYG4ke4CuzOUCQEIZrvJHOwbaBxRiNxlk1uMY92noVACRT
3eCJb52CsBQldMBpQr8QCe6zTHf8NxruKhf3mXnxREwL1fyrr8f+y2Kmtmhj1I7i
InxyR8bs72AUcjaSUWgozH92Oh8hLF9PhAnfadojRqBuXMuXi57zxzj46APOploE
TDhNWZixN6mc0tuw41Nwp3GdlQJiK0Y1y1FqEreKbNI11/kVYNDOr0rZuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyVFWuEaxSTjHwSpcwSJR3My4gsMB8GA1UdIwQY
MBaAFGjwY+0uCiZ0vEcQEBifx3rbMcF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMt
OTQ2ZmRhZmUyZWM2LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMtOTQ2ZmRhZmUyZWM2
LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj1ZzLaJ
I3AbSrRfQrgR4sVFdjS6rmbfRbdDgi2BsD2FSXpAOpkiLR6pK+otc9JF3hHZVGHu
6sjKHp+nvMLGVLhJslcpoZS1mCSlahCx6iU6dmjZlWrNIrRnEKj5ExCEFEKrfnEz
UWPwF2T4ImVVPR22auTferVyVFvmFIaVId68rvQ9A12E55gIzk5r0+V3ENnbQ0Y0
TECHQGt6X8ihOgSQ46a6+85YGJ1jQwc4XUsXbGq7S6GL7upwuAk7A83OhkZH0ocr
k5GnmeJgYKpwttgiauh/srCIQ/f8iOOvy8nW0obpImn8CLLHBY5MABAKoNn/byLG
/b7vUhV6cuXAQg==
-----END CERTIFICATE-----
Generated at Mon May 20 18:12:54 2024 by rpki-client on console-fra.rpki-client.org