Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          pkO6lCgzqtUUNn76alxpamLwpRWMIJ7JKZcrwUytKsI=
Subject key identifier:   57:2E:CF:55:DD:81:4A:7A:82:FA:F8:7B:ED:E9:93:27:AF:96:7B:F2
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       018F5702C7DEEB60D3BB309E56A730860B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          09E5
Signing time:             Wed 08 May 2024 07:02:30 +0000
Manifest this update:     Wed 08 May 2024 07:02:30 +0000
Manifest next update:     Thu 09 May 2024 07:02:30 +0000
Files and hashes:         1: 04bqLsnrZQouW_STiAE_a-XMkdE.roa (hash: 9QleosLdwwLcfDjpD334UzFtZkErw+JHnKq87iHgDaA=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: z/pkaL0uB4yhu5qwhT1ta/rUcg9/VcKVa31hDylXWC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:c7:de:eb:60:d3:bb:30:9e:56:a7:30:86:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: May  8 07:02:30 2024 GMT
            Not After : May  9 07:02:30 2024 GMT
        Subject: CN=572ecf55dd814a7a82faf87bede99327af967bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:64:dd:ae:b3:71:a1:4c:ad:97:e4:7c:db:f5:
                    67:36:5d:7d:02:b2:2d:ec:38:79:dc:7c:42:02:62:
                    75:24:8e:ad:a3:dc:70:9a:61:a0:dc:f9:c0:1e:1e:
                    47:08:3e:7d:1f:01:2f:a4:40:47:f7:94:a2:d1:54:
                    a1:c1:7f:1a:ab:e5:f8:1a:03:70:43:6e:b0:ce:18:
                    84:4a:a5:6d:e5:2e:0e:83:fe:5a:f9:c0:a4:c3:21:
                    53:16:01:2b:5d:23:85:66:26:5d:6e:a8:e7:07:c2:
                    1e:4f:98:b5:15:df:29:6f:4c:8d:b0:0d:b6:85:85:
                    57:ca:db:9f:9c:69:f9:aa:19:17:97:ec:e5:b2:26:
                    8f:7d:d8:ee:d8:5e:c3:b9:53:a4:9b:e6:62:56:31:
                    49:60:b5:08:15:68:7f:aa:47:32:31:f6:64:e3:43:
                    75:0e:3f:36:55:b8:fe:d2:a9:f9:67:b4:4c:46:c3:
                    c7:c2:d3:15:51:4e:20:27:b2:2a:b9:76:95:82:f7:
                    d5:b4:09:58:39:51:6d:87:86:e2:04:3f:4d:21:d2:
                    ef:65:31:be:b3:c9:c5:f4:7a:17:51:cf:47:68:67:
                    cf:d1:97:a9:b1:cb:2e:1b:15:ed:cd:b1:41:0d:59:
                    0f:c9:97:c9:de:8c:dd:d6:f0:c2:27:a2:05:f0:4b:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:CF:55:DD:81:4A:7A:82:FA:F8:7B:ED:E9:93:27:AF:96:7B:F2
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:be:4a:a0:3b:d4:26:93:7b:be:c7:b7:59:94:40:f2:6c:3b:
         60:63:67:00:69:1d:87:8d:c7:32:2c:fe:7d:75:50:f7:9a:ac:
         64:8e:db:15:5e:2e:cb:5b:df:8e:d6:46:f7:1e:ba:ea:8f:c2:
         af:12:67:97:1d:f7:e1:a5:df:35:9e:aa:1b:13:96:21:10:34:
         fc:18:27:5f:58:4b:32:34:ba:ed:f1:6a:4d:82:84:09:01:c0:
         47:9f:48:83:72:26:12:f1:0e:33:e5:00:7d:7f:7c:30:32:f4:
         fe:3f:91:a1:33:9b:3b:d8:cd:a1:c8:2b:0d:73:b4:d1:49:fe:
         a7:20:56:05:70:29:a3:75:1c:3e:70:ac:0e:1a:b4:7b:89:7b:
         a2:7c:03:5a:34:06:6c:00:9f:5b:7b:5b:70:76:1f:58:a4:fa:
         f8:ef:c0:06:f1:0d:13:01:36:92:a3:7c:48:fe:fd:f5:58:ef:
         db:a5:9b:ee:17:3d:65:9e:4b:eb:46:7a:b5:0c:ba:7f:32:65:
         1b:e9:1b:8e:30:f0:1e:6e:13:99:50:1a:58:cd:df:89:ea:be:
         b9:e5:26:cf:01:42:58:45:2d:17:e7:47:46:ef:85:91:8a:e1:
         e2:ec:0a:36:10:7b:34:ce:21:75:63:66:a8:17:59:0f:c8:2d:
         ae:a5:2b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XAsfe62DTuzCeVqcwhgtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5
NjdhMTkwHhcNMjQwNTA4MDcwMjMwWhcNMjQwNTA5MDcwMjMwWjAzMTEwLwYDVQQD
Eyg1NzJlY2Y1NWRkODE0YTdhODJmYWY4N2JlZGU5OTMyN2FmOTY3YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mTdrrNxoUytl+R82/VnNl19ArIt
7Dh53HxCAmJ1JI6to9xwmmGg3PnAHh5HCD59HwEvpEBH95Si0VShwX8aq+X4GgNw
Q26wzhiESqVt5S4Og/5a+cCkwyFTFgErXSOFZiZdbqjnB8IeT5i1Fd8pb0yNsA22
hYVXytufnGn5qhkXl+zlsiaPfdju2F7DuVOkm+ZiVjFJYLUIFWh/qkcyMfZk40N1
Dj82Vbj+0qn5Z7RMRsPHwtMVUU4gJ7IquXaVgvfVtAlYOVFth4biBD9NIdLvZTG+
s8nF9HoXUc9HaGfP0ZepscsuGxXtzbFBDVkPyZfJ3ozd1vDCJ6IF8EsdyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcuz1XdgUp6gvr4e+3pkyevlnvyMB8GA1UdIwQY
MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt
YmQ2ZTNiMDI2YzM3LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3
LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr5KoDvU
JpN7vse3WZRA8mw7YGNnAGkdh43HMiz+fXVQ95qsZI7bFV4uy1vfjtZG9x666o/C
rxJnlx334aXfNZ6qGxOWIRA0/BgnX1hLMjS67fFqTYKECQHAR59Ig3ImEvEOM+UA
fX98MDL0/j+RoTObO9jNocgrDXO00Un+pyBWBXApo3UcPnCsDhq0e4l7onwDWjQG
bACfW3tbcHYfWKT6+O/ABvENEwE2kqN8SP799Vjv26Wb7hc9ZZ5L60Z6tQy6fzJl
G+kbjjDwHm4TmVAaWM3fieq+ueUmzwFCWEUtF+dHRu+FkYrh4uwKNhB7NM4hdWNm
qBdZD8gtrqUr6Q==
-----END CERTIFICATE-----
Generated at Wed May 8 16:11:57 2024 by rpki-client on console-ams.rpki-client.org