Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File:                     Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier:          hQ8pBrxIp7QKtvM4vjlYWvjgCosqh375tep4SmtRBlo=
Subject key identifier:   7C:6F:AE:3C:A2:62:A3:BF:48:9A:14:8C:6C:E4:64:7A:1D:EC:73:42
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       018F874B62546693E2F84124C1FF4FB00F76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number:          023E
Signing time:             Fri 17 May 2024 16:03:35 +0000
Manifest this update:     Fri 17 May 2024 16:03:35 +0000
Manifest next update:     Sat 18 May 2024 16:03:35 +0000
Files and hashes:         1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: I/OkdYee+w2n6Z9l4GBayhLabtP6bwuJ4G3csqgYr0w=)
                          2: iqrfWo_SUpPXuYFxHGhZWPw6UGw.roa (hash: eufpJNQBQcxsOEBGs7uNcrQGntWeYAextvO2hXo4ykU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:62:54:66:93:e2:f8:41:24:c1:ff:4f:b0:0f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: May 17 16:03:35 2024 GMT
            Not After : May 18 16:03:35 2024 GMT
        Subject: CN=7c6fae3ca262a3bf489a148c6ce4647a1dec7342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:eb:b2:6f:21:0f:1a:f6:ed:fa:3a:95:1b:
                    f1:40:0d:84:5f:4c:57:19:e5:6c:6d:eb:dd:ea:ac:
                    33:66:83:58:00:04:31:ba:ab:d4:34:a4:73:b9:6c:
                    2a:92:04:15:0d:3c:56:7a:9d:45:45:29:b4:c3:81:
                    09:f3:02:0b:e0:9d:9a:c7:9d:a1:06:d6:f1:df:9a:
                    a2:5a:e8:2b:39:44:bf:c4:0e:d6:56:a7:c4:8a:8e:
                    79:71:02:9c:b2:6b:5a:47:9e:18:96:a3:4a:e0:cf:
                    2c:4e:98:d5:a2:e8:db:1a:e3:30:a9:33:96:72:23:
                    53:e0:79:87:8b:f8:7b:a5:56:c1:b8:39:27:bd:dc:
                    c4:cf:93:59:82:18:84:c2:ba:76:85:9e:a8:56:b3:
                    f8:c5:0c:09:bb:7f:b9:64:11:f5:b0:d0:a6:8e:81:
                    46:77:c8:fb:fc:3a:c7:1f:02:df:88:3e:91:ac:07:
                    02:a2:d6:82:5f:99:77:ea:c6:4a:17:6d:af:bb:7c:
                    d2:39:fe:55:52:5a:2b:3f:a7:8b:8b:b0:cc:56:f7:
                    ff:24:66:07:4d:a5:5e:30:58:28:9a:b6:90:42:ae:
                    ed:06:15:da:6e:61:ad:0e:d1:67:2e:74:6d:17:ce:
                    33:53:3c:7e:7b:51:5c:8f:6d:f5:54:4f:0c:43:27:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6F:AE:3C:A2:62:A3:BF:48:9A:14:8C:6C:E4:64:7A:1D:EC:73:42
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:d0:53:2b:38:b6:73:c3:1c:d3:89:d4:39:79:19:82:a2:
         d3:4f:8d:ab:11:ce:1a:2c:89:f0:54:7c:26:da:02:69:fd:dc:
         46:3d:95:25:28:1d:f5:3e:9e:06:64:a6:72:0c:16:76:da:da:
         28:97:05:8b:26:23:86:e5:f7:92:2b:2f:96:af:f0:c9:0b:09:
         0a:63:fb:ae:31:f9:86:76:9c:2b:85:a2:56:ce:a7:78:9d:3e:
         cd:d2:54:e4:d5:da:7f:a0:e3:84:b3:43:b6:45:14:a8:ef:25:
         8a:81:61:ee:ae:cc:d6:05:63:16:ce:c5:c2:a9:7b:90:ad:03:
         06:52:a0:20:1c:35:78:d1:99:89:e6:10:61:71:96:e4:39:b7:
         28:9b:cd:55:47:53:eb:ef:97:c7:b5:17:e7:d3:e7:ca:a0:e8:
         8e:93:cc:0e:ba:26:c9:85:04:a5:1a:81:0c:56:7c:4a:d5:58:
         da:e9:b5:c1:46:88:f1:b7:a2:32:98:e0:20:2a:e7:14:dc:99:
         49:a5:64:77:eb:77:b5:07:0d:05:74:28:e3:ca:66:d9:d6:8b:
         fa:16:6b:13:50:08:3e:53:20:8d:f8:5f:b2:68:a5:b3:b6:e2:
         55:75:b6:22:23:50:b7:26:4c:9d:d7:e8:58:b2:31:08:96:c0:
         09:cb:cb:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HS2JUZpPi+EEkwf9PsA92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjQwNTE3MTYwMzM1WhcNMjQwNTE4MTYwMzM1WjAzMTEwLwYDVQQD
Eyg3YzZmYWUzY2EyNjJhM2JmNDg5YTE0OGM2Y2U0NjQ3YTFkZWM3MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApprrsm8hDxr27fo6lRvxQA2EX0xX
GeVsbevd6qwzZoNYAAQxuqvUNKRzuWwqkgQVDTxWep1FRSm0w4EJ8wIL4J2ax52h
Btbx35qiWugrOUS/xA7WVqfEio55cQKcsmtaR54YlqNK4M8sTpjVoujbGuMwqTOW
ciNT4HmHi/h7pVbBuDknvdzEz5NZghiEwrp2hZ6oVrP4xQwJu3+5ZBH1sNCmjoFG
d8j7/DrHHwLfiD6RrAcCotaCX5l36sZKF22vu3zSOf5VUlorP6eLi7DMVvf/JGYH
TaVeMFgomraQQq7tBhXabmGtDtFnLnRtF84zUzx+e1Fcj231VE8MQyexvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxvrjyiYqO/SJoUjGzkZHod7HNCMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqLQUys4
tnPDHNOJ1Dl5GYKi00+NqxHOGiyJ8FR8JtoCaf3cRj2VJSgd9T6eBmSmcgwWdtra
KJcFiyYjhuX3kisvlq/wyQsJCmP7rjH5hnacK4WiVs6neJ0+zdJU5NXaf6DjhLND
tkUUqO8lioFh7q7M1gVjFs7Fwql7kK0DBlKgIBw1eNGZieYQYXGW5Dm3KJvNVUdT
6++Xx7UX59PnyqDojpPMDromyYUEpRqBDFZ8StVY2um1wUaI8beiMpjgICrnFNyZ
SaVkd+t3tQcNBXQo48pm2daL+hZrE1AIPlMgjfhfsmils7biVXW2IiNQtyZMndfo
WLIxCJbACcvLaA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:05:58 2024 by rpki-client on console-fra.rpki-client.org