Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File:                     9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier:          Eb/OuhMATHQ35BTCD5LTcNWGeO598KQt07CMNbC/X0Y=
Subject key identifier:   2E:F6:CD:A6:6E:9D:2E:22:E3:EE:35:30:DB:60:C2:05:FB:7C:83:FC
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer:       /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial:       018F45A3239A7DA73F11CE31A68588ECB3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number:          0625
Signing time:             Sat 04 May 2024 22:04:30 +0000
Manifest this update:     Sat 04 May 2024 22:04:30 +0000
Manifest next update:     Sun 05 May 2024 22:04:30 +0000
Files and hashes:         1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: lxP4MCO7LEv3r6B/oSaKK7H6AzmicSn3ItfhLl99ZPQ=)
                          2: LAFEC7e9pH2049HNL4TWiCEqKo0.roa (hash: h3j/XG1UP1167ELdB8uaEnwL1nmIeW4wkFNDUeMaMkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a3:23:9a:7d:a7:3f:11:ce:31:a6:85:88:ec:b3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
        Validity
            Not Before: May  4 22:04:30 2024 GMT
            Not After : May  5 22:04:30 2024 GMT
        Subject: CN=2ef6cda66e9d2e22e3ee3530db60c205fb7c83fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:24:b4:de:a9:c4:75:c4:03:d2:ac:0c:17:
                    be:4a:67:7c:20:8e:be:25:d8:00:cd:86:5c:fc:a2:
                    db:36:00:47:c6:35:ba:f3:12:eb:2e:61:86:4d:9c:
                    ff:42:6f:53:d2:24:13:50:eb:56:17:db:58:2f:e8:
                    da:a5:02:aa:8a:04:02:ab:63:66:f7:54:46:dc:2f:
                    fd:3b:5e:30:23:9d:21:49:b6:d0:54:06:7c:d6:0e:
                    54:14:1f:52:88:a3:ed:96:2d:d0:a5:35:3f:04:20:
                    e1:5c:4e:cd:42:21:81:56:3f:48:80:9a:e4:58:b8:
                    12:30:5f:32:7d:e7:d8:5c:5d:a5:c8:ce:aa:36:9a:
                    55:bb:e8:f1:ad:38:50:d7:d2:38:9e:71:d6:f4:7c:
                    aa:01:ea:84:18:51:94:2a:f1:e1:54:44:14:ea:fc:
                    84:65:d7:98:a7:3e:84:d9:24:49:62:c2:03:ff:66:
                    3c:a5:a0:b3:4a:81:4c:10:0e:69:4e:3b:dd:54:5a:
                    20:ea:d3:79:a3:3a:77:8b:c7:06:ed:3b:75:da:cf:
                    1d:00:cd:62:e3:8c:e4:24:2b:a8:5d:23:2d:6c:82:
                    ad:98:2e:95:67:e1:79:74:d9:86:2b:b3:48:4d:37:
                    0f:60:f1:64:60:c9:2c:fc:3f:17:fe:2d:7e:b9:66:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:CD:A6:6E:9D:2E:22:E3:EE:35:30:DB:60:C2:05:FB:7C:83:FC
            X509v3 Authority Key Identifier:
                keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:80:01:e3:bb:eb:cc:7d:4f:7e:42:d3:5d:78:86:af:be:df:
         56:c4:54:f7:bc:ff:72:07:a0:ab:60:b9:de:f5:ed:b4:9c:52:
         b5:6c:62:ed:68:e8:72:e1:71:b8:0a:1e:ab:03:ed:be:22:f8:
         ba:40:8b:17:ba:9a:fc:9c:d0:2b:8a:2d:c1:be:e2:6d:88:2b:
         27:e9:e0:96:0b:f3:e2:6b:cd:cb:54:c4:1f:b9:43:c7:97:cf:
         13:b0:ce:6b:5a:d0:a0:40:8a:38:e5:4c:7a:d1:62:e8:6e:ea:
         0c:b2:dc:6e:d6:79:0b:bb:cc:1b:d7:a2:8c:7e:bf:57:e2:bb:
         f1:f3:46:5c:c2:f7:cd:00:81:c4:d4:e4:ec:32:6d:8c:87:75:
         84:e2:0f:72:12:02:1f:30:0b:a8:fe:64:bc:ed:32:64:85:b1:
         d7:5f:b1:de:f3:0c:54:aa:0c:63:52:f8:49:35:1b:a9:f6:f9:
         7c:8e:65:d5:db:04:34:2f:91:62:76:65:10:ff:cf:7e:04:da:
         09:fb:23:93:ab:f9:95:d4:fa:47:87:25:84:16:e6:b0:ad:10:
         86:8a:b4:37:de:49:1c:b5:7d:91:4c:82:75:1f:92:29:57:a3:
         09:7f:db:87:22:ae:92:2a:8e:61:d0:f4:ed:89:06:cc:6c:e3:
         cb:57:cb:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9FoyOafac/Ec4xpoWI7LPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy
YzExNWMwHhcNMjQwNTA0MjIwNDMwWhcNMjQwNTA1MjIwNDMwWjAzMTEwLwYDVQQD
EygyZWY2Y2RhNjZlOWQyZTIyZTNlZTM1MzBkYjYwYzIwNWZiN2M4M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz00ktN6pxHXEA9KsDBe+Smd8II6+
JdgAzYZc/KLbNgBHxjW68xLrLmGGTZz/Qm9T0iQTUOtWF9tYL+japQKqigQCq2Nm
91RG3C/9O14wI50hSbbQVAZ81g5UFB9SiKPtli3QpTU/BCDhXE7NQiGBVj9IgJrk
WLgSMF8yfefYXF2lyM6qNppVu+jxrThQ19I4nnHW9HyqAeqEGFGUKvHhVEQU6vyE
ZdeYpz6E2SRJYsID/2Y8paCzSoFMEA5pTjvdVFog6tN5ozp3i8cG7Tt12s8dAM1i
44zkJCuoXSMtbIKtmC6VZ+F5dNmGK7NITTcPYPFkYMks/D8X/i1+uWalSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC72zaZunS4i4+41MNtgwgX7fIP8MB8GA1UdIwQY
MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct
YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli
LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4AB47vr
zH1PfkLTXXiGr77fVsRU97z/cgegq2C53vXttJxStWxi7WjocuFxuAoeqwPtviL4
ukCLF7qa/JzQK4otwb7ibYgrJ+nglgvz4mvNy1TEH7lDx5fPE7DOa1rQoECKOOVM
etFi6G7qDLLcbtZ5C7vMG9eijH6/V+K78fNGXML3zQCBxNTk7DJtjId1hOIPchIC
HzALqP5kvO0yZIWx11+x3vMMVKoMY1L4STUbqfb5fI5l1dsENC+RYnZlEP/PfgTa
Cfsjk6v5ldT6R4clhBbmsK0Qhoq0N95JHLV9kUyCdR+SKVejCX/bhyKukiqOYdD0
7YkGzGzjy1fL3g==
-----END CERTIFICATE-----
Generated at Sun May 5 00:26:50 2024 by rpki-client on console-ams.rpki-client.org