Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          tqXbNekpSWxC5SF8xCXk8bIxszqxtAk7r39iPtebuTY=
Subject key identifier:   31:FD:48:C6:F5:30:C3:43:69:A9:FB:A1:A6:B7:5E:8D:4A:3E:6D:79
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       018F874976E4E3FC23074FBFE7B1261509F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          0E0B
Signing time:             Fri 17 May 2024 16:01:29 +0000
Manifest this update:     Fri 17 May 2024 16:01:29 +0000
Manifest next update:     Sat 18 May 2024 16:01:29 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: L3mypZqCEUKvxxL02wTNB2CHYMeuZrm1qHNWHR6PJD8=)
                          2: ZCCXyxSxofpWvFbPyfQfVjynh4U.roa (hash: x5C5mlWp9oFULTkrm03N9EIWX+r9tGjYo+poQ3X+iLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:76:e4:e3:fc:23:07:4f:bf:e7:b1:26:15:09:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: May 17 16:01:29 2024 GMT
            Not After : May 18 16:01:29 2024 GMT
        Subject: CN=31fd48c6f530c34369a9fba1a6b75e8d4a3e6d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:62:54:fb:4a:74:23:04:98:6f:a6:fd:05:
                    74:ca:81:01:50:20:62:0c:53:6d:a8:59:5e:f8:d7:
                    00:5a:82:04:2f:10:0b:67:7a:63:6c:71:9d:76:90:
                    70:ab:31:1c:77:8a:65:2a:b9:09:e9:35:cf:d4:3b:
                    96:19:2e:09:e8:29:50:ef:9f:a6:0c:6a:b1:b9:12:
                    fd:06:fa:f2:c8:b3:c3:a4:02:a2:9f:0b:67:59:b2:
                    84:a9:02:0a:92:c1:d3:92:f9:5f:06:87:0f:d9:c4:
                    dc:0f:08:ac:8c:d7:72:96:6b:be:17:6f:45:cf:86:
                    b2:e5:e1:eb:1f:20:ae:ca:46:33:0c:da:8d:d9:44:
                    4d:3f:85:9d:7b:78:95:2f:29:e8:31:e0:0a:c7:e1:
                    2f:2f:33:72:d9:76:e6:53:72:73:99:c6:d7:1e:b8:
                    47:9a:ca:46:9f:50:4c:7b:2b:e7:d8:26:c1:56:7a:
                    aa:65:9f:dc:68:52:c5:e9:5d:1c:0d:bd:b1:53:1b:
                    2f:cf:ad:2a:44:a7:8c:2c:a5:5a:8b:af:83:fe:55:
                    06:a8:f7:36:e8:b7:53:9a:d0:5e:84:2a:c6:d0:15:
                    af:fe:a0:15:96:2e:6f:1e:27:43:85:0d:7b:81:ef:
                    dc:f3:61:cf:48:d4:72:b2:47:e0:6e:e5:90:7a:68:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:48:C6:F5:30:C3:43:69:A9:FB:A1:A6:B7:5E:8D:4A:3E:6D:79
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3c:36:34:e5:96:45:f3:7d:b9:59:da:bd:35:44:54:da:67:
         88:0a:10:52:60:5f:a1:dc:65:f5:ae:15:eb:c8:f2:19:0c:1f:
         ca:c8:3e:36:e4:b8:10:6e:60:57:ff:af:4f:40:98:07:41:47:
         bd:74:b5:b9:e6:6c:31:36:a8:da:9b:82:7a:4b:eb:51:70:05:
         2c:f9:46:07:e7:c8:12:87:32:dc:f3:5e:82:c0:2f:43:dd:48:
         b3:15:7c:59:19:bf:70:df:b8:e6:c7:3f:61:28:8e:22:4e:2d:
         a1:08:12:3b:36:f1:be:e1:4b:3f:e8:e8:ca:06:3e:25:80:79:
         97:ef:59:43:c8:99:3a:98:fa:4a:9d:a7:f0:c4:4f:32:c0:bc:
         33:d8:7f:1e:22:04:ff:b0:92:fe:b5:ed:a9:54:79:6f:47:b1:
         6e:dc:cd:fa:5d:89:a8:25:db:ee:1d:ef:82:e0:a4:9f:4a:79:
         01:3d:51:73:5b:f3:6b:e8:b2:5a:b8:68:92:f7:8f:68:54:60:
         68:35:4b:d9:ce:34:0d:33:e9:a4:28:89:68:b2:9b:3f:f0:3a:
         aa:49:58:48:e5:ca:8e:95:80:cd:11:2c:f9:4c:f6:1b:81:b8:
         4f:b9:e2:cd:39:56:f2:c0:28:f4:48:cf:b0:93:09:89:ca:29:
         f0:8a:7a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSXbk4/wjB0+/57EmFQnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx
YTU1MWYwHhcNMjQwNTE3MTYwMTI5WhcNMjQwNTE4MTYwMTI5WjAzMTEwLwYDVQQD
EygzMWZkNDhjNmY1MzBjMzQzNjlhOWZiYTFhNmI3NWU4ZDRhM2U2ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvJiVPtKdCMEmG+m/QV0yoEBUCBi
DFNtqFle+NcAWoIELxALZ3pjbHGddpBwqzEcd4plKrkJ6TXP1DuWGS4J6ClQ75+m
DGqxuRL9BvryyLPDpAKinwtnWbKEqQIKksHTkvlfBocP2cTcDwisjNdylmu+F29F
z4ay5eHrHyCuykYzDNqN2URNP4Wde3iVLynoMeAKx+EvLzNy2XbmU3JzmcbXHrhH
mspGn1BMeyvn2CbBVnqqZZ/caFLF6V0cDb2xUxsvz60qRKeMLKVai6+D/lUGqPc2
6LdTmtBehCrG0BWv/qAVli5vHidDhQ17ge/c82HPSNRyskfgbuWQemhnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH9SMb1MMNDaan7oaa3Xo1KPm15MB8GA1UdIwQY
MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt
Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4
LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTw2NOWW
RfN9uVnavTVEVNpniAoQUmBfodxl9a4V68jyGQwfysg+NuS4EG5gV/+vT0CYB0FH
vXS1ueZsMTao2puCekvrUXAFLPlGB+fIEocy3PNegsAvQ91IsxV8WRm/cN+45sc/
YSiOIk4toQgSOzbxvuFLP+joygY+JYB5l+9ZQ8iZOpj6Sp2n8MRPMsC8M9h/HiIE
/7CS/rXtqVR5b0exbtzN+l2JqCXb7h3vguCkn0p5AT1Rc1vza+iyWrhokvePaFRg
aDVL2c40DTPppCiJaLKbP/A6qklYSOXKjpWAzREs+Uz2G4G4T7nizTlW8sAo9EjP
sJMJicop8Ip6BA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:30:01 2024 by rpki-client on console-ams.rpki-client.org