Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          oGnxg71Gvsb1edVQBvuLSsGfwe2fs+dDXa5+/VXMp1w=
Subject key identifier:   82:21:11:EA:2E:EC:0A:BA:AB:C8:32:03:9E:56:8A:19:B5:C5:12:D2
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       018F4A8F63C6A70F4F1DC0D4C5EE636F0DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          0733
Signing time:             Sun 05 May 2024 21:01:01 +0000
Manifest this update:     Sun 05 May 2024 21:01:01 +0000
Manifest next update:     Mon 06 May 2024 21:01:01 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: qLCVPGBFTQhHj+J0D9RD25VCOSD5lqxN1yPIEtAY0+I=)
                          2: x1hzwFrokWJ5AtvWDsWiL1l84ys.roa (hash: CPGiO0j+2yXDMGTSt/d+L9xDLVWA249aF6s+yOiFOlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:63:c6:a7:0f:4f:1d:c0:d4:c5:ee:63:6f:0d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: May  5 21:01:01 2024 GMT
            Not After : May  6 21:01:01 2024 GMT
        Subject: CN=822111ea2eec0abaabc832039e568a19b5c512d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:02:4d:fd:1f:65:84:5b:fc:8e:b2:60:09:
                    23:14:d8:5a:97:b0:8f:86:22:c6:42:8e:d4:3f:76:
                    3b:a8:bb:f5:09:c1:65:3f:f7:7e:7e:75:c8:58:f4:
                    cf:7d:86:c1:a2:aa:72:1b:22:df:98:b0:a5:f7:6b:
                    20:24:85:63:52:0e:09:a5:52:40:6d:66:cb:b8:4d:
                    c8:e0:93:05:31:4a:f6:79:8f:62:3e:ff:49:09:2d:
                    ef:b6:24:c7:85:5a:ca:98:16:70:a2:4e:d8:5d:db:
                    0e:a9:e7:4f:98:5f:54:c5:04:a2:43:fb:ea:47:2f:
                    f4:ef:42:2e:68:5c:f8:a2:44:e7:63:a9:da:07:86:
                    37:97:cd:13:12:8f:50:56:17:33:77:6d:cc:b5:22:
                    35:4e:e4:b5:84:6b:23:40:e2:20:09:2d:e6:d9:a4:
                    75:3c:0b:1b:db:dc:60:39:78:5f:b6:f2:7c:d8:24:
                    50:f1:fd:47:5b:89:38:7f:d7:dc:22:1d:05:ca:e4:
                    84:24:90:06:1e:e0:62:23:1c:7c:1b:db:17:18:83:
                    35:fc:50:f6:da:65:46:d8:6b:bb:6d:a7:43:7b:92:
                    03:7b:c1:f8:e5:c8:f1:7a:5e:40:2a:e2:52:4e:08:
                    63:d7:69:3d:4b:9e:30:a4:be:de:89:62:e0:9c:35:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:21:11:EA:2E:EC:0A:BA:AB:C8:32:03:9E:56:8A:19:B5:C5:12:D2
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:2e:ea:a6:90:da:ba:91:90:46:d9:91:0a:55:ca:21:bf:
         e0:c4:70:92:f3:bc:41:a3:14:b4:c9:c6:c7:67:db:62:81:96:
         ed:8f:10:12:dc:fb:4a:e5:54:96:d4:8a:8c:9c:41:f4:58:a3:
         d9:8a:1d:d1:1a:09:92:15:d3:31:29:fd:71:bc:9f:1c:25:51:
         58:63:c3:09:be:7f:c7:6e:01:0b:86:ae:88:06:c6:70:d3:06:
         1e:b4:c4:ae:58:bf:84:dc:b5:ac:f2:50:be:ac:fc:81:09:62:
         41:9b:9c:3e:63:bf:89:9f:00:6f:56:1b:7b:dc:75:74:0f:6c:
         71:02:d0:55:2d:2b:86:93:ad:fc:29:c4:dd:4d:3c:78:e5:f9:
         4e:78:a0:0c:34:34:14:be:50:6a:b2:f2:a9:b7:72:32:c5:c4:
         87:fd:47:e3:43:20:77:46:45:a9:e8:27:1a:a7:71:7d:3f:7f:
         41:91:3e:58:93:95:5d:28:7f:83:19:56:1e:fd:00:62:c0:75:
         30:d5:48:33:1e:c7:5f:de:af:2a:0e:c3:9a:1c:86:77:8a:c5:
         65:4d:9f:2f:93:84:1e:76:dc:35:1c:b5:c5:cd:49:88:55:dd:
         26:3b:ed:00:a9:3c:b7:28:8c:f5:ec:0f:91:fc:78:d6:da:bf:
         04:da:85:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Kj2PGpw9PHcDUxe5jbw3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjQwNTA1MjEwMTAxWhcNMjQwNTA2MjEwMTAxWjAzMTEwLwYDVQQD
Eyg4MjIxMTFlYTJlZWMwYWJhYWJjODMyMDM5ZTU2OGExOWI1YzUxMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn0CTf0fZYRb/I6yYAkjFNhal7CP
hiLGQo7UP3Y7qLv1CcFlP/d+fnXIWPTPfYbBoqpyGyLfmLCl92sgJIVjUg4JpVJA
bWbLuE3I4JMFMUr2eY9iPv9JCS3vtiTHhVrKmBZwok7YXdsOqedPmF9UxQSiQ/vq
Ry/070IuaFz4okTnY6naB4Y3l80TEo9QVhczd23MtSI1TuS1hGsjQOIgCS3m2aR1
PAsb29xgOXhftvJ82CRQ8f1HW4k4f9fcIh0FyuSEJJAGHuBiIxx8G9sXGIM1/FD2
2mVG2Gu7badDe5IDe8H45cjxel5AKuJSTghj12k9S54wpL7eiWLgnDUnXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIhEeou7Aq6q8gyA55Wihm1xRLSMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUEu6qaQ
2rqRkEbZkQpVyiG/4MRwkvO8QaMUtMnGx2fbYoGW7Y8QEtz7SuVUltSKjJxB9Fij
2Yod0RoJkhXTMSn9cbyfHCVRWGPDCb5/x24BC4auiAbGcNMGHrTErli/hNy1rPJQ
vqz8gQliQZucPmO/iZ8Ab1Ybe9x1dA9scQLQVS0rhpOt/CnE3U08eOX5TnigDDQ0
FL5QarLyqbdyMsXEh/1H40Mgd0ZFqegnGqdxfT9/QZE+WJOVXSh/gxlWHv0AYsB1
MNVIMx7HX96vKg7DmhyGd4rFZU2fL5OEHnbcNRy1xc1JiFXdJjvtAKk8tyiM9ewP
kfx41tq/BNqFXw==
-----END CERTIFICATE-----
Generated at Sun May 5 22:11:28 2024 by rpki-client on console-fra.rpki-client.org