Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File:                     DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier:          yFgmpV+gT844jafGjiUBYDlcVNrX5hpWpaQfc5pLIaw=
Subject key identifier:   AB:02:8E:63:D9:33:F8:0D:FE:BF:92:61:A7:7F:B1:0E:BC:92:B0:EA
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer:       /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial:       018F2237D6797C8A7B2E4B1A7D0512F7D0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number:          064E
Signing time:             Sun 28 Apr 2024 01:00:35 +0000
Manifest this update:     Sun 28 Apr 2024 01:00:35 +0000
Manifest next update:     Mon 29 Apr 2024 01:00:35 +0000
Files and hashes:         1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: PvI97EFD0hBJq4otUp8X/hFWiaKWATJM61e1+1R4HQM=)
                          2: RIX8teQ0OhHfcf44Ec89KhiWKio.roa (hash: +aQThLxpVtvERsTfSAP6pwGmoswJVZNwEIifsGFgxDA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:37:d6:79:7c:8a:7b:2e:4b:1a:7d:05:12:f7:d0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
        Validity
            Not Before: Apr 28 01:00:35 2024 GMT
            Not After : Apr 29 01:00:35 2024 GMT
        Subject: CN=ab028e63d933f80dfebf9261a77fb10ebc92b0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:3f:b4:34:4c:69:f3:87:75:93:e6:a5:ad:
                    05:8a:04:b6:02:ee:39:e0:e6:91:29:1f:22:4f:ff:
                    04:fe:02:4c:f0:07:11:a5:69:84:6c:2a:1c:9c:5d:
                    7b:ec:9b:f7:54:8f:54:6d:25:6d:c0:02:ee:4a:5d:
                    ea:6a:12:23:5a:32:e0:65:83:78:51:54:8b:a7:b8:
                    db:cc:bb:97:f0:07:5e:96:6a:84:e3:97:ba:e5:db:
                    39:53:f0:4a:eb:be:be:d8:33:8b:a4:18:bb:15:90:
                    07:e5:65:17:f6:9b:72:2a:53:c9:0c:be:0e:bf:4d:
                    f9:08:db:1f:2b:4c:9e:b5:5c:36:8b:24:53:22:5e:
                    71:d3:bd:ab:b2:06:f2:e5:26:64:f3:d9:71:16:85:
                    0f:27:19:04:ef:f7:57:3a:e2:3a:90:ae:cc:8a:05:
                    08:f3:c9:81:43:32:43:2c:fe:c3:89:50:9a:92:25:
                    e2:92:78:2d:50:f6:6f:a0:05:55:ff:b5:90:66:48:
                    2a:8b:bc:1f:c8:6a:b2:a2:19:91:95:cd:77:b0:af:
                    5e:1b:96:4a:19:aa:f9:83:ff:50:02:c1:bf:18:52:
                    7b:97:9a:aa:b0:50:2a:b5:82:f4:f0:8c:36:9b:82:
                    c6:10:91:ae:21:ee:09:cb:08:f4:8b:80:33:69:70:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:8E:63:D9:33:F8:0D:FE:BF:92:61:A7:7F:B1:0E:BC:92:B0:EA
            X509v3 Authority Key Identifier:
                keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fc:b8:4b:70:95:1d:ec:bb:0c:bf:32:8a:d9:a0:12:be:f3:
         39:40:41:b1:d1:ee:0e:5a:ad:fd:1e:7a:1c:ae:17:f8:19:b9:
         57:93:42:5e:70:14:b2:51:07:79:bd:dc:4a:ba:8a:08:87:9a:
         b2:66:c9:e7:0c:77:56:0e:73:68:d7:22:a4:8d:a1:83:93:45:
         93:6f:5d:af:27:24:d0:d5:a9:9e:04:d1:db:f1:81:c7:75:76:
         91:bf:65:57:68:9b:e1:83:d5:c4:df:39:8d:cb:36:78:b5:3c:
         cc:8e:de:f7:f2:fd:e3:5b:1c:0c:19:b6:60:1e:bf:d4:40:00:
         31:90:45:5f:30:8c:97:be:d0:25:5f:66:6f:75:2b:ae:8d:14:
         f6:bc:8a:a2:47:bf:71:4d:f7:1d:b9:dc:cf:5e:81:8f:cb:51:
         9d:46:ea:9f:eb:e7:a2:fe:58:d6:e2:80:4e:2e:4e:f3:71:64:
         d4:dc:c3:cb:c6:67:6d:86:aa:e2:5a:16:fc:fa:30:79:2e:26:
         16:bb:c1:e6:1a:7d:f9:64:46:3b:10:ff:44:0a:03:2b:d4:20:
         4b:ec:f5:26:2b:0e:ec:e2:91:0f:51:ba:a7:cd:e8:ea:d6:49:
         13:f5:8d:51:f5:f8:2d:73:4a:36:c8:bc:ca:a2:4b:95:c0:07:
         bc:0c:21:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8iN9Z5fIp7LksafQUS99DDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjgyNDE1OGI3MzBjNDQxNjdlYTc3M2E5NzcyMThjYzYy
ZjQxNmEwHhcNMjQwNDI4MDEwMDM1WhcNMjQwNDI5MDEwMDM1WjAzMTEwLwYDVQQD
EyhhYjAyOGU2M2Q5MzNmODBkZmViZjkyNjFhNzdmYjEwZWJjOTJiMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZI/tDRMafOHdZPmpa0FigS2Au45
4OaRKR8iT/8E/gJM8AcRpWmEbCocnF177Jv3VI9UbSVtwALuSl3qahIjWjLgZYN4
UVSLp7jbzLuX8AdelmqE45e65ds5U/BK676+2DOLpBi7FZAH5WUX9ptyKlPJDL4O
v035CNsfK0yetVw2iyRTIl5x072rsgby5SZk89lxFoUPJxkE7/dXOuI6kK7MigUI
88mBQzJDLP7DiVCakiXikngtUPZvoAVV/7WQZkgqi7wfyGqyohmRlc13sK9eG5ZK
Gar5g/9QAsG/GFJ7l5qqsFAqtYL08Iw2m4LGEJGuIe4Jywj0i4AzaXDbKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsCjmPZM/gN/r+SYad/sQ68krDqMB8GA1UdIwQY
MBaAFAxoJBWLcwxEFn6nc6l3IYzGL0FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUt
ZmEyMTc2YWFhODQ5LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUtZmEyMTc2YWFhODQ5
LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvy4S3CV
Hey7DL8yitmgEr7zOUBBsdHuDlqt/R56HK4X+Bm5V5NCXnAUslEHeb3cSrqKCIea
smbJ5wx3Vg5zaNcipI2hg5NFk29dryck0NWpngTR2/GBx3V2kb9lV2ib4YPVxN85
jcs2eLU8zI7e9/L941scDBm2YB6/1EAAMZBFXzCMl77QJV9mb3Urro0U9ryKoke/
cU33Hbncz16Bj8tRnUbqn+vnov5Y1uKATi5O83Fk1NzDy8ZnbYaq4loW/PoweS4m
FrvB5hp9+WRGOxD/RAoDK9QgS+z1JisO7OKRD1G6p83o6tZJE/WNUfX4LXNKNsi8
yqJLlcAHvAwh6w==
-----END CERTIFICATE-----
Generated at Sun Apr 28 04:19:08 2024 by rpki-client on console-ams.rpki-client.org