Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File:                     0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier:          wCtwiFnuChe+LOh5+lttB7mzBluZzZ+aZaojeiG1/8c=
Subject key identifier:   57:CA:F3:26:F1:A2:A9:B6:D3:C0:43:97:55:C5:6F:40:F9:0B:C8:60
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer:       /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial:       018F5327A284312595B2D00652DD4BDBD4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number:          0CF2
Signing time:             Tue 07 May 2024 13:04:17 +0000
Manifest this update:     Tue 07 May 2024 13:04:17 +0000
Manifest next update:     Wed 08 May 2024 13:04:17 +0000
Files and hashes:         1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: tMRCXGdQFcTnkECfq6pL5608LIn3LwJ+7NfErEc4erA=)
                          2: By2DGO8mAKRwvilovsE7V_h9B_E.roa (hash: wX+9hOVDj8DxNXRQFf1WcfLUxNIfChBE+36SraWm1b8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:a2:84:31:25:95:b2:d0:06:52:dd:4b:db:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
        Validity
            Not Before: May  7 13:04:17 2024 GMT
            Not After : May  8 13:04:17 2024 GMT
        Subject: CN=57caf326f1a2a9b6d3c0439755c56f40f90bc860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:cb:25:7a:a8:9f:ce:62:b8:2b:05:d9:9c:
                    f5:f1:03:11:c4:2f:c6:12:93:72:a0:d3:d3:88:67:
                    17:fb:cc:49:4e:12:80:04:b0:e4:1b:f8:b8:c5:6f:
                    27:8b:f1:ff:bd:ad:26:b7:9c:a8:8f:42:8f:d7:6f:
                    56:cc:4f:b8:6a:62:05:d5:6c:8b:95:95:12:a0:b2:
                    3d:b8:ce:91:f7:a1:ed:02:fe:ea:6a:0c:45:9c:f3:
                    9c:c8:79:41:fc:a2:36:ca:3d:0d:e3:b9:68:00:2e:
                    d7:13:83:8f:fc:ff:f6:0a:13:54:7a:67:6b:17:63:
                    cf:92:7d:13:ff:c7:eb:c4:97:2d:3e:95:01:98:14:
                    41:af:69:a8:04:3b:bc:a4:f1:25:41:db:23:12:d2:
                    fd:3c:38:1d:f5:14:32:4f:5f:c2:b5:d1:02:bf:04:
                    3d:76:24:64:ba:10:4e:d3:62:73:8d:7b:ee:40:97:
                    e3:b8:c7:0e:f7:37:0c:40:94:09:93:b3:e5:60:46:
                    55:5a:0a:69:76:97:b9:7e:96:db:0a:bf:25:f4:42:
                    81:df:c3:72:41:18:77:33:7f:e8:da:76:6a:02:d7:
                    86:34:c5:02:c3:ff:db:6e:3d:55:14:59:33:80:2e:
                    2b:b6:3c:74:8b:2a:bf:a9:7d:c8:49:18:4b:30:ce:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:F3:26:F1:A2:A9:B6:D3:C0:43:97:55:C5:6F:40:F9:0B:C8:60
            X509v3 Authority Key Identifier:
                keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:28:4d:49:af:e1:42:0f:4f:7b:13:78:b7:2e:15:46:0e:d6:
         d1:97:a1:7a:be:0d:a4:77:f5:5a:69:ab:c2:9f:f5:f3:c0:92:
         b8:61:da:28:ef:69:fd:fa:5a:5f:23:82:2d:4c:ef:b1:88:55:
         fc:0c:de:42:c7:e3:d5:ab:a6:32:43:20:e0:5c:24:c3:f9:7d:
         f7:dc:48:f0:21:f6:67:7f:72:ff:f7:1b:e0:77:e3:ce:cd:63:
         b5:1e:42:1d:72:e7:5d:1e:ce:cb:05:dd:00:32:66:e0:f0:9b:
         3f:76:8b:b0:7c:23:d9:f4:2a:67:b1:de:23:bd:e7:a6:5d:d8:
         ad:0e:f7:29:8c:0e:c7:45:97:e1:56:f3:2a:67:b0:e1:2a:1c:
         a2:57:67:8c:9e:f3:d8:c4:36:5a:a7:e9:6e:0e:5a:c7:8f:1a:
         e8:0a:a9:1c:1d:33:59:c6:96:1a:24:61:49:16:9d:a6:aa:44:
         56:98:93:2d:e5:ac:28:69:b5:c4:80:5e:7c:9d:2e:93:bb:5b:
         2b:d5:ae:2e:87:47:47:ae:03:aa:9a:b7:6f:90:cc:06:77:4b:
         ed:1c:5a:90:95:93:b9:58:35:dc:eb:d0:c9:fc:4c:b1:64:8a:
         2c:23:0a:38:a0:60:69:33:2d:a6:66:8d:3e:27:a5:53:b1:d3:
         aa:0e:c4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TJ6KEMSWVstAGUt1L29ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5
NWNjZmQwHhcNMjQwNTA3MTMwNDE3WhcNMjQwNTA4MTMwNDE3WjAzMTEwLwYDVQQD
Eyg1N2NhZjMyNmYxYTJhOWI2ZDNjMDQzOTc1NWM1NmY0MGY5MGJjODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnafLJXqon85iuCsF2Zz18QMRxC/G
EpNyoNPTiGcX+8xJThKABLDkG/i4xW8ni/H/va0mt5yoj0KP129WzE+4amIF1WyL
lZUSoLI9uM6R96HtAv7qagxFnPOcyHlB/KI2yj0N47loAC7XE4OP/P/2ChNUemdr
F2PPkn0T/8frxJctPpUBmBRBr2moBDu8pPElQdsjEtL9PDgd9RQyT1/CtdECvwQ9
diRkuhBO02JzjXvuQJfjuMcO9zcMQJQJk7PlYEZVWgppdpe5fpbbCr8l9EKB38Ny
QRh3M3/o2nZqAteGNMUCw//bbj1VFFkzgC4rtjx0iyq/qX3ISRhLMM63jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfK8ybxoqm208BDl1XFb0D5C8hgMB8GA1UdIwQY
MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt
OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm
LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUChNSa/h
Qg9PexN4ty4VRg7W0Zeher4NpHf1Wmmrwp/188CSuGHaKO9p/fpaXyOCLUzvsYhV
/AzeQsfj1aumMkMg4Fwkw/l999xI8CH2Z39y//cb4Hfjzs1jtR5CHXLnXR7OywXd
ADJm4PCbP3aLsHwj2fQqZ7HeI73npl3YrQ73KYwOx0WX4VbzKmew4SocoldnjJ7z
2MQ2Wqfpbg5ax48a6AqpHB0zWcaWGiRhSRadpqpEVpiTLeWsKGm1xIBefJ0uk7tb
K9WuLodHR64Dqpq3b5DMBndL7RxakJWTuVg13OvQyfxMsWSKLCMKOKBgaTMtpmaN
PielU7HTqg7ELw==
-----END CERTIFICATE-----
Generated at Tue May 7 18:00:43 2024 by rpki-client on console-ams.rpki-client.org