Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File:                     2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier:          GZ2ExSNrlYFMwCFiQnvBNyFdJTCuf1Yt4mGDaflZc1E=
Subject key identifier:   01:A7:3F:C2:42:D1:7D:BC:59:80:03:83:4C:CA:C2:0F:18:54:D4:BC
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer:       /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial:       01905A6D606F38342487D6A178A8C6B61884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number:          038C
Signing time:             Thu 27 Jun 2024 16:00:35 +0000
Manifest this update:     Thu 27 Jun 2024 16:00:35 +0000
Manifest next update:     Fri 28 Jun 2024 16:00:35 +0000
Files and hashes:         1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: BqDViODChri4xwAlCZ7GgBt8d/3R+NM2Z5WimG8siic=)
                          2: VoILGmeBPHgIyhUzEaezncov9wY.roa (hash: VK5104+XzPhqmyo3EDTDVjcZYGmGqpJH2TX1PMKANpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5a:6d:60:6f:38:34:24:87:d6:a1:78:a8:c6:b6:18:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
        Validity
            Not Before: Jun 27 16:00:35 2024 GMT
            Not After : Jun 28 16:00:35 2024 GMT
        Subject: CN=01a73fc242d17dbc598003834ccac20f1854d4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:ce:2b:e3:7c:34:24:08:4f:1b:38:07:e0:
                    67:b8:c3:68:dc:18:0b:a5:7d:e2:57:10:5d:a9:1e:
                    04:f1:9b:27:18:fe:de:9c:f6:b3:37:ea:e6:21:5f:
                    ba:cd:94:e8:02:01:e1:f0:73:d5:32:f3:bf:22:1f:
                    cc:b7:98:97:00:db:fa:40:26:6f:eb:76:48:7d:13:
                    58:dd:dd:fe:ad:5a:c6:79:71:bf:90:ff:9b:10:5f:
                    cd:8d:68:f3:ed:6f:79:54:99:04:0d:ed:f4:63:b4:
                    6e:9f:9f:8c:89:01:25:ff:af:df:90:0d:6f:89:a2:
                    28:46:64:4b:64:1f:0b:ee:77:81:44:24:a4:3b:b6:
                    f6:a9:f0:c2:d8:75:94:c5:e8:2d:74:fa:02:ab:80:
                    ea:48:be:42:f2:60:a7:99:72:be:92:8d:47:47:8f:
                    8c:b5:87:43:b6:ed:bc:67:e0:51:ef:45:41:ed:b2:
                    32:9e:d7:26:5f:71:e9:04:f8:31:2c:91:82:f4:36:
                    fa:20:6c:be:2b:04:a7:66:fd:6d:e5:38:b0:ad:fe:
                    e1:5c:48:ae:61:4b:af:b3:e5:32:77:d8:28:77:a9:
                    8e:e7:0e:bc:8f:c0:0b:c2:79:9d:c9:65:02:ae:82:
                    24:be:b7:32:0b:de:f4:d1:66:95:0c:64:67:00:9a:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A7:3F:C2:42:D1:7D:BC:59:80:03:83:4C:CA:C2:0F:18:54:D4:BC
            X509v3 Authority Key Identifier:
                keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6d:af:b0:e5:f7:95:ea:e9:d2:36:41:ce:a6:b5:e5:ad:0e:
         2e:f5:77:c1:e9:f3:af:f0:c1:9c:94:8c:64:00:ba:40:43:76:
         b9:10:72:ae:a5:81:86:2a:02:bb:ef:52:1e:66:1b:d5:ab:01:
         d2:28:5c:4e:29:1c:61:3e:fa:7d:b3:60:70:50:0e:15:1d:18:
         00:3e:ba:8b:25:24:38:9d:00:7a:08:48:4f:5e:06:92:fc:b8:
         df:3b:96:40:60:00:7d:73:f5:36:13:e2:f1:e6:bb:9c:06:bd:
         a7:08:b8:bb:41:e2:ba:89:5e:36:89:19:4d:82:fa:91:77:17:
         4a:30:d3:d6:17:9e:2e:59:3b:31:e8:bc:b5:55:91:4d:ed:aa:
         47:61:51:f1:72:6c:1f:7b:25:38:1a:3a:b5:3b:7a:b9:17:ea:
         27:b5:d8:bb:e7:a1:c6:c2:b1:b9:54:4c:4a:be:9d:d7:0c:0e:
         05:aa:db:c9:ac:cf:a8:ab:c5:b2:8c:f0:4a:e8:5a:04:ed:19:
         12:25:b2:a8:53:e6:00:cc:e8:7c:41:f7:88:7b:46:ff:0c:40:
         0a:1e:16:20:01:68:69:78:73:09:b5:56:7c:7a:92:4b:94:d5:
         9d:88:1e:99:b4:87:4a:05:b9:1f:28:98:39:ff:f9:a0:70:21:
         bd:a3:ac:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBabWBvODQkh9aheKjGthiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl
YjA0ZGYwHhcNMjQwNjI3MTYwMDM1WhcNMjQwNjI4MTYwMDM1WjAzMTEwLwYDVQQD
EygwMWE3M2ZjMjQyZDE3ZGJjNTk4MDAzODM0Y2NhYzIwZjE4NTRkNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm3OK+N8NCQITxs4B+BnuMNo3BgL
pX3iVxBdqR4E8ZsnGP7enPazN+rmIV+6zZToAgHh8HPVMvO/Ih/Mt5iXANv6QCZv
63ZIfRNY3d3+rVrGeXG/kP+bEF/NjWjz7W95VJkEDe30Y7Run5+MiQEl/6/fkA1v
iaIoRmRLZB8L7neBRCSkO7b2qfDC2HWUxegtdPoCq4DqSL5C8mCnmXK+ko1HR4+M
tYdDtu28Z+BR70VB7bIyntcmX3HpBPgxLJGC9Db6IGy+KwSnZv1t5Tiwrf7hXEiu
YUuvs+Uyd9god6mO5w68j8ALwnmdyWUCroIkvrcyC9700WaVDGRnAJqsmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGnP8JC0X28WYADg0zKwg8YVNS8MB8GA1UdIwQY
MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt
NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli
LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAG2vsOX3
lerp0jZBzqa15a0OLvV3wenzr/DBnJSMZAC6QEN2uRByrqWBhioCu+9SHmYb1asB
0ihcTikcYT76fbNgcFAOFR0YAD66iyUkOJ0AeghIT14Gkvy43zuWQGAAfXP1NhPi
8ea7nAa9pwi4u0HiuoleNokZTYL6kXcXSjDT1heeLlk7Mei8tVWRTe2qR2FR8XJs
H3slOBo6tTt6uRfqJ7XYu+ehxsKxuVRMSr6d1wwOBarbyazPqKvFsozwSuhaBO0Z
EiWyqFPmAMzofEH3iHtG/wxACh4WIAFoaXhzCbVWfHqSS5TVnYgembSHSgW5HyiY
Of/5oHAhvaOsdw==
-----END CERTIFICATE-----
Generated at Thu Jun 27 23:25:24 2024 by rpki-client on console-ams.rpki-client.org