Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File:                     5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier:          Kr8ONGw2x4pkKtBeMZismlTlBrfFLiJgHbVATj52HxA=
Subject key identifier:   D9:F0:CF:0B:4A:32:21:C6:5A:40:8D:2E:8C:99:08:38:8B:82:78:6B
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer:       /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial:       018F4E352C345990FE5F470239763DF1FA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number:          0DEB
Signing time:             Mon 06 May 2024 14:00:58 +0000
Manifest this update:     Mon 06 May 2024 14:00:58 +0000
Manifest next update:     Tue 07 May 2024 14:00:58 +0000
Files and hashes:         1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: LEu1B3nPNl0hplctf5LkRaRVpiqw4qgrQ6KhYW/0K5o=)
                          2: DovyyqVNM1Yv1WR3opt7bjVPV60.roa (hash: MMKbNd6X10r738VgtkT1l7h3QoZlN9vZ5YBsOZ/oecI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:2c:34:59:90:fe:5f:47:02:39:76:3d:f1:fa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
        Validity
            Not Before: May  6 14:00:58 2024 GMT
            Not After : May  7 14:00:58 2024 GMT
        Subject: CN=d9f0cf0b4a3221c65a408d2e8c9908388b82786b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:d3:a0:c7:f8:fa:db:e1:e8:e2:3d:2f:a9:
                    0d:ea:dd:c6:e1:97:4e:00:21:72:3c:91:85:49:24:
                    24:6a:e0:33:29:aa:22:28:e0:06:61:f0:44:22:b8:
                    10:ed:ed:7f:6f:d4:c3:e3:2c:18:5f:a3:78:f9:76:
                    09:1e:26:9a:96:94:d5:5b:4d:5f:4e:8e:1d:27:ab:
                    fd:73:4f:90:a8:cb:c3:5d:1f:1e:f4:1d:5e:bc:b1:
                    59:3d:fb:26:2d:c6:bc:9a:2f:e5:b1:0a:45:da:fb:
                    14:76:59:61:8d:19:da:d3:1b:37:36:e4:5c:19:57:
                    3f:5c:57:d1:68:76:a0:6c:3a:67:a4:fe:82:0e:72:
                    2b:39:02:89:8c:ed:d4:4c:cf:88:d4:1f:52:bc:03:
                    ec:e7:a6:1b:c1:f9:29:7e:79:d2:10:fc:ba:17:4e:
                    09:b8:17:45:bf:83:54:c2:1a:48:83:9e:f5:28:ea:
                    31:e6:13:c2:96:6a:61:ab:e8:a8:99:a5:4d:fb:73:
                    f8:cd:74:b7:c8:44:58:4f:35:fd:8b:cf:27:a1:8d:
                    3c:b2:9e:74:44:20:bb:da:f8:df:5e:1b:6e:21:22:
                    8c:18:b8:67:98:70:b0:83:60:af:c1:c6:c9:ce:a5:
                    c3:c9:41:08:c7:c1:6c:0e:c1:a2:18:1e:23:65:97:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F0:CF:0B:4A:32:21:C6:5A:40:8D:2E:8C:99:08:38:8B:82:78:6B
            X509v3 Authority Key Identifier:
                keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:e8:5e:cb:1b:5d:14:5a:37:54:20:14:19:0f:40:4a:bd:
         56:8d:2b:b1:c1:8d:a5:4d:ad:71:51:58:ab:de:5b:be:78:f4:
         c2:96:d6:13:19:95:03:35:c2:ef:c6:67:d0:d0:ce:b8:38:f3:
         d5:f2:c7:17:3f:d4:be:2e:ee:f1:b5:0c:9b:c9:ea:60:09:cc:
         d4:79:d4:fa:9e:be:a9:48:df:5d:e5:be:6f:d7:fb:c0:66:77:
         64:8f:13:d6:3f:96:1b:52:84:f8:6e:ed:af:25:96:16:97:11:
         1c:48:b1:72:de:4b:e2:01:77:3f:7a:ad:b4:0c:d4:d3:b0:3d:
         39:83:d3:a2:7b:4c:37:3e:09:5e:80:5f:ed:53:37:c8:39:18:
         8e:60:a0:81:48:1f:d8:29:f9:ca:1e:3c:d9:5c:f2:72:1b:ba:
         ae:10:13:16:8d:00:9c:f6:eb:33:8a:29:1c:48:7e:a4:70:07:
         a3:72:4b:0b:ce:6c:49:b2:83:c5:39:b3:f2:0b:d4:4c:9f:9c:
         d6:9f:da:8c:b8:9c:ac:59:4a:47:a3:92:74:0d:01:81:d9:45:
         f1:81:a0:50:c8:14:92:d4:c3:ad:93:77:b5:da:52:78:21:46:
         b3:9f:ff:c6:08:4a:45:67:11:9d:b8:5e:b3:19:e9:b6:61:31:
         18:7f:e2:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ONSw0WZD+X0cCOXY98foaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MjMyOTllZTQ3YjRmNjEyZGI5MGExNGY5NWU0MDc2N2Fl
MDY2NTcwHhcNMjQwNTA2MTQwMDU4WhcNMjQwNTA3MTQwMDU4WjAzMTEwLwYDVQQD
EyhkOWYwY2YwYjRhMzIyMWM2NWE0MDhkMmU4Yzk5MDgzODhiODI3ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYTToMf4+tvh6OI9L6kN6t3G4ZdO
ACFyPJGFSSQkauAzKaoiKOAGYfBEIrgQ7e1/b9TD4ywYX6N4+XYJHiaalpTVW01f
To4dJ6v9c0+QqMvDXR8e9B1evLFZPfsmLca8mi/lsQpF2vsUdllhjRna0xs3NuRc
GVc/XFfRaHagbDpnpP6CDnIrOQKJjO3UTM+I1B9SvAPs56YbwfkpfnnSEPy6F04J
uBdFv4NUwhpIg571KOox5hPClmphq+iomaVN+3P4zXS3yERYTzX9i88noY08sp50
RCC72vjfXhtuISKMGLhnmHCwg2CvwcbJzqXDyUEIx8FsDsGiGB4jZZfg+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnwzwtKMiHGWkCNLoyZCDiLgnhrMB8GA1UdIwQY
MBaAFOYjKZ7ke09hLbkKFPleQHZ64GZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMzcyMDMtZjE3Mi00NTlmLTgzMTUt
ODJmMjVhYzY4ODdmLzEvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mMzcyMDMtZjE3Mi00NTlmLTgzMTUtODJmMjVhYzY4ODdm
LzEvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreLoXssb
XRRaN1QgFBkPQEq9Vo0rscGNpU2tcVFYq95bvnj0wpbWExmVAzXC78Zn0NDOuDjz
1fLHFz/Uvi7u8bUMm8nqYAnM1HnU+p6+qUjfXeW+b9f7wGZ3ZI8T1j+WG1KE+G7t
ryWWFpcRHEixct5L4gF3P3qttAzU07A9OYPTontMNz4JXoBf7VM3yDkYjmCggUgf
2Cn5yh482Vzychu6rhATFo0AnPbrM4opHEh+pHAHo3JLC85sSbKDxTmz8gvUTJ+c
1p/ajLicrFlKR6OSdA0BgdlF8YGgUMgUktTDrZN3tdpSeCFGs5//xghKRWcRnbhe
sxnptmExGH/iGg==
-----END CERTIFICATE-----
Generated at Mon May 6 16:17:38 2024 by rpki-client on console-ams.rpki-client.org