Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File:                     1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier:          2M7LlmTBQPPJIdzDAPOCDLOF8yS9EdahC4RUwjq5HDk=
Subject key identifier:   04:03:1A:AB:65:49:A8:F2:F3:3C:B5:7D:94:4F:54:E4:0F:9E:95:98
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer:       /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial:       018F5400E15DF370ECF23E58C5FB546CBD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number:          0426
Signing time:             Tue 07 May 2024 17:01:34 +0000
Manifest this update:     Tue 07 May 2024 17:01:34 +0000
Manifest next update:     Wed 08 May 2024 17:01:34 +0000
Files and hashes:         1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: 4A9H+goo/OedvneOP22AN04EiH6n3EBVh7sP0d7w9gI=)
                          2: PVgLB-qRDOCGIGdYGny7A0cNCzs.roa (hash: cdzb9evWHk4AegHxHwXP9MEfgZPBDfnw+ED/wcjSoss=)
                          3: dDVgS3_2OFGjHmNtR2PDYSZYiuU.roa (hash: xmHjzP+INJyiPf4usvTRn5d7rtbTtGR/jl+rlhcANlk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 17:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:e1:5d:f3:70:ec:f2:3e:58:c5:fb:54:6c:bd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
        Validity
            Not Before: May  7 17:01:34 2024 GMT
            Not After : May  8 17:01:34 2024 GMT
        Subject: CN=04031aab6549a8f2f33cb57d944f54e40f9e9598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:2d:6a:a6:bd:61:d7:d4:45:f7:ab:04:b1:
                    b4:d8:0e:ed:4d:f0:bb:55:50:4a:b6:d7:0b:a1:69:
                    83:ef:0f:27:6e:47:ee:97:e4:47:1d:b8:9a:ef:ed:
                    66:54:63:a0:48:d8:43:e4:d5:32:c9:8a:3d:d7:73:
                    90:a1:4b:13:33:a3:d4:43:d1:79:f1:8e:75:23:2e:
                    32:fc:4e:29:81:c2:29:aa:3b:a8:a3:5e:5e:22:aa:
                    d9:93:f4:f8:43:0e:11:d5:29:6f:5e:b7:2a:b4:26:
                    c2:1c:ef:c9:0c:70:b9:44:47:d5:62:04:eb:0f:b7:
                    6d:b9:69:a4:f9:45:67:4c:94:ed:71:00:a1:3e:4b:
                    e1:81:2b:3b:14:67:c4:cc:9b:d3:e0:5e:65:2c:75:
                    45:99:fa:64:3a:43:2d:84:81:25:db:b6:81:75:f3:
                    e1:7e:1a:21:a5:8b:35:41:4b:00:9a:26:00:eb:c5:
                    12:bc:6d:33:12:e7:66:47:79:8c:43:74:3d:16:82:
                    00:91:c3:5c:85:ee:4a:5f:6b:00:8c:42:02:eb:d0:
                    4b:b7:d0:cf:20:65:6c:a0:04:ad:77:49:24:41:3d:
                    e3:aa:f6:3c:50:0b:85:a8:de:f0:0b:37:90:01:c6:
                    c8:46:af:af:43:f6:73:99:7e:02:43:af:3a:78:9a:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:03:1A:AB:65:49:A8:F2:F3:3C:B5:7D:94:4F:54:E4:0F:9E:95:98
            X509v3 Authority Key Identifier:
                keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:a9:4d:01:1a:60:32:6b:f4:ca:0c:74:3d:b0:4d:d6:91:
         52:a3:f1:29:d7:03:13:54:d5:eb:83:b4:c5:8f:e7:ca:03:5c:
         00:0f:a6:8b:80:a6:97:51:c4:54:d3:ee:14:aa:3a:49:3f:6d:
         23:83:13:64:94:87:10:cf:94:bb:13:3a:6f:eb:53:23:2a:bf:
         2f:e0:58:ab:9a:39:11:22:f6:5d:32:74:e4:47:62:b4:9c:ca:
         fa:b4:92:61:fa:4d:f0:37:77:87:79:e4:74:63:17:92:b5:2f:
         a6:ae:16:07:65:57:d2:35:fa:d5:de:70:55:6b:7a:f4:0f:b7:
         b9:8d:4a:08:28:47:a7:58:99:0f:7d:f8:df:ee:cc:fd:dd:55:
         9b:0b:e2:d7:29:e1:7b:b0:fb:8f:c8:7a:dc:eb:7e:af:63:9b:
         6a:c9:ba:b3:22:a6:d8:75:13:33:f3:9a:d3:e8:61:b8:a0:41:
         68:a4:13:ab:80:27:88:50:18:ca:5c:58:d6:8d:75:97:fd:73:
         7b:af:98:3a:1d:9c:6b:da:24:00:0d:a6:da:6f:82:63:ab:a3:
         e2:b7:7f:b8:35:18:01:aa:d7:09:cb:3e:3b:42:54:b1:70:7e:
         97:79:41:fa:b8:14:89:89:fb:95:9e:fa:11:1b:67:27:ea:7c:
         49:b0:a4:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9UAOFd83Ds8j5YxftUbL17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjQwNTA3MTcwMTM0WhcNMjQwNTA4MTcwMTM0WjAzMTEwLwYDVQQD
EygwNDAzMWFhYjY1NDlhOGYyZjMzY2I1N2Q5NDRmNTRlNDBmOWU5NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNstaqa9YdfURferBLG02A7tTfC7
VVBKttcLoWmD7w8nbkful+RHHbia7+1mVGOgSNhD5NUyyYo913OQoUsTM6PUQ9F5
8Y51Iy4y/E4pgcIpqjuoo15eIqrZk/T4Qw4R1SlvXrcqtCbCHO/JDHC5REfVYgTr
D7dtuWmk+UVnTJTtcQChPkvhgSs7FGfEzJvT4F5lLHVFmfpkOkMthIEl27aBdfPh
fhohpYs1QUsAmiYA68USvG0zEudmR3mMQ3Q9FoIAkcNche5KX2sAjEIC69BLt9DP
IGVsoAStd0kkQT3jqvY8UAuFqN7wCzeQAcbIRq+vQ/ZzmX4CQ686eJog6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQDGqtlSajy8zy1fZRPVOQPnpWYMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActepTQEa
YDJr9MoMdD2wTdaRUqPxKdcDE1TV64O0xY/nygNcAA+mi4Cml1HEVNPuFKo6ST9t
I4MTZJSHEM+UuxM6b+tTIyq/L+BYq5o5ESL2XTJ05EditJzK+rSSYfpN8Dd3h3nk
dGMXkrUvpq4WB2VX0jX61d5wVWt69A+3uY1KCChHp1iZD3343+7M/d1Vmwvi1ynh
e7D7j8h63Ot+r2Obasm6syKm2HUTM/Oa0+hhuKBBaKQTq4AniFAYylxY1o11l/1z
e6+YOh2ca9okAA2m2m+CY6uj4rd/uDUYAarXCcs+O0JUsXB+l3lB+rgUiYn7lZ76
ERtnJ+p8SbCk0Q==
-----END CERTIFICATE-----
Generated at Wed May 8 03:25:16 2024 by rpki-client on console-fra.rpki-client.org