Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File:                     HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier:          c9AoId9ffryqXmz8utVAZP3HRbyJkCP5Il79Wlaqx8Q=
Subject key identifier:   E2:0D:B4:07:EF:F3:B8:CC:30:E8:76:96:F3:91:E7:09:9D:44:C8:55
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer:       /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial:       018F938380BE3A6FF2FF5700A52149D2D017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number:          0213
Signing time:             Mon 20 May 2024 01:00:19 +0000
Manifest this update:     Mon 20 May 2024 01:00:19 +0000
Manifest next update:     Tue 21 May 2024 01:00:19 +0000
Files and hashes:         1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: H8morLUlRQU1yRJuynC6dX+2QN00Fj/Dwf1DCcGwNE8=)
                          2: lvBWWEdKkXq3FPp5C0FblgSRXM4.roa (hash: gi7jdV1CTqHkm9AeKFjrrbG8ggu4d7oswAUrwRvAZbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:83:80:be:3a:6f:f2:ff:57:00:a5:21:49:d2:d0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
        Validity
            Not Before: May 20 01:00:19 2024 GMT
            Not After : May 21 01:00:19 2024 GMT
        Subject: CN=e20db407eff3b8cc30e87696f391e7099d44c855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ae:2f:67:4f:8e:66:ab:13:9e:db:0c:9a:a3:
                    c8:eb:b8:f1:8c:51:76:a1:59:03:cf:d5:d2:a2:7c:
                    69:ee:d3:ec:a0:19:6d:29:6f:38:c8:bb:2c:aa:6c:
                    c7:03:81:4d:be:cb:a2:2f:01:da:b4:e4:5b:73:f0:
                    d5:f6:42:2b:92:db:f1:1d:3d:f9:74:2d:e3:9e:c2:
                    47:0e:24:1e:de:bc:c4:35:9c:9f:73:9c:58:fa:64:
                    c4:72:62:cf:ff:80:8d:86:c9:07:75:8d:00:6c:da:
                    13:3d:ab:d6:19:b4:b9:de:ca:1b:e3:07:5d:e1:48:
                    87:9f:df:e2:58:12:d7:f5:0d:fe:ce:d4:88:94:ce:
                    b9:a9:a0:9b:8d:8b:76:71:98:65:ab:ff:62:fd:ba:
                    ca:90:34:66:45:e4:69:0b:6b:b5:44:f4:85:79:7e:
                    6b:1e:a5:99:2b:dd:08:78:29:f2:6d:b0:92:9c:f1:
                    f8:9d:f2:34:1b:50:c0:4b:92:2c:e5:ca:f4:0e:fe:
                    ae:36:ec:52:f8:7b:38:d6:e6:66:33:e3:0b:0d:af:
                    90:ed:df:ab:c5:99:29:88:a9:4e:ce:68:eb:6a:c7:
                    a2:06:6b:be:19:7f:aa:fe:56:20:31:90:01:2c:8f:
                    5e:78:cc:ae:cf:f2:b5:a7:9e:71:4c:9e:89:dc:a1:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:B4:07:EF:F3:B8:CC:30:E8:76:96:F3:91:E7:09:9D:44:C8:55
            X509v3 Authority Key Identifier:
                keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:be:3a:87:30:8f:c0:d1:67:2f:6f:1a:38:a9:d9:a1:1c:32:
         18:f1:d9:84:a8:1c:be:2b:1b:bd:bf:74:e5:78:72:ba:2b:bf:
         62:35:2d:d0:d7:51:7b:0d:7b:be:6f:d1:44:11:49:95:ae:e7:
         50:a1:60:97:ef:54:a0:15:e1:a8:7e:11:0f:c7:93:b5:cb:51:
         b0:c5:fe:f6:c5:0b:d3:ab:d7:8f:a9:e9:3e:62:63:aa:de:73:
         dc:f9:4b:09:c5:c4:61:1a:a6:97:f6:72:07:40:bf:75:23:1f:
         82:a9:81:d0:2e:de:db:79:c7:c8:fc:2c:3b:fb:eb:bf:eb:c9:
         98:5b:d3:f0:4b:86:5b:55:0d:aa:12:f8:48:8b:26:49:63:14:
         11:d5:7b:71:ea:ef:5c:cc:57:f9:7d:ab:e3:bb:d1:4b:07:9a:
         16:b8:39:93:d4:39:30:00:69:ab:84:04:3f:bd:7d:f3:41:e6:
         4b:00:f4:71:f5:af:6a:0b:fd:5f:88:62:1b:80:13:7e:74:54:
         ba:7f:9d:d6:94:6f:13:2d:0b:50:d2:7b:d4:81:5e:0d:8a:1f:
         b5:f4:60:1c:54:17:72:a3:62:58:be:8a:dc:c4:9a:c7:a0:8f:
         82:25:19:ed:d0:be:ab:8a:87:39:f8:af:90:b3:42:53:50:fa:
         cc:74:04:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Tg4C+Om/y/1cApSFJ0tAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2QwNDRjMDkxZTg4YjgwYjRiMjY5ZWJiNzk2YjNmMjQ1
NDRiNWYwHhcNMjQwNTIwMDEwMDE5WhcNMjQwNTIxMDEwMDE5WjAzMTEwLwYDVQQD
EyhlMjBkYjQwN2VmZjNiOGNjMzBlODc2OTZmMzkxZTcwOTlkNDRjODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq4vZ0+OZqsTntsMmqPI67jxjFF2
oVkDz9XSonxp7tPsoBltKW84yLssqmzHA4FNvsuiLwHatORbc/DV9kIrktvxHT35
dC3jnsJHDiQe3rzENZyfc5xY+mTEcmLP/4CNhskHdY0AbNoTPavWGbS53sob4wdd
4UiHn9/iWBLX9Q3+ztSIlM65qaCbjYt2cZhlq/9i/brKkDRmReRpC2u1RPSFeX5r
HqWZK90IeCnybbCSnPH4nfI0G1DAS5Is5cr0Dv6uNuxS+Hs41uZmM+MLDa+Q7d+r
xZkpiKlOzmjraseiBmu+GX+q/lYgMZABLI9eeMyuz/K1p55xTJ6J3KF3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOINtAfv87jMMOh2lvOR5wmdRMhVMB8GA1UdIwQY
MBaAFB09BEwJHoi4C0smnrt5az8kVEtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYt
YzQxNzQ0MmVmZjkzLzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYtYzQxNzQ0MmVmZjkz
LzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAr46hzCP
wNFnL28aOKnZoRwyGPHZhKgcvisbvb905Xhyuiu/YjUt0NdRew17vm/RRBFJla7n
UKFgl+9UoBXhqH4RD8eTtctRsMX+9sUL06vXj6npPmJjqt5z3PlLCcXEYRqml/Zy
B0C/dSMfgqmB0C7e23nHyPwsO/vrv+vJmFvT8EuGW1UNqhL4SIsmSWMUEdV7cerv
XMxX+X2r47vRSweaFrg5k9Q5MABpq4QEP71980HmSwD0cfWvagv9X4hiG4ATfnRU
un+d1pRvEy0LUNJ71IFeDYoftfRgHFQXcqNiWL6K3MSax6CPgiUZ7dC+q4qHOfiv
kLNCU1D6zHQEdw==
-----END CERTIFICATE-----
Generated at Mon May 20 10:05:24 2024 by rpki-client on console-fra.rpki-client.org