Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File:                     C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier:          TJfi3gy5cA8JsVox53vhajRlZ6I4Sie3zYjHDO5shHo=
Subject key identifier:   52:1F:0F:43:55:5D:8B:C3:76:4B:CA:8D:A1:35:88:B1:5F:5C:6C:62
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer:       /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial:       018F381B49546DD533A4C9A64F2CD5CC851B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number:          115F
Signing time:             Thu 02 May 2024 07:01:03 +0000
Manifest this update:     Thu 02 May 2024 07:01:03 +0000
Manifest next update:     Fri 03 May 2024 07:01:03 +0000
Files and hashes:         1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 0s0uqbE00yPURDchf6PQDGBq6uOFPkbSWjWn9rKG/po=)
                          2: rFm1vq8BqvY_GGOnLe_-WghGhV8.roa (hash: Yh+INgjfKAWwLwVpfmfJj6T3iGEP47HezkGAgipEHlI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:49:54:6d:d5:33:a4:c9:a6:4f:2c:d5:cc:85:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
        Validity
            Not Before: May  2 07:01:03 2024 GMT
            Not After : May  3 07:01:03 2024 GMT
        Subject: CN=521f0f43555d8bc3764bca8da13588b15f5c6c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:4b:61:60:c1:79:fc:74:a2:d8:5f:44:fc:
                    f8:05:d1:38:63:96:d3:ca:a1:66:6f:0a:89:a8:1d:
                    66:6b:b5:19:05:91:96:6e:00:aa:9f:37:7c:7d:b9:
                    6b:b5:40:f0:68:68:ed:26:00:c6:4c:8c:3b:01:5f:
                    14:82:cb:21:a4:75:e5:4a:2e:78:d8:9d:f4:03:7b:
                    98:47:9d:52:77:4d:a0:07:9b:81:4b:b5:24:b4:42:
                    32:a7:f0:0a:61:f4:8f:ee:29:fd:e3:52:3d:53:84:
                    01:0c:76:c4:28:01:d0:5d:eb:89:03:3b:85:3e:1c:
                    b9:06:ee:e4:05:b5:a6:90:2a:73:7c:2c:df:db:2b:
                    28:c1:23:8d:9e:e5:49:53:b5:b3:0a:f5:46:2c:bd:
                    b8:93:eb:63:62:52:26:b9:43:7c:2d:d6:8d:cc:fc:
                    5a:58:b0:4b:08:68:8b:c8:5b:d6:99:a7:87:10:be:
                    94:32:99:80:73:47:0f:c7:d6:08:76:a4:2d:25:6a:
                    be:9e:e9:dc:e7:fb:98:c3:5b:1a:0c:f9:8d:02:45:
                    6a:dc:bd:6b:76:30:32:10:97:e6:04:9e:95:5d:0e:
                    47:f1:e1:7a:0a:6a:c0:f6:e8:1c:96:28:58:1a:e4:
                    62:bb:ae:7c:72:2c:a5:de:8f:f6:52:d8:79:ed:55:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1F:0F:43:55:5D:8B:C3:76:4B:CA:8D:A1:35:88:B1:5F:5C:6C:62
            X509v3 Authority Key Identifier:
                keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:78:d0:a0:2e:7d:1e:55:71:e6:15:63:e2:1f:a5:6c:18:
         7e:23:74:0c:f7:79:c9:49:43:d9:47:de:5b:bf:3d:5a:da:b6:
         ce:5d:9a:c2:c7:88:c5:67:ef:00:ac:7c:50:d6:bf:c0:e1:6e:
         d4:52:45:34:a2:65:a9:5c:6a:ed:aa:ed:43:3a:6b:18:53:3a:
         44:b9:15:4c:c6:0f:f1:13:84:9e:80:4a:ea:f8:51:1f:49:4a:
         cd:fd:8d:ed:a3:ed:cd:9d:92:84:03:57:45:2e:33:78:7f:57:
         f7:77:3d:7e:a8:75:3a:f1:74:ac:4a:4e:ff:b5:e1:7f:5d:9c:
         16:20:46:31:e1:77:00:3e:10:53:24:4f:a7:17:35:e3:3a:32:
         91:d1:3d:11:db:7a:05:ce:1d:88:7d:70:d4:8f:35:37:e0:01:
         b0:72:cb:8c:a3:b1:ae:9b:20:f3:39:86:cc:44:21:53:f2:a3:
         d5:eb:90:71:6b:c3:28:1c:02:7c:44:b3:b7:6e:4a:bf:0c:3b:
         8a:16:60:dd:a4:ae:0d:ae:f2:9d:f0:c4:67:67:79:6c:37:db:
         37:68:eb:35:31:c3:b0:07:71:48:f3:15:0b:91:59:3b:9b:ec:
         9d:c3:3d:e8:72:40:07:a0:68:b8:99:5a:ed:07:d8:da:1b:31:
         5a:42:a8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84G0lUbdUzpMmmTyzVzIUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2
NmFiY2IwHhcNMjQwNTAyMDcwMTAzWhcNMjQwNTAzMDcwMTAzWjAzMTEwLwYDVQQD
Eyg1MjFmMGY0MzU1NWQ4YmMzNzY0YmNhOGRhMTM1ODhiMTVmNWM2YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspVLYWDBefx0othfRPz4BdE4Y5bT
yqFmbwqJqB1ma7UZBZGWbgCqnzd8fblrtUDwaGjtJgDGTIw7AV8UgsshpHXlSi54
2J30A3uYR51Sd02gB5uBS7UktEIyp/AKYfSP7in941I9U4QBDHbEKAHQXeuJAzuF
Phy5Bu7kBbWmkCpzfCzf2ysowSONnuVJU7WzCvVGLL24k+tjYlImuUN8LdaNzPxa
WLBLCGiLyFvWmaeHEL6UMpmAc0cPx9YIdqQtJWq+nunc5/uYw1saDPmNAkVq3L1r
djAyEJfmBJ6VXQ5H8eF6CmrA9ugclihYGuRiu658ciyl3o/2Uth57VVb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIfD0NVXYvDdkvKjaE1iLFfXGxiMB8GA1UdIwQY
MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt
OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj
LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/R40KAu
fR5VceYVY+IfpWwYfiN0DPd5yUlD2UfeW789Wtq2zl2awseIxWfvAKx8UNa/wOFu
1FJFNKJlqVxq7artQzprGFM6RLkVTMYP8ROEnoBK6vhRH0lKzf2N7aPtzZ2ShANX
RS4zeH9X93c9fqh1OvF0rEpO/7Xhf12cFiBGMeF3AD4QUyRPpxc14zoykdE9Edt6
Bc4diH1w1I81N+ABsHLLjKOxrpsg8zmGzEQhU/Kj1euQcWvDKBwCfESzt25Kvww7
ihZg3aSuDa7ynfDEZ2d5bDfbN2jrNTHDsAdxSPMVC5FZO5vsncM96HJAB6BouJla
7QfY2hsxWkKoGw==
-----END CERTIFICATE-----
Generated at Thu May 2 13:34:32 2024 by rpki-client on console-ams.rpki-client.org