Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File:                     I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier:          QV4hY+yuoMgJjz04sZgTenrL7kBcncaGYfwpnu4HjDU=
Subject key identifier:   92:05:3B:F4:A8:B8:63:5F:8E:25:F0:5E:B7:47:AD:57:01:55:4D:BF
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer:       /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial:       018F4C1075B6014313C188020E0D975A028F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number:          0500
Signing time:             Mon 06 May 2024 04:01:38 +0000
Manifest this update:     Mon 06 May 2024 04:01:38 +0000
Manifest next update:     Tue 07 May 2024 04:01:38 +0000
Files and hashes:         1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: DhvpXT5HMIBnN3oZSv8twHAdywUn7SHXw1hnUEr/UYY=)
                          2: Rm4gcJ8TxtdYnxYW7jlxwjcnViw.roa (hash: xiKbLuUVLbV9e4nXpndNLfsd8aERNBcoL3KWn2jJ6Yc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:75:b6:01:43:13:c1:88:02:0e:0d:97:5a:02:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
        Validity
            Not Before: May  6 04:01:38 2024 GMT
            Not After : May  7 04:01:38 2024 GMT
        Subject: CN=92053bf4a8b8635f8e25f05eb747ad5701554dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:c4:ea:34:3c:2f:55:3b:9e:43:c9:79:68:
                    e4:4e:cd:53:cf:39:d1:7d:d7:23:be:35:ec:21:d9:
                    25:36:d3:96:60:2d:05:7b:ad:00:e5:e9:02:26:d9:
                    ed:5e:0e:88:4b:f0:8c:ef:d5:e4:cc:36:75:82:6d:
                    cd:23:ff:eb:fa:92:6d:2d:e1:ec:44:39:c7:54:f0:
                    98:bb:cf:ce:e1:34:2f:0a:98:b4:08:af:8f:18:67:
                    1f:9a:68:5c:69:6c:9b:44:c2:e5:c7:73:f6:df:9a:
                    04:b3:26:aa:33:24:f8:6f:0f:e2:88:6b:22:43:36:
                    d1:85:05:dc:d8:68:b9:a0:61:7c:e9:58:3a:1d:f2:
                    70:57:b8:19:15:f2:91:c2:43:65:84:1b:4e:cb:91:
                    e8:14:c8:5b:0c:2e:e0:e3:94:ae:72:1c:f9:7c:ea:
                    cd:a0:c6:17:f0:59:1c:8a:28:e1:81:b8:ab:29:ea:
                    37:5c:37:96:97:63:1a:8f:d5:5d:50:30:41:23:bd:
                    a6:83:87:37:ad:b4:2e:af:b6:63:54:1d:2c:22:ae:
                    57:8e:c7:e3:c4:f5:02:36:25:91:b8:b0:a0:82:8a:
                    99:e1:ea:e5:73:b8:aa:c4:44:c5:45:a7:d5:a5:34:
                    20:e9:36:83:f5:56:53:c3:ae:46:8d:c2:64:e4:ed:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:3B:F4:A8:B8:63:5F:8E:25:F0:5E:B7:47:AD:57:01:55:4D:BF
            X509v3 Authority Key Identifier:
                keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:82:f0:8d:80:81:35:76:36:4a:e5:ec:b7:67:fd:5d:7f:7a:
         9f:67:5f:59:d0:b9:d4:e9:4a:7b:42:22:2e:44:ac:d7:4c:2e:
         66:fd:1f:42:77:21:04:6b:84:b5:14:57:6e:ef:67:b8:00:3d:
         d4:2b:5e:43:fe:bb:c6:36:6c:65:68:24:ad:37:ce:bc:cd:43:
         48:62:b4:c2:c0:d0:6c:28:a9:fb:64:75:a6:a3:b0:a5:f5:d5:
         82:61:89:29:ac:ba:10:8d:3c:e6:b7:5a:20:94:10:16:22:6a:
         81:2d:10:67:90:53:e9:9f:44:56:07:18:b9:8f:c4:d1:13:75:
         72:6b:ed:3c:e2:48:4a:54:c6:6f:7e:c1:23:47:8d:10:bf:92:
         93:ce:85:25:05:80:fa:fe:8d:fb:9b:03:2c:32:86:ee:95:83:
         97:f8:c0:97:a1:0a:1f:98:f0:f9:d8:1c:aa:8f:76:24:76:b4:
         30:30:ac:62:46:78:1b:70:c2:d8:07:e9:3d:5a:28:12:c6:dd:
         af:ae:59:a7:14:8a:d4:dd:e9:0c:dd:7a:7f:69:b6:ec:2b:af:
         de:5b:62:e6:51:e8:6b:37:0a:f3:b9:2d:bf:9d:0c:fb:f9:65:
         44:68:98:93:14:d7:24:cb:5f:fd:ca:bd:b8:26:16:6f:38:16:
         9d:38:cb:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MEHW2AUMTwYgCDg2XWgKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1
ZDJjMmIwHhcNMjQwNTA2MDQwMTM4WhcNMjQwNTA3MDQwMTM4WjAzMTEwLwYDVQQD
Eyg5MjA1M2JmNGE4Yjg2MzVmOGUyNWYwNWViNzQ3YWQ1NzAxNTU0ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrTE6jQ8L1U7nkPJeWjkTs1TzznR
fdcjvjXsIdklNtOWYC0Fe60A5ekCJtntXg6IS/CM79XkzDZ1gm3NI//r+pJtLeHs
RDnHVPCYu8/O4TQvCpi0CK+PGGcfmmhcaWybRMLlx3P235oEsyaqMyT4bw/iiGsi
QzbRhQXc2Gi5oGF86Vg6HfJwV7gZFfKRwkNlhBtOy5HoFMhbDC7g45Suchz5fOrN
oMYX8FkciijhgbirKeo3XDeWl2Maj9VdUDBBI72mg4c3rbQur7ZjVB0sIq5Xjsfj
xPUCNiWRuLCggoqZ4erlc7iqxETFRafVpTQg6TaD9VZTw65GjcJk5O3F6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIFO/SouGNfjiXwXrdHrVcBVU2/MB8GA1UdIwQY
MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt
OGMwMDNjNGE1NDU2LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2
LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ILwjYCB
NXY2SuXst2f9XX96n2dfWdC51OlKe0IiLkSs10wuZv0fQnchBGuEtRRXbu9nuAA9
1CteQ/67xjZsZWgkrTfOvM1DSGK0wsDQbCip+2R1pqOwpfXVgmGJKay6EI085rda
IJQQFiJqgS0QZ5BT6Z9EVgcYuY/E0RN1cmvtPOJISlTGb37BI0eNEL+Sk86FJQWA
+v6N+5sDLDKG7pWDl/jAl6EKH5jw+dgcqo92JHa0MDCsYkZ4G3DC2AfpPVooEsbd
r65ZpxSK1N3pDN16f2m27Cuv3lti5lHoazcK87ktv50M+/llRGiYkxTXJMtf/cq9
uCYWbzgWnTjLgA==
-----END CERTIFICATE-----
Generated at Mon May 6 07:55:12 2024 by rpki-client on console-fra.rpki-client.org