Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File:                     1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier:          fgg8bslgeC6nndGru6ySY+/A9QH4ne1Uo0wHMadFvw8=
Subject key identifier:   AD:93:C4:A2:81:86:38:21:25:6F:6E:DC:ED:C3:71:C5:5B:60:CC:88
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer:       /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial:       018F3FD654242D0E26A55AC3EFDC3F6BC557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number:          0D6B
Signing time:             Fri 03 May 2024 19:02:41 +0000
Manifest this update:     Fri 03 May 2024 19:02:41 +0000
Manifest next update:     Sat 04 May 2024 19:02:41 +0000
Files and hashes:         1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: VvOZu7EiXklyU6cmA+zVklwq/f5P794FsBEFyLNC3LI=)
                          2: wJTGScrd-b3973mJkNEtURF_dY4.roa (hash: DnaPRJpTkX81MfJBMHY3ixq8MHe2ZbvKP7icku6rSMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d6:54:24:2d:0e:26:a5:5a:c3:ef:dc:3f:6b:c5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
        Validity
            Not Before: May  3 19:02:41 2024 GMT
            Not After : May  4 19:02:41 2024 GMT
        Subject: CN=ad93c4a281863821256f6edcedc371c55b60cc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:54:8c:3e:ea:55:2b:b6:4f:ac:25:b0:3b:
                    98:2c:ba:31:67:2a:d1:a6:86:13:65:7e:bd:5c:f2:
                    84:dc:ed:b4:1f:c8:c1:fc:76:ef:a0:4e:ce:82:c2:
                    d4:13:f8:b8:41:66:13:fe:cb:29:7b:c9:69:25:75:
                    b1:23:50:fd:79:12:c8:1a:26:0a:98:04:27:f9:d4:
                    36:88:92:a7:22:47:27:8c:88:e2:3a:ac:2e:53:09:
                    c1:aa:8a:08:07:1c:be:61:75:9f:6d:3d:19:17:dd:
                    24:cf:af:ed:56:52:a8:e2:a8:45:a8:f1:be:e4:f5:
                    e0:8c:98:86:88:37:ef:17:96:09:34:7b:42:ac:e2:
                    86:48:9a:fd:26:c2:dc:e6:cf:51:59:dd:72:11:3c:
                    cf:e7:33:d5:63:88:09:7e:fc:4a:33:8e:de:e7:e1:
                    20:e3:05:4d:49:1f:28:d0:72:d7:8a:c1:c4:1d:72:
                    97:79:f6:6e:2b:d7:fc:67:fe:c4:08:6b:73:3c:74:
                    cd:17:bf:7a:fc:f5:cb:a5:51:05:14:78:61:3f:b0:
                    cf:19:16:ff:b1:3e:86:ee:c2:57:a8:56:3f:f2:fa:
                    8a:d9:bd:d4:16:ee:6e:45:2a:9c:a4:04:4d:24:e4:
                    16:f6:3c:f9:fa:64:da:d3:4d:45:c6:a5:d7:0d:56:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:93:C4:A2:81:86:38:21:25:6F:6E:DC:ED:C3:71:C5:5B:60:CC:88
            X509v3 Authority Key Identifier:
                keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:52:3e:43:23:5a:81:ea:ed:6c:e5:21:7b:a8:2f:42:c3:8b:
         22:a4:f4:d7:04:ec:5c:b7:55:05:ef:0b:5d:c4:ae:04:f8:e6:
         8f:c5:6a:7c:e7:aa:2e:f1:cd:11:b7:fb:29:80:e7:bd:73:38:
         07:5e:ee:32:ab:3e:76:3f:c5:8c:02:e6:ae:67:f4:31:84:47:
         51:b2:f2:19:12:b1:5e:c6:78:4d:ed:60:60:81:6a:30:86:da:
         da:15:90:82:db:0c:8e:bb:bf:04:85:8c:bb:7c:47:d5:f8:50:
         e0:79:79:ae:19:08:aa:62:fe:e4:98:25:1f:3d:a4:e4:90:bb:
         d7:98:d2:a7:a2:38:14:3d:0f:32:1a:e6:69:20:68:d9:10:ec:
         bb:ae:be:a5:07:d7:c1:9d:0e:ba:7e:b6:de:18:38:b2:c6:c0:
         4d:f2:2e:c9:4b:01:59:e7:38:8e:a4:84:cb:28:80:bf:49:a5:
         91:31:fe:aa:19:30:f8:ae:3f:f8:d7:a6:93:14:57:17:9a:c1:
         04:ff:c7:c5:f5:2d:ee:31:85:59:5a:d7:50:e3:de:35:a0:f4:
         75:81:17:fc:fa:c7:33:b4:08:ae:28:ee:ba:75:d7:a3:88:71:
         bf:67:98:7f:31:ac:5c:06:42:a1:94:27:44:11:2e:f6:34:a7:
         99:52:9c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8/1lQkLQ4mpVrD79w/a8VXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi
MGM1YWMwHhcNMjQwNTAzMTkwMjQxWhcNMjQwNTA0MTkwMjQxWjAzMTEwLwYDVQQD
EyhhZDkzYzRhMjgxODYzODIxMjU2ZjZlZGNlZGMzNzFjNTViNjBjYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOFUjD7qVSu2T6wlsDuYLLoxZyrR
poYTZX69XPKE3O20H8jB/HbvoE7OgsLUE/i4QWYT/sspe8lpJXWxI1D9eRLIGiYK
mAQn+dQ2iJKnIkcnjIjiOqwuUwnBqooIBxy+YXWfbT0ZF90kz6/tVlKo4qhFqPG+
5PXgjJiGiDfvF5YJNHtCrOKGSJr9JsLc5s9RWd1yETzP5zPVY4gJfvxKM47e5+Eg
4wVNSR8o0HLXisHEHXKXefZuK9f8Z/7ECGtzPHTNF796/PXLpVEFFHhhP7DPGRb/
sT6G7sJXqFY/8vqK2b3UFu5uRSqcpARNJOQW9jz5+mTa001FxqXXDVa7BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2TxKKBhjghJW9u3O3DccVbYMyIMB8GA1UdIwQY
MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It
Mjg4M2Y4OGE4NmVjLzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj
LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFI+QyNa
gertbOUhe6gvQsOLIqT01wTsXLdVBe8LXcSuBPjmj8VqfOeqLvHNEbf7KYDnvXM4
B17uMqs+dj/FjALmrmf0MYRHUbLyGRKxXsZ4Te1gYIFqMIba2hWQgtsMjru/BIWM
u3xH1fhQ4Hl5rhkIqmL+5JglHz2k5JC715jSp6I4FD0PMhrmaSBo2RDsu66+pQfX
wZ0Oun623hg4ssbATfIuyUsBWec4jqSEyyiAv0mlkTH+qhkw+K4/+NemkxRXF5rB
BP/HxfUt7jGFWVrXUOPeNaD0dYEX/PrHM7QIrijuunXXo4hxv2eYfzGsXAZCoZQn
RBEu9jSnmVKc5A==
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:59 2024 by rpki-client on console-ams.rpki-client.org