Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          QcKeO3p9+m0oWmi0uG7LxSXN+3R7TqsN4ku6gqFHtss=
Subject key identifier:   44:3E:84:E3:FC:D4:5F:35:63:60:F0:CD:0B:36:51:0E:BA:91:82:C8
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       018F4DC79C7F89675E9D75C69217AFC2321C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          1094
Signing time:             Mon 06 May 2024 12:01:18 +0000
Manifest this update:     Mon 06 May 2024 12:01:18 +0000
Manifest next update:     Tue 07 May 2024 12:01:18 +0000
Files and hashes:         1: 35f_ExqWlgA30aXvA3fAcJ_qtDA.roa (hash: c0Ivmu64VDJsn1Z/81ir/mTbfoBN5OW8ckBxfhzSoQ8=)
                          2: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: pD+Ik+hGsaHSTM51D10xoydzDuYfJ9VHSo7UJAls0J4=)
                          3: QXA99S1k6Asan8-BTrNul16ObrU.roa (hash: UnHi0qW3/ULjmDWS+QsHP22dQs7SpyUU73eE860LPNc=)
                          4: WGpbVtRMCFeY0kXG1iMGHvGnAzg.roa (hash: RQsxcvOVFJkbUQag6cXjNtdflKlTMxHv6l8IASfcOEs=)
                          5: X7uupdxUiGMOF725CcHOImVQM78.roa (hash: H5Yc1Yo3xOKH/VY7B/uFOhsTp2GIG87B6TDfyJUNI7U=)
                          6: rDqiDMFQgQtuVDMCw2Oy9-JGfO4.roa (hash: hzOvR1N2kJSP5DdPDaRCa/batoh8kSj3bxC9qXCVYP0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:9c:7f:89:67:5e:9d:75:c6:92:17:af:c2:32:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: May  6 12:01:18 2024 GMT
            Not After : May  7 12:01:18 2024 GMT
        Subject: CN=443e84e3fcd45f356360f0cd0b36510eba9182c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:ed:7a:e6:0e:79:fc:15:4e:14:79:9d:da:
                    bc:06:aa:fe:1c:bd:0d:63:bb:f5:15:4f:a1:56:47:
                    f5:92:53:5a:d5:e6:97:b2:3e:c0:82:f5:e1:ae:ee:
                    2f:01:10:91:57:8c:51:73:9c:90:6f:a3:89:2d:b2:
                    72:51:15:b7:ed:82:42:55:66:16:e0:55:e2:fd:4c:
                    cd:80:09:63:82:a4:6a:89:45:56:c4:ba:99:b2:c3:
                    8f:8d:f0:73:88:90:6e:fc:93:f0:16:7d:41:d4:1d:
                    7a:93:72:ce:01:29:9b:a1:dc:dd:16:00:8f:ad:74:
                    0e:c8:79:bf:64:6e:23:59:ea:5f:34:0b:7e:d9:08:
                    c4:00:a9:e2:38:08:b7:17:c9:38:c8:a7:14:9f:d9:
                    3b:44:db:b0:0d:d8:30:63:d9:16:2d:dc:f5:06:dd:
                    36:ea:3d:9d:05:23:15:9c:4f:b0:41:40:0f:2c:46:
                    3b:44:f6:72:97:b5:b5:59:cf:ae:7f:4d:35:65:12:
                    25:aa:f7:bd:d8:01:e3:04:a7:40:8b:21:42:55:2a:
                    19:f4:33:9a:c7:df:d8:17:fe:41:63:41:cd:b8:5d:
                    d7:0a:b2:d5:59:2f:ba:6a:d1:6c:66:a6:d1:75:97:
                    76:ac:58:48:41:9c:75:d6:58:2a:d4:ea:79:a1:72:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3E:84:E3:FC:D4:5F:35:63:60:F0:CD:0B:36:51:0E:BA:91:82:C8
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:73:ea:79:71:2c:ee:30:dd:1a:47:35:5e:8e:4b:2b:44:
         3e:76:96:0e:3d:a6:87:0b:3f:e0:13:3a:ce:aa:e4:00:86:c2:
         06:40:79:c9:dc:04:35:d2:3d:31:a5:23:db:1d:d8:79:9a:56:
         9c:3b:53:76:ad:df:e2:27:e9:c7:fe:e5:8a:cb:40:2f:2f:64:
         93:ce:7d:54:5c:ae:bf:5c:76:85:b8:8b:44:5e:e3:68:e0:58:
         f4:f1:88:40:46:57:d7:f7:e8:15:7c:88:48:25:ab:3d:e4:4e:
         c1:73:28:9d:85:e7:23:2c:d1:1f:b9:9a:2c:fd:39:df:9d:f1:
         53:8c:b3:cd:f1:ea:6e:08:1d:23:cb:81:f8:81:18:f5:8f:c6:
         b3:7d:41:b4:7e:f6:6b:5f:84:32:f4:b4:3e:68:a3:f2:82:d4:
         b3:8f:b1:11:8f:23:49:16:99:df:cb:9a:90:78:34:a4:8d:b6:
         77:aa:fe:70:0f:f0:8c:ec:d2:29:23:8c:5d:1e:c4:e2:65:7c:
         19:6b:7f:3d:8c:b5:de:cd:df:7f:a0:b8:88:a8:25:c5:c6:ea:
         c4:70:24:fe:1c:81:58:4f:08:ed:62:c4:4f:f5:37:89:5f:63:
         75:dd:ce:1b:ab:4e:c4:0e:b9:16:a1:a9:1e:5d:92:77:09:0d:
         80:43:5a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Nx5x/iWdenXXGkhevwjIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjQwNTA2MTIwMTE4WhcNMjQwNTA3MTIwMTE4WjAzMTEwLwYDVQQD
Eyg0NDNlODRlM2ZjZDQ1ZjM1NjM2MGYwY2QwYjM2NTEwZWJhOTE4MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoubteuYOefwVThR5ndq8Bqr+HL0N
Y7v1FU+hVkf1klNa1eaXsj7AgvXhru4vARCRV4xRc5yQb6OJLbJyURW37YJCVWYW
4FXi/UzNgAljgqRqiUVWxLqZssOPjfBziJBu/JPwFn1B1B16k3LOASmbodzdFgCP
rXQOyHm/ZG4jWepfNAt+2QjEAKniOAi3F8k4yKcUn9k7RNuwDdgwY9kWLdz1Bt02
6j2dBSMVnE+wQUAPLEY7RPZyl7W1Wc+uf001ZRIlqve92AHjBKdAiyFCVSoZ9DOa
x9/YF/5BY0HNuF3XCrLVWS+6atFsZqbRdZd2rFhIQZx11lgq1Op5oXJ+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ+hOP81F81Y2DwzQs2UQ66kYLIMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlxz6nlx
LO4w3RpHNV6OSytEPnaWDj2mhws/4BM6zqrkAIbCBkB5ydwENdI9MaUj2x3YeZpW
nDtTdq3f4ifpx/7listALy9kk859VFyuv1x2hbiLRF7jaOBY9PGIQEZX1/foFXyI
SCWrPeROwXMonYXnIyzRH7maLP05353xU4yzzfHqbggdI8uB+IEY9Y/Gs31BtH72
a1+EMvS0Pmij8oLUs4+xEY8jSRaZ38uakHg0pI22d6r+cA/wjOzSKSOMXR7E4mV8
GWt/PYy13s3ff6C4iKglxcbqxHAk/hyBWE8I7WLET/U3iV9jdd3OG6tOxA65FqGp
Hl2SdwkNgENaHg==
-----END CERTIFICATE-----
Generated at Mon May 6 21:54:18 2024 by rpki-client on console-fra.rpki-client.org