Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File:                     94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier:          iUOVVvUj3I50co97CMNa4V/8m9xZd9Fh4Q1cNbaAVWk=
Subject key identifier:   8C:D5:D9:05:98:30:54:BA:FE:CA:CB:22:85:48:EC:86:A4:0C:56:56
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer:       /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial:       018F5136D8279BC02096CC7515848FAE8A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 04:01:39 +0000
Manifest this update:     Tue 07 May 2024 04:01:39 +0000
Manifest next update:     Wed 08 May 2024 04:01:39 +0000
Files and hashes:         1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: NEpG3hrVV9Ei05F5WtRTLgA89kvEhHqLJbipYT4rijU=)
                          2: Sg57p2xVF5BfKuTsjv68Hkc5J4E.roa (hash: b+Jy1ne5NW/fUYc9DY/Iw564clbJeyF8WzHaHcqJAsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:d8:27:9b:c0:20:96:cc:75:15:84:8f:ae:8a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
        Validity
            Not Before: May  7 04:01:39 2024 GMT
            Not After : May  8 04:01:39 2024 GMT
        Subject: CN=8cd5d905983054bafecacb228548ec86a40c5656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:c9:7c:13:9f:ba:77:94:7d:79:62:96:03:
                    71:58:02:a1:f4:1b:23:1d:f5:7d:f8:99:1f:c2:a8:
                    b2:9a:98:4b:53:7a:23:5e:eb:9c:0f:50:e7:33:18:
                    1b:5f:53:8a:4b:fd:9d:92:80:13:0f:60:10:97:9b:
                    59:29:32:1b:95:99:75:d3:6e:c2:03:9c:bf:fa:42:
                    fa:bd:de:d4:a7:95:d4:8c:b6:99:db:2f:71:79:37:
                    e2:26:84:af:c3:2f:8b:a2:34:af:24:7b:f7:27:8e:
                    b9:aa:3e:a2:02:f5:49:ba:0c:f5:ca:e9:d7:07:a3:
                    9f:7c:9d:59:b4:a1:34:d2:75:38:cc:ec:fa:9c:24:
                    ed:db:bb:bb:d6:2b:56:08:78:b1:f6:fd:c7:e6:0a:
                    8c:71:23:c3:cf:c1:50:df:ec:8f:9f:8c:6a:60:a7:
                    b3:b0:f8:3d:bc:46:6b:c1:57:e9:14:f7:de:3d:87:
                    00:18:c0:d3:24:b6:8f:42:15:57:8b:8b:0f:9b:34:
                    9d:c8:f3:e1:0e:2b:d8:51:53:ec:4f:fb:e4:54:d8:
                    fb:e3:a9:12:13:f6:4f:ad:51:7c:2c:c9:64:da:fa:
                    63:5d:13:3c:f1:3c:0e:67:09:28:06:f7:a9:87:1e:
                    40:bd:c3:d4:e0:f1:81:c8:c4:51:05:3e:8c:57:1d:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:D9:05:98:30:54:BA:FE:CA:CB:22:85:48:EC:86:A4:0C:56:56
            X509v3 Authority Key Identifier:
                keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:40:cc:a1:d7:07:19:50:4b:f0:d6:87:7c:97:d2:7e:b2:76:
         a1:c7:40:ab:f4:3b:95:12:53:e8:62:ee:03:75:99:2e:75:da:
         7a:c4:64:9e:af:9a:30:cd:13:f2:a7:9b:6f:c4:f3:91:1f:c6:
         d5:67:0f:0a:4b:46:0f:16:dd:3b:e5:96:fb:f5:d6:ff:fd:39:
         65:55:03:4a:2a:09:5d:bb:07:58:3f:d3:31:05:7a:5a:24:bb:
         37:01:3e:aa:c3:ba:11:c9:e6:54:ec:a7:77:fb:5d:44:ae:32:
         9c:41:c1:ed:ba:a0:de:cd:20:af:56:8c:e0:7b:ad:f3:69:11:
         40:22:a0:a5:e3:e3:b0:9a:6d:53:ce:cc:ad:ed:11:9d:3d:dc:
         d1:37:f6:71:95:26:21:5e:3f:ca:b4:1f:e4:92:df:57:4a:33:
         34:62:00:22:72:ba:5e:f2:1a:4c:8a:b8:91:93:29:95:07:d4:
         7a:13:32:a0:ef:0e:a6:f3:a5:c2:98:90:dd:03:7a:18:d4:3f:
         f3:8a:d2:a4:1a:18:38:13:46:43:92:49:f6:0a:68:39:a4:27:
         18:53:a4:36:89:c5:ae:5e:fe:61:ff:a8:3b:5e:13:e5:33:6c:
         2a:05:6c:78:4b:cb:cc:b9:15:0c:61:7f:67:4e:a6:bd:90:d0:
         97:28:d9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9RNtgnm8Aglsx1FYSProoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODA2YWMzNWYyZWFjMDJjY2EwNDZkNjUwZmIyMmJlZmVl
NjhkNDMwHhcNMjQwNTA3MDQwMTM5WhcNMjQwNTA4MDQwMTM5WjAzMTEwLwYDVQQD
Eyg4Y2Q1ZDkwNTk4MzA1NGJhZmVjYWNiMjI4NTQ4ZWM4NmE0MGM1NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiXJfBOfuneUfXlilgNxWAKh9Bsj
HfV9+JkfwqiymphLU3ojXuucD1DnMxgbX1OKS/2dkoATD2AQl5tZKTIblZl1027C
A5y/+kL6vd7Up5XUjLaZ2y9xeTfiJoSvwy+LojSvJHv3J465qj6iAvVJugz1yunX
B6OffJ1ZtKE00nU4zOz6nCTt27u71itWCHix9v3H5gqMcSPDz8FQ3+yPn4xqYKez
sPg9vEZrwVfpFPfePYcAGMDTJLaPQhVXi4sPmzSdyPPhDivYUVPsT/vkVNj746kS
E/ZPrVF8LMlk2vpjXRM88TwOZwkoBvephx5AvcPU4PGByMRRBT6MVx0ijQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzV2QWYMFS6/srLIoVI7IakDFZWMB8GA1UdIwQY
MBaAFPeAasNfLqwCzKBG1lD7Ir7+5o1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDct
YTczNWNhMTA4NGI3LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDctYTczNWNhMTA4NGI3
LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEDModcH
GVBL8NaHfJfSfrJ2ocdAq/Q7lRJT6GLuA3WZLnXaesRknq+aMM0T8qebb8TzkR/G
1WcPCktGDxbdO+WW+/XW//05ZVUDSioJXbsHWD/TMQV6WiS7NwE+qsO6EcnmVOyn
d/tdRK4ynEHB7bqg3s0gr1aM4Hut82kRQCKgpePjsJptU87Mre0RnT3c0Tf2cZUm
IV4/yrQf5JLfV0ozNGIAInK6XvIaTIq4kZMplQfUehMyoO8OpvOlwpiQ3QN6GNQ/
84rSpBoYOBNGQ5JJ9gpoOaQnGFOkNonFrl7+Yf+oO14T5TNsKgVseEvLzLkVDGF/
Z06mvZDQlyjZtg==
-----END CERTIFICATE-----
Generated at Tue May 7 04:40:39 2024 by rpki-client on console-ams.rpki-client.org