Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File:                     0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier:          RGJJV27tbbnovw8aWax70dgwuHEqrevLMISd564qWOk=
Subject key identifier:   58:54:64:49:96:74:E8:53:F3:12:89:68:B7:1C:66:13:53:57:5E:E6
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer:       /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial:       018F41C480F86B04FD428FDFDD111D3F4921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number:          102D
Signing time:             Sat 04 May 2024 04:02:28 +0000
Manifest this update:     Sat 04 May 2024 04:02:28 +0000
Manifest next update:     Sun 05 May 2024 04:02:28 +0000
Files and hashes:         1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: eMkm7LmE6dBmPVufTuG90OVY5juj2MMzYjNzkSffbgM=)
                          2: 5OyVQW2sBLnJX0nNBzVLSCiFeHg.roa (hash: eWzzqB3br4Tei99WFB4rriFZ8voH36Trqg6kK0oD/Cg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:80:f8:6b:04:fd:42:8f:df:dd:11:1d:3f:49:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
        Validity
            Not Before: May  4 04:02:28 2024 GMT
            Not After : May  5 04:02:28 2024 GMT
        Subject: CN=585464499674e853f3128968b71c661353575ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:ac:60:34:cb:b1:61:cc:46:7e:c9:e0:1b:
                    ce:79:32:36:18:8e:50:d7:ad:9c:a6:08:e9:dd:e2:
                    38:14:da:de:22:1b:51:23:2b:24:3d:08:ce:d3:e5:
                    71:82:14:ff:2e:79:19:c0:cc:75:6f:17:5d:7d:41:
                    36:5f:3f:60:e7:1f:66:3a:aa:a4:61:03:e3:ff:fe:
                    8c:d0:e2:dc:b1:54:96:2e:38:17:30:a4:0d:3f:9e:
                    c6:55:7f:5b:30:d6:d2:f5:e2:fb:02:d5:ae:48:cc:
                    c3:70:72:b3:77:e6:92:20:22:dd:ec:d5:dd:14:c6:
                    7f:b3:e3:38:3d:d4:08:bf:a9:16:d3:7e:c1:de:36:
                    57:7b:84:04:89:d7:9d:e3:47:29:98:a3:80:e7:16:
                    d9:d4:c6:63:c2:d5:c6:62:aa:83:31:5c:87:16:4c:
                    50:3b:bb:0a:74:ef:37:20:92:f6:54:e3:51:18:00:
                    47:24:53:b1:29:d9:1f:40:6a:3d:05:25:53:7f:96:
                    30:ae:8a:16:bd:31:0e:fa:cc:a7:d8:9c:57:c9:be:
                    07:db:83:3e:13:91:d5:13:c8:99:41:0d:78:1a:ae:
                    7f:8b:12:6b:da:78:b1:32:9d:41:51:fb:b7:79:95:
                    f4:ab:5c:a4:db:95:6e:0d:57:3d:2b:b4:b4:f0:74:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:54:64:49:96:74:E8:53:F3:12:89:68:B7:1C:66:13:53:57:5E:E6
            X509v3 Authority Key Identifier:
                keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:bc:6d:e4:fa:75:b5:88:fa:c0:28:8d:64:82:51:4e:e1:
         a2:3a:53:7c:71:23:c7:7f:a6:5f:5c:67:94:5a:d2:97:d1:5c:
         2a:3b:db:ac:d6:90:11:fc:bf:70:49:90:19:99:94:40:f6:f5:
         7f:36:c5:05:e3:27:43:67:da:a9:8c:19:2c:e3:46:e0:c6:8d:
         37:ed:f5:96:54:63:d1:d0:8d:f4:32:bc:0b:52:2d:ea:5b:bd:
         fa:d6:2c:0e:4e:7c:74:ea:8f:31:85:3f:a5:87:38:5e:d8:45:
         f6:e3:ae:72:32:c0:2f:53:91:2f:78:97:02:91:0f:d3:82:9a:
         50:40:58:0f:23:c0:e8:e5:f6:7a:c7:7a:57:98:1f:8f:d0:a5:
         35:b3:32:d1:9e:bc:11:7e:93:9f:a3:df:25:99:ea:58:17:3a:
         94:97:23:c5:89:b1:c3:e4:a3:fc:37:9b:fd:ab:2e:0b:f5:3a:
         2a:9b:6d:f6:c3:1c:2a:03:ff:62:67:ed:a9:b7:1d:d7:e8:90:
         78:73:50:ec:e6:57:2b:49:56:df:29:61:47:e5:ac:ac:5f:4d:
         aa:cf:29:61:02:93:6c:4f:1b:ad:18:bd:73:e8:6c:08:f0:78:
         01:3d:e5:0c:d8:02:2e:2f:f1:6c:4b:39:dc:7e:4e:2f:d8:b7:
         14:6a:ac:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxID4awT9Qo/f3REdP0khMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWI5MGI4OTgxYjU5MWQ3NWE3ZTkzNWUxMzA0YTc0MDc1
NjAyZmQwHhcNMjQwNTA0MDQwMjI4WhcNMjQwNTA1MDQwMjI4WjAzMTEwLwYDVQQD
Eyg1ODU0NjQ0OTk2NzRlODUzZjMxMjg5NjhiNzFjNjYxMzUzNTc1ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN2sYDTLsWHMRn7J4BvOeTI2GI5Q
162cpgjp3eI4FNreIhtRIyskPQjO0+VxghT/LnkZwMx1bxddfUE2Xz9g5x9mOqqk
YQPj//6M0OLcsVSWLjgXMKQNP57GVX9bMNbS9eL7AtWuSMzDcHKzd+aSICLd7NXd
FMZ/s+M4PdQIv6kW037B3jZXe4QEided40cpmKOA5xbZ1MZjwtXGYqqDMVyHFkxQ
O7sKdO83IJL2VONRGABHJFOxKdkfQGo9BSVTf5YwrooWvTEO+syn2JxXyb4H24M+
E5HVE8iZQQ14Gq5/ixJr2nixMp1BUfu3eZX0q1yk25VuDVc9K7S08HSyTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhUZEmWdOhT8xKJaLccZhNTV17mMB8GA1UdIwQY
MBaAFNJbkLiYG1kddafpNeEwSnQHVgL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODct
YTJhYmRhZGY1ZjkwLzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODctYTJhYmRhZGY1Zjkw
LzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEW8beT6
dbWI+sAojWSCUU7hojpTfHEjx3+mX1xnlFrSl9FcKjvbrNaQEfy/cEmQGZmUQPb1
fzbFBeMnQ2faqYwZLONG4MaNN+31llRj0dCN9DK8C1It6lu9+tYsDk58dOqPMYU/
pYc4XthF9uOucjLAL1ORL3iXApEP04KaUEBYDyPA6OX2esd6V5gfj9ClNbMy0Z68
EX6Tn6PfJZnqWBc6lJcjxYmxw+Sj/Deb/asuC/U6Kptt9sMcKgP/Ymftqbcd1+iQ
eHNQ7OZXK0lW3ylhR+WsrF9Nqs8pYQKTbE8brRi9c+hsCPB4AT3lDNgCLi/xbEs5
3H5OL9i3FGqsMw==
-----END CERTIFICATE-----
Generated at Sat May 4 04:45:49 2024 by rpki-client on console-ams.rpki-client.org