Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File:                     dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier:          LpZ/CvmzkOhh03XdWbPPzjmxutjP/JQcXN/or+2MmHQ=
Subject key identifier:   D7:CB:26:A7:0C:64:CC:BF:FF:AD:D1:2F:02:9E:4B:0B:DF:8A:D3:15
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer:       /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial:       018F87ED6A867A8313670611C24FB31032A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: jXKYwqEpxBdGoisVgdscgDZvtRGV80lLbhxVGC+McOA=)
                          2: grzrGg4_ToMbBX9iaB8jKFatUlk.roa (hash: rjONq1y4IsPKttoDvDDiwmzXpuQJimcBu0cOd2DCgNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6a:86:7a:83:13:67:06:11:c2:4f:b3:10:32:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=d7cb26a70c64ccbfffadd12f029e4b0bdf8ad315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a8:1e:9d:47:1b:37:c5:58:dc:51:00:70:31:
                    ce:28:58:97:4f:c5:26:ef:62:2d:57:f1:64:a9:49:
                    5f:57:2a:42:7d:bd:92:c8:89:d4:c3:cd:89:74:dd:
                    34:5e:f7:9d:95:cb:12:b8:96:11:1e:5f:f2:cd:d7:
                    72:e7:f7:80:ac:f6:5d:40:26:82:87:4e:c4:ad:53:
                    e8:7d:9d:ab:98:21:ce:f7:c5:9b:e5:fe:c9:10:82:
                    88:86:90:fc:49:d5:15:7e:e5:e7:c4:6f:f5:66:2a:
                    aa:5f:0d:e6:c9:73:07:14:0f:bb:a2:0a:1e:cc:4b:
                    3c:99:99:a6:75:11:92:fb:55:46:71:a1:48:47:88:
                    02:47:23:7a:16:d8:50:cb:67:cb:64:d7:a0:4d:61:
                    cf:ee:d7:45:1d:a2:d6:8c:f3:00:75:2f:12:99:60:
                    cd:e2:e9:75:d6:d6:dc:62:d0:30:f9:62:b0:ad:90:
                    4e:74:4f:32:76:14:4d:24:b5:fa:02:ed:2a:80:ba:
                    12:2c:c4:a8:3c:6e:ed:5f:60:3c:b1:33:23:dc:39:
                    6e:6c:cc:c0:d5:8b:6a:75:e3:3b:79:d3:0b:df:ad:
                    fa:73:5b:0c:73:5d:f8:a7:1a:3b:1c:19:0a:68:fc:
                    1f:77:af:f9:f1:a9:68:5d:45:96:b6:0d:14:25:1c:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:26:A7:0C:64:CC:BF:FF:AD:D1:2F:02:9E:4B:0B:DF:8A:D3:15
            X509v3 Authority Key Identifier:
                keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:42:78:5b:8d:77:3f:2a:69:de:6d:eb:43:de:d7:88:be:
         d1:01:0c:34:b2:d8:6e:65:e5:1f:69:3f:6e:87:f1:ea:b2:c8:
         bb:0c:d1:7d:0a:29:19:2e:9f:83:f6:82:02:6d:b6:47:47:bc:
         5c:2b:cb:f0:15:21:9f:1a:a1:da:96:f0:71:e0:97:44:8d:94:
         45:9f:6e:65:de:9d:ff:ae:87:e6:38:6c:5b:53:71:87:3f:28:
         48:2d:16:0d:24:5b:6c:07:9a:ba:1f:f0:8e:e6:2a:87:fd:34:
         8d:92:ca:d2:bc:ef:97:d5:81:80:a6:23:ae:30:ea:7c:ea:39:
         00:d1:fb:46:2e:81:fc:34:1f:52:aa:ac:22:a3:8d:77:1e:9f:
         7f:e5:7a:37:10:66:80:b3:91:06:bf:f9:e0:92:15:2b:89:94:
         bb:4e:05:63:2e:7c:9a:f3:e4:f1:37:02:ca:0a:96:34:d8:10:
         cd:9c:a7:98:2c:90:70:b8:ac:ca:41:34:48:92:ee:b2:6e:07:
         76:2d:ec:ca:2b:74:d8:eb:1e:db:1e:61:6a:87:da:11:10:fd:
         7d:fb:aa:0b:37:0e:8c:f3:ea:58:66:4e:1e:68:0c:30:1e:aa:
         83:cf:bc:f9:d0:d6:d3:ca:a3:9c:9f:f8:23:ad:34:f6:fe:de:
         37:d3:c5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7WqGeoMTZwYRwk+zEDKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjkzNjljNmUyM2MxYmYwZGJlZDMwMWM3ZDAwYjRhM2Zk
ZjBkMDQwHhcNMjQwNTE3MTkwMDM0WhcNMjQwNTE4MTkwMDM0WjAzMTEwLwYDVQQD
EyhkN2NiMjZhNzBjNjRjY2JmZmZhZGQxMmYwMjllNGIwYmRmOGFkMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qgenUcbN8VY3FEAcDHOKFiXT8Um
72ItV/FkqUlfVypCfb2SyInUw82JdN00XvedlcsSuJYRHl/yzddy5/eArPZdQCaC
h07ErVPofZ2rmCHO98Wb5f7JEIKIhpD8SdUVfuXnxG/1ZiqqXw3myXMHFA+7ogoe
zEs8mZmmdRGS+1VGcaFIR4gCRyN6FthQy2fLZNegTWHP7tdFHaLWjPMAdS8SmWDN
4ul11tbcYtAw+WKwrZBOdE8ydhRNJLX6Au0qgLoSLMSoPG7tX2A8sTMj3DlubMzA
1YtqdeM7edML3636c1sMc134pxo7HBkKaPwfd6/58aloXUWWtg0UJRwE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfLJqcMZMy//63RLwKeSwvfitMVMB8GA1UdIwQY
MBaAFHT5NpxuI8G/Db7TAcfQC0o/3w0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTkt
MmI1MThhY2I3OGYzLzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTktMmI1MThhY2I3OGYz
LzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowlCeFuN
dz8qad5t60Pe14i+0QEMNLLYbmXlH2k/bofx6rLIuwzRfQopGS6fg/aCAm22R0e8
XCvL8BUhnxqh2pbwceCXRI2URZ9uZd6d/66H5jhsW1Nxhz8oSC0WDSRbbAeauh/w
juYqh/00jZLK0rzvl9WBgKYjrjDqfOo5ANH7Ri6B/DQfUqqsIqONdx6ff+V6NxBm
gLORBr/54JIVK4mUu04FYy58mvPk8TcCygqWNNgQzZynmCyQcLisykE0SJLusm4H
di3syit02Ose2x5haofaERD9ffuqCzcOjPPqWGZOHmgMMB6qg8+8+dDW08qjnJ/4
I6009v7eN9PF/w==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:55 2024 by rpki-client on console-fra.rpki-client.org