Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File:                     L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier:          zbkebzKfSfp9yeVObj/oDCieZK2e3IWF4/a1wbBe+gE=
Subject key identifier:   D3:6E:27:B4:19:5E:78:9F:94:BA:8A:CC:E3:25:67:56:CC:9E:A3:2A
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       018F88243617A07FF589562E082B383F0C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number:          0984
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: WFg4+ofGhwGFLrVzb69wEzWqvf7dQZW4o9l+mtT63Vo=)
                          2: LMYzpDhG9hiT3ethjCpkWgbBWDg.roa (hash: WVqYQy2VW11n+Xc8Md58cvwZSyY3z/8amIRjhjD40lA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:36:17:a0:7f:f5:89:56:2e:08:2b:38:3f:0c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=d36e27b4195e789f94ba8acce3256756cc9ea32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:b7:0e:83:b6:97:e2:29:f7:08:74:bd:9d:
                    c3:84:d9:19:ec:c8:46:5a:c9:ad:50:8c:07:9d:28:
                    c2:9c:0b:61:02:fb:d7:3f:77:10:75:6a:96:19:99:
                    e2:2d:3a:b5:56:6a:d8:d3:6d:b0:d6:e9:b8:8c:7d:
                    a3:18:41:74:58:a9:8f:23:8c:80:32:b8:30:ed:74:
                    cb:fc:b3:1b:c6:21:04:6d:eb:29:17:03:da:0d:83:
                    5e:76:49:74:e0:93:60:bf:8d:0b:0e:ed:b6:bf:b6:
                    e9:c4:4e:1e:6a:d7:85:1d:ce:33:f6:67:ec:98:8d:
                    43:66:1f:b5:9e:29:d3:9b:19:de:d1:48:82:6f:4a:
                    fb:13:64:d8:94:69:9b:b1:d9:50:0e:b9:c2:de:3a:
                    e6:dc:62:0e:a3:20:73:ae:74:36:4b:90:e3:e9:08:
                    ae:a4:98:7d:18:50:7d:89:cd:4c:80:f1:80:8c:21:
                    9e:c9:de:81:07:ce:e5:b9:6c:6f:63:37:ee:5a:7f:
                    0e:50:83:47:70:6e:51:6a:c2:ac:a2:89:7c:f6:cd:
                    ad:1a:83:b1:76:52:6b:74:00:fc:74:17:2a:15:38:
                    6d:11:2d:73:2a:10:96:5f:18:2a:a4:06:5b:25:17:
                    a2:9c:4c:26:b7:fb:1f:b3:1e:1d:f1:82:cf:dd:75:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:27:B4:19:5E:78:9F:94:BA:8A:CC:E3:25:67:56:CC:9E:A3:2A
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:c3:86:b6:2f:ba:3d:da:2b:fa:69:80:65:02:78:91:ae:
         ee:b5:24:c9:4c:a9:5a:09:9c:e9:30:c4:3e:5f:b9:f1:a7:32:
         26:db:ca:fa:7d:fb:5a:fa:57:f6:f3:91:7f:83:45:81:05:76:
         d0:40:d3:08:eb:d1:21:d5:94:dd:07:2c:d8:f3:c6:8d:d5:b0:
         64:20:0c:38:b0:35:9e:cc:3e:6b:31:b2:f6:25:bd:6a:7c:3b:
         7b:62:6a:c1:9a:89:9b:4d:90:13:ac:b0:78:ba:fc:4d:aa:6c:
         52:c2:00:4b:9f:54:e2:cc:b6:59:4f:10:ca:80:b1:c0:c6:8c:
         b3:ea:13:2d:ab:df:15:b5:5f:b1:fa:df:00:02:45:5b:0f:b8:
         3b:64:d2:1d:88:42:e6:47:a2:ed:18:41:b6:01:36:5f:66:af:
         ff:65:f9:29:7a:b9:87:3c:70:47:fe:30:01:96:bd:b9:48:f3:
         97:9f:26:ec:ae:b4:ec:fc:06:54:dd:f6:34:b1:e6:3d:3c:15:
         2e:f0:4e:f1:77:b4:0e:65:98:73:58:9a:22:ee:d5:00:63:32:
         53:38:ad:ca:ae:ce:f6:bb:91:1c:18:90:8d:34:1b:77:bb:81:
         34:f8:ad:9a:cd:b2:a6:2e:db:ee:3f:9c:dd:c9:59:4f:2e:63:
         e9:a4:7a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJDYXoH/1iVYuCCs4PwxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz
MjUxOWYwHhcNMjQwNTE3MjAwMDI1WhcNMjQwNTE4MjAwMDI1WjAzMTEwLwYDVQQD
EyhkMzZlMjdiNDE5NWU3ODlmOTRiYThhY2NlMzI1Njc1NmNjOWVhMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIK3DoO2l+Ip9wh0vZ3DhNkZ7MhG
WsmtUIwHnSjCnAthAvvXP3cQdWqWGZniLTq1VmrY022w1um4jH2jGEF0WKmPI4yA
Mrgw7XTL/LMbxiEEbespFwPaDYNedkl04JNgv40LDu22v7bpxE4eateFHc4z9mfs
mI1DZh+1ninTmxne0UiCb0r7E2TYlGmbsdlQDrnC3jrm3GIOoyBzrnQ2S5Dj6Qiu
pJh9GFB9ic1MgPGAjCGeyd6BB87luWxvYzfuWn8OUINHcG5RasKsool89s2tGoOx
dlJrdAD8dBcqFThtES1zKhCWXxgqpAZbJReinEwmt/sfsx4d8YLP3XVkjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNuJ7QZXniflLqKzOMlZ1bMnqMqMB8GA1UdIwQY
MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt
Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx
LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmovDhrYv
uj3aK/ppgGUCeJGu7rUkyUypWgmc6TDEPl+58acyJtvK+n37WvpX9vORf4NFgQV2
0EDTCOvRIdWU3Qcs2PPGjdWwZCAMOLA1nsw+azGy9iW9anw7e2JqwZqJm02QE6yw
eLr8TapsUsIAS59U4sy2WU8QyoCxwMaMs+oTLavfFbVfsfrfAAJFWw+4O2TSHYhC
5kei7RhBtgE2X2av/2X5KXq5hzxwR/4wAZa9uUjzl58m7K607PwGVN32NLHmPTwV
LvBO8Xe0DmWYc1iaIu7VAGMyUzityq7O9ruRHBiQjTQbd7uBNPitms2ypi7b7j+c
3clZTy5j6aR6Uw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:03:04 2024 by rpki-client on console-fra.rpki-client.org