Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File:                     2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier:          +jZECDFc8jVcc6+j6WCCn/B7i6WFsanJ42tyi4PDVdA=
Subject key identifier:   01:25:C4:6F:49:08:9F:B8:7A:72:63:2A:7E:4B:7A:55:D4:4C:7D:FB
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer:       /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial:       018F30617BFE07C92FD108E85CAEC236954C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number:          0469
Signing time:             Tue 30 Apr 2024 19:00:46 +0000
Manifest this update:     Tue 30 Apr 2024 19:00:46 +0000
Manifest next update:     Wed 01 May 2024 19:00:46 +0000
Files and hashes:         1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: PlbHOVIxGA+9VzeMFpMI7tUY5iuUrcB8Az5nzpdxF7A=)
                          2: U8pwIecwqorSeXk_mzc57g3zCb0.roa (hash: rfxCPVTnIhL1ZrRMuFDH5zMC+/TouQ1Hqyesgw9ieAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 13:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:61:7b:fe:07:c9:2f:d1:08:e8:5c:ae:c2:36:95:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
        Validity
            Not Before: Apr 30 19:00:46 2024 GMT
            Not After : May  1 19:00:46 2024 GMT
        Subject: CN=0125c46f49089fb87a72632a7e4b7a55d44c7dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:bc:36:18:c8:fb:a2:a1:74:36:3e:28:14:
                    2d:91:cd:5a:6e:a1:81:bd:8d:e8:5d:5c:62:2d:04:
                    ef:ec:7e:17:fa:be:15:67:13:20:d2:e3:84:00:30:
                    58:5a:0c:8c:bd:49:00:e6:61:e4:eb:cf:a9:ff:f7:
                    52:cc:88:75:56:b5:18:ed:0d:f7:27:06:52:a8:f3:
                    9c:89:8f:46:d9:32:39:29:35:7e:25:b4:49:af:a3:
                    bb:57:4c:04:de:e9:fa:72:51:a5:18:e1:c5:4d:4e:
                    29:ca:7e:0f:88:11:77:57:4d:0e:3e:c3:9e:bd:01:
                    d2:2e:62:56:ec:45:99:d6:f2:73:ea:2c:0e:f3:13:
                    22:f6:9f:99:43:31:c9:44:81:0e:98:fe:32:a9:25:
                    2b:ae:d3:c4:bc:6f:84:b1:51:1d:b4:27:47:77:b3:
                    42:aa:c2:b2:ae:d6:e1:b0:17:7f:01:6e:81:c6:ae:
                    80:17:e4:2b:3a:38:bc:cc:19:0c:10:e9:7d:3b:87:
                    4b:73:a5:c7:ec:af:8e:13:9d:f2:0c:73:59:c6:5f:
                    bf:28:b0:4e:49:62:05:7d:94:82:50:31:27:21:71:
                    11:f7:76:d5:2e:7e:ff:f4:a3:79:1b:3b:19:6b:be:
                    27:12:9c:f6:cf:0c:04:64:87:80:48:ef:40:25:37:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:C4:6F:49:08:9F:B8:7A:72:63:2A:7E:4B:7A:55:D4:4C:7D:FB
            X509v3 Authority Key Identifier:
                keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:eb:48:1d:70:c2:dd:55:41:39:86:38:d4:f5:17:46:5e:9c:
         a8:da:8f:53:e6:72:76:d1:44:da:83:17:ce:57:de:ae:e3:6a:
         75:ba:d8:fc:1e:8f:da:f6:81:7d:1f:df:48:8d:7c:5c:ff:7e:
         9f:bb:42:fd:7f:55:19:d5:b3:35:0e:3c:c9:9d:f6:02:e4:00:
         77:8d:f7:9d:a8:88:e3:e6:79:40:99:5a:6b:f8:4a:1e:1b:02:
         1b:fc:cd:a9:c6:e6:12:19:92:ff:5b:7f:ed:7b:56:0e:88:be:
         9c:5f:c7:bd:8d:f3:c0:28:8a:f0:cd:44:4c:12:f5:fb:f2:83:
         e4:b2:02:0c:87:da:bd:90:3a:3b:9e:d7:18:fb:65:41:f9:1c:
         8b:ac:84:1b:19:9c:96:ff:34:f4:85:a0:ac:fc:e4:ff:43:91:
         85:c4:34:b4:9e:e5:ce:ae:ec:e0:b0:32:ea:b1:24:64:a6:d8:
         84:e1:09:09:7e:11:e3:13:9d:6e:39:56:f0:9d:40:26:fe:83:
         56:8a:f4:fa:84:cf:7f:b2:94:7d:d3:cf:c4:c4:cb:8c:43:3f:
         0e:91:cb:bc:64:ca:fe:9d:7e:63:ec:d6:13:d3:1d:94:6c:0f:
         6d:28:ed:ed:ef:47:7c:74:b2:1a:a5:56:e0:00:86:99:69:d5:
         07:ef:28:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8wYXv+B8kv0QjoXK7CNpVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQwZDczOGM3YWYwMzU5YTA2MzAzNjU0MTY0NDBkMDE5
ODViYTIwHhcNMjQwNDMwMTkwMDQ2WhcNMjQwNTAxMTkwMDQ2WjAzMTEwLwYDVQQD
EygwMTI1YzQ2ZjQ5MDg5ZmI4N2E3MjYzMmE3ZTRiN2E1NWQ0NGM3ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNC8NhjI+6KhdDY+KBQtkc1abqGB
vY3oXVxiLQTv7H4X+r4VZxMg0uOEADBYWgyMvUkA5mHk68+p//dSzIh1VrUY7Q33
JwZSqPOciY9G2TI5KTV+JbRJr6O7V0wE3un6clGlGOHFTU4pyn4PiBF3V00OPsOe
vQHSLmJW7EWZ1vJz6iwO8xMi9p+ZQzHJRIEOmP4yqSUrrtPEvG+EsVEdtCdHd7NC
qsKyrtbhsBd/AW6Bxq6AF+QrOji8zBkMEOl9O4dLc6XH7K+OE53yDHNZxl+/KLBO
SWIFfZSCUDEnIXER93bVLn7/9KN5GzsZa74nEpz2zwwEZIeASO9AJTfkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAElxG9JCJ+4enJjKn5LelXUTH37MB8GA1UdIwQY
MBaAFNmtDXOMevA1mgYwNlQWRA0BmFuiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmEwTmM0eDY4RFdhQmpBMlZCWkVEUUdZVzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZGQ4MGItYzViNC00ZTZjLWJhMmUt
YjEzN2NmYjM3NDYzLzEvMmEwTmM0eDY4RFdhQmpBMlZCWkVEUUdZVzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZGQ4MGItYzViNC00ZTZjLWJhMmUtYjEzN2NmYjM3NDYz
LzEvMmEwTmM0eDY4RFdhQmpBMlZCWkVEUUdZVzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATutIHXDC
3VVBOYY41PUXRl6cqNqPU+ZydtFE2oMXzlferuNqdbrY/B6P2vaBfR/fSI18XP9+
n7tC/X9VGdWzNQ48yZ32AuQAd433naiI4+Z5QJlaa/hKHhsCG/zNqcbmEhmS/1t/
7XtWDoi+nF/HvY3zwCiK8M1ETBL1+/KD5LICDIfavZA6O57XGPtlQfkci6yEGxmc
lv809IWgrPzk/0ORhcQ0tJ7lzq7s4LAy6rEkZKbYhOEJCX4R4xOdbjlW8J1AJv6D
Vor0+oTPf7KUfdPPxMTLjEM/DpHLvGTK/p1+Y+zWE9MdlGwPbSjt7e9HfHSyGqVW
4ACGmWnVB+8oLw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 22:21:18 2024 by rpki-client on console-ams.rpki-client.org