Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
File:                     1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft (raw, json)
Hash identifier:          d5boSvUy/m7oZqBBsjP1YpuJU32OOFNbnkO0/KgS1sI=
Subject key identifier:   85:24:AC:D0:A2:30:6B:1C:03:5D:EC:8E:A2:50:5E:5F:F4:A9:74:36
Authority key identifier: D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71
Certificate issuer:       /CN=d5b8670ca93364f3443f82e3011eac1537197771
Certificate serial:       018F8E2615FF612C803158ED1C465244C2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
Manifest number:          07A2
Signing time:             Sun 19 May 2024 00:00:11 +0000
Manifest this update:     Sun 19 May 2024 00:00:11 +0000
Manifest next update:     Mon 20 May 2024 00:00:11 +0000
Files and hashes:         1: 1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl (hash: dPxecl6JItZQZqTfdE7DIY89g8BImbfNtNNWZorAtbU=)
                          2: 8ZD7JBn93wvVYQl91pD6q7pYm2Q.roa (hash: gOkaqBzPciks+NrpzUI0YJR74x7pdPDs14GcPhejgCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:15:ff:61:2c:80:31:58:ed:1c:46:52:44:c2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b8670ca93364f3443f82e3011eac1537197771
        Validity
            Not Before: May 19 00:00:11 2024 GMT
            Not After : May 20 00:00:11 2024 GMT
        Subject: CN=8524acd0a2306b1c035dec8ea2505e5ff4a97436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:7f:fa:1b:0d:2d:67:eb:7e:63:fd:eb:80:
                    49:64:1c:b3:d7:99:a4:45:8e:29:55:bf:8c:f8:d2:
                    11:35:f9:68:cd:20:e5:09:1f:a6:54:f0:47:75:b8:
                    94:42:13:c8:86:f7:c0:25:38:28:64:73:a5:14:ec:
                    7d:96:3b:47:1e:55:90:69:ca:68:88:3a:d5:b3:65:
                    47:4b:3d:c4:cb:8b:09:fc:2b:f9:bc:ba:4d:3f:cb:
                    67:8b:28:4b:ab:e7:6d:3b:e8:26:46:90:69:d9:23:
                    29:0d:07:bd:e9:6b:1c:87:b6:0b:c9:88:a8:9b:4a:
                    89:42:de:b5:5d:3c:40:6b:ff:4e:8a:09:ed:75:09:
                    b3:f2:87:d1:2e:7a:33:f7:27:b5:74:42:a5:e8:b3:
                    28:02:78:44:7f:55:42:24:4b:bf:2f:c6:2f:3c:e2:
                    b5:67:11:32:e4:2a:d4:2e:24:3f:4a:d3:be:8e:2c:
                    f6:e9:c6:da:8b:82:e6:60:5b:d1:df:d8:ce:5e:21:
                    40:dc:32:c5:65:cf:10:23:c9:03:1b:ab:8e:c3:98:
                    fa:20:b1:5c:8b:b0:24:30:a4:0f:da:7d:cf:19:f7:
                    3f:2e:38:64:30:1e:2a:31:cc:4b:8b:8c:79:b7:84:
                    5c:a6:1d:54:ff:ff:a3:bb:0b:c8:11:3d:8a:89:7e:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:AC:D0:A2:30:6B:1C:03:5D:EC:8E:A2:50:5E:5F:F4:A9:74:36
            X509v3 Authority Key Identifier:
                keyid:D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:22:d0:bd:d1:7b:69:62:77:5b:f1:19:fd:55:83:76:26:
         45:15:9e:3e:7b:74:68:9d:5c:50:f5:34:01:ea:35:57:61:ff:
         62:a6:d1:83:6c:63:b2:1d:d5:70:23:35:94:59:b7:96:0a:11:
         56:e1:bd:13:27:1e:cf:0f:99:48:ec:0f:f7:0e:06:e9:e7:a7:
         d9:0e:65:99:b2:f5:ae:17:37:7f:80:84:d2:9c:49:77:74:13:
         9b:57:eb:7a:7b:6d:6d:8f:16:b5:4a:70:7f:80:bc:24:1b:a8:
         2c:f9:03:3f:e8:2e:b2:04:b2:63:bc:4c:6d:8c:e4:4d:f7:a7:
         91:42:2f:be:fb:83:6a:46:f9:d8:21:72:72:0f:fb:32:5d:f4:
         c2:86:32:0a:db:f2:53:b9:49:b0:19:80:32:c4:2c:09:05:f4:
         ae:4d:25:06:79:f8:b7:fb:de:35:f0:d8:ae:59:44:60:ca:98:
         c0:ca:04:d4:6d:a0:2f:48:3d:d0:2c:46:95:18:0f:fd:74:a4:
         fc:3f:dd:a7:9f:5d:3a:bd:59:63:a2:cb:6f:1e:01:46:a8:a7:
         d1:b5:22:7f:0a:2b:6c:d0:de:a3:22:75:a2:5f:3e:3d:e4:e6:
         21:40:8c:19:50:0b:72:ee:bc:3a:8a:89:22:26:d5:3a:3b:75:
         47:b6:f0:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+OJhX/YSyAMVjtHEZSRMLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Yjg2NzBjYTkzMzY0ZjM0NDNmODJlMzAxMWVhYzE1Mzcx
OTc3NzEwHhcNMjQwNTE5MDAwMDExWhcNMjQwNTIwMDAwMDExWjAzMTEwLwYDVQQD
Eyg4NTI0YWNkMGEyMzA2YjFjMDM1ZGVjOGVhMjUwNWU1ZmY0YTk3NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNh/+hsNLWfrfmP964BJZByz15mk
RY4pVb+M+NIRNflozSDlCR+mVPBHdbiUQhPIhvfAJTgoZHOlFOx9ljtHHlWQacpo
iDrVs2VHSz3Ey4sJ/Cv5vLpNP8tniyhLq+dtO+gmRpBp2SMpDQe96Wsch7YLyYio
m0qJQt61XTxAa/9OigntdQmz8ofRLnoz9ye1dEKl6LMoAnhEf1VCJEu/L8YvPOK1
ZxEy5CrULiQ/StO+jiz26cbai4LmYFvR39jOXiFA3DLFZc8QI8kDG6uOw5j6ILFc
i7AkMKQP2n3PGfc/LjhkMB4qMcxLi4x5t4Rcph1U//+juwvIET2KiX6c8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUkrNCiMGscA13sjqJQXl/0qXQ2MB8GA1UdIwQY
MBaAFNW4ZwypM2TzRD+C4wEerBU3GXdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJobkRLa3paUE5FUDRMakFSNnNGVGNaZDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85Y2U1ZjAtYTIzOC00NGU4LThmNWIt
YzVlYzY4ZTU4OWViLzEvMWJobkRLa3paUE5FUDRMakFSNnNGVGNaZDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85Y2U1ZjAtYTIzOC00NGU4LThmNWItYzVlYzY4ZTU4OWVi
LzEvMWJobkRLa3paUE5FUDRMakFSNnNGVGNaZDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfY0i0L3R
e2lid1vxGf1Vg3YmRRWePnt0aJ1cUPU0Aeo1V2H/YqbRg2xjsh3VcCM1lFm3lgoR
VuG9Eycezw+ZSOwP9w4G6een2Q5lmbL1rhc3f4CE0pxJd3QTm1frenttbY8WtUpw
f4C8JBuoLPkDP+gusgSyY7xMbYzkTfenkUIvvvuDakb52CFycg/7Ml30woYyCtvy
U7lJsBmAMsQsCQX0rk0lBnn4t/veNfDYrllEYMqYwMoE1G2gL0g90CxGlRgP/XSk
/D/dp59dOr1ZY6LLbx4BRqin0bUifworbNDeoyJ1ol8+PeTmIUCMGVALcu68OoqJ
IibVOjt1R7bw/w==
-----END CERTIFICATE-----
Generated at Sun May 19 01:09:22 2024 by rpki-client on console-fra.rpki-client.org