Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          JYDOZw3OfRg9LtQW4sW9bM7KPODpAoCi1w+klYkZ/Yw=
Subject key identifier:   90:1C:03:CD:85:50:95:60:9F:34:7E:A7:D5:35:69:83:14:6E:F2:30
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       018F467C4B7F55945AAE23AE60B31CC5A583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          1157
Signing time:             Sun 05 May 2024 02:01:41 +0000
Manifest this update:     Sun 05 May 2024 02:01:41 +0000
Manifest next update:     Mon 06 May 2024 02:01:41 +0000
Files and hashes:         1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: KOqtg87qlSYIB9+A2lTAh1dVEBllQ0iXiG55m/R6ofo=)
                          2: XbY5aIhqPXCEfiPDVfx4GkW5_yk.roa (hash: VJ+ZNhBN3o/JjiyIYdXc8HyhFtOHa9TdYJpQZIkbgVs=)
                          3: mgItgQku8hskq5wUbpmmrhX01MM.roa (hash: NuU9nC91WtX0LIGMjXuCUhwLg6z2116c6v5hdBljXI0=)
                          4: sxRWCk6Ydt3VF2_kaWu9Uhrp5uY.roa (hash: l7FSfof51PpWUqh1tLfAuGfnQKxq9tQk0G90IeOh+78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 02:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:4b:7f:55:94:5a:ae:23:ae:60:b3:1c:c5:a5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: May  5 02:01:41 2024 GMT
            Not After : May  6 02:01:41 2024 GMT
        Subject: CN=901c03cd855095609f347ea7d5356983146ef230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:51:3f:3b:ce:6e:77:c1:87:e7:37:44:98:
                    d0:ee:3c:e6:a4:07:fd:40:11:83:3b:dd:38:b3:6d:
                    ec:50:47:ed:93:d3:54:e2:6f:a6:20:10:bc:70:81:
                    43:ca:31:f5:72:0b:8d:53:5a:3c:c0:bd:62:5b:a5:
                    14:cb:0d:e9:79:a0:bc:15:47:b1:ee:d6:f1:d8:24:
                    02:c8:d6:fc:9a:90:37:a3:19:54:82:8f:87:bb:55:
                    d2:dc:fc:7f:06:73:c8:f7:58:e6:63:14:c5:63:51:
                    09:d8:30:65:50:0e:c7:61:77:21:c5:41:78:62:e2:
                    f8:8e:6d:4a:35:ba:f2:e1:a1:57:db:50:8a:f5:8e:
                    92:b2:4c:2f:ed:59:a1:fd:81:a2:1d:85:e2:76:24:
                    c1:ce:65:cf:6b:2f:98:cb:70:2b:ec:52:b5:a5:70:
                    03:80:7e:44:7e:8c:06:e6:00:4a:85:9f:cf:cf:51:
                    26:a1:bf:87:c8:97:7b:3b:2c:9b:b4:5e:76:b1:09:
                    be:19:f2:dd:6f:09:93:9c:68:c0:5a:e5:fd:5a:73:
                    3e:c5:3f:b5:76:49:f2:7c:8b:63:ea:1d:00:3e:79:
                    28:71:44:c8:4e:12:7a:58:78:22:53:a3:55:ed:35:
                    c4:5c:44:54:3f:e0:3d:a1:1d:4d:56:11:1f:98:4d:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:03:CD:85:50:95:60:9F:34:7E:A7:D5:35:69:83:14:6E:F2:30
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:92:a7:a3:e8:60:cc:bb:e3:5d:ac:2c:d2:bf:c0:24:4a:
         bd:ce:96:77:22:e7:f5:83:58:85:a3:f9:13:23:de:a9:b0:90:
         06:d6:85:51:7a:6c:2c:4c:c6:b6:c3:78:04:cf:71:af:88:21:
         e6:a7:21:b1:8b:f7:aa:fe:d9:5c:e3:2e:22:29:ad:5e:3b:28:
         e3:fc:4e:c8:f8:01:e1:7d:9b:56:73:af:95:f8:f1:cd:90:af:
         19:1f:b6:26:fc:bf:7d:92:07:8d:e9:ed:55:55:b9:09:86:1c:
         9c:f5:7f:79:ef:ea:53:9d:86:13:f5:e1:a8:5d:15:b0:45:f6:
         6b:35:c6:df:35:df:2f:92:c5:28:04:4f:68:a9:52:a6:f9:ea:
         52:56:92:a5:1a:d4:52:86:58:a9:31:03:51:00:97:0c:d8:e6:
         2d:a8:89:a7:4c:67:cd:a7:9a:c1:f0:a7:fc:97:fd:a4:de:06:
         ce:cd:2f:57:2f:8c:75:bc:c8:8b:e0:47:7a:1e:f0:f8:70:4e:
         01:6f:fb:d8:ff:85:95:97:bd:a5:c8:d1:91:7f:ec:ee:c4:1c:
         c5:8f:7c:5f:47:fe:7d:25:47:08:41:9b:a4:1e:fb:4e:dd:2d:
         a9:05:ba:59:9c:2c:9c:78:04:d3:ab:82:be:25:57:6e:3a:0e:
         ff:36:db:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GfEt/VZRariOuYLMcxaWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy
NzFkMTMwHhcNMjQwNTA1MDIwMTQxWhcNMjQwNTA2MDIwMTQxWjAzMTEwLwYDVQQD
Eyg5MDFjMDNjZDg1NTA5NTYwOWYzNDdlYTdkNTM1Njk4MzE0NmVmMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGpRPzvObnfBh+c3RJjQ7jzmpAf9
QBGDO904s23sUEftk9NU4m+mIBC8cIFDyjH1cguNU1o8wL1iW6UUyw3peaC8FUex
7tbx2CQCyNb8mpA3oxlUgo+Hu1XS3Px/BnPI91jmYxTFY1EJ2DBlUA7HYXchxUF4
YuL4jm1KNbry4aFX21CK9Y6Sskwv7Vmh/YGiHYXidiTBzmXPay+Yy3Ar7FK1pXAD
gH5EfowG5gBKhZ/Pz1Emob+HyJd7OyybtF52sQm+GfLdbwmTnGjAWuX9WnM+xT+1
dknyfItj6h0APnkocUTIThJ6WHgiU6NV7TXEXERUP+A9oR1NVhEfmE24CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAcA82FUJVgnzR+p9U1aYMUbvIwMB8GA1UdIwQY
MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt
ZGVjNDgwN2NkN2U2LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2
LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPASSp6Po
YMy7412sLNK/wCRKvc6WdyLn9YNYhaP5EyPeqbCQBtaFUXpsLEzGtsN4BM9xr4gh
5qchsYv3qv7ZXOMuIimtXjso4/xOyPgB4X2bVnOvlfjxzZCvGR+2Jvy/fZIHjent
VVW5CYYcnPV/ee/qU52GE/XhqF0VsEX2azXG3zXfL5LFKARPaKlSpvnqUlaSpRrU
UoZYqTEDUQCXDNjmLaiJp0xnzaeawfCn/Jf9pN4Gzs0vVy+MdbzIi+BHeh7w+HBO
AW/72P+FlZe9pcjRkX/s7sQcxY98X0f+fSVHCEGbpB77Tt0tqQW6WZwsnHgE06uC
viVXbjoO/zbb+g==
-----END CERTIFICATE-----
Generated at Sun May 5 10:40:01 2024 by rpki-client on console-ams.rpki-client.org