Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          smsXiMlX+6UazmIiQkNZUUIHwiMh7HvsAXAS/EhivzI=
Subject key identifier:   96:63:9E:E9:FF:08:34:3B:00:FB:3F:09:D1:50:C2:7C:42:00:86:E9
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       018F497D727B36447120953C49E08D659FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 16:01:48 +0000
Manifest this update:     Sun 05 May 2024 16:01:48 +0000
Manifest next update:     Mon 06 May 2024 16:01:48 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: +QKZth/vDLLHjR/t7GIaQ5TIoBYWIzwCCXp3/BEaRPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7d:72:7b:36:44:71:20:95:3c:49:e0:8d:65:9f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: May  5 16:01:48 2024 GMT
            Not After : May  6 16:01:48 2024 GMT
        Subject: CN=96639ee9ff08343b00fb3f09d150c27c420086e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:02:7f:8a:86:7e:27:4f:2e:28:39:96:8b:
                    ce:3b:a3:af:2f:4c:34:15:53:a0:44:40:08:df:ce:
                    5b:72:07:64:d9:8a:3e:4a:d2:bc:4d:29:e8:c4:34:
                    67:0a:8f:db:c9:12:ea:74:30:e5:25:d6:99:a0:64:
                    e3:b0:c0:7d:c1:76:5d:21:c7:56:83:ac:49:0f:7d:
                    87:dc:5d:29:f9:88:0b:2e:6e:53:2f:d6:f1:0e:46:
                    29:43:cb:7d:c7:a3:2d:89:4b:86:d5:cc:97:cb:70:
                    3a:3c:77:4e:6f:51:53:74:e4:86:ce:e6:60:06:e9:
                    94:91:54:33:bc:a6:27:e2:17:3e:8e:6b:61:ad:04:
                    0c:e5:37:c7:95:a3:57:60:45:0c:e2:e1:32:d4:c0:
                    e4:5c:6a:e9:e8:b6:2f:cc:08:fd:26:d2:dd:6d:86:
                    d4:1c:67:88:6d:1f:ec:58:98:e5:90:4a:95:d9:45:
                    ba:4d:e6:96:e7:39:89:54:e1:a7:a3:32:f6:17:c4:
                    ff:e8:7d:92:87:2f:cb:2e:d1:5d:65:2b:65:6e:5a:
                    d6:da:f4:ab:5d:b0:e5:d8:96:67:07:b6:a8:7a:e7:
                    6d:25:71:13:0d:d5:a5:d5:d4:1e:83:6c:6e:27:78:
                    2a:5d:df:f0:c8:54:85:bb:b8:ab:04:31:d5:5f:00:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:9E:E9:FF:08:34:3B:00:FB:3F:09:D1:50:C2:7C:42:00:86:E9
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:27:de:41:54:97:97:7a:07:d1:f1:cd:b3:9f:0c:28:fc:
         82:04:41:8f:f5:76:da:47:2d:e3:b8:df:7c:01:2e:2e:ec:f5:
         cf:23:1b:23:c1:b3:78:5b:d5:c1:28:3e:95:07:89:07:e9:51:
         9e:4c:52:56:d1:64:5d:bb:c7:02:b8:1e:8f:b2:40:6b:78:8c:
         b6:4c:33:0b:20:24:3c:29:16:dc:b7:33:16:3c:ec:f1:ee:40:
         77:42:eb:4c:32:47:bd:bb:7f:a2:ff:9b:10:af:60:4e:c7:16:
         bb:a3:f8:bc:3a:aa:24:e1:ea:34:02:7f:09:6d:7f:9b:30:c4:
         e8:66:5f:68:15:a1:42:83:4d:21:0f:63:b3:b7:2b:8d:84:57:
         00:45:f4:75:9c:ca:d6:e6:76:01:32:5e:84:70:a5:06:5b:fc:
         7a:b6:9c:2c:02:b9:08:64:70:d0:d5:2a:41:db:37:a6:ff:b7:
         c4:0a:04:b4:f6:37:e0:1d:74:cd:08:75:bd:96:39:86:4a:ac:
         ea:51:9f:20:56:ec:d9:65:56:30:f3:e6:f0:17:e8:4d:c1:06:
         63:ab:42:d7:b8:b7:75:2e:1e:17:63:88:a0:47:67:1c:0e:3f:
         8e:12:ec:5b:50:a2:61:50:2f:5f:f8:05:34:a9:78:dd:26:af:
         f0:73:13:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9JfXJ7NkRxIJU8SeCNZZ+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ODI5OTU4ZDgwMGNhMWFkZTZlMTNjYTdiMjgwYjIyOWNl
NjYwMmUwHhcNMjQwNTA1MTYwMTQ4WhcNMjQwNTA2MTYwMTQ4WjAzMTEwLwYDVQQD
Eyg5NjYzOWVlOWZmMDgzNDNiMDBmYjNmMDlkMTUwYzI3YzQyMDA4NmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzooCf4qGfidPLig5lovOO6OvL0w0
FVOgREAI385bcgdk2Yo+StK8TSnoxDRnCo/byRLqdDDlJdaZoGTjsMB9wXZdIcdW
g6xJD32H3F0p+YgLLm5TL9bxDkYpQ8t9x6MtiUuG1cyXy3A6PHdOb1FTdOSGzuZg
BumUkVQzvKYn4hc+jmthrQQM5TfHlaNXYEUM4uEy1MDkXGrp6LYvzAj9JtLdbYbU
HGeIbR/sWJjlkEqV2UW6TeaW5zmJVOGnozL2F8T/6H2Shy/LLtFdZStlblrW2vSr
XbDl2JZnB7aoeudtJXETDdWl1dQeg2xuJ3gqXd/wyFSFu7irBDHVXwA2XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZjnun/CDQ7APs/CdFQwnxCAIbpMB8GA1UdIwQY
MBaAFOSCmVjYAMoa3m4TynsoCyKc5mAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQt
MWQ1YmMwMDFhMWRlLzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQtMWQ1YmMwMDFhMWRl
LzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtIn3kFU
l5d6B9HxzbOfDCj8ggRBj/V22kct47jffAEuLuz1zyMbI8GzeFvVwSg+lQeJB+lR
nkxSVtFkXbvHArgej7JAa3iMtkwzCyAkPCkW3LczFjzs8e5Ad0LrTDJHvbt/ov+b
EK9gTscWu6P4vDqqJOHqNAJ/CW1/mzDE6GZfaBWhQoNNIQ9js7crjYRXAEX0dZzK
1uZ2ATJehHClBlv8eracLAK5CGRw0NUqQds3pv+3xAoEtPY34B10zQh1vZY5hkqs
6lGfIFbs2WVWMPPm8BfoTcEGY6tC17i3dS4eF2OIoEdnHA4/jhLsW1CiYVAvX/gF
NKl43Sav8HMTkw==
-----END CERTIFICATE-----
Generated at Sun May 5 20:15:42 2024 by rpki-client on console-ams.rpki-client.org