Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          xhspGpCmxv+ChtMA+KiViNO6/PJmM0pm/XqNDfp4Luk=
Subject key identifier:   B6:C4:9B:CE:F4:BC:A9:81:1C:7E:29:C0:A8:19:9E:40:6B:CC:F6:5D
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       018F3A0B70001F0957572F895B607916D545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          08D9
Signing time:             Thu 02 May 2024 16:02:59 +0000
Manifest this update:     Thu 02 May 2024 16:02:59 +0000
Manifest next update:     Fri 03 May 2024 16:02:59 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: 6lbvvDPVEcS36SsoTYmS58pATg+Wc69ZybhY3sY+3mg=)
                          2: 6qN1bsauIEePWc0uSTCNjYJL_hw.roa (hash: fYiNckP7luq9t+YHZouJADBnA7yWq7nIusoa0j39ieo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:70:00:1f:09:57:57:2f:89:5b:60:79:16:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: May  2 16:02:59 2024 GMT
            Not After : May  3 16:02:59 2024 GMT
        Subject: CN=b6c49bcef4bca9811c7e29c0a8199e406bccf65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:b6:f7:4e:87:c7:72:55:db:2c:99:07:da:
                    30:2d:51:e9:b6:40:04:eb:f2:48:99:cb:45:79:91:
                    1e:4e:75:95:fe:a4:ec:17:98:75:9b:48:80:ad:cb:
                    63:eb:6b:fb:78:be:e8:97:6b:5c:ca:ad:0f:33:7f:
                    61:8f:db:35:a0:d3:e0:39:0d:41:bc:34:45:23:76:
                    60:ba:08:d3:18:db:dc:49:ae:1d:2b:c0:c3:7c:91:
                    93:fd:31:44:5f:4a:c9:ce:9f:91:14:0c:b2:06:4a:
                    43:ae:3c:e6:ca:9d:d5:48:57:7f:06:92:68:7a:42:
                    92:45:c0:ef:74:df:6a:88:16:19:09:52:a2:ff:2b:
                    c5:6a:9e:a8:45:7c:e9:cc:26:23:37:f8:73:28:02:
                    42:e3:53:ec:d4:4b:0d:ff:77:20:e0:6e:f9:dc:96:
                    26:6b:04:70:04:ca:2d:29:6f:6a:73:8b:3d:06:90:
                    85:dc:91:17:21:2d:19:69:67:32:04:a9:3d:cb:f0:
                    c7:1f:73:4e:08:da:18:4c:1c:59:22:e3:32:e1:3a:
                    58:a1:54:7e:cf:e9:76:c2:8d:a3:3c:48:d1:12:4c:
                    94:2b:ef:a6:c0:55:ae:ca:f8:74:d3:0c:96:13:d4:
                    7c:b3:67:43:3a:68:04:5f:f0:9f:ff:dd:f5:6c:e6:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:9B:CE:F4:BC:A9:81:1C:7E:29:C0:A8:19:9E:40:6B:CC:F6:5D
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d3:c2:d4:06:43:2d:72:ca:df:1b:bb:53:e7:01:fa:67:6d:
         60:3d:3a:ae:20:83:10:c0:21:dc:9e:e0:8c:16:be:39:3b:ad:
         b0:80:a6:e4:80:a8:36:e1:a4:a0:0b:07:ba:52:a6:85:02:d3:
         d5:b0:c0:bf:c6:e7:46:dd:54:d1:8e:a7:5c:6d:ea:03:77:98:
         8e:c1:0e:8e:a5:bd:0e:cf:a0:e8:6c:19:ec:b4:83:c7:70:c8:
         82:b6:2e:e9:e2:a1:76:0d:d8:0f:9b:88:65:2a:10:4e:bb:07:
         64:7c:a1:b5:8c:78:b3:c5:dc:5e:65:0a:c1:dc:ac:e6:42:6e:
         98:2a:27:48:15:e0:52:28:c5:35:60:a3:37:4a:ed:07:5f:ce:
         8e:03:26:17:54:84:53:8c:99:0d:0b:60:21:0e:1b:ff:ed:eb:
         06:2d:b3:59:e1:ee:6a:0c:0f:5d:04:99:34:d4:5b:31:12:72:
         4e:e9:b3:50:88:27:10:ee:c3:74:13:f2:1e:d2:03:e3:6a:61:
         db:f0:37:3a:45:3b:c7:c6:81:2d:50:51:db:f5:5e:ff:96:a6:
         88:56:34:e5:39:ce:a5:8a:7e:ed:8d:b7:60:81:06:ff:4c:5d:
         5d:31:9f:f9:7a:c9:7c:02:cb:65:56:f9:92:6a:de:86:05:cb:
         61:97:e4:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86C3AAHwlXVy+JW2B5FtVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjQwNTAyMTYwMjU5WhcNMjQwNTAzMTYwMjU5WjAzMTEwLwYDVQQD
EyhiNmM0OWJjZWY0YmNhOTgxMWM3ZTI5YzBhODE5OWU0MDZiY2NmNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ku2906Hx3JV2yyZB9owLVHptkAE
6/JImctFeZEeTnWV/qTsF5h1m0iArctj62v7eL7ol2tcyq0PM39hj9s1oNPgOQ1B
vDRFI3ZgugjTGNvcSa4dK8DDfJGT/TFEX0rJzp+RFAyyBkpDrjzmyp3VSFd/BpJo
ekKSRcDvdN9qiBYZCVKi/yvFap6oRXzpzCYjN/hzKAJC41Ps1EsN/3cg4G753JYm
awRwBMotKW9qc4s9BpCF3JEXIS0ZaWcyBKk9y/DHH3NOCNoYTBxZIuMy4TpYoVR+
z+l2wo2jPEjREkyUK++mwFWuyvh00wyWE9R8s2dDOmgEX/Cf/931bOa/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbEm870vKmBHH4pwKgZnkBrzPZdMB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtPC1AZD
LXLK3xu7U+cB+mdtYD06riCDEMAh3J7gjBa+OTutsICm5ICoNuGkoAsHulKmhQLT
1bDAv8bnRt1U0Y6nXG3qA3eYjsEOjqW9Ds+g6GwZ7LSDx3DIgrYu6eKhdg3YD5uI
ZSoQTrsHZHyhtYx4s8XcXmUKwdys5kJumConSBXgUijFNWCjN0rtB1/OjgMmF1SE
U4yZDQtgIQ4b/+3rBi2zWeHuagwPXQSZNNRbMRJyTumzUIgnEO7DdBPyHtID42ph
2/A3OkU7x8aBLVBR2/Ve/5amiFY05TnOpYp+7Y23YIEG/0xdXTGf+XrJfALLZVb5
kmrehgXLYZfkNA==
-----END CERTIFICATE-----
Generated at Fri May 3 02:06:29 2024 by rpki-client on console-ams.rpki-client.org