Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File:                     Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier:          jP4fQlh33kh48702XqQ5Emz3z46BXG1YB/kLYXdB4Hw=
Subject key identifier:   CB:AE:86:4C:58:81:87:BD:60:AF:CC:2C:4D:D7:16:6D:F2:4D:1F:8E
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer:       /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial:       018F885B25F6236BCE55EDF13AE5C0C56DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number:          0330
Signing time:             Fri 17 May 2024 21:00:25 +0000
Manifest this update:     Fri 17 May 2024 21:00:25 +0000
Manifest next update:     Sat 18 May 2024 21:00:25 +0000
Files and hashes:         1: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: knyIkVdgPfEuAtIwWtwL/Fqy2l2eu27TyeC9O4jIEqk=)
                          2: fh_fN6IggxnN7ViMy6Ta99s43Ok.roa (hash: LyRgZ56xoLGVEad5ZMcOIVv4+9Vietiou/zkCUb7jGI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:25:f6:23:6b:ce:55:ed:f1:3a:e5:c0:c5:6d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
        Validity
            Not Before: May 17 21:00:25 2024 GMT
            Not After : May 18 21:00:25 2024 GMT
        Subject: CN=cbae864c588187bd60afcc2c4dd7166df24d1f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:af:45:97:04:d1:32:00:bb:70:fd:b9:79:
                    09:c8:7e:cb:ea:59:00:d5:7d:f2:4b:fb:4a:03:38:
                    92:7c:a7:ee:df:0a:90:a1:87:50:c1:da:34:73:b5:
                    67:c0:8c:8f:cb:be:6f:bb:5f:a8:93:89:37:bd:92:
                    e5:e5:de:5a:b5:e0:2d:9a:7b:51:87:87:cb:4e:94:
                    cd:e3:4d:44:f9:35:3d:ac:d1:85:c3:69:67:33:11:
                    e7:06:92:53:7e:05:29:c4:92:e8:19:a1:94:9c:26:
                    c3:13:65:80:5e:e1:b4:ec:98:05:ee:34:b6:32:f1:
                    be:85:82:7f:15:fe:7f:b1:de:cd:15:bc:d5:d5:73:
                    68:ff:b7:cc:43:eb:6d:33:0a:2d:a9:63:83:56:97:
                    e1:a4:7a:51:5b:bc:fe:23:e1:09:a3:9f:29:52:48:
                    2b:f4:d0:4e:e1:6f:42:25:76:69:de:ee:bb:1d:66:
                    b5:8c:f4:7f:ee:d1:82:dd:71:0a:84:7b:9f:d5:c6:
                    18:9a:af:b0:62:05:3b:15:0c:ac:b8:45:53:20:f5:
                    76:4b:68:1d:73:bc:ce:01:be:df:9e:bd:34:a1:0b:
                    25:6f:9d:c3:7e:f8:29:5c:2f:0a:1a:bb:9c:02:67:
                    6d:17:f7:64:bf:59:fc:11:4a:6d:14:99:bb:66:05:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:86:4C:58:81:87:BD:60:AF:CC:2C:4D:D7:16:6D:F2:4D:1F:8E
            X509v3 Authority Key Identifier:
                keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:46:6d:f0:67:45:ea:3c:59:a1:7e:74:bb:4d:75:58:1f:
         fa:4e:85:9a:ee:20:67:33:66:58:70:74:73:a0:e7:06:f7:7c:
         85:79:9e:a3:13:bd:d1:62:d7:80:e0:a7:38:e4:75:34:b0:6d:
         43:21:68:51:b5:08:15:bc:55:26:fe:89:1f:0e:17:e4:13:67:
         70:db:37:1c:de:63:6a:45:97:30:16:90:61:a2:25:27:04:76:
         d0:f5:4d:a9:0a:2a:82:1d:52:9b:6c:1d:7d:63:1a:e8:46:8c:
         9b:77:76:99:b1:6c:4c:5d:76:2c:9a:fc:cd:d4:9f:0f:45:23:
         87:78:4f:4c:2d:ae:34:30:39:14:ad:22:9b:52:57:3f:61:91:
         db:6f:bd:0b:ba:46:6c:3d:e2:63:e5:1c:5b:ab:bb:2f:93:1d:
         98:97:66:52:40:8a:02:bd:28:f4:d4:47:6a:59:59:cd:6e:f7:
         fe:69:15:44:13:45:1a:c4:ea:01:0e:3d:19:e4:f8:2d:9d:61:
         47:ea:02:00:d1:b6:31:7d:04:77:73:61:27:bd:13:aa:74:6d:
         ca:dc:da:78:41:da:51:ed:b9:a9:82:f4:e6:b7:26:01:27:c7:
         f8:bb:ad:5c:b0:1e:d3:a8:d1:b5:a8:61:33:89:35:da:fb:d7:
         f7:cc:7e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWyX2I2vOVe3xOuXAxW2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWQ1NWE4NjlmMTA1YWY2YWJjZGZhMGNhNDA2YWYxZjQ5
YjI0ZjEwHhcNMjQwNTE3MjEwMDI1WhcNMjQwNTE4MjEwMDI1WjAzMTEwLwYDVQQD
EyhjYmFlODY0YzU4ODE4N2JkNjBhZmNjMmM0ZGQ3MTY2ZGYyNGQxZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoqvRZcE0TIAu3D9uXkJyH7L6lkA
1X3yS/tKAziSfKfu3wqQoYdQwdo0c7VnwIyPy75vu1+ok4k3vZLl5d5ateAtmntR
h4fLTpTN401E+TU9rNGFw2lnMxHnBpJTfgUpxJLoGaGUnCbDE2WAXuG07JgF7jS2
MvG+hYJ/Ff5/sd7NFbzV1XNo/7fMQ+ttMwotqWODVpfhpHpRW7z+I+EJo58pUkgr
9NBO4W9CJXZp3u67HWa1jPR/7tGC3XEKhHuf1cYYmq+wYgU7FQysuEVTIPV2S2gd
c7zOAb7fnr00oQslb53DfvgpXC8KGrucAmdtF/dkv1n8EUptFJm7ZgWBJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuuhkxYgYe9YK/MLE3XFm3yTR+OMB8GA1UdIwQY
MBaAFFMdVahp8QWvarzfoMpAavH0myTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjIt
NGRjMWVmODkwNDRiLzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjItNGRjMWVmODkwNDRi
LzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARj9GbfBn
Reo8WaF+dLtNdVgf+k6Fmu4gZzNmWHB0c6DnBvd8hXmeoxO90WLXgOCnOOR1NLBt
QyFoUbUIFbxVJv6JHw4X5BNncNs3HN5jakWXMBaQYaIlJwR20PVNqQoqgh1Sm2wd
fWMa6EaMm3d2mbFsTF12LJr8zdSfD0Ujh3hPTC2uNDA5FK0im1JXP2GR22+9C7pG
bD3iY+UcW6u7L5MdmJdmUkCKAr0o9NRHallZzW73/mkVRBNFGsTqAQ49GeT4LZ1h
R+oCANG2MX0Ed3NhJ70TqnRtytzaeEHaUe25qYL05rcmASfH+LutXLAe06jRtahh
M4k12vvX98x+Mg==
-----END CERTIFICATE-----
Generated at Fri May 17 22:07:28 2024 by rpki-client on console-ams.rpki-client.org