Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          E/nj1qK3vILyG6kkZ5E3PmKxOLRJWCt0HZg8YGH5gow=
Subject key identifier:   B9:83:A4:A5:67:79:B9:21:48:61:DF:F8:CF:3E:5A:26:1F:D8:7D:2D
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       018F87B6888457E09475DDC4F6EFA664DE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          025E
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: J7bsA608p1DFusNwMFyU7O38DUAcR2QX9o914uOSKTU=)
                          2: wPprtlMnFXSHAf0336Ro9cbLtck.roa (hash: /fXnL9AkAv3Fioj58181d4yJmK75ZQ9mPWfZsNccZVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:88:84:57:e0:94:75:dd:c4:f6:ef:a6:64:de:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=b983a4a56779b9214861dff8cf3e5a261fd87d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:40:bc:d3:16:f2:ae:56:e0:14:e5:8d:e8:
                    79:08:2c:d3:39:17:05:cc:1d:c0:29:39:11:2b:17:
                    10:93:fc:47:a2:87:97:e4:f0:3c:20:39:d4:df:df:
                    53:bb:01:28:03:77:87:2b:c2:4e:3b:74:4a:a5:8b:
                    f4:ff:76:2c:29:ef:df:72:37:b4:42:f8:fe:5d:77:
                    cf:6c:01:53:de:44:f5:57:05:11:e4:0f:cb:10:68:
                    f5:97:f7:6f:26:98:58:1f:d6:40:6b:cf:89:a4:48:
                    bf:b4:34:57:12:50:05:4b:3b:09:d2:48:77:72:bb:
                    af:d9:de:0b:c0:b1:5a:0f:8a:82:00:d2:ea:be:e8:
                    72:ae:9a:9b:2c:67:ea:3f:18:8e:4e:6f:40:c1:b7:
                    37:9f:eb:63:6e:91:1d:6e:af:47:a7:e8:c5:0e:21:
                    92:8b:90:be:16:0f:a6:38:33:af:81:3e:8a:c4:1f:
                    d6:30:54:fc:11:46:9c:36:5a:02:90:36:35:0a:c1:
                    d2:ea:e3:0b:70:8c:c9:1f:65:54:8b:d5:53:d4:9f:
                    15:39:6b:0d:29:14:3e:b6:fe:6c:84:f4:cb:1b:7c:
                    30:c0:9a:49:4a:7c:1e:d8:09:4f:66:ca:f9:7e:cd:
                    bd:be:d7:f7:ac:63:19:31:72:66:c7:01:ef:cf:f2:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:83:A4:A5:67:79:B9:21:48:61:DF:F8:CF:3E:5A:26:1F:D8:7D:2D
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:50:0e:14:ca:c5:e9:23:e1:55:b1:6e:48:c1:54:69:30:63:
         02:f2:6b:9a:97:ed:f0:73:ec:64:83:2a:7b:eb:40:39:b8:2c:
         46:3e:99:52:75:7d:c2:05:46:b8:39:57:fd:bb:cb:56:1e:a8:
         21:62:5f:e9:9d:f4:ec:b1:40:37:c1:3b:f5:bb:81:77:1a:dd:
         bc:63:e4:c1:75:c0:ad:67:43:52:33:bd:76:bf:44:17:f2:8a:
         40:1f:03:4f:34:db:e4:f8:a7:f5:ad:e4:b8:04:7e:ad:80:ae:
         20:75:ed:57:6e:11:3a:5c:20:20:72:ad:d8:dd:0e:4e:36:b5:
         bd:6f:32:4e:ca:e1:84:f9:c0:ac:c4:51:f0:07:8c:fa:f9:00:
         4f:7a:52:45:6a:33:8e:81:f7:79:be:47:07:4e:30:3b:8f:f8:
         a9:4b:bf:7d:d6:3e:87:e9:1e:49:b6:40:2a:35:4d:29:c7:71:
         1e:a7:87:22:09:9d:fe:b2:d0:01:74:76:0c:23:88:15:dd:33:
         5d:31:3a:cf:28:cd:4c:03:87:46:c9:3f:d2:41:f6:30:08:4b:
         7e:33:eb:e7:79:ac:93:71:d0:18:6a:d4:4c:8f:bc:8b:9d:17:
         7c:5c:19:fa:3f:a0:49:07:75:30:e0:f9:ba:4c:34:8b:e4:df:
         7f:78:d3:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtoiEV+CUdd3E9u+mZN5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjQwNTE3MTgwMDM3WhcNMjQwNTE4MTgwMDM3WjAzMTEwLwYDVQQD
EyhiOTgzYTRhNTY3NzliOTIxNDg2MWRmZjhjZjNlNWEyNjFmZDg3ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI1AvNMW8q5W4BTljeh5CCzTORcF
zB3AKTkRKxcQk/xHooeX5PA8IDnU399TuwEoA3eHK8JOO3RKpYv0/3YsKe/fcje0
Qvj+XXfPbAFT3kT1VwUR5A/LEGj1l/dvJphYH9ZAa8+JpEi/tDRXElAFSzsJ0kh3
cruv2d4LwLFaD4qCANLqvuhyrpqbLGfqPxiOTm9Awbc3n+tjbpEdbq9Hp+jFDiGS
i5C+Fg+mODOvgT6KxB/WMFT8EUacNloCkDY1CsHS6uMLcIzJH2VUi9VT1J8VOWsN
KRQ+tv5shPTLG3wwwJpJSnwe2AlPZsr5fs29vtf3rGMZMXJmxwHvz/KmqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmDpKVnebkhSGHf+M8+WiYf2H0tMB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVAOFMrF
6SPhVbFuSMFUaTBjAvJrmpft8HPsZIMqe+tAObgsRj6ZUnV9wgVGuDlX/bvLVh6o
IWJf6Z307LFAN8E79buBdxrdvGPkwXXArWdDUjO9dr9EF/KKQB8DTzTb5Pin9a3k
uAR+rYCuIHXtV24ROlwgIHKt2N0OTja1vW8yTsrhhPnArMRR8AeM+vkAT3pSRWoz
joH3eb5HB04wO4/4qUu/fdY+h+keSbZAKjVNKcdxHqeHIgmd/rLQAXR2DCOIFd0z
XTE6zyjNTAOHRsk/0kH2MAhLfjPr53msk3HQGGrUTI+8i50XfFwZ+j+gSQd1MOD5
ukw0i+Tff3jTdg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:14:29 2024 by rpki-client on console-ams.rpki-client.org