Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File:                     i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier:          iUV5jVvQiK9sj++1Hyl380F/pWCo1V2eO0JTGpvyL6o=
Subject key identifier:   1D:19:E5:E2:F8:7B:57:5A:5D:1C:1A:6A:E8:DA:D0:00:59:68:B1:A7
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer:       /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial:       01901C6A950B55A727A4EA7623CB365B0A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 15:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:05 +0000
Files and hashes:         1: Z9_XzS0tSxM-2rtjcuEnaWksjm4.roa (hash: G9n2GkKJFprTWShacGF+7lBTjRpLFAzNrih76j1fVRQ=)
                          2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: y2jaLwZRoMRnBsN+hbPwBIxbTQIL88pbhiYKkcaC2sc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:95:0b:55:a7:27:a4:ea:76:23:cb:36:5b:0a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
        Validity
            Not Before: Jun 15 15:01:05 2024 GMT
            Not After : Jun 16 15:01:05 2024 GMT
        Subject: CN=1d19e5e2f87b575a5d1c1a6ae8dad0005968b1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:79:be:95:3a:45:4a:a6:8d:21:a9:8b:6b:
                    1b:eb:b1:13:bf:44:42:12:cc:86:3f:9d:b1:84:c8:
                    02:69:ba:2d:d7:dd:6d:4b:12:20:0c:87:43:e9:53:
                    bb:4e:81:5a:f1:d9:81:6e:7f:fd:c7:b1:67:39:3c:
                    02:08:be:98:63:5a:b6:19:9b:22:5c:c5:4e:61:2f:
                    a9:f5:0c:bc:06:96:cb:c9:4a:24:d3:fa:47:f2:cc:
                    4d:40:0a:52:d7:a3:96:e0:05:5d:ce:d3:90:b3:fa:
                    84:b1:9a:0e:e7:79:76:b9:7f:f2:ca:cd:62:0a:db:
                    6b:68:0c:f8:07:1f:f4:19:f4:9c:0b:40:04:60:e5:
                    92:d8:54:64:b4:0d:3c:ab:66:89:86:20:ba:c9:54:
                    19:14:60:1e:5e:eb:58:d8:04:2c:2f:84:e8:2e:a4:
                    dd:10:73:42:e6:f6:72:2f:b9:a8:d7:c6:5a:63:c8:
                    f0:08:05:cd:1b:ed:69:4e:b7:68:e3:b0:f3:ad:40:
                    76:8a:b9:5d:2f:8f:62:8b:38:83:2f:0d:a6:1e:a3:
                    40:b5:32:a0:7e:2e:31:26:c8:8d:c0:62:31:cc:9a:
                    02:52:de:fe:b9:7d:00:ec:8c:15:2a:a6:0f:a7:4a:
                    e2:93:05:0f:1e:a5:f1:c0:b1:04:e6:44:72:0b:3d:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:19:E5:E2:F8:7B:57:5A:5D:1C:1A:6A:E8:DA:D0:00:59:68:B1:A7
            X509v3 Authority Key Identifier:
                keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:e1:58:88:8b:ca:f4:6b:af:2b:65:54:0b:54:8b:00:fd:
         ac:17:5a:09:ee:e0:1f:df:85:97:b6:25:c7:93:f0:3b:e4:18:
         84:72:53:92:c5:61:76:fa:88:21:0e:d0:43:a8:cd:31:57:46:
         c3:f8:ea:00:fa:48:c1:10:ab:47:e7:0f:8b:0a:9c:3f:e0:21:
         35:f7:85:53:9d:dc:5b:c3:9c:99:84:8d:b1:94:a6:ca:ef:6f:
         cd:aa:c3:85:77:3d:e5:4c:ea:64:68:fa:3b:90:c6:12:cb:f0:
         0a:d9:ee:6f:bf:21:cd:1b:e7:03:c4:63:c5:09:88:23:6c:6c:
         d9:89:aa:9e:5b:96:64:71:91:ed:d0:f8:bb:1c:74:42:22:67:
         2d:ba:94:30:c4:a6:1a:0a:fb:2c:52:67:7c:2c:94:f7:b1:1a:
         72:8c:53:77:70:61:21:31:ab:e6:18:87:2c:6f:d8:41:4a:1a:
         38:31:d2:04:54:07:73:89:9b:6b:55:4b:fb:9a:f6:3e:5d:32:
         dd:16:59:81:5f:ec:c5:37:4f:ae:97:53:4c:5e:c7:c2:aa:b8:
         99:57:62:cf:82:69:45:6e:0e:13:10:a2:d3:2f:d6:e3:6c:8b:
         80:44:cf:c9:51:44:f7:4e:76:bb:9b:5b:0e:5a:d9:db:b2:a4:
         3f:37:6d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcapULVacnpOp2I8s2Wwp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNWZlNTBmMjkwZGQ5ZTQxZTVmNGE2NWRhYmIyMzk3MmE4
MmNhZDMwHhcNMjQwNjE1MTUwMTA1WhcNMjQwNjE2MTUwMTA1WjAzMTEwLwYDVQQD
EygxZDE5ZTVlMmY4N2I1NzVhNWQxYzFhNmFlOGRhZDAwMDU5NjhiMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu55vpU6RUqmjSGpi2sb67ETv0RC
EsyGP52xhMgCabot191tSxIgDIdD6VO7ToFa8dmBbn/9x7FnOTwCCL6YY1q2GZsi
XMVOYS+p9Qy8BpbLyUok0/pH8sxNQApS16OW4AVdztOQs/qEsZoO53l2uX/yys1i
CttraAz4Bx/0GfScC0AEYOWS2FRktA08q2aJhiC6yVQZFGAeXutY2AQsL4ToLqTd
EHNC5vZyL7mo18ZaY8jwCAXNG+1pTrdo47DzrUB2irldL49iiziDLw2mHqNAtTKg
fi4xJsiNwGIxzJoCUt7+uX0A7IwVKqYPp0rikwUPHqXxwLEE5kRyCz3WGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Z5eL4e1daXRwaauja0ABZaLGnMB8GA1UdIwQY
MBaAFItf5Q8pDdnkHl9KZdq7I5cqgsrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2It
OTEwYWUzYmVjNjMxLzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2ItOTEwYWUzYmVjNjMx
LzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktjhWIiL
yvRrrytlVAtUiwD9rBdaCe7gH9+Fl7Ylx5PwO+QYhHJTksVhdvqIIQ7QQ6jNMVdG
w/jqAPpIwRCrR+cPiwqcP+AhNfeFU53cW8OcmYSNsZSmyu9vzarDhXc95UzqZGj6
O5DGEsvwCtnub78hzRvnA8RjxQmII2xs2YmqnluWZHGR7dD4uxx0QiJnLbqUMMSm
Ggr7LFJnfCyU97EacoxTd3BhITGr5hiHLG/YQUoaODHSBFQHc4mba1VL+5r2Pl0y
3RZZgV/sxTdPrpdTTF7Hwqq4mVdiz4JpRW4OExCi0y/W42yLgETPyVFE9052u5tb
DlrZ27KkPzdtag==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:42:16 2024 by rpki-client on console-fra.rpki-client.org