Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File:                     CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier:          1qwXbFag8pWvCTP1pEDjz0t2uH8+/xy6/OSJnixArp4=
Subject key identifier:   E1:8E:60:15:92:3E:5A:74:D0:A9:7B:57:18:63:FB:F3:8B:84:6C:12
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer:       /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial:       018FB6100EF20C544444ABE021F42815774D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number:          1191
Signing time:             Sun 26 May 2024 18:00:56 +0000
Manifest this update:     Sun 26 May 2024 18:00:56 +0000
Manifest next update:     Mon 27 May 2024 18:00:56 +0000
Files and hashes:         1: 139ETW_lKXrnJsaVw0MZPf56WYI.roa (hash: L4v9vf+siLhaBIpEqD+lqBXzsQjcK/4zAnEA/tlwnkg=)
                          2: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: McrUFAraKtI4FJhkjGt8LbmOjh21CkxjLO1ZiC/tiDs=)
                          3: GCmGy5m34xuNqt0Q3rFpUBu2D2w.roa (hash: b2gejejeo7uPwDM2UedqIHeAzedMIoDLJqLr+rUd2v8=)
                          4: RJqvHryWITPbcumIkzOpCbdNV00.roa (hash: CWcE0zspbOCy4+9yWZ0enJf+xTJOS73qdtIKyRrQ4XQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:10:0e:f2:0c:54:44:44:ab:e0:21:f4:28:15:77:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
        Validity
            Not Before: May 26 18:00:56 2024 GMT
            Not After : May 27 18:00:56 2024 GMT
        Subject: CN=e18e6015923e5a74d0a97b571863fbf38b846c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:0d:18:0f:f5:db:63:73:46:f0:fc:ba:0e:
                    c9:e1:30:df:47:ab:72:ba:3d:14:48:81:c6:ee:77:
                    a7:02:e3:a2:5b:32:f6:7a:ec:2f:71:05:12:30:2c:
                    fd:67:37:3a:ec:93:b4:2b:ca:d6:a8:93:9b:8c:b5:
                    9c:38:dd:0d:78:f4:86:b4:96:ce:f4:c0:a0:09:a9:
                    51:c6:3c:8d:08:7a:de:a0:bc:a4:79:ab:4f:d1:61:
                    64:bf:a3:ad:f6:73:ca:af:1e:9d:59:ec:89:46:09:
                    9d:8c:66:3e:11:94:ba:b5:ea:51:cc:36:86:e2:ab:
                    ae:48:7f:c1:6b:50:bd:a3:3a:92:6a:20:13:de:99:
                    45:e9:33:b0:43:f6:c3:18:b1:aa:4b:41:5f:50:e0:
                    ef:04:a1:b0:40:ae:71:a4:18:c0:aa:32:3e:07:30:
                    13:db:dd:a0:98:96:62:46:7f:7c:e6:96:63:f3:98:
                    ad:77:4d:ef:72:03:a3:c3:e9:61:3f:42:e5:d4:2b:
                    ad:de:6d:67:1c:cf:21:33:bc:73:e2:b8:79:a4:d8:
                    a3:1c:4c:06:26:3d:ef:d1:1d:a9:29:b4:a7:75:db:
                    03:67:b4:29:74:6e:47:8f:f7:a8:49:a1:bb:d3:f3:
                    0e:de:b5:ae:bf:cf:07:8b:ac:5b:e4:84:08:26:ca:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:60:15:92:3E:5A:74:D0:A9:7B:57:18:63:FB:F3:8B:84:6C:12
            X509v3 Authority Key Identifier:
                keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:17:2f:50:2b:c3:da:0c:83:1d:46:06:7e:57:eb:7d:6a:
         d9:f6:9e:3c:72:69:91:75:e1:dc:db:32:f4:c0:0d:c9:59:d3:
         11:9c:40:33:02:fd:15:69:1a:8f:fa:b3:78:10:73:aa:ee:de:
         a9:91:61:23:8b:c4:5e:89:5e:bf:34:0f:ae:69:04:21:42:78:
         25:ea:37:26:f4:51:1a:c5:cc:8b:a0:72:c9:b5:16:b1:dc:51:
         c8:1d:36:43:17:8f:76:cd:16:24:f8:93:e1:10:4e:81:bc:1a:
         8a:79:51:1e:c8:55:e4:5f:6a:e8:f4:44:68:85:e0:f4:d8:3c:
         7b:24:e8:6c:82:3f:50:f7:81:11:57:16:5c:b7:51:19:cd:90:
         39:48:e6:34:33:54:f0:fc:00:47:82:9e:30:27:86:cd:e6:fe:
         a0:48:7a:9e:62:96:8a:26:a1:11:9e:3e:60:27:6f:94:b2:fb:
         9f:79:09:71:89:db:d8:73:a1:d9:a8:be:72:bf:fd:dd:d5:52:
         09:0b:f3:a0:a6:f9:eb:ec:f9:3b:ae:68:13:2b:b8:31:46:51:
         a1:a1:85:97:c3:4b:98:97:c3:28:cd:ae:10:5a:2c:eb:2e:b8:
         91:95:c2:77:e0:66:0a:1e:e9:69:49:5e:93:15:5c:5f:cc:54:
         88:29:4a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+2EA7yDFRERKvgIfQoFXdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTdiMjNjODM3OTViYzM1YzMwYmMxMzY1YTMwZmRmMzM3
NWFjODkwHhcNMjQwNTI2MTgwMDU2WhcNMjQwNTI3MTgwMDU2WjAzMTEwLwYDVQQD
EyhlMThlNjAxNTkyM2U1YTc0ZDBhOTdiNTcxODYzZmJmMzhiODQ2YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtagNGA/122NzRvD8ug7J4TDfR6ty
uj0USIHG7nenAuOiWzL2euwvcQUSMCz9Zzc67JO0K8rWqJObjLWcON0NePSGtJbO
9MCgCalRxjyNCHreoLykeatP0WFkv6Ot9nPKrx6dWeyJRgmdjGY+EZS6tepRzDaG
4quuSH/Ba1C9ozqSaiAT3plF6TOwQ/bDGLGqS0FfUODvBKGwQK5xpBjAqjI+BzAT
292gmJZiRn985pZj85itd03vcgOjw+lhP0Ll1Cut3m1nHM8hM7xz4rh5pNijHEwG
Jj3v0R2pKbSnddsDZ7QpdG5Hj/eoSaG70/MO3rWuv88Hi6xb5IQIJso5ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGOYBWSPlp00Kl7Vxhj+/OLhGwSMB8GA1UdIwQY
MBaAFAlXsjyDeVvDXDC8E2WjD98zdayJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMt
MWU5MmM3YmRjNTgyLzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMtMWU5MmM3YmRjNTgy
LzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9gXL1Ar
w9oMgx1GBn5X631q2faePHJpkXXh3Nsy9MANyVnTEZxAMwL9FWkaj/qzeBBzqu7e
qZFhI4vEXolevzQPrmkEIUJ4Jeo3JvRRGsXMi6ByybUWsdxRyB02QxePds0WJPiT
4RBOgbwainlRHshV5F9q6PREaIXg9Ng8eyTobII/UPeBEVcWXLdRGc2QOUjmNDNU
8PwAR4KeMCeGzeb+oEh6nmKWiiahEZ4+YCdvlLL7n3kJcYnb2HOh2ai+cr/93dVS
CQvzoKb56+z5O65oEyu4MUZRoaGFl8NLmJfDKM2uEFos6y64kZXCd+BmCh7paUle
kxVcX8xUiClK9Q==
-----END CERTIFICATE-----
Generated at Sun May 26 20:19:23 2024 by rpki-client on console-ams.rpki-client.org