Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File:                     xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier:          2ti+xC+ykr5Plb3mBvVAVXOpiRnHJceQLfr+jGwUAQI=
Subject key identifier:   AC:2C:8C:88:4E:11:EB:8D:2C:FD:70:CA:6E:5D:8D:A0:3B:49:C9:23
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer:       /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial:       018FC5B9FCCEE2A8C4EFB8EA876C0C6BD5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number:          0D56
Signing time:             Wed 29 May 2024 19:00:51 +0000
Manifest this update:     Wed 29 May 2024 19:00:51 +0000
Manifest next update:     Thu 30 May 2024 19:00:51 +0000
Files and hashes:         1: WhnQOZGjUQpKET5r00_Alc-1jFs.roa (hash: KObK9MeirlWw5Sz1xgr7nJOUDxeuld9tBNALw5iAX/M=)
                          2: wGY7r8IEZfBqtDPeBvIGKDDr31o.roa (hash: FnruvgEbj+Jd7zEEu8uypOOheS/usNund8JbrSMLSXM=)
                          3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: cnc+vMuEHX9oOYYwlnpurbnAi0Ms3bvXVczwSo6hhDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c5:b9:fc:ce:e2:a8:c4:ef:b8:ea:87:6c:0c:6b:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
        Validity
            Not Before: May 29 19:00:51 2024 GMT
            Not After : May 30 19:00:51 2024 GMT
        Subject: CN=ac2c8c884e11eb8d2cfd70ca6e5d8da03b49c923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:d2:90:6a:37:b3:c0:e3:bd:2e:05:ad:aa:
                    60:1f:6e:dd:ac:d3:46:47:1e:d8:ae:72:78:3c:8f:
                    84:77:3b:8b:44:0b:59:54:d8:53:2e:a9:ab:b2:fe:
                    af:32:b7:38:a8:c7:fc:0c:df:06:33:d9:1a:0f:f0:
                    82:33:46:85:1f:03:72:2d:91:7c:03:4f:a2:c3:14:
                    6a:26:a7:1c:2b:8d:d2:00:19:db:17:95:d8:db:8e:
                    47:bd:4f:d9:3b:30:8a:17:d8:0d:a1:2b:05:b6:49:
                    a4:c2:4b:0c:61:32:13:48:c2:92:62:5a:6f:5d:6a:
                    96:66:64:04:96:51:a9:ff:2e:eb:a8:f9:73:99:d3:
                    b3:08:1e:b9:4c:f3:fc:0f:10:ff:97:4d:13:3a:d4:
                    42:b5:71:8f:87:57:69:cb:e7:e7:09:c7:41:ea:fe:
                    4b:67:ef:ea:29:a5:6c:97:f5:c9:11:84:65:d1:86:
                    d5:61:68:fc:b0:bb:d2:04:5e:fc:4d:9f:18:b9:bc:
                    42:10:76:c1:06:8e:02:15:10:04:9c:4c:1f:31:7c:
                    1e:72:54:41:59:4a:10:6c:f6:48:69:cf:e6:72:c2:
                    b7:06:bc:7a:2f:f8:ac:d3:9f:af:88:01:74:2e:a2:
                    88:b6:6b:db:e5:ff:8a:d1:0a:4f:bd:d6:e1:90:32:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2C:8C:88:4E:11:EB:8D:2C:FD:70:CA:6E:5D:8D:A0:3B:49:C9:23
            X509v3 Authority Key Identifier:
                keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:20:0d:97:47:d1:fd:50:c7:d8:74:50:bb:e3:5b:c5:16:
         07:e3:0f:a7:30:c3:03:f1:76:52:f4:07:5e:8f:87:c4:31:a7:
         04:be:b9:c8:8c:e0:66:ab:51:54:76:bb:bd:cc:f1:3c:93:83:
         e5:e1:68:49:c5:ac:31:8f:c8:2d:76:06:e0:0b:23:f9:cc:63:
         65:bf:22:98:09:3e:42:b6:4c:18:ce:6a:ec:3f:80:24:e4:84:
         3c:d1:cd:37:9a:e6:fb:f7:b2:89:95:bd:34:c5:d5:b5:07:2b:
         b8:4e:e7:04:f8:09:08:08:ad:3c:be:67:86:91:86:c6:89:03:
         5c:d4:3f:65:5d:63:2b:be:50:a4:a1:cf:32:c0:c9:bd:2a:6a:
         63:95:f4:4d:93:dd:23:16:56:e5:c2:86:04:79:00:a3:e0:74:
         13:22:e4:63:8b:f1:a8:84:0c:1e:35:40:00:75:a2:f9:10:18:
         3e:92:26:c6:f6:c9:d8:6e:fc:88:d2:7f:e0:71:6c:7e:8b:d1:
         62:00:22:94:8c:82:74:8c:9e:cc:bd:98:92:dd:8a:23:17:34:
         ab:b3:da:3a:36:18:fb:57:da:f9:34:0c:60:c8:84:8c:de:a8:
         bc:45:ad:8f:86:6a:d8:bb:9f:ff:82:29:7c:5a:0e:66:e2:f4:
         d3:97:56:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/FufzO4qjE77jqh2wMa9W0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx
ODhiMWYwHhcNMjQwNTI5MTkwMDUxWhcNMjQwNTMwMTkwMDUxWjAzMTEwLwYDVQQD
EyhhYzJjOGM4ODRlMTFlYjhkMmNmZDcwY2E2ZTVkOGRhMDNiNDljOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7HSkGo3s8DjvS4FrapgH27drNNG
Rx7YrnJ4PI+EdzuLRAtZVNhTLqmrsv6vMrc4qMf8DN8GM9kaD/CCM0aFHwNyLZF8
A0+iwxRqJqccK43SABnbF5XY245HvU/ZOzCKF9gNoSsFtkmkwksMYTITSMKSYlpv
XWqWZmQEllGp/y7rqPlzmdOzCB65TPP8DxD/l00TOtRCtXGPh1dpy+fnCcdB6v5L
Z+/qKaVsl/XJEYRl0YbVYWj8sLvSBF78TZ8YubxCEHbBBo4CFRAEnEwfMXweclRB
WUoQbPZIac/mcsK3Brx6L/is05+viAF0LqKItmvb5f+K0QpPvdbhkDLo5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwsjIhOEeuNLP1wym5djaA7SckjMB8GA1UdIwQY
MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt
NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy
LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJYgDZdH
0f1Qx9h0ULvjW8UWB+MPpzDDA/F2UvQHXo+HxDGnBL65yIzgZqtRVHa7vczxPJOD
5eFoScWsMY/ILXYG4Asj+cxjZb8imAk+QrZMGM5q7D+AJOSEPNHNN5rm+/eyiZW9
NMXVtQcruE7nBPgJCAitPL5nhpGGxokDXNQ/ZV1jK75QpKHPMsDJvSpqY5X0TZPd
IxZW5cKGBHkAo+B0EyLkY4vxqIQMHjVAAHWi+RAYPpImxvbJ2G78iNJ/4HFsfovR
YgAilIyCdIyezL2Ykt2KIxc0q7PaOjYY+1fa+TQMYMiEjN6ovEWtj4Zq2Luf/4Ip
fFoOZuL005dW4A==
-----END CERTIFICATE-----
Generated at Thu May 30 04:13:43 2024 by rpki-client on console-ams.rpki-client.org