Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File:                     qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier:          5daEobeq2E8HqPPIxmiRB946k/ovmLPP/hOdqsoK4Ss=
Subject key identifier:   DC:97:00:5A:B3:49:27:BE:76:68:01:39:86:1E:1A:0B:CE:C6:CE:31
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer:       /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial:       018F8E266118433072E7BB728805BD14586E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number:          0D14
Signing time:             Sun 19 May 2024 00:00:30 +0000
Manifest this update:     Sun 19 May 2024 00:00:30 +0000
Manifest next update:     Mon 20 May 2024 00:00:30 +0000
Files and hashes:         1: GrRTpPGSrNX1n5buF4jDIsY9v_U.roa (hash: 4is0a/T3hJhqUz9abou0yPYM++0OM70kVUSAS6HTQIY=)
                          2: LgFG4nODBuEfMap_0EB0I6AzIf0.roa (hash: B1An4w+sAzqzQenFANWrQdGmOyYJaC6movEK2Yx+y7s=)
                          3: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: RTIYcIffdwuaVYxh9RR3z5v/zbITw4zIp1e5u3mbr4A=)
                          4: xZ26ns_1kDHZ6uBhgP0Ykgwyrgk.roa (hash: aHHB4PS4ysoKd3giF6e1vK4TqqMZY3nj5Sf4M+UA81k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:61:18:43:30:72:e7:bb:72:88:05:bd:14:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
        Validity
            Not Before: May 19 00:00:30 2024 GMT
            Not After : May 20 00:00:30 2024 GMT
        Subject: CN=dc97005ab34927be76680139861e1a0bcec6ce31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:79:86:b3:9d:2b:d2:4c:de:67:b7:37:2b:
                    4a:62:10:af:e4:a8:89:82:c2:d7:6d:ae:ab:e5:32:
                    8d:85:30:16:57:f6:47:f0:70:e1:4d:a0:ca:ec:03:
                    b7:0b:f2:5d:54:cd:e4:2d:b3:61:5f:57:53:03:ea:
                    ec:45:8d:ba:02:a5:ef:84:65:99:f2:57:c7:dc:ef:
                    f0:fd:89:a6:e5:41:bf:84:f7:43:1e:11:ac:30:e9:
                    cb:b5:b5:0b:21:2a:f0:37:e3:ae:f0:d4:cd:f0:b9:
                    e0:2c:a1:09:4e:70:32:0c:31:14:2d:17:8c:a6:22:
                    82:94:2f:9b:27:22:cd:3d:d2:9e:65:25:98:a5:32:
                    20:1f:5e:85:d1:3f:30:ba:79:cb:49:6d:2c:f8:fe:
                    af:48:12:cd:3c:d2:4d:a1:56:68:44:cc:e9:63:05:
                    23:d1:c5:19:9b:31:07:ab:f6:ba:b2:81:a2:e7:46:
                    78:18:31:7e:ed:88:49:5d:16:da:8e:49:72:d0:7c:
                    98:3b:32:2b:48:b9:76:19:c7:65:f3:66:12:b2:b1:
                    14:14:92:d9:af:43:ae:be:e2:6a:40:a5:b4:f7:1b:
                    bc:7b:6d:ff:93:40:f8:1f:a9:e8:c0:64:d5:ec:59:
                    b5:e1:7f:82:60:68:46:d8:91:6a:08:e0:87:22:98:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:00:5A:B3:49:27:BE:76:68:01:39:86:1E:1A:0B:CE:C6:CE:31
            X509v3 Authority Key Identifier:
                keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:16:d6:04:ab:62:38:e4:a2:35:5c:32:a2:74:36:ba:61:
         c6:85:a1:c6:35:25:6e:5e:c0:f8:a3:0b:ae:d8:d4:8c:a5:f1:
         c4:89:c7:78:88:f7:0d:db:ca:a5:f8:1c:f8:49:bb:be:3a:26:
         47:f7:b5:93:c0:3f:43:ad:32:e4:f3:aa:46:6f:2c:50:b6:21:
         3a:ce:4b:0c:b0:e2:e4:53:53:04:e1:bd:6f:b0:a2:f6:dc:fd:
         2d:79:2b:cd:b1:a8:11:dd:0a:e6:c8:1d:41:9a:05:33:a6:6c:
         aa:c0:01:39:4f:d9:88:b3:fb:d1:f6:53:eb:12:00:37:52:a6:
         eb:c0:0a:66:c3:34:1b:fb:ed:81:4e:75:1e:37:16:ca:a5:be:
         03:60:b1:2a:af:ec:c3:c4:b3:17:46:0c:1f:b0:19:a6:c8:81:
         cb:6d:6d:a3:08:aa:7a:d4:b8:60:4b:36:b3:87:50:a2:08:86:
         f7:3e:03:12:81:9e:f6:02:72:15:5c:8e:06:dd:56:36:27:01:
         0c:d8:85:0d:2e:93:ce:8a:c8:06:27:9e:a8:75:0e:7b:40:64:
         86:a9:a5:32:22:96:bd:24:79:c9:db:d6:37:d5:0b:a1:3a:12:
         ad:2a:07:e7:66:ef:d4:d7:56:54:16:6f:f1:1a:88:14:60:32:
         c8:3d:57:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+OJmEYQzBy57tyiAW9FFhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx
OTkyNWYwHhcNMjQwNTE5MDAwMDMwWhcNMjQwNTIwMDAwMDMwWjAzMTEwLwYDVQQD
EyhkYzk3MDA1YWIzNDkyN2JlNzY2ODAxMzk4NjFlMWEwYmNlYzZjZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw15hrOdK9JM3me3NytKYhCv5KiJ
gsLXba6r5TKNhTAWV/ZH8HDhTaDK7AO3C/JdVM3kLbNhX1dTA+rsRY26AqXvhGWZ
8lfH3O/w/Ymm5UG/hPdDHhGsMOnLtbULISrwN+Ou8NTN8LngLKEJTnAyDDEULReM
piKClC+bJyLNPdKeZSWYpTIgH16F0T8wunnLSW0s+P6vSBLNPNJNoVZoRMzpYwUj
0cUZmzEHq/a6soGi50Z4GDF+7YhJXRbajkly0HyYOzIrSLl2Gcdl82YSsrEUFJLZ
r0OuvuJqQKW09xu8e23/k0D4H6nowGTV7Fm14X+CYGhG2JFqCOCHIph2qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyXAFqzSSe+dmgBOYYeGgvOxs4xMB8GA1UdIwQY
MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct
MTYxN2YzOGE2ZGZjLzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj
LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9MW1gSr
YjjkojVcMqJ0NrphxoWhxjUlbl7A+KMLrtjUjKXxxInHeIj3DdvKpfgc+Em7vjom
R/e1k8A/Q60y5POqRm8sULYhOs5LDLDi5FNTBOG9b7Ci9tz9LXkrzbGoEd0K5sgd
QZoFM6ZsqsABOU/ZiLP70fZT6xIAN1Km68AKZsM0G/vtgU51HjcWyqW+A2CxKq/s
w8SzF0YMH7AZpsiBy21towiqetS4YEs2s4dQogiG9z4DEoGe9gJyFVyOBt1WNicB
DNiFDS6TzorIBieeqHUOe0BkhqmlMiKWvSR5ydvWN9ULoToSrSoH52bv1NdWVBZv
8RqIFGAyyD1XWw==
-----END CERTIFICATE-----
Generated at Sun May 19 01:08:16 2024 by rpki-client on console-fra.rpki-client.org