Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File:                     Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier:          c/W/7QgAbpHVN2vo5Kzxvx3A3IlPHA5ihZKXKP2DRw4=
Subject key identifier:   00:D4:7D:85:09:51:3D:0B:A7:62:43:03:37:1E:D6:A0:63:74:3F:54
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer:       /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial:       018F8D14A1DA4296AC9DF7A83C1C31BC38D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number:          117E
Signing time:             Sat 18 May 2024 19:01:30 +0000
Manifest this update:     Sat 18 May 2024 19:01:30 +0000
Manifest next update:     Sun 19 May 2024 19:01:30 +0000
Files and hashes:         1: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: wuLbqjb0AT0fJ0tZwxdKIZUVR1zVL0BAEnbYgA66x4Q=)
                          2: Pmj0yB31raieE-WYRbn68_kREGc.roa (hash: dUG5djf9tc7QxFK3Fza4quapuBFSPrr1woUGx0SyiWo=)
                          3: QeMLef52nWQt8KOiEfy1VRL6VUs.roa (hash: vdainM1ktmLgM7J+fssfmYohLW7YHixGUG2XsxGDl88=)
                          4: ZRUwK2XWR-TC90aHW5UPPwGJipQ.roa (hash: AhcQPYgV3tl0xqf59GUspuTVEz2Lb+fTg4gYU09Q0f8=)
                          5: Zg2YUEhg_uReKo8PmZAB4Xn8eYQ.roa (hash: zmMCilyb5CRaJ3Ak9Xk7xXthHEleyA2To9Eor8GSiFA=)
                          6: blYcCndn_yP2oT1AYGj_8yDLyJ8.roa (hash: lMGd0YdSFs31BzG6W731XolCoa1uVeSK8Wwc7HRxFqA=)
                          7: ixl9t23B8-0dUb_X_u5YhgB4Pz0.roa (hash: qCDxc6QE+WJ3WxTxQ65PBF6unhoLlMHmHLURCxLd60c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:a1:da:42:96:ac:9d:f7:a8:3c:1c:31:bc:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
        Validity
            Not Before: May 18 19:01:30 2024 GMT
            Not After : May 19 19:01:30 2024 GMT
        Subject: CN=00d47d8509513d0ba7624303371ed6a063743f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:b7:ff:d5:6d:38:0b:06:56:25:a2:09:b3:
                    87:21:33:3b:dc:7a:1b:04:33:ee:d2:13:0f:11:c9:
                    ec:74:27:39:8a:b3:c0:de:90:e0:09:fa:fe:ad:f2:
                    00:ec:19:7a:43:8a:ba:27:31:b9:32:ab:82:db:54:
                    cd:f8:42:7f:0b:68:5a:60:d9:07:70:04:21:64:62:
                    9a:81:8a:ad:80:a4:4b:7e:ff:d8:66:b5:44:44:5d:
                    53:2a:a8:f9:a6:3f:77:ab:0c:d5:98:89:d9:0e:c4:
                    63:da:37:2a:44:a2:2c:8f:08:e8:91:2b:e3:45:e6:
                    98:5a:13:fa:81:1e:35:1c:55:38:29:0f:f4:9b:e2:
                    1e:e9:f5:56:c8:41:43:00:bb:40:da:ec:8d:2b:b6:
                    48:a9:41:ad:ea:1e:39:98:4a:4f:fa:80:c3:54:7d:
                    89:6a:6f:5d:4f:c7:1f:3a:d2:b0:a5:49:bc:f3:c8:
                    f7:24:a5:b6:07:c1:9d:f0:f0:45:06:d4:67:a5:0a:
                    5c:cb:03:ef:c3:7f:83:2b:f9:be:2e:83:a0:7f:f9:
                    49:bb:a1:9c:1b:63:5e:05:2a:f5:d0:8c:55:12:bb:
                    e9:2e:d3:d5:c4:25:e5:4b:02:65:ca:20:aa:c8:37:
                    86:fd:30:27:62:69:95:87:93:24:a4:fd:5d:a2:57:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:7D:85:09:51:3D:0B:A7:62:43:03:37:1E:D6:A0:63:74:3F:54
            X509v3 Authority Key Identifier:
                keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5e:7b:c4:56:25:e5:d0:dd:5d:c7:6c:0c:27:45:1b:d3:04:
         01:db:b1:7d:c2:30:ca:5c:e4:86:3c:08:9b:70:96:0f:06:13:
         eb:85:88:a9:a8:24:ae:fe:da:21:f7:77:2c:b2:53:2d:ea:d6:
         d2:8f:38:57:a4:c0:d8:d4:7a:93:48:32:1d:5e:0a:1f:ec:86:
         6c:53:e2:96:c0:05:98:1b:57:7e:a8:ce:d9:c9:b9:0c:4d:c8:
         14:76:ea:d7:1f:45:4f:a0:c8:cb:7e:d6:bc:20:97:31:5a:87:
         65:8a:e2:47:3b:e5:f2:ff:60:44:85:78:82:bf:b5:43:13:ab:
         63:cb:8f:12:da:7f:80:ba:e3:af:8a:79:41:44:ed:dd:f4:5d:
         12:da:e3:0f:38:f8:9e:4b:4f:81:71:58:60:d5:42:c6:bd:2d:
         db:3e:28:aa:a7:a9:92:94:e1:eb:d3:ed:3b:2f:1a:24:9b:6a:
         ba:9e:28:13:92:74:cc:82:d1:dd:95:d8:7c:dd:71:90:fa:a8:
         59:5a:3f:96:4a:a1:cc:bb:48:48:7e:d4:a4:a8:42:65:b6:62:
         42:01:ee:a9:5f:e6:96:a6:4d:d3:1d:c7:26:64:ae:4c:91:c5:
         e6:bc:37:e1:82:dc:76:44:fa:cc:3c:c3:e9:65:8d:03:d8:bd:
         c7:93:c3:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NFKHaQpasnfeoPBwxvDjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy
YzM4ZTQwHhcNMjQwNTE4MTkwMTMwWhcNMjQwNTE5MTkwMTMwWjAzMTEwLwYDVQQD
EygwMGQ0N2Q4NTA5NTEzZDBiYTc2MjQzMDMzNzFlZDZhMDYzNzQzZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8m3/9VtOAsGViWiCbOHITM73Hob
BDPu0hMPEcnsdCc5irPA3pDgCfr+rfIA7Bl6Q4q6JzG5MquC21TN+EJ/C2haYNkH
cAQhZGKagYqtgKRLfv/YZrVERF1TKqj5pj93qwzVmInZDsRj2jcqRKIsjwjokSvj
ReaYWhP6gR41HFU4KQ/0m+Ie6fVWyEFDALtA2uyNK7ZIqUGt6h45mEpP+oDDVH2J
am9dT8cfOtKwpUm888j3JKW2B8Gd8PBFBtRnpQpcywPvw3+DK/m+LoOgf/lJu6Gc
G2NeBSr10IxVErvpLtPVxCXlSwJlyiCqyDeG/TAnYmmVh5MkpP1dolcXFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADUfYUJUT0Lp2JDAzce1qBjdD9UMB8GA1UdIwQY
MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt
M2JhNWYzMGNhYWJmLzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm
LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp157xFYl
5dDdXcdsDCdFG9MEAduxfcIwylzkhjwIm3CWDwYT64WIqagkrv7aIfd3LLJTLerW
0o84V6TA2NR6k0gyHV4KH+yGbFPilsAFmBtXfqjO2cm5DE3IFHbq1x9FT6DIy37W
vCCXMVqHZYriRzvl8v9gRIV4gr+1QxOrY8uPEtp/gLrjr4p5QUTt3fRdEtrjDzj4
nktPgXFYYNVCxr0t2z4oqqepkpTh69PtOy8aJJtqup4oE5J0zILR3ZXYfN1xkPqo
WVo/lkqhzLtISH7UpKhCZbZiQgHuqV/mlqZN0x3HJmSuTJHF5rw34YLcdkT6zDzD
6WWNA9i9x5PDGg==
-----END CERTIFICATE-----
Generated at Sat May 18 23:16:13 2024 by rpki-client on console-ams.rpki-client.org