Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
File:                     Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json)
Hash identifier:          Byn4ralyswneKJacdKYNQBhKrBAhQgj8zgFWnYSE37A=
Subject key identifier:   A9:0C:2E:19:FF:4F:27:DC:D4:9A:74:11:A4:88:7D:AE:75:11:E9:11
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Certificate issuer:       /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial:       0190335FF548ADC3D3B59D1D43EED208830A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
Manifest number:          047C
Signing time:             Thu 20 Jun 2024 02:00:45 +0000
Manifest this update:     Thu 20 Jun 2024 02:00:45 +0000
Manifest next update:     Fri 21 Jun 2024 02:00:45 +0000
Files and hashes:         1: 5OlYaVOhI0SCKEIUUiYsHhEFMMI.roa (hash: YShzu/eEd15uFYmrmymsRyvmltlahvnrP7KmaIMgxDI=)
                          2: B32DVQQ22oyuQhRCNlG3c8c15KY.roa (hash: pJNtYc9wlgWSjb36pDcMyU4o1KUTgf9bYMSRjfop6iw=)
                          3: Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa (hash: /ZKZSuexa8O8H8TunUKYFqIZ+SWpHK6UFIFolrBfphM=)
                          4: MrwdC8Q_xzXYK-bPVXHLI9fzi-o.roa (hash: dUgXccgoPv/MGjieaNOv7XYful0KfsG9FU8U6il7RQ8=)
                          5: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: NYiFOr8M4nmzgfEimuO9jHr8R43QXrf7YagZXFO/pCw=)
                          6: _Zl3RIgF1MTfp9OivbM2P67TD68.roa (hash: HDjmdS6gWOdFNcac5Yx8clUzUXlhap6nsHS3e/TobS8=)
                          7: bF_AztaW8uBxIScLJr4ynDQT-VE.roa (hash: VUI15Pc9TEmSppS1E2A5QgubXBtBsWbSEbPDZpgnwsQ=)
                          8: dg3DvqX4fv_b7dA_McuPip09OYA.roa (hash: n1zdAkHrm69leyk6LB7n5DRQSEOLrNMianChVw6OnMs=)
                          9: elYm1NNxuk4TzjdGCk4LZ5Djry0.roa (hash: IdWSZl8rnOQDQKWO6MUOiZ8yQKJA38j8/HimunLfZQs=)
                          10: l43uZC20RxHvL203pIUVfCcvhJg.roa (hash: gB4TzAMY6INvaE8AUkC0Lqt4evemz+/WxQAbmVHbxH0=)
                          11: x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa (hash: 1U4h2uHZiOIAx/Er3+KP3I/7Zo26gdc551kp6Zeqj4U=)
                          12: zlE1xUxFIFPoGo7fKdR_GMQkh88.roa (hash: eB8V3BI9ewvlQX7PaqOEvjAs6jzzndutRsvM+cX3GYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:5f:f5:48:ad:c3:d3:b5:9d:1d:43:ee:d2:08:83:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
        Validity
            Not Before: Jun 20 02:00:45 2024 GMT
            Not After : Jun 21 02:00:45 2024 GMT
        Subject: CN=a90c2e19ff4f27dcd49a7411a4887dae7511e911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:16:fd:30:36:e3:db:b9:fc:03:f3:57:a2:
                    3a:34:ea:0b:c0:15:5e:a7:3c:da:b4:e5:fe:95:96:
                    c9:87:6b:9e:d6:8c:0c:62:37:ee:3a:3f:02:19:72:
                    e4:b8:00:9c:13:9c:7d:a4:8f:52:dc:60:85:e4:4a:
                    ee:a3:84:a7:ff:2d:3f:83:a5:0c:d4:60:4c:5c:e3:
                    d7:7d:a8:1b:4b:67:b8:19:23:dd:73:14:e8:56:1e:
                    5d:ba:ad:dd:e4:7e:95:26:d0:94:7f:36:bd:e4:63:
                    14:ed:f2:a5:57:72:4e:26:b1:a9:f2:0a:fd:db:24:
                    ad:8d:19:c4:f6:b6:62:94:59:4c:0c:ab:03:1c:d2:
                    8c:81:4c:e6:dd:cb:de:9f:a0:7b:4c:95:e2:eb:28:
                    5f:ba:2b:d4:d9:2e:6b:0a:a6:8e:72:ec:0f:d5:13:
                    76:84:1b:f4:15:49:4b:0f:2a:53:a0:dd:ce:38:d3:
                    09:c3:98:26:10:64:1b:23:b7:50:bd:09:c9:21:f5:
                    f9:92:75:ab:98:79:a5:4f:e9:17:da:4b:2f:76:bf:
                    a6:06:37:03:3b:2f:30:40:fd:36:3a:9b:67:c3:c2:
                    71:10:74:d5:c6:63:14:0e:b6:5d:09:aa:27:b3:38:
                    06:67:b0:0f:bc:7b:35:b8:cb:32:74:bb:99:f1:cc:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0C:2E:19:FF:4F:27:DC:D4:9A:74:11:A4:88:7D:AE:75:11:E9:11
            X509v3 Authority Key Identifier:
                keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:1f:57:9c:a8:88:30:5f:1a:70:8a:ef:26:06:61:0b:db:
         59:5b:47:7f:55:56:f6:bc:41:4f:b6:6e:6f:ee:26:27:8a:50:
         91:1b:f6:80:8a:2f:b8:dd:c0:54:39:be:c5:4a:45:41:79:d3:
         cb:3d:c2:fa:9a:26:e2:24:eb:40:3c:24:2b:dc:c2:3b:70:b2:
         e9:e3:ec:54:8f:79:76:87:11:b7:15:3d:88:b3:15:45:ee:30:
         f1:10:07:b6:85:ed:8e:11:45:39:2f:d5:47:bf:72:92:d3:7c:
         b5:9f:51:81:84:44:70:c5:45:12:54:5b:76:94:bf:2f:f3:11:
         8f:a4:60:ef:ee:14:da:5f:3f:fa:e6:a6:00:12:fe:d5:c4:cf:
         96:a1:fe:f0:49:19:5d:3c:7a:11:32:e6:9c:59:0d:68:fe:c8:
         08:40:93:a6:8f:29:05:d2:d8:f8:62:a8:b0:9d:f5:20:f3:45:
         37:b1:7d:2b:9f:85:46:23:a4:ac:6c:12:6d:04:37:9e:c8:aa:
         c7:bc:ec:69:88:6c:e5:c2:a5:a5:f3:da:4e:3b:8a:c4:38:ad:
         1b:1f:2e:6c:cd:bf:25:d1:9e:a7:ba:80:00:c4:04:ea:bc:15:
         64:f3:cf:d4:39:3d:17:89:e4:46:b4:19:a8:e4:87:27:41:dc:
         6c:0a:a4:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAzX/VIrcPTtZ0dQ+7SCIMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjQwNjIwMDIwMDQ1WhcNMjQwNjIxMDIwMDQ1WjAzMTEwLwYDVQQD
EyhhOTBjMmUxOWZmNGYyN2RjZDQ5YTc0MTFhNDg4N2RhZTc1MTFlOTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ8W/TA249u5/APzV6I6NOoLwBVe
pzzatOX+lZbJh2ue1owMYjfuOj8CGXLkuACcE5x9pI9S3GCF5Eruo4Sn/y0/g6UM
1GBMXOPXfagbS2e4GSPdcxToVh5duq3d5H6VJtCUfza95GMU7fKlV3JOJrGp8gr9
2yStjRnE9rZilFlMDKsDHNKMgUzm3cven6B7TJXi6yhfuivU2S5rCqaOcuwP1RN2
hBv0FUlLDypToN3OONMJw5gmEGQbI7dQvQnJIfX5knWrmHmlT+kX2ksvdr+mBjcD
Oy8wQP02Optnw8JxEHTVxmMUDrZdCaonszgGZ7APvHs1uMsydLuZ8cw4jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkMLhn/Tyfc1Jp0EaSIfa51EekRMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyUfV5yo
iDBfGnCK7yYGYQvbWVtHf1VW9rxBT7Zub+4mJ4pQkRv2gIovuN3AVDm+xUpFQXnT
yz3C+pom4iTrQDwkK9zCO3Cy6ePsVI95docRtxU9iLMVRe4w8RAHtoXtjhFFOS/V
R79yktN8tZ9RgYREcMVFElRbdpS/L/MRj6Rg7+4U2l8/+uamABL+1cTPlqH+8EkZ
XTx6ETLmnFkNaP7ICECTpo8pBdLY+GKosJ31IPNFN7F9K5+FRiOkrGwSbQQ3nsiq
x7zsaYhs5cKlpfPaTjuKxDitGx8ubM2/JdGep7qAAMQE6rwVZPPP1Dk9F4nkRrQZ
qOSHJ0HcbAqkZA==
-----END CERTIFICATE-----
Generated at Thu Jun 20 09:50:47 2024 by rpki-client on console-fra.rpki-client.org