Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          4XyIXV855kzL+UnqmSj+/P2ajKheXV4QVGMogJiZSZ0=
Subject key identifier:   DD:55:52:B0:9A:F0:39:AF:65:00:52:7D:6E:BD:16:49:D5:D5:FA:42
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       018F8E5D4B449AE77CED81ABE900CEC00291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          0E31
Signing time:             Sun 19 May 2024 01:00:29 +0000
Manifest this update:     Sun 19 May 2024 01:00:29 +0000
Manifest next update:     Mon 20 May 2024 01:00:29 +0000
Files and hashes:         1: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: xZ5VVJx14EE+FB2PIwHq6SjWzkInw9393RL89qkqcg4=)
                          2: eec030dlACi48vqB9H4-xfb12S0.roa (hash: CU5TvrLHWMIhcuAdVXr085YU0xbls5HXvUSf+489I7M=)
                          3: hXl9hxQJxxeOVoHm-EvTeLIv6gc.roa (hash: 4G4IHSxGXawkjFA2pcVAgBeiNtboIeRqfzkKWCqis2g=)
                          4: nTxxSUrkmZ9MV1LNcBi5CB1YYNU.roa (hash: 0zaozQcI1IN9aLH4x9bWGAlgQEsnBfaVDRdJygvqihI=)
                          5: rc9WzqiLEXkgVuAZ5yKbuH43LsA.roa (hash: ZV4EJqWtHd7lcnflqHW61MJhBLOGuYCzkBR00vUmLug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:4b:44:9a:e7:7c:ed:81:ab:e9:00:ce:c0:02:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: May 19 01:00:29 2024 GMT
            Not After : May 20 01:00:29 2024 GMT
        Subject: CN=dd5552b09af039af6500527d6ebd1649d5d5fa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:26:ed:59:5a:98:b7:0d:18:b0:ae:f0:8e:
                    1d:ef:2b:7a:f5:d9:3b:27:f7:33:df:5a:86:c9:10:
                    53:97:c9:0b:13:a0:bf:d9:9c:f1:07:20:59:d5:ce:
                    61:ff:bb:94:a7:b6:78:b8:f9:5d:36:58:f4:13:f6:
                    b7:1c:2d:77:ee:8f:a7:fc:61:1a:8b:97:f8:69:d2:
                    a3:21:30:3b:c4:63:b2:36:2d:c5:70:05:f1:40:4d:
                    d8:5f:18:7a:4b:b0:59:c8:3d:12:1d:be:da:4b:37:
                    30:21:bc:50:b8:9d:c1:53:e7:ee:0b:b3:9c:80:7f:
                    64:0b:b2:7b:62:00:a8:a0:d9:93:59:7a:77:17:cf:
                    10:7b:1c:79:3e:be:72:30:36:8c:da:e5:c4:df:61:
                    1d:5c:a0:5e:9b:ef:32:ac:39:54:b5:32:47:d0:81:
                    b1:46:87:58:bf:92:3a:41:6c:cc:75:a9:4f:f2:de:
                    9b:87:e4:aa:3a:2b:38:63:7e:22:bc:1b:64:aa:4c:
                    b5:54:38:08:45:6d:db:74:c3:4d:d7:c8:a3:aa:02:
                    e0:05:a9:77:0d:ae:85:97:76:99:3c:57:4d:db:c8:
                    1e:2a:8e:09:60:9b:0b:89:33:4a:ba:0d:fb:6e:a2:
                    3d:30:dc:b2:d6:ef:9e:5d:16:76:02:9b:b7:9f:f6:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:55:52:B0:9A:F0:39:AF:65:00:52:7D:6E:BD:16:49:D5:D5:FA:42
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b1:b8:90:ad:10:94:73:0d:a4:51:72:42:81:bf:db:b3:97:
         88:c5:2b:74:cb:64:11:2f:c2:71:37:7e:72:99:8c:f6:bd:51:
         17:af:74:db:e8:67:01:ab:63:e9:8f:cb:65:72:36:08:16:cf:
         db:9a:d2:f8:55:7f:4b:46:72:06:a2:75:54:c2:b4:29:c6:8a:
         7d:5a:bf:c0:48:63:34:24:a5:50:d8:ba:17:31:92:ac:85:0c:
         14:f0:77:e7:81:73:62:f6:ca:df:7d:fb:c8:d6:e7:21:d3:f0:
         e9:85:dd:0f:6c:89:ad:05:13:63:65:e5:c9:96:eb:7d:f3:69:
         d4:f5:0d:59:59:c4:8d:ae:c2:27:90:06:58:fd:11:a4:1b:77:
         2a:b3:e5:97:9c:21:c8:0b:30:b3:6b:59:7a:7b:19:15:75:05:
         d6:eb:27:4b:03:5a:5a:88:15:f2:03:31:1b:dc:47:34:d0:12:
         b0:cf:07:f7:3f:2f:5f:a0:7f:4b:4c:dc:51:50:6a:c9:fc:42:
         9f:03:bb:c9:7c:c4:84:33:07:ba:43:1a:ad:cf:4b:ec:eb:95:
         cb:81:62:d5:e0:b4:76:3c:a2:65:26:55:38:23:60:32:92:8f:
         8a:f4:82:20:37:71:3a:04:7f:71:6f:97:ba:e1:e7:b6:2d:f0:
         f9:18:e6:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+OXUtEmud87YGr6QDOwAKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2
YWYxN2EwHhcNMjQwNTE5MDEwMDI5WhcNMjQwNTIwMDEwMDI5WjAzMTEwLwYDVQQD
EyhkZDU1NTJiMDlhZjAzOWFmNjUwMDUyN2Q2ZWJkMTY0OWQ1ZDVmYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkekm7VlamLcNGLCu8I4d7yt69dk7
J/cz31qGyRBTl8kLE6C/2ZzxByBZ1c5h/7uUp7Z4uPldNlj0E/a3HC137o+n/GEa
i5f4adKjITA7xGOyNi3FcAXxQE3YXxh6S7BZyD0SHb7aSzcwIbxQuJ3BU+fuC7Oc
gH9kC7J7YgCooNmTWXp3F88Qexx5Pr5yMDaM2uXE32EdXKBem+8yrDlUtTJH0IGx
RodYv5I6QWzMdalP8t6bh+SqOis4Y34ivBtkqky1VDgIRW3bdMNN18ijqgLgBal3
Da6Fl3aZPFdN28geKo4JYJsLiTNKug37bqI9MNyy1u+eXRZ2Apu3n/Z2hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1VUrCa8DmvZQBSfW69FknV1fpCMB8GA1UdIwQY
MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt
N2JmODI3N2Q4YTJmLzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm
LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLG4kK0Q
lHMNpFFyQoG/27OXiMUrdMtkES/CcTd+cpmM9r1RF6902+hnAatj6Y/LZXI2CBbP
25rS+FV/S0ZyBqJ1VMK0KcaKfVq/wEhjNCSlUNi6FzGSrIUMFPB354FzYvbK3337
yNbnIdPw6YXdD2yJrQUTY2XlyZbrffNp1PUNWVnEja7CJ5AGWP0RpBt3KrPll5wh
yAsws2tZensZFXUF1usnSwNaWogV8gMxG9xHNNASsM8H9z8vX6B/S0zcUVBqyfxC
nwO7yXzEhDMHukMarc9L7OuVy4Fi1eC0djyiZSZVOCNgMpKPivSCIDdxOgR/cW+X
uuHnti3w+Rjm1g==
-----END CERTIFICATE-----
Generated at Sun May 19 02:02:13 2024 by rpki-client on console-fra.rpki-client.org