Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File:                     QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier:          +ITyURiROMCqhT4N/C7JtIh4UgS1BOUPMIIqkxdWLyQ=
Subject key identifier:   B8:21:5B:52:8F:83:FC:4F:8E:08:CD:B1:2A:DD:FC:BD:2E:96:DF:26
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       018F855ABB680351E4CFE3C6F66595E25B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number:          0817
Signing time:             Fri 17 May 2024 07:01:06 +0000
Manifest this update:     Fri 17 May 2024 07:01:06 +0000
Manifest next update:     Sat 18 May 2024 07:01:06 +0000
Files and hashes:         1: BgCeZFCB2RMaktGv9snknt9TtSM.roa (hash: t/c3YUoSm8O+J8KrnhkjpjuXIjTY9Ee2L5Sp3DdKY14=)
                          2: Diypr3vJjsD6oVhZFFFgmZ4Hn28.roa (hash: rCPb0zDx4dgT3wiTjczBCZVUACNVtuDeom59aFDPsoM=)
                          3: EIn7EucLGwpV_Zp5i3VjUrdNBvQ.roa (hash: VPbH/Rx8XwgzWw4FjzZCZpUIC0oD0mZMzAfdStUkCbc=)
                          4: ODYuP52ifkHVkda4BnvvoBDv3i0.roa (hash: Syk81rlFJd8p740MNbqd4MRXy4L2MpqIbjxMgMnVoMM=)
                          5: POtqDp-uNr2xhVOvytwoisQsuC0.roa (hash: sqoPPrxe2RJxQ7fSAL55+fer/bU3keZN/k8nanE/tyE=)
                          6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: MTWXIFOQeA1vwuM0lBWzJJorAqjp9Xcbka1Aj859/J4=)
                          7: Sxjz3NY_O1vji8e2B0--kwuKDbM.roa (hash: Mw5J8HVoPGiP7zU2Q4JhQLVHUPnTELI3cV+zpplsPc0=)
                          8: Ul_Tp0R6u8dHBXCqpPTU5mse70A.roa (hash: Ldrtrg7TUaE7diVL6ebvVQ9ZqDiuGqSiVClETwyh/t8=)
                          9: gHIxv1Syx4N_MipL-mYRocClN5U.roa (hash: 4V2Q3xl5NdrU3cdeWKohfRMgjcg0GYls2kGKgJM/ft0=)
                          10: hnHVyGRLcu1kg1RVRTq8QzQI8Mw.roa (hash: gB+giofzDq/t4wm+GqFajWlrkh/milAjApkGfh5nqaQ=)
                          11: kD9Ri_S_wjXmk9bzA9CrlDrUyfM.roa (hash: D+RWoVLgnzMnFuVVhvWy4dekOMpHGrdCJ7EEIjFPgbg=)
                          12: qI5P-YHRugxDVMXrqCYsQ0UM1UU.roa (hash: MKTtJoZblyxIHUHeB94f6dI7dqMVaGTmtPOEVOaiM4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:bb:68:03:51:e4:cf:e3:c6:f6:65:95:e2:5b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: May 17 07:01:06 2024 GMT
            Not After : May 18 07:01:06 2024 GMT
        Subject: CN=b8215b528f83fc4f8e08cdb12addfcbd2e96df26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:81:d8:32:53:b1:db:72:95:de:88:1f:60:
                    f0:2d:a4:77:14:1b:fb:d1:82:41:de:18:2d:42:8c:
                    f9:e7:87:ae:20:06:d1:56:06:c7:0d:fa:5e:ac:52:
                    08:f9:11:1e:51:fd:1a:da:be:54:f2:92:0f:6d:7b:
                    d1:f9:08:1b:6c:99:11:85:ca:03:0b:3d:e1:2b:fe:
                    00:97:29:41:1a:ae:03:ee:16:c4:d0:a7:83:9a:03:
                    c2:b8:2c:f6:89:d5:bf:3f:12:ff:33:f8:a4:15:12:
                    aa:64:c2:8f:ad:9a:ff:80:a1:a9:f5:3a:d2:6c:b2:
                    fb:ca:b9:27:af:47:fc:e7:6f:8e:ab:88:ea:b1:90:
                    75:31:84:74:89:73:ce:73:f8:f0:3c:b9:db:86:53:
                    67:d4:a8:3e:de:81:44:95:4f:f1:d3:40:fc:0e:4a:
                    c5:8b:22:09:05:2a:62:f5:c5:73:fb:f8:e3:64:76:
                    49:f4:43:bf:72:2a:63:d3:bf:b0:8b:95:13:a3:97:
                    87:16:4e:60:57:75:1a:53:d2:63:9d:fb:62:d5:da:
                    1c:59:74:3f:5c:c9:a6:9b:81:fa:22:bd:82:0e:2b:
                    fa:9a:61:4f:86:77:ed:16:1d:3a:63:d9:c0:db:aa:
                    77:d7:c9:06:dd:41:78:92:ff:1f:4a:56:45:b4:c2:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:21:5B:52:8F:83:FC:4F:8E:08:CD:B1:2A:DD:FC:BD:2E:96:DF:26
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:be:3c:78:8f:77:07:b8:fa:e3:eb:08:4b:19:06:f4:3c:
         39:d6:24:65:0a:a0:bc:99:e6:ef:67:d8:d6:39:21:30:df:c1:
         9b:9d:e5:2f:ea:9b:00:f4:fc:63:39:70:f9:e8:ed:df:18:f9:
         d6:21:be:97:50:b9:a4:53:70:f6:d2:36:78:56:06:c9:9a:3e:
         04:c5:b8:84:34:71:c1:84:19:05:b9:43:6f:bf:f9:66:9e:c3:
         52:25:bf:d4:32:f7:d3:c3:6c:d0:49:85:18:bd:85:d1:01:80:
         3b:ad:45:a4:64:4b:13:bf:77:a3:60:26:ea:2e:99:37:89:28:
         5e:01:f9:56:67:91:4b:8a:ad:85:93:2d:81:fa:06:7d:a4:00:
         9d:33:ce:51:60:12:66:ce:9a:ee:f1:80:e6:88:b0:02:87:18:
         ca:5c:4a:62:e8:f8:ef:cb:8d:94:cc:95:8f:d0:5a:dc:a6:1a:
         aa:8e:29:f4:af:c7:4d:83:1d:44:09:c4:76:ff:13:84:60:c3:
         7d:15:d1:02:05:29:80:d0:49:17:89:9c:f6:ac:f7:0d:52:76:
         be:c7:2c:ca:1a:1d:43:df:ea:dc:a8:aa:6f:a2:9a:03:99:5a:
         4a:fb:2b:18:17:30:6e:6c:3d:1f:cc:fd:64:3b:8a:17:81:e6:
         1d:99:88:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FWrtoA1Hkz+PG9mWV4ltzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjQwNTE3MDcwMTA2WhcNMjQwNTE4MDcwMTA2WjAzMTEwLwYDVQQD
EyhiODIxNWI1MjhmODNmYzRmOGUwOGNkYjEyYWRkZmNiZDJlOTZkZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJuB2DJTsdtyld6IH2DwLaR3FBv7
0YJB3hgtQoz554euIAbRVgbHDfperFII+REeUf0a2r5U8pIPbXvR+QgbbJkRhcoD
Cz3hK/4AlylBGq4D7hbE0KeDmgPCuCz2idW/PxL/M/ikFRKqZMKPrZr/gKGp9TrS
bLL7yrknr0f852+Oq4jqsZB1MYR0iXPOc/jwPLnbhlNn1Kg+3oFElU/x00D8DkrF
iyIJBSpi9cVz+/jjZHZJ9EO/cipj07+wi5UTo5eHFk5gV3UaU9Jjnfti1docWXQ/
XMmmm4H6Ir2CDiv6mmFPhnftFh06Y9nA26p318kG3UF4kv8fSlZFtMIITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLghW1KPg/xPjgjNsSrd/L0ult8mMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8S+PHiP
dwe4+uPrCEsZBvQ8OdYkZQqgvJnm72fY1jkhMN/Bm53lL+qbAPT8Yzlw+ejt3xj5
1iG+l1C5pFNw9tI2eFYGyZo+BMW4hDRxwYQZBblDb7/5Zp7DUiW/1DL308Ns0EmF
GL2F0QGAO61FpGRLE793o2Am6i6ZN4koXgH5VmeRS4qthZMtgfoGfaQAnTPOUWAS
Zs6a7vGA5oiwAocYylxKYuj478uNlMyVj9Ba3KYaqo4p9K/HTYMdRAnEdv8ThGDD
fRXRAgUpgNBJF4mc9qz3DVJ2vscsyhodQ9/q3Kiqb6KaA5laSvsrGBcwbmw9H8z9
ZDuKF4HmHZmIkQ==
-----END CERTIFICATE-----
Generated at Fri May 17 09:16:20 2024 by rpki-client on console-fra.rpki-client.org