Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          TBmxvbQMujJwEuWwxE/Y0N/pAuI4kCO99Qc23SI5KyE=
Subject key identifier:   B6:99:58:B6:C7:B8:87:71:27:81:0F:69:0C:44:16:5E:FC:FC:8E:6C
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       018F7BB295CA2165578CC1AF41A0DC8FADBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          1173
Signing time:             Wed 15 May 2024 10:00:52 +0000
Manifest this update:     Wed 15 May 2024 10:00:52 +0000
Manifest next update:     Thu 16 May 2024 10:00:52 +0000
Files and hashes:         1: 7sph3cnyZhdMdM03xV2IdmP10Q4.roa (hash: TxB9S16zRkUrLiTr31TzryytHRQMGQnRHC8dWRk+PJQ=)
                          2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: /KGLxx+77weXtrENb6G02pNiXf9FUbmL1TySlUnJ3t4=)
                          3: pq7Q2NUFFbS0nWYOwKfog-Vud2k.roa (hash: yIJi29VXE2fhJ4/VBkwGYXaU3oEyOcVeOFEm2KGoYgo=)
                          4: tOM3m7MZ399MBtggiULiJM5Fx-k.roa (hash: LZN2pKiXrsj4bvT93WPlqvC/3bxEYMubvyQ2jU9CnOM=)
                          5: yi7U0HWqx5DAOhJoH-IQqAVtPtU.roa (hash: JcJbcVznvUTOZZZ3KHtMckUEMGiCZL32RUej1/KlT7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b2:95:ca:21:65:57:8c:c1:af:41:a0:dc:8f:ad:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: May 15 10:00:52 2024 GMT
            Not After : May 16 10:00:52 2024 GMT
        Subject: CN=b69958b6c7b8877127810f690c44165efcfc8e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:5a:c6:51:c3:5c:b4:47:4c:c6:bb:19:c3:
                    94:8d:9b:56:79:e8:a2:46:0b:54:0b:eb:d9:a6:c3:
                    16:cb:0c:db:4b:69:70:07:c7:7f:07:cb:fd:65:66:
                    ff:8b:68:6a:3c:b1:e6:db:e0:be:2e:ef:f9:2f:86:
                    ce:98:20:58:21:1e:1a:99:5b:17:df:74:a6:89:32:
                    e9:d6:10:ce:d2:f9:83:f5:fa:c8:a1:d1:fd:b2:8d:
                    de:4b:4f:cb:95:73:13:e6:ca:98:a7:71:9a:0a:f7:
                    66:5a:b8:60:16:0e:60:9b:49:37:6a:78:09:b4:43:
                    d2:13:90:4c:c4:39:0b:66:79:e9:ec:e9:be:d6:65:
                    b3:4e:ba:29:e6:5f:05:7b:95:b7:7d:28:0a:bd:7f:
                    9e:68:a0:6c:d3:1a:7b:4b:f5:b0:06:ff:a7:25:fe:
                    36:73:db:20:d4:39:4b:1b:c7:12:6b:c3:b1:62:4a:
                    98:67:73:9c:9c:14:e8:61:84:ef:1a:cd:2b:ad:bd:
                    fa:b6:85:be:29:0f:9b:b9:0e:03:cb:b1:8d:d5:4b:
                    c1:92:00:46:ad:03:7f:4a:fe:89:19:af:15:6f:87:
                    16:e2:f9:b4:8d:dc:ff:26:ed:58:62:10:81:c8:7d:
                    b9:37:0e:58:43:a5:30:72:aa:8f:16:ec:27:6c:49:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:58:B6:C7:B8:87:71:27:81:0F:69:0C:44:16:5E:FC:FC:8E:6C
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8c:a6:f0:bb:07:90:6b:ae:eb:3d:3f:38:e7:9a:a2:e9:d6:
         a4:1e:ab:53:b4:eb:d7:6a:b8:6e:1c:f3:67:b7:45:a6:2b:90:
         86:87:43:d8:64:a8:4f:33:21:c6:a3:0e:05:70:4f:84:23:38:
         9d:69:ac:22:96:55:e9:99:13:84:48:9f:0c:f9:a2:04:c9:ba:
         82:03:ae:e6:cf:71:ca:ca:e3:cc:86:45:22:82:62:d1:d3:7b:
         c6:2e:93:25:87:ab:dc:fe:be:2d:19:e4:48:69:fa:c7:a0:bd:
         b9:83:21:ec:86:4d:74:82:41:c7:b8:51:48:7c:73:2f:9f:84:
         eb:bc:77:53:3b:5c:5d:26:67:cf:41:3a:5c:e6:cf:27:29:15:
         df:ab:63:c5:51:86:02:37:96:4c:93:86:76:c9:8a:7d:89:34:
         9a:62:c7:dc:3d:0a:37:0b:c0:93:4a:34:76:2d:2a:ca:31:cb:
         8c:f6:fe:0e:e1:fa:5c:d5:1d:f9:62:22:96:2f:81:68:23:97:
         c3:58:60:c7:c9:70:af:c7:18:03:29:0f:ff:9b:0b:fd:cb:5b:
         cb:22:83:65:b8:c7:3b:9f:47:fd:b1:82:b9:f7:4b:8e:94:cf:
         06:91:82:f3:1f:2a:39:5d:81:ec:92:eb:5e:c0:19:5f:da:f7:
         a2:39:72:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY97spXKIWVXjMGvQaDcj627MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjQwNTE1MTAwMDUyWhcNMjQwNTE2MTAwMDUyWjAzMTEwLwYDVQQD
EyhiNjk5NThiNmM3Yjg4NzcxMjc4MTBmNjkwYzQ0MTY1ZWZjZmM4ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjFaxlHDXLRHTMa7GcOUjZtWeeii
RgtUC+vZpsMWywzbS2lwB8d/B8v9ZWb/i2hqPLHm2+C+Lu/5L4bOmCBYIR4amVsX
33SmiTLp1hDO0vmD9frIodH9so3eS0/LlXMT5sqYp3GaCvdmWrhgFg5gm0k3angJ
tEPSE5BMxDkLZnnp7Om+1mWzTrop5l8Fe5W3fSgKvX+eaKBs0xp7S/WwBv+nJf42
c9sg1DlLG8cSa8OxYkqYZ3OcnBToYYTvGs0rrb36toW+KQ+buQ4Dy7GN1UvBkgBG
rQN/Sv6JGa8Vb4cW4vm0jdz/Ju1YYhCByH25Nw5YQ6UwcqqPFuwnbEmd5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaZWLbHuIdxJ4EPaQxEFl78/I5sMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoym8LsH
kGuu6z0/OOeaounWpB6rU7Tr12q4bhzzZ7dFpiuQhodD2GSoTzMhxqMOBXBPhCM4
nWmsIpZV6ZkThEifDPmiBMm6ggOu5s9xysrjzIZFIoJi0dN7xi6TJYer3P6+LRnk
SGn6x6C9uYMh7IZNdIJBx7hRSHxzL5+E67x3UztcXSZnz0E6XObPJykV36tjxVGG
AjeWTJOGdsmKfYk0mmLH3D0KNwvAk0o0di0qyjHLjPb+DuH6XNUd+WIili+BaCOX
w1hgx8lwr8cYAykP/5sL/ctbyyKDZbjHO59H/bGCufdLjpTPBpGC8x8qOV2B7JLr
XsAZX9r3ojly8Q==
-----END CERTIFICATE-----
Generated at Wed May 15 19:23:59 2024 by rpki-client on console-fra.rpki-client.org