Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          WpMuQpTbwX9gn5GvAU/95h9391G0PDacxVvOT9/mOZU=
Subject key identifier:   08:8C:2C:48:BE:A4:7A:B0:F7:11:1C:4F:04:E3:2F:0F:07:F7:C7:C4
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       018F6BD1C9AD53A1DD55E1A0A0B4D0222939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1226
Signing time:             Sun 12 May 2024 08:01:01 +0000
Manifest this update:     Sun 12 May 2024 08:01:01 +0000
Manifest next update:     Mon 13 May 2024 08:01:01 +0000
Files and hashes:         1: 3Fed1hywEKLDFaFJPavU3fCLS1E.roa (hash: BklcIvpOrK1or8Bp9v1HEMvniPgQAG+Hc+0lDpTVq7Q=)
                          2: A9rjDYjx5B-2V02NH6j7eDH4ykQ.roa (hash: htsHLUUliW+cpkOZd9Bd+8FAuPOj7eHLWq5MBp13NgE=)
                          3: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: lGpEYAhSwag/pQKdEfnR2qJ0ffzO8R/mETFf70KtXfE=)
                          4: WP8TOh5RBZaUzbgpDs2MVOpBJf0.roa (hash: i8DlZb0+aq1JKomy9jKxmExvuwaTtHKxNCvXbnhBaeE=)
                          5: b5wU-VP7GmpGxqIZ9JcyWoQowa0.roa (hash: vtRUXaXNtgWC+GdmzHDDZEWG3zY6H1oDCfhNoRYrAvo=)
                          6: eXxS2MOYsQth0g5NefODqu0XrR8.roa (hash: 6jgBOWEPNekuagg/ZV86JaTYz7mQM7xRx+d+7b211Ao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:d1:c9:ad:53:a1:dd:55:e1:a0:a0:b4:d0:22:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: May 12 08:01:01 2024 GMT
            Not After : May 13 08:01:01 2024 GMT
        Subject: CN=088c2c48bea47ab0f7111c4f04e32f0f07f7c7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:49:47:ad:3e:a2:b1:ad:ab:f8:17:6e:be:
                    14:1e:c9:0c:1b:e5:be:a8:39:18:de:91:e0:bf:87:
                    a0:63:9a:38:20:ae:91:06:f4:cb:b1:62:bb:fd:13:
                    f0:7c:0d:4b:e9:e5:3d:7c:f7:41:21:d2:09:d6:08:
                    88:3e:74:14:31:a1:87:6e:1d:09:f5:ee:ab:7f:14:
                    64:65:68:30:99:f5:0f:4d:f1:3f:ef:dc:55:50:3c:
                    49:66:1c:2e:6b:98:e8:36:f9:94:a6:0a:cf:fd:e5:
                    78:8d:87:d8:a1:b4:11:83:2b:46:b1:d6:3c:12:d5:
                    86:23:ce:d6:76:c2:ae:1e:54:ee:b1:3b:04:80:94:
                    36:06:25:46:b1:43:aa:bd:d2:b6:e2:03:c2:ab:54:
                    3d:e4:2b:75:31:db:b4:2a:73:ee:fc:35:87:1c:8a:
                    81:bb:6f:63:93:e9:b1:51:a0:8e:a1:71:da:93:54:
                    61:04:be:97:40:4a:7b:7f:9f:99:ec:ad:ef:f1:bd:
                    89:04:6c:7b:bf:9a:9b:59:07:2d:a7:62:03:36:8f:
                    a3:67:7e:3f:01:df:aa:17:26:ab:27:dd:fd:0e:30:
                    aa:0f:99:38:13:d5:cf:7c:06:8b:aa:ad:24:12:c0:
                    ee:7f:65:85:77:15:bb:d8:4a:44:d1:16:72:67:ed:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:2C:48:BE:A4:7A:B0:F7:11:1C:4F:04:E3:2F:0F:07:F7:C7:C4
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:cd:a8:29:95:6f:5e:ce:d5:d7:e6:3e:4b:53:78:47:7e:
         02:12:f1:03:c9:cc:7f:37:01:18:3c:21:bc:2b:b2:86:0d:05:
         1b:5a:bf:a5:ca:02:0f:2a:33:43:59:00:5d:c6:cc:d9:57:64:
         43:b0:d1:f9:81:2a:59:e5:65:e8:46:7d:d6:3d:93:a9:16:a8:
         4a:6d:b0:e8:9e:67:ba:8f:66:0e:66:84:52:5d:a4:a4:1d:3f:
         aa:29:f1:5b:40:78:d6:8e:99:a3:4d:32:fb:6b:4d:02:68:dc:
         8e:93:2d:19:6b:9f:62:c5:63:c2:7c:a8:39:45:99:7b:eb:2d:
         1c:f4:cb:5b:e7:a9:15:65:8f:f0:8d:3c:5d:4b:3c:9b:1e:88:
         63:a0:0f:a7:41:4c:63:b8:b9:23:8f:26:02:36:9c:4a:38:e0:
         01:f4:ab:c1:37:6b:21:3e:92:8f:6e:40:1a:59:d5:76:13:b4:
         a2:7f:be:c0:90:04:fd:45:e9:7d:b6:3b:13:e6:bb:40:42:b4:
         5a:00:f1:61:ac:0d:57:fc:13:2e:dc:39:20:94:85:45:9f:9a:
         79:32:01:c4:75:50:03:45:28:6b:b8:2f:50:bd:b6:65:3c:9b:
         c1:28:12:b3:c9:eb:97:08:40:e6:ce:a7:9e:33:e3:d6:83:54:
         6c:42:bb:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9r0cmtU6HdVeGgoLTQIik5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj
ODhmZmUwHhcNMjQwNTEyMDgwMTAxWhcNMjQwNTEzMDgwMTAxWjAzMTEwLwYDVQQD
EygwODhjMmM0OGJlYTQ3YWIwZjcxMTFjNGYwNGUzMmYwZjA3ZjdjN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iJJR60+orGtq/gXbr4UHskMG+W+
qDkY3pHgv4egY5o4IK6RBvTLsWK7/RPwfA1L6eU9fPdBIdIJ1giIPnQUMaGHbh0J
9e6rfxRkZWgwmfUPTfE/79xVUDxJZhwua5joNvmUpgrP/eV4jYfYobQRgytGsdY8
EtWGI87WdsKuHlTusTsEgJQ2BiVGsUOqvdK24gPCq1Q95Ct1Mdu0KnPu/DWHHIqB
u29jk+mxUaCOoXHak1RhBL6XQEp7f5+Z7K3v8b2JBGx7v5qbWQctp2IDNo+jZ34/
Ad+qFyarJ939DjCqD5k4E9XPfAaLqq0kEsDuf2WFdxW72EpE0RZyZ+2FOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiMLEi+pHqw9xEcTwTjLw8H98fEMB8GA1UdIwQY
MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt
NGVmOWQwN2M0NDA1LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1
LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4TNqCmV
b17O1dfmPktTeEd+AhLxA8nMfzcBGDwhvCuyhg0FG1q/pcoCDyozQ1kAXcbM2Vdk
Q7DR+YEqWeVl6EZ91j2TqRaoSm2w6J5nuo9mDmaEUl2kpB0/qinxW0B41o6Zo00y
+2tNAmjcjpMtGWufYsVjwnyoOUWZe+stHPTLW+epFWWP8I08XUs8mx6IY6APp0FM
Y7i5I48mAjacSjjgAfSrwTdrIT6Sj25AGlnVdhO0on++wJAE/UXpfbY7E+a7QEK0
WgDxYawNV/wTLtw5IJSFRZ+aeTIBxHVQA0Uoa7gvUL22ZTybwSgSs8nrlwhA5s6n
njPj1oNUbEK72Q==
-----END CERTIFICATE-----
Generated at Sun May 12 15:26:33 2024 by rpki-client on console-ams.rpki-client.org