Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File:                     Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier:          u3jNnkSVy8eC32prjKN9QAqFCbrqXPNWvurGu3Yp+OU=
Subject key identifier:   20:2E:3C:1B:47:1A:1F:0C:C4:87:16:29:54:B5:BE:68:4D:39:76:50
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer:       /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial:       018F87B622163724263BB8AC7CB4BEBB42C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 18:00:11 +0000
Manifest this update:     Fri 17 May 2024 18:00:11 +0000
Manifest next update:     Sat 18 May 2024 18:00:11 +0000
Files and hashes:         1: 8UzgeFU9TnnQuXy-yOcG-pbjMys.roa (hash: J5rN3yTU1bHUzwhJmXaCj63semfup4l9XeO+En0veOw=)
                          2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: 9U2G6E6zAVGN2hPGLnddXms4Cz+kpN4S+BCtYtL9Z7A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:22:16:37:24:26:3b:b8:ac:7c:b4:be:bb:42:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
        Validity
            Not Before: May 17 18:00:11 2024 GMT
            Not After : May 18 18:00:11 2024 GMT
        Subject: CN=202e3c1b471a1f0cc487162954b5be684d397650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:f0:03:00:89:6f:74:57:16:36:96:c4:21:
                    a5:27:9a:ca:35:c9:b2:a9:af:c4:9c:cf:33:eb:89:
                    5e:25:cf:96:d4:f3:3f:81:c7:02:8d:61:4a:ca:2d:
                    a7:ab:e3:d8:ca:ef:c5:4d:c5:d9:3b:ae:82:f9:3b:
                    26:4c:2a:74:59:dd:cf:8e:d1:26:87:79:17:e5:38:
                    c0:b9:47:d1:2d:3d:58:11:9c:ef:ac:00:dc:65:48:
                    f9:17:e4:32:ed:38:b6:5d:79:1d:b9:ae:76:39:a0:
                    d5:69:f1:c6:0e:79:7b:ed:aa:85:81:cf:ff:51:c0:
                    1e:fe:6a:91:f3:cc:ae:57:40:33:91:4e:8a:64:a9:
                    02:87:45:75:0c:b8:06:36:71:6a:6d:b6:ca:88:e3:
                    75:50:7a:07:64:cd:61:40:f8:52:a0:b6:ec:23:a3:
                    a4:b5:58:14:ec:ff:eb:64:bf:9e:0f:b9:a7:e8:31:
                    70:f7:24:44:e7:9e:b2:3e:c1:5a:66:69:c6:71:32:
                    e7:89:36:5f:f3:a6:19:a1:2e:5c:89:de:e7:cd:69:
                    9b:7d:41:6a:c9:01:f2:4d:4e:f7:39:3f:6a:09:8d:
                    63:2a:be:f2:88:dc:8f:1b:6a:37:87:83:f6:18:f8:
                    53:0e:25:85:5d:04:f4:43:e3:97:05:d6:10:4e:b8:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2E:3C:1B:47:1A:1F:0C:C4:87:16:29:54:B5:BE:68:4D:39:76:50
            X509v3 Authority Key Identifier:
                keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:dc:3a:06:0a:12:a9:01:6d:21:98:ad:6b:ab:ab:bd:6a:
         db:3b:06:de:c1:ec:ff:b6:52:aa:a1:99:bc:bb:7b:3a:e8:4d:
         53:e1:b1:0e:a5:0d:15:a4:d8:e3:70:e7:31:0d:2a:30:10:23:
         ef:89:9e:79:54:15:92:4f:ac:84:4a:34:11:9d:5a:4e:99:9b:
         1e:cb:7c:8d:74:49:b6:c8:cf:5b:dc:86:8c:89:65:23:1a:0b:
         29:48:70:b3:98:07:70:3f:9c:47:9e:61:c0:bf:e2:ed:c3:1d:
         a2:91:07:8e:23:fc:95:3d:22:b2:3d:fb:d0:ca:19:4e:0e:f2:
         8b:21:96:c2:89:eb:6e:19:02:f1:02:07:10:8c:7b:06:9a:8e:
         53:8c:93:53:c2:a6:65:07:66:6a:34:92:a4:ae:ef:d9:3b:34:
         9e:d3:7f:d0:4b:0e:32:6b:7e:e3:a8:2e:ca:90:ad:53:1e:1c:
         34:48:b3:f7:c7:63:74:db:00:8b:69:4d:bd:e0:07:47:9c:b9:
         ce:b9:ba:01:d4:01:33:03:a7:60:f9:a0:40:71:23:e0:ed:21:
         e0:cd:75:03:89:2d:da:b6:98:9e:58:4f:85:10:3b:bb:5b:a7:
         13:fe:60:75:15:b6:b7:e6:3e:81:45:87:08:3c:12:bf:5d:ac:
         ba:15:69:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtiIWNyQmO7isfLS+u0LFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm
YjgwMWYwHhcNMjQwNTE3MTgwMDExWhcNMjQwNTE4MTgwMDExWjAzMTEwLwYDVQQD
EygyMDJlM2MxYjQ3MWExZjBjYzQ4NzE2Mjk1NGI1YmU2ODRkMzk3NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPzwAwCJb3RXFjaWxCGlJ5rKNcmy
qa/EnM8z64leJc+W1PM/gccCjWFKyi2nq+PYyu/FTcXZO66C+TsmTCp0Wd3PjtEm
h3kX5TjAuUfRLT1YEZzvrADcZUj5F+Qy7Ti2XXkdua52OaDVafHGDnl77aqFgc//
UcAe/mqR88yuV0AzkU6KZKkCh0V1DLgGNnFqbbbKiON1UHoHZM1hQPhSoLbsI6Ok
tVgU7P/rZL+eD7mn6DFw9yRE556yPsFaZmnGcTLniTZf86YZoS5cid7nzWmbfUFq
yQHyTU73OT9qCY1jKr7yiNyPG2o3h4P2GPhTDiWFXQT0Q+OXBdYQTrhSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAuPBtHGh8MxIcWKVS1vmhNOXZQMB8GA1UdIwQY
MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt
OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi
LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBvcOgYK
EqkBbSGYrWurq71q2zsG3sHs/7ZSqqGZvLt7OuhNU+GxDqUNFaTY43DnMQ0qMBAj
74meeVQVkk+shEo0EZ1aTpmbHst8jXRJtsjPW9yGjIllIxoLKUhws5gHcD+cR55h
wL/i7cMdopEHjiP8lT0isj370MoZTg7yiyGWwonrbhkC8QIHEIx7BpqOU4yTU8Km
ZQdmajSSpK7v2Ts0ntN/0EsOMmt+46guypCtUx4cNEiz98djdNsAi2lNveAHR5y5
zrm6AdQBMwOnYPmgQHEj4O0h4M11A4kt2raYnlhPhRA7u1unE/5gdRW2t+Y+gUWH
CDwSv12suhVp6Q==
-----END CERTIFICATE-----
Generated at Fri May 17 23:39:31 2024 by rpki-client on console-ams.rpki-client.org