Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File:                     ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier:          GVP+EoOmMGZPf+oj7+Kup6b5WN6A1eOFTEWTPqUXAMI=
Subject key identifier:   32:2F:A1:21:1A:4A:F1:EA:A0:CB:BF:B3:0A:38:70:35:87:D7:99:25
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer:       /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial:       018F874A7323969B36B007ED3EFB1F86258A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: 3C90JZW4dC9x7edWQ9gUQTYK6VA.roa (hash: hRfVILU4vQIZ5BlnhoL2jjMEZQkueYexoBctOsdSfFA=)
                          2: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: ym/NMrSnVAERplnsJHHij0JLN6moi9eYcMK2mYwTnGc=)
                          3: vPdNYp-mchdmtcaWUZ1RJpFG-nE.roa (hash: 9iHICWNipP2JdsvY6VuIirxL7nAFhCI0weQv7/w5Oys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:73:23:96:9b:36:b0:07:ed:3e:fb:1f:86:25:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=322fa1211a4af1eaa0cbbfb30a38703587d79925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:3a:16:b8:59:c9:c9:84:ef:79:59:25:53:
                    d5:06:f9:52:75:2a:b1:5b:2d:10:9b:77:32:49:f1:
                    05:e4:73:45:57:b7:0c:47:02:da:ff:94:80:b2:fe:
                    0c:06:48:fe:8c:5c:07:4b:3a:e6:09:64:a6:e1:0b:
                    a0:22:28:14:5c:21:e2:b4:68:37:c4:e6:af:c2:e3:
                    39:5a:e5:37:0c:44:1a:34:db:4f:ce:6c:7a:25:95:
                    a3:83:75:59:48:6c:c2:91:ff:b9:51:78:d7:8b:26:
                    f7:22:ab:d9:39:9b:56:2c:c3:a5:76:55:ce:a5:3e:
                    b8:8e:5d:54:06:1b:6d:93:0e:43:e5:19:9b:e1:99:
                    c0:19:a2:bd:81:55:e6:72:48:e9:2d:68:73:cf:b4:
                    d9:ab:ba:9c:d1:d4:b7:49:35:8e:f3:b0:c4:a6:4c:
                    ac:c5:b5:3b:b6:f5:4d:2d:fc:f0:aa:05:94:4f:c7:
                    d4:44:30:9a:76:51:41:9c:97:a0:d9:98:2b:11:bf:
                    26:66:be:45:b6:87:26:d6:b8:8b:ea:d9:d8:af:e1:
                    f8:ba:d9:fa:d7:1d:6b:e2:38:fb:f0:ba:9b:23:20:
                    57:07:ce:17:1c:b2:67:34:65:06:36:c9:f7:2b:9f:
                    22:04:ce:ef:68:4c:aa:e5:59:44:f9:c1:da:d8:83:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:A1:21:1A:4A:F1:EA:A0:CB:BF:B3:0A:38:70:35:87:D7:99:25
            X509v3 Authority Key Identifier:
                keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:3e:a0:d2:fc:44:a3:f2:26:c3:91:6f:8e:3b:93:9d:c0:
         5b:eb:cf:16:15:83:d3:43:16:91:dc:a7:d5:da:54:61:79:f6:
         25:32:1b:03:bc:be:2b:6e:27:eb:d7:03:5f:71:8f:15:93:78:
         65:59:b6:ed:d8:af:69:84:d5:f5:69:5c:bc:ec:98:ce:10:e4:
         f8:c8:76:10:67:4d:15:d4:68:b9:b6:27:1a:e5:1c:33:6b:46:
         c9:a3:a1:e6:d9:2f:77:d6:01:9a:63:99:c8:d1:4c:cc:23:b9:
         bf:db:0c:d1:92:ed:8f:61:65:69:15:b8:e5:c0:de:fe:14:84:
         49:33:de:37:8c:25:81:3c:a1:6c:a8:33:77:7f:e6:fb:f9:28:
         56:ac:9c:c7:a1:58:9e:de:23:8c:9a:b5:6f:5e:80:9d:d4:e2:
         0d:66:55:1e:73:6b:98:18:e8:14:03:03:b9:55:2e:8a:57:ef:
         e9:fa:bb:c4:a5:0b:c3:d8:5b:2c:6a:87:4a:43:99:a2:ef:04:
         23:e2:47:c7:14:4c:ae:8f:a8:bf:86:14:39:da:a0:e0:1b:93:
         9f:1d:3f:29:91:9b:02:19:e6:cf:1f:c7:34:c6:76:fd:bf:86:
         cc:47:e6:80:48:49:08:17:bb:f1:b3:ba:9f:66:d5:fc:8c:e7:
         38:d7:e8:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSnMjlps2sAftPvsfhiWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz
OWViNzYwHhcNMjQwNTE3MTYwMjM0WhcNMjQwNTE4MTYwMjM0WjAzMTEwLwYDVQQD
EygzMjJmYTEyMTFhNGFmMWVhYTBjYmJmYjMwYTM4NzAzNTg3ZDc5OTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLE6FrhZycmE73lZJVPVBvlSdSqx
Wy0Qm3cySfEF5HNFV7cMRwLa/5SAsv4MBkj+jFwHSzrmCWSm4QugIigUXCHitGg3
xOavwuM5WuU3DEQaNNtPzmx6JZWjg3VZSGzCkf+5UXjXiyb3IqvZOZtWLMOldlXO
pT64jl1UBhttkw5D5Rmb4ZnAGaK9gVXmckjpLWhzz7TZq7qc0dS3STWO87DEpkys
xbU7tvVNLfzwqgWUT8fURDCadlFBnJeg2ZgrEb8mZr5Ftocm1riL6tnYr+H4utn6
1x1r4jj78LqbIyBXB84XHLJnNGUGNsn3K58iBM7vaEyq5VlE+cHa2IOhNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIvoSEaSvHqoMu/swo4cDWH15klMB8GA1UdIwQY
MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt
M2UzNjYwZGExM2E0LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0
LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+8+oNL8
RKPyJsORb447k53AW+vPFhWD00MWkdyn1dpUYXn2JTIbA7y+K24n69cDX3GPFZN4
ZVm27divaYTV9WlcvOyYzhDk+Mh2EGdNFdRoubYnGuUcM2tGyaOh5tkvd9YBmmOZ
yNFMzCO5v9sM0ZLtj2FlaRW45cDe/hSESTPeN4wlgTyhbKgzd3/m+/koVqycx6FY
nt4jjJq1b16AndTiDWZVHnNrmBjoFAMDuVUuilfv6fq7xKULw9hbLGqHSkOZou8E
I+JHxxRMro+ov4YUOdqg4BuTnx0/KZGbAhnmzx/HNMZ2/b+GzEfmgEhJCBe78bO6
n2bV/IznONfoVg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:17:16 2024 by rpki-client on console-fra.rpki-client.org