Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File:                     Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier:          H1kJ23ZT8TmqWZnHUkE3huM1gucpUY3XRSUKMiHK2+k=
Subject key identifier:   DA:E2:EC:D3:7D:6F:E6:4A:64:7B:92:6F:CE:AC:06:A3:1E:AE:F2:F1
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer:       /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial:       018F87B641948ECEB5D527B395E3F2BA3841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:19 +0000
Manifest this update:     Fri 17 May 2024 18:00:19 +0000
Manifest next update:     Sat 18 May 2024 18:00:19 +0000
Files and hashes:         1: KZF7nutfuUg5-YzRYz3twqYDF1I.roa (hash: OKL2jGxl+5iRZQTpfuc851ODoSAmpXlUOJxvIRgbQuk=)
                          2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: nov6QbLleBlfUL6veuvu6mRgyL7MwTvAf9IQrHFKLXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:41:94:8e:ce:b5:d5:27:b3:95:e3:f2:ba:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
        Validity
            Not Before: May 17 18:00:19 2024 GMT
            Not After : May 18 18:00:19 2024 GMT
        Subject: CN=dae2ecd37d6fe64a647b926fceac06a31eaef2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:12:b1:87:81:08:cd:38:4b:8b:09:8b:f8:
                    4f:f8:e2:5f:62:36:29:32:b6:b8:29:14:cb:92:73:
                    eb:cd:bf:42:88:5c:ed:5e:9b:9f:f3:3e:1e:be:f7:
                    af:1b:c8:47:fd:e8:37:5d:62:06:12:64:34:aa:2f:
                    86:dc:78:98:2e:2c:0e:16:0e:72:30:06:df:db:be:
                    44:e8:a1:9e:5c:ca:42:f9:a3:92:86:23:ff:32:86:
                    d2:78:fe:da:95:ce:fc:52:4f:f1:a7:33:ac:69:74:
                    39:40:74:ff:b0:21:f4:d7:9d:f4:24:37:bd:84:8c:
                    2e:22:ab:f0:b5:d0:f1:b7:52:c0:ed:ea:d5:fb:eb:
                    55:12:ab:9b:bb:3c:2c:ee:a6:19:57:0e:b1:29:f2:
                    55:6c:75:3e:2c:eb:00:33:0a:23:c3:52:47:21:a8:
                    bc:91:49:9d:02:96:95:ea:da:e0:13:1f:6a:72:46:
                    8a:93:7a:6f:46:e5:04:48:40:a1:27:52:42:62:9e:
                    b7:16:12:7c:32:63:81:e0:d5:4e:61:5b:19:ce:ba:
                    8e:ae:9e:27:7e:a2:39:04:2a:23:72:35:a4:48:36:
                    ee:78:12:b9:78:4c:94:c2:7c:c4:c0:f6:d4:6f:7c:
                    d0:49:f1:38:12:b0:12:ac:85:7b:d9:c4:0c:10:a7:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:EC:D3:7D:6F:E6:4A:64:7B:92:6F:CE:AC:06:A3:1E:AE:F2:F1
            X509v3 Authority Key Identifier:
                keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:f4:2f:27:9f:b4:93:c2:25:7c:47:b4:94:88:4a:56:8d:
         ce:7b:da:b7:46:ff:65:c1:f3:ab:8d:8e:38:e5:8d:f4:31:73:
         f5:00:28:9c:67:d9:41:69:26:e0:11:e6:48:2e:a9:6d:15:97:
         45:40:b6:af:3c:77:04:02:fd:f0:30:48:5e:83:0b:f2:0a:61:
         3d:60:fa:1d:9c:c5:57:fb:83:e1:15:d7:f6:5c:cd:e3:f3:3e:
         e1:47:86:5f:cb:a6:2d:d8:4f:3f:d5:2f:93:cd:b0:1f:23:24:
         c3:b1:d1:90:28:26:db:b5:ca:9e:bc:0b:71:13:5d:3d:12:66:
         8a:b4:be:14:e8:13:b7:9b:96:a5:67:6c:6b:da:90:11:00:f1:
         9c:4b:b8:ee:cf:de:a5:9e:21:bc:42:87:d0:4e:53:e4:e3:ad:
         7f:ae:ef:e5:2e:7c:89:51:af:c4:14:20:3f:dc:9e:0c:f1:1c:
         01:52:e8:f2:8f:ed:2e:bd:b5:52:9d:1a:d7:f4:f2:4c:71:82:
         b8:43:d0:b0:8b:08:ee:bf:83:b5:63:96:7c:8c:85:9b:23:76:
         05:6e:40:e5:0c:83:26:d9:f4:72:e2:d6:f9:c0:09:cd:af:8e:
         4d:85:5f:18:28:b4:da:b9:fb:a5:ca:cf:c2:37:39:f4:37:76:
         8e:cb:10:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtkGUjs611SezlePyujhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYWZjNjBmNGQzNDA5ZmI0NmM4YTViZjk1ZDM5ODFmMTRh
MTQzYjAwHhcNMjQwNTE3MTgwMDE5WhcNMjQwNTE4MTgwMDE5WjAzMTEwLwYDVQQD
EyhkYWUyZWNkMzdkNmZlNjRhNjQ3YjkyNmZjZWFjMDZhMzFlYWVmMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcESsYeBCM04S4sJi/hP+OJfYjYp
Mra4KRTLknPrzb9CiFztXpuf8z4evvevG8hH/eg3XWIGEmQ0qi+G3HiYLiwOFg5y
MAbf275E6KGeXMpC+aOShiP/MobSeP7alc78Uk/xpzOsaXQ5QHT/sCH01530JDe9
hIwuIqvwtdDxt1LA7erV++tVEqubuzws7qYZVw6xKfJVbHU+LOsAMwojw1JHIai8
kUmdApaV6trgEx9qckaKk3pvRuUESEChJ1JCYp63FhJ8MmOB4NVOYVsZzrqOrp4n
fqI5BCojcjWkSDbueBK5eEyUwnzEwPbUb3zQSfE4ErASrIV72cQMEKcvFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNri7NN9b+ZKZHuSb86sBqMervLxMB8GA1UdIwQY
MBaAFF6vxg9NNAn7Rsilv5XTmB8UoUOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82Mjg1ZjEtOGMxZC00ODQ0LWJlMGUt
YmU4ZTY1MWM1MWY2LzEvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82Mjg1ZjEtOGMxZC00ODQ0LWJlMGUtYmU4ZTY1MWM1MWY2
LzEvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEab0Lyef
tJPCJXxHtJSISlaNznvat0b/ZcHzq42OOOWN9DFz9QAonGfZQWkm4BHmSC6pbRWX
RUC2rzx3BAL98DBIXoML8gphPWD6HZzFV/uD4RXX9lzN4/M+4UeGX8umLdhPP9Uv
k82wHyMkw7HRkCgm27XKnrwLcRNdPRJmirS+FOgTt5uWpWdsa9qQEQDxnEu47s/e
pZ4hvEKH0E5T5OOtf67v5S58iVGvxBQgP9yeDPEcAVLo8o/tLr21Up0a1/TyTHGC
uEPQsIsI7r+DtWOWfIyFmyN2BW5A5QyDJtn0cuLW+cAJza+OTYVfGCi02rn7pcrP
wjc59Dd2jssQkw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:12:54 2024 by rpki-client on console-fra.rpki-client.org