Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File:                     oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier:          MkQCweLmseowatXN9kN2iDE1BGcO/1SBUh8HZFAkp0g=
Subject key identifier:   64:47:D3:86:89:B4:77:FC:65:3A:2C:BE:8E:54:29:58:C5:FB:A5:5A
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer:       /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial:       018F87B6B6F05B8424A3A7A41C5191B28A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:49 +0000
Manifest this update:     Fri 17 May 2024 18:00:49 +0000
Manifest next update:     Sat 18 May 2024 18:00:49 +0000
Files and hashes:         1: kR-nv9JDLfXpgQ5mR4sFy0bQ3Ik.roa (hash: yl8T+TGg9W30YHXyl6tqgwCXgAxJvo8y5gym3G7SO8o=)
                          2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: 7lrm+4rtXThkK9pWNPQ+3FVl0GS7GkMln2qf8WIbxUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b6:f0:5b:84:24:a3:a7:a4:1c:51:91:b2:8a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
        Validity
            Not Before: May 17 18:00:49 2024 GMT
            Not After : May 18 18:00:49 2024 GMT
        Subject: CN=6447d38689b477fc653a2cbe8e542958c5fba55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:39:7c:24:bb:eb:17:95:35:9d:12:77:9a:cb:
                    ff:47:ed:57:02:52:5a:66:33:a8:fb:ec:86:d5:5d:
                    b7:33:a2:fe:af:2e:43:3f:7f:4c:65:26:52:1d:91:
                    0d:c7:4e:f5:8f:d1:70:c5:ad:fa:5d:5e:00:48:fd:
                    bf:e1:89:0a:3f:43:78:69:5e:6c:db:10:fc:6b:32:
                    72:a1:d6:a8:b5:e9:a4:6a:cb:ef:cf:23:dc:6b:e0:
                    a6:e2:46:23:e6:ec:9c:28:08:db:7f:71:95:14:5b:
                    6e:f7:3d:07:01:8b:88:d1:a1:fe:d6:c8:f9:37:4c:
                    02:4a:79:e9:29:5b:4c:af:54:09:2b:8e:bb:6f:7c:
                    97:28:be:3c:bc:de:91:f8:8b:38:e2:04:8a:96:a3:
                    57:97:f3:5b:90:b8:93:6b:d9:f4:4e:87:90:6b:ae:
                    ea:57:16:2d:f4:a8:06:d5:03:56:cb:82:3e:a9:ed:
                    73:c5:d0:77:54:49:e4:5d:54:3c:f8:54:46:eb:6c:
                    05:95:9e:40:b3:19:ba:03:85:64:ae:bf:f9:65:b8:
                    f2:b4:09:a0:cd:4f:42:80:61:e4:bd:35:18:9c:33:
                    cf:85:05:de:b1:a7:85:6a:b2:8a:f7:d6:51:d7:ea:
                    41:d6:fd:8f:98:b3:54:ff:b4:34:f7:cb:60:b6:1b:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:D3:86:89:B4:77:FC:65:3A:2C:BE:8E:54:29:58:C5:FB:A5:5A
            X509v3 Authority Key Identifier:
                keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:62:77:76:20:06:4f:f2:e3:25:75:4c:f8:f7:eb:45:9f:b5:
         b5:6c:b4:9a:1e:66:d6:2a:38:c3:dd:95:e4:6c:26:c0:df:de:
         ed:94:1f:fb:db:82:3a:a4:ed:d6:18:1d:15:13:6e:19:13:01:
         e8:59:a8:0a:1d:3d:04:e1:1c:8d:e2:56:da:7d:d9:f8:e8:85:
         d1:7c:f0:5f:7b:7a:25:89:2e:ae:6d:b4:b9:61:ca:8b:a5:0a:
         15:f1:8b:2a:95:ac:3f:2d:55:cf:65:c7:71:04:77:5a:b9:38:
         dc:36:b0:57:e6:c7:0b:a6:ff:17:a2:51:28:66:f8:11:29:15:
         1e:89:1f:a5:6c:f8:11:69:ed:76:db:9a:ae:0d:da:00:0b:ce:
         d1:04:75:9c:e3:02:7e:37:93:74:f2:ff:26:17:a5:41:ef:bb:
         0f:90:35:e1:71:0e:1b:fc:07:25:bc:16:9a:ac:88:cb:a1:46:
         d3:c3:36:78:75:41:12:49:11:61:d9:2c:38:aa:c6:49:fd:f8:
         63:64:9c:a7:41:fc:40:4f:29:13:16:9f:c4:c2:37:0c:cc:d3:
         ca:27:88:df:a7:77:6b:df:2e:a8:18:b9:35:95:c5:7e:ed:c5:
         3c:c3:b2:09:e9:0e:2f:68:a1:fe:f4:22:1e:ad:0e:d0:a0:28:
         49:5f:e0:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtrbwW4Qko6ekHFGRsoonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOWQ2NWI5MjZmZGQ3NDNkYTViNDczZDM0MTg1ZmUxMDFi
MDVhMjgwHhcNMjQwNTE3MTgwMDQ5WhcNMjQwNTE4MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg2NDQ3ZDM4Njg5YjQ3N2ZjNjUzYTJjYmU4ZTU0Mjk1OGM1ZmJhNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Tl8JLvrF5U1nRJ3msv/R+1XAlJa
ZjOo++yG1V23M6L+ry5DP39MZSZSHZENx071j9Fwxa36XV4ASP2/4YkKP0N4aV5s
2xD8azJyodaotemkasvvzyPca+Cm4kYj5uycKAjbf3GVFFtu9z0HAYuI0aH+1sj5
N0wCSnnpKVtMr1QJK467b3yXKL48vN6R+Is44gSKlqNXl/NbkLiTa9n0ToeQa67q
VxYt9KgG1QNWy4I+qe1zxdB3VEnkXVQ8+FRG62wFlZ5Asxm6A4Vkrr/5ZbjytAmg
zU9CgGHkvTUYnDPPhQXesaeFarKK99ZR1+pB1v2PmLNU/7Q098tgthuLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRH04aJtHf8ZTosvo5UKVjF+6VaMB8GA1UdIwQY
MBaAFKCdZbkm/ddD2ltHPTQYX+EBsFooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYt
NzlhN2VhYTdhZTU4LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYtNzlhN2VhYTdhZTU4
LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWJ3diAG
T/LjJXVM+PfrRZ+1tWy0mh5m1io4w92V5GwmwN/e7ZQf+9uCOqTt1hgdFRNuGRMB
6FmoCh09BOEcjeJW2n3Z+OiF0XzwX3t6JYkurm20uWHKi6UKFfGLKpWsPy1Vz2XH
cQR3Wrk43DawV+bHC6b/F6JRKGb4ESkVHokfpWz4EWntdtuarg3aAAvO0QR1nOMC
fjeTdPL/JhelQe+7D5A14XEOG/wHJbwWmqyIy6FG08M2eHVBEkkRYdksOKrGSf34
Y2Scp0H8QE8pExafxMI3DMzTyieI36d3a98uqBi5NZXFfu3FPMOyCekOL2ih/vQi
Hq0O0KAoSV/gqw==
-----END CERTIFICATE-----
Generated at Fri May 17 23:39:13 2024 by rpki-client on console-fra.rpki-client.org