Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File:                     qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier:          hciJ4OLpRwi69Befb+5a+c1cIRTQ2jksZOszUo9HkWk=
Subject key identifier:   B9:91:26:2B:8C:1D:05:EF:0D:2C:26:B7:21:1B:96:6A:CE:20:91:D4
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer:       /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial:       018F87B63D34E021A802D2648113A00A2691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number:          0D0E
Signing time:             Fri 17 May 2024 18:00:18 +0000
Manifest this update:     Fri 17 May 2024 18:00:18 +0000
Manifest next update:     Sat 18 May 2024 18:00:18 +0000
Files and hashes:         1: OTNr3p3QIGLPoo8UU9pIxa6aWSs.roa (hash: LGnnebGvPHTxl3REM06vR2gXpSs7/7ysR8FZZ44Qc/s=)
                          2: ifxS3Wm_-fTDxs9rLmmSB46dZGI.roa (hash: PrmXejk/GZlTz6b/Yf+C2lIqCADCBXeH1FuytK9HTcI=)
                          3: m7bxRtp0EMJVTQe9Mf_2SEKrNmk.roa (hash: JPGdP64ldxAD1IHdEwtAjQbLnCTri45YwHbB0N3Bmoc=)
                          4: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: LVNGHbRUJxBNsD87U1B4bs5ssFGB1YJsyxxuQR3p5m8=)
                          5: zhkYwaS6plkLrphYbPS8pd2d7FY.roa (hash: WU0EL6Wv1LtNp+Lij8wGxS4Sro4oDveWrv/HGSpbczs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3d:34:e0:21:a8:02:d2:64:81:13:a0:0a:26:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
        Validity
            Not Before: May 17 18:00:18 2024 GMT
            Not After : May 18 18:00:18 2024 GMT
        Subject: CN=b991262b8c1d05ef0d2c26b7211b966ace2091d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5a:77:ad:78:69:8b:48:b0:fb:1b:f7:47:97:
                    d5:63:b2:22:97:0f:df:99:fe:db:5f:a4:6a:04:d8:
                    80:af:c1:65:a6:74:64:6e:05:c5:d1:38:9d:f3:b6:
                    5a:46:62:4e:a3:3c:7f:ec:40:17:77:43:0c:70:69:
                    44:c0:06:56:84:00:e1:88:bb:79:1c:76:a5:b0:bc:
                    b6:bb:8d:c7:61:d1:c9:f1:e3:ce:6d:da:19:f8:b3:
                    a2:ae:a3:f0:17:18:ce:c8:d0:2e:8a:c2:c4:39:2a:
                    50:e0:c9:9b:02:cc:c5:f4:1c:07:58:5d:2e:36:ef:
                    56:42:d0:2b:b8:a8:50:60:50:16:31:69:a2:2e:86:
                    3d:10:f1:e8:c6:01:01:62:ca:bb:ca:f3:83:02:aa:
                    05:b8:15:b9:a5:2e:00:c4:6a:63:b8:6b:d1:f3:70:
                    fb:8e:9f:33:fc:bc:34:2f:34:23:ee:9b:78:de:2c:
                    21:30:b5:36:86:d9:90:ed:04:e7:2a:f4:55:3c:d0:
                    1b:15:dc:cd:e7:02:eb:da:86:8f:ee:3f:e0:59:a2:
                    b1:85:63:81:b1:69:48:9d:0f:b3:95:f8:38:bd:b0:
                    95:cb:d4:d6:1d:dd:e2:f3:02:ac:63:81:be:dd:bd:
                    e6:70:4d:ba:55:c8:82:38:e2:d6:49:3a:f4:ef:8b:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:26:2B:8C:1D:05:EF:0D:2C:26:B7:21:1B:96:6A:CE:20:91:D4
            X509v3 Authority Key Identifier:
                keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:99:cb:61:82:54:f5:58:99:4b:27:ca:a4:d1:bc:9e:18:
         85:45:a0:b0:77:f9:f4:53:5f:fc:b1:b1:1f:28:bf:47:cc:aa:
         6b:fc:89:cf:20:6c:c6:f0:6e:2d:bc:f8:6e:0e:d9:37:ef:d2:
         4b:06:67:7c:62:e5:e5:57:17:04:63:86:ee:23:ba:5c:62:7b:
         07:f8:80:56:6c:bc:d9:ea:33:f5:6d:2c:04:7f:e3:ef:4a:7f:
         ae:64:00:ff:66:1c:15:7e:10:e0:a2:ef:3c:15:2d:50:59:81:
         fc:fd:03:ba:74:68:fb:95:2d:d8:0a:18:5a:13:cb:be:1c:0d:
         76:ba:bf:41:dd:42:01:7b:24:e6:d4:dc:00:6e:f9:f9:89:c7:
         9d:96:8f:0c:68:58:e9:a9:dd:36:78:56:64:2a:99:65:82:0f:
         b9:f8:ca:f4:32:7e:1c:ab:0c:df:03:42:93:fe:6c:a6:a9:af:
         df:34:f6:d5:01:f4:db:e2:6a:d8:f5:b5:e5:7a:d0:a7:ba:08:
         61:ff:1d:d8:4b:8b:32:9c:02:1f:71:70:dd:f1:c3:30:ee:12:
         af:56:78:a2:75:ae:47:3b:6a:b4:60:d2:82:54:e0:f5:a5:a5:
         fc:70:98:83:a8:4e:a1:3c:36:9d:b0:58:d3:92:5b:a9:cf:ec:
         86:30:b5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htj004CGoAtJkgROgCiaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjQwNTE3MTgwMDE4WhcNMjQwNTE4MTgwMDE4WjAzMTEwLwYDVQQD
EyhiOTkxMjYyYjhjMWQwNWVmMGQyYzI2YjcyMTFiOTY2YWNlMjA5MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81p3rXhpi0iw+xv3R5fVY7Iilw/f
mf7bX6RqBNiAr8FlpnRkbgXF0Tid87ZaRmJOozx/7EAXd0MMcGlEwAZWhADhiLt5
HHalsLy2u43HYdHJ8ePObdoZ+LOirqPwFxjOyNAuisLEOSpQ4MmbAszF9BwHWF0u
Nu9WQtAruKhQYFAWMWmiLoY9EPHoxgEBYsq7yvODAqoFuBW5pS4AxGpjuGvR83D7
jp8z/Lw0LzQj7pt43iwhMLU2htmQ7QTnKvRVPNAbFdzN5wLr2oaP7j/gWaKxhWOB
sWlInQ+zlfg4vbCVy9TWHd3i8wKsY4G+3b3mcE26VciCOOLWSTr074s+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmRJiuMHQXvDSwmtyEblmrOIJHUMB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbD6Zy2GC
VPVYmUsnyqTRvJ4YhUWgsHf59FNf/LGxHyi/R8yqa/yJzyBsxvBuLbz4bg7ZN+/S
SwZnfGLl5VcXBGOG7iO6XGJ7B/iAVmy82eoz9W0sBH/j70p/rmQA/2YcFX4Q4KLv
PBUtUFmB/P0DunRo+5Ut2AoYWhPLvhwNdrq/Qd1CAXsk5tTcAG75+YnHnZaPDGhY
6andNnhWZCqZZYIPufjK9DJ+HKsM3wNCk/5spqmv3zT21QH02+Jq2PW15XrQp7oI
Yf8d2EuLMpwCH3Fw3fHDMO4Sr1Z4onWuRztqtGDSglTg9aWl/HCYg6hOoTw2nbBY
05Jbqc/shjC19Q==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:22 2024 by rpki-client on console-fra.rpki-client.org