Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          FiFoshfTgXHSPLI0Gd8GBSMnnhoEmJbdRKgZ0aLJAhE=
Subject key identifier:   D8:12:77:F9:CB:03:E4:F9:BB:8D:58:A8:EA:E0:8F:58:48:4E:C9:37
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       018F43B461D88F76C6BC9AB7F84B7A3C1C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 13:04:05 +0000
Manifest this update:     Sat 04 May 2024 13:04:05 +0000
Manifest next update:     Sun 05 May 2024 13:04:05 +0000
Files and hashes:         1: 24Dg1pTGVBWiZZULP0tejjNpnOM.roa (hash: OsdXCUQ69HuTvR8+CvH0WDNj0ivYOcdKaq3dpudNvCQ=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: CwUL0ZhMkuzqTzoAzm1BTI1I+/LpQlQ5gJIVFZlXXy0=)
                          3: 481ONYMTUbrU1OJkj5sDk_jB0Ms.roa (hash: +8aovwmz3Vl1nBKbZqNP3jZmM2j68g9N8kETG2vUT6Q=)
                          4: FeHIeQLI5X7FXfBCINUyS0oPGv8.roa (hash: kzAJvb8YNgT96ZNc6iYRS33ByMzUwodH7d8o9R6afyA=)
                          5: lSbcgBTZUSMGftb49C0qPsyM920.roa (hash: O5Siqeh5WHzmH1yheIBTr15Ug7zVWOC5TDIPmHO+F0k=)
                          6: o5Uj1-8kPb9sYJkD78AE-ApWA_E.roa (hash: LqPFTmtQmAkQu2Wf2Yxmz/XojSrU3TGUXlm/Bb5e5iM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:61:d8:8f:76:c6:bc:9a:b7:f8:4b:7a:3c:1c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: May  4 13:04:05 2024 GMT
            Not After : May  5 13:04:05 2024 GMT
        Subject: CN=d81277f9cb03e4f9bb8d58a8eae08f58484ec937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:c5:41:39:5f:66:35:5d:54:ff:6d:f2:ce:
                    fa:b6:62:5f:ab:d7:07:a3:81:94:49:89:0c:51:b8:
                    a8:fb:b4:96:bc:13:e2:48:6f:81:70:1c:b0:5e:8b:
                    eb:04:72:7b:dc:a6:13:53:bb:a9:1f:6f:bd:42:d6:
                    cc:ff:fc:45:dc:a7:98:67:90:dc:19:8e:e8:81:3c:
                    2b:f2:88:47:ee:30:bf:04:f5:85:0e:6d:c8:ce:10:
                    a8:5a:31:8d:5c:0a:81:83:cb:4a:88:40:97:a8:ba:
                    2d:f6:1e:3b:21:e5:c3:87:b7:0c:14:15:dc:fa:b1:
                    93:e8:2d:70:48:28:d2:d7:1e:1d:03:25:94:a1:84:
                    62:dc:08:2d:df:bb:4c:9e:0d:2d:47:90:3b:12:ea:
                    40:e3:96:5a:37:a1:f9:db:d3:99:ed:1e:73:0c:3d:
                    43:74:6b:55:a6:4a:53:c3:32:aa:65:da:93:27:d2:
                    89:26:b3:99:74:69:bb:52:a5:7a:b2:fb:2c:91:80:
                    30:5d:f5:2e:80:7e:81:02:12:57:9b:f5:83:62:7c:
                    b1:f7:78:dc:fa:8b:fb:ac:fe:fb:ed:66:61:51:7d:
                    e1:13:ec:07:6f:8a:2b:b4:f5:6c:98:fb:28:c4:9f:
                    a5:73:4f:c5:a3:74:70:73:33:b8:bb:09:d0:a5:f9:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:12:77:F9:CB:03:E4:F9:BB:8D:58:A8:EA:E0:8F:58:48:4E:C9:37
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:bd:f5:c8:c2:0a:b7:67:7d:4e:b9:ea:65:2c:0f:b8:51:
         ff:9c:b9:f8:66:39:e6:bc:2a:10:30:7c:38:f2:50:2d:82:6b:
         fc:a2:c5:02:e6:59:75:7e:7a:d0:dc:d4:03:08:1e:30:b1:9c:
         1d:2b:ab:ba:df:d2:76:6a:09:c6:c2:5a:5b:9b:d9:b9:14:46:
         65:90:83:0a:ce:e0:e7:7f:29:36:f0:ae:35:30:54:de:d6:d8:
         bf:c8:ba:5c:9c:7d:e0:99:8b:2d:ad:6f:d9:d4:de:73:09:86:
         f7:35:5d:5e:76:ce:1f:a8:ea:f6:a6:10:d3:cd:f7:95:1f:b9:
         89:57:3e:7e:11:8a:4b:bd:b9:b2:11:eb:13:fd:56:45:7e:8f:
         cd:11:d8:3c:69:22:b7:74:48:3d:32:4e:9e:d0:10:cd:6e:95:
         5a:9e:4c:41:9f:d2:9c:c4:24:84:38:12:43:e7:d1:37:81:c3:
         31:b5:4c:ee:8a:f1:26:24:5d:bb:f0:95:68:73:17:fd:ba:06:
         40:aa:bd:b4:5f:b0:53:3f:4e:9f:d2:20:c8:46:d0:8e:7a:af:
         4f:fe:b0:05:1d:74:79:1e:d5:c2:84:e3:9b:ef:e4:b0:06:9e:
         ab:50:14:df:a9:d9:1a:b3:f0:d3:83:88:81:31:68:ca:4f:50:
         10:7d:83:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DtGHYj3bGvJq3+Et6PBxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2
NDY3OTYwHhcNMjQwNTA0MTMwNDA1WhcNMjQwNTA1MTMwNDA1WjAzMTEwLwYDVQQD
EyhkODEyNzdmOWNiMDNlNGY5YmI4ZDU4YThlYWUwOGY1ODQ4NGVjOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxvFQTlfZjVdVP9t8s76tmJfq9cH
o4GUSYkMUbio+7SWvBPiSG+BcBywXovrBHJ73KYTU7upH2+9QtbM//xF3KeYZ5Dc
GY7ogTwr8ohH7jC/BPWFDm3IzhCoWjGNXAqBg8tKiECXqLot9h47IeXDh7cMFBXc
+rGT6C1wSCjS1x4dAyWUoYRi3Agt37tMng0tR5A7EupA45ZaN6H529OZ7R5zDD1D
dGtVpkpTwzKqZdqTJ9KJJrOZdGm7UqV6svsskYAwXfUugH6BAhJXm/WDYnyx93jc
+ov7rP777WZhUX3hE+wHb4ortPVsmPsoxJ+lc0/Fo3RwczO4uwnQpfm6VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgSd/nLA+T5u41YqOrgj1hITsk3MB8GA1UdIwQY
MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt
N2ViMmViODViODRhLzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh
LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLi99cjC
CrdnfU656mUsD7hR/5y5+GY55rwqEDB8OPJQLYJr/KLFAuZZdX560NzUAwgeMLGc
HSurut/SdmoJxsJaW5vZuRRGZZCDCs7g538pNvCuNTBU3tbYv8i6XJx94JmLLa1v
2dTecwmG9zVdXnbOH6jq9qYQ0833lR+5iVc+fhGKS725shHrE/1WRX6PzRHYPGki
t3RIPTJOntAQzW6VWp5MQZ/SnMQkhDgSQ+fRN4HDMbVM7orxJiRdu/CVaHMX/boG
QKq9tF+wUz9On9IgyEbQjnqvT/6wBR10eR7VwoTjm+/ksAaeq1AU36nZGrPw04OI
gTFoyk9QEH2D0w==
-----END CERTIFICATE-----
Generated at Sat May 4 13:43:03 2024 by rpki-client on console-fra.rpki-client.org