Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File:                     SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier:          xz7FfggBXZek1VsY1f3pK/1kJNfBXbCo7m0xcvCETMU=
Subject key identifier:   E0:2B:35:18:67:41:89:DD:90:D7:C2:56:E5:D7:FE:41:E1:E8:C0:F5
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer:       /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial:       018F866CF1621B4DFF7CF14F7CA38C6D389B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 12:00:37 +0000
Manifest this update:     Fri 17 May 2024 12:00:37 +0000
Manifest next update:     Sat 18 May 2024 12:00:37 +0000
Files and hashes:         1: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: CRt07WCvyawidSuorNFxTONLcRthBklMLjaJVOW5NNM=)
                          2: THVMXz0o8mM_32frlRODB0s2Aik.roa (hash: OhvPtbreTqPm5jfkF2g7hQR1u76j4dr029qtPqyMrvk=)
                          3: ej-omJsLJd3gqtwryw1xV3WrGvM.roa (hash: cuCCQsCmOqZrq78k6JkNCIz5EI0cTH+OoRlEdCxwVMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:f1:62:1b:4d:ff:7c:f1:4f:7c:a3:8c:6d:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
        Validity
            Not Before: May 17 12:00:37 2024 GMT
            Not After : May 18 12:00:37 2024 GMT
        Subject: CN=e02b3518674189dd90d7c256e5d7fe41e1e8c0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:f7:a6:b2:cc:0d:1d:9a:b4:08:6d:db:39:
                    9a:a0:72:3c:d9:62:42:a8:8e:a1:6b:4b:e2:2c:b1:
                    72:24:9a:0e:c4:67:38:9e:f4:16:e7:47:c9:52:8a:
                    38:d4:a0:cf:e2:d1:65:be:24:8e:25:fa:d7:24:8e:
                    10:ff:31:73:32:62:91:ab:95:23:4e:68:2a:77:f2:
                    ad:2b:92:13:52:22:ff:55:81:8d:e9:cc:ef:7f:86:
                    f7:5d:43:18:6a:62:4e:92:9b:84:db:ff:f7:2c:ff:
                    ce:9a:44:6f:0e:32:bf:f9:32:73:84:03:63:23:e0:
                    0c:17:fd:fa:d2:cf:33:69:fc:9c:29:82:ca:ec:69:
                    46:3e:b1:3e:19:92:b7:6f:d2:d1:a1:9c:11:75:0e:
                    6f:58:e4:ae:5b:cb:7c:67:d2:c1:91:32:8e:ff:0d:
                    70:94:06:d2:90:7f:b6:f1:dd:65:9b:f2:83:eb:5b:
                    30:0a:dd:95:9e:f0:95:74:77:29:97:8c:98:d8:ee:
                    b7:52:66:68:97:76:4a:34:83:ed:3a:d9:aa:07:d7:
                    ff:95:d0:b4:17:37:96:d4:7d:11:be:6a:ce:3a:de:
                    73:34:d5:99:c3:c1:e0:05:3f:2b:3d:5c:2a:6b:b6:
                    03:aa:07:f8:ba:54:bb:2e:04:be:5b:02:83:b5:a1:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:35:18:67:41:89:DD:90:D7:C2:56:E5:D7:FE:41:E1:E8:C0:F5
            X509v3 Authority Key Identifier:
                keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:42:4d:f5:f7:fd:d2:5a:5b:27:46:8d:0a:dd:07:64:17:
         9c:cd:db:d0:89:12:32:5f:e7:e0:f4:ec:cf:39:d2:f0:0a:0f:
         42:dc:a4:f3:e9:fe:60:c9:2c:96:21:47:b7:32:91:d4:bc:3e:
         d9:66:15:2f:17:b2:64:66:57:e3:00:5b:c8:ad:3c:45:74:6b:
         fb:ee:72:e7:71:3d:38:a5:9d:f2:ce:44:38:e2:e1:04:ab:b2:
         38:86:1c:43:5e:0f:1a:e3:85:ad:7a:ee:e5:5f:4e:1e:d6:0f:
         20:02:0a:2c:a2:45:1a:a5:ee:f8:79:d9:e8:6f:8f:ff:9d:c9:
         8b:06:82:5c:54:58:b9:11:91:f5:3d:c4:4a:9a:b9:26:39:68:
         e7:19:50:b5:89:ff:e1:16:eb:f8:04:db:2c:d8:b2:1e:7a:c7:
         c7:89:c2:fb:30:b8:de:a5:4a:cf:1b:3c:88:f2:bc:f9:2d:e8:
         9b:fe:f7:a1:87:35:a3:2e:31:b7:95:2f:ae:05:93:27:21:42:
         6c:f3:b7:8f:72:69:18:95:7f:9a:ef:5a:4b:42:6d:dc:f7:84:
         a0:ce:19:40:69:0b:fe:33:6f:0a:6a:9a:b5:65:84:4d:57:ab:
         4d:14:0f:18:20:ee:1a:d7:fb:c6:cc:57:ea:ff:32:98:e5:16:
         f5:84:40:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbPFiG03/fPFPfKOMbTibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjQwNTE3MTIwMDM3WhcNMjQwNTE4MTIwMDM3WjAzMTEwLwYDVQQD
EyhlMDJiMzUxODY3NDE4OWRkOTBkN2MyNTZlNWQ3ZmU0MWUxZThjMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDf3prLMDR2atAht2zmaoHI82WJC
qI6ha0viLLFyJJoOxGc4nvQW50fJUoo41KDP4tFlviSOJfrXJI4Q/zFzMmKRq5Uj
Tmgqd/KtK5ITUiL/VYGN6czvf4b3XUMYamJOkpuE2//3LP/OmkRvDjK/+TJzhANj
I+AMF/360s8zafycKYLK7GlGPrE+GZK3b9LRoZwRdQ5vWOSuW8t8Z9LBkTKO/w1w
lAbSkH+28d1lm/KD61swCt2VnvCVdHcpl4yY2O63UmZol3ZKNIPtOtmqB9f/ldC0
FzeW1H0RvmrOOt5zNNWZw8HgBT8rPVwqa7YDqgf4ulS7LgS+WwKDtaGbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOArNRhnQYndkNfCVuXX/kHh6MD1MB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATG9CTfX3
/dJaWydGjQrdB2QXnM3b0IkSMl/n4PTszznS8AoPQtyk8+n+YMksliFHtzKR1Lw+
2WYVLxeyZGZX4wBbyK08RXRr++5y53E9OKWd8s5EOOLhBKuyOIYcQ14PGuOFrXru
5V9OHtYPIAIKLKJFGqXu+HnZ6G+P/53JiwaCXFRYuRGR9T3ESpq5Jjlo5xlQtYn/
4Rbr+ATbLNiyHnrHx4nC+zC43qVKzxs8iPK8+S3om/73oYc1oy4xt5UvrgWTJyFC
bPO3j3JpGJV/mu9aS0Jt3PeEoM4ZQGkL/jNvCmqatWWETVerTRQPGCDuGtf7xsxX
6v8ymOUW9YRAzw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:24:20 2024 by rpki-client on console-fra.rpki-client.org