Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          EUPBkZG2ansMyPuRqRqaK3O7KESkUFKlg017XlPq8cs=
Subject key identifier:   2B:9F:43:25:6C:0D:CA:76:A8:15:C3:B9:71:7E:2B:AD:D3:D2:ED:90
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       018F44FB9DCD9E6F7DC928CF4F867A0C2873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          115C
Signing time:             Sat 04 May 2024 19:01:31 +0000
Manifest this update:     Sat 04 May 2024 19:01:31 +0000
Manifest next update:     Sun 05 May 2024 19:01:31 +0000
Files and hashes:         1: 8LR7E753kWKwrVyCsTuWcl7GCQo.roa (hash: xv7Kn/nHHoBfzHD+tyVsPM12ZkSeUwVtaFSTL+V9ySU=)
                          2: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: mqTGIBPhISabgz/EKQEtgNnPQQloyxvndRJJtZL44aM=)
                          3: sJs-qYwI-qHmaW2c1PbJ6llwbgE.roa (hash: Y32z34FaHYhMPAiR8OZ/boZhhYuRRwIuJ+ct+oV1P0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:9d:cd:9e:6f:7d:c9:28:cf:4f:86:7a:0c:28:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: May  4 19:01:31 2024 GMT
            Not After : May  5 19:01:31 2024 GMT
        Subject: CN=2b9f43256c0dca76a815c3b9717e2badd3d2ed90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:bd:e8:0b:d5:0f:2f:d3:d5:5c:5d:3e:cb:
                    9a:06:69:8e:3b:e9:9d:a2:fc:54:c2:4f:79:23:42:
                    b7:d7:cc:90:37:3d:70:44:b4:ed:35:75:c4:4c:95:
                    63:33:34:1e:b1:72:24:cf:53:35:c1:35:18:97:6a:
                    b9:90:0a:68:4b:9b:6f:03:ad:0d:10:7c:dd:47:c8:
                    99:d4:79:1b:31:4d:03:51:a7:6d:12:bb:72:e7:0b:
                    81:0a:06:0b:23:d1:73:7d:52:f3:8b:53:b3:40:25:
                    38:76:af:c9:d2:68:8f:d4:22:9c:3b:47:57:c6:dc:
                    30:7d:1a:06:8c:e9:e5:25:e7:a3:fd:ed:94:1e:9c:
                    e9:6b:5c:e6:5c:ea:39:b3:18:6b:2e:ed:08:5a:78:
                    3b:89:d0:28:6a:72:c5:6e:c8:ca:c9:9f:89:b2:da:
                    0f:ea:2e:32:df:0c:38:18:3b:b3:fd:d5:87:77:b0:
                    34:07:89:c0:62:e3:62:d9:9b:e2:02:52:e7:f1:ab:
                    f8:b5:49:14:70:3d:9e:a5:3f:7a:1c:04:a7:7f:f1:
                    51:85:70:34:62:78:66:3e:8b:77:71:55:62:fb:00:
                    8b:91:8f:d9:5a:e6:5a:6f:0b:b4:a4:b3:4a:e9:e2:
                    83:ee:b6:0a:ef:28:28:85:99:87:5d:be:11:16:2f:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:43:25:6C:0D:CA:76:A8:15:C3:B9:71:7E:2B:AD:D3:D2:ED:90
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:51:fe:2d:74:9e:2e:4d:69:92:e8:11:17:6f:94:af:37:11:
         b3:b5:86:dd:70:21:bb:54:ab:a7:c3:78:a6:a5:9a:3e:b9:c4:
         b4:eb:a4:7b:74:aa:7f:74:63:1a:e4:dc:5b:fa:dc:42:2f:0d:
         11:b0:81:a3:b8:93:ab:ff:d4:2f:6e:d5:3b:b7:50:59:5f:67:
         62:00:20:1a:dc:2e:52:b6:83:7d:d7:07:db:34:a1:96:e6:cd:
         d7:ba:09:07:d5:2d:4d:ef:bd:dd:4a:a2:bd:8b:0f:f3:e8:34:
         c3:81:da:61:4e:68:3e:ac:49:a0:2d:68:3a:32:fe:14:30:9d:
         6b:2a:69:ea:ad:63:c8:7d:6f:56:09:69:1c:90:5e:62:88:b1:
         0a:29:e8:5d:ef:13:0f:74:09:d0:e7:3d:bd:7d:e2:cf:20:4d:
         15:7a:79:c5:d2:2f:c9:64:74:bd:93:9f:d2:59:26:a1:cc:ed:
         77:e1:cf:8b:13:3a:8f:ba:9e:a0:22:b2:b1:13:bb:bf:ba:f4:
         46:95:fa:71:02:4f:eb:98:3f:f9:9d:79:d6:5f:f6:bb:7d:03:
         01:f3:6b:35:d8:0f:73:62:d5:6c:c4:5c:8a:4f:9d:a5:b0:7d:
         be:d8:55:f6:60:9c:e7:2d:c4:4e:76:bc:c2:72:bd:05:1d:82:
         5f:cc:38:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9E+53Nnm99ySjPT4Z6DChzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjQwNTA0MTkwMTMxWhcNMjQwNTA1MTkwMTMxWjAzMTEwLwYDVQQD
EygyYjlmNDMyNTZjMGRjYTc2YTgxNWMzYjk3MTdlMmJhZGQzZDJlZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosK96AvVDy/T1VxdPsuaBmmOO+md
ovxUwk95I0K318yQNz1wRLTtNXXETJVjMzQesXIkz1M1wTUYl2q5kApoS5tvA60N
EHzdR8iZ1HkbMU0DUadtErty5wuBCgYLI9FzfVLzi1OzQCU4dq/J0miP1CKcO0dX
xtwwfRoGjOnlJeej/e2UHpzpa1zmXOo5sxhrLu0IWng7idAoanLFbsjKyZ+JstoP
6i4y3ww4GDuz/dWHd7A0B4nAYuNi2ZviAlLn8av4tUkUcD2epT96HASnf/FRhXA0
YnhmPot3cVVi+wCLkY/ZWuZabwu0pLNK6eKD7rYK7ygohZmHXb4RFi/bXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCufQyVsDcp2qBXDuXF+K63T0u2QMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlH+LXSe
Lk1pkugRF2+UrzcRs7WG3XAhu1Srp8N4pqWaPrnEtOuke3Sqf3RjGuTcW/rcQi8N
EbCBo7iTq//UL27VO7dQWV9nYgAgGtwuUraDfdcH2zShlubN17oJB9UtTe+93Uqi
vYsP8+g0w4HaYU5oPqxJoC1oOjL+FDCdaypp6q1jyH1vVglpHJBeYoixCinoXe8T
D3QJ0Oc9vX3izyBNFXp5xdIvyWR0vZOf0lkmocztd+HPixM6j7qeoCKysRO7v7r0
RpX6cQJP65g/+Z151l/2u30DAfNrNdgPc2LVbMRcik+dpbB9vthV9mCc5y3ETna8
wnK9BR2CX8w4bg==
-----END CERTIFICATE-----
Generated at Sat May 4 21:49:52 2024 by rpki-client on console-fra.rpki-client.org