Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File:                     qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier:          qymSax8MjX7/yXpH1NG499lQyfpholv+m89XJHTTOeA=
Subject key identifier:   F5:FA:54:63:C1:15:64:0A:C0:42:FE:47:F9:BA:B5:88:6A:52:19:8A
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer:       /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial:       018F874A37193E28DFA27148C4ECCCF0690E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number:          07C8
Signing time:             Fri 17 May 2024 16:02:18 +0000
Manifest this update:     Fri 17 May 2024 16:02:18 +0000
Manifest next update:     Sat 18 May 2024 16:02:18 +0000
Files and hashes:         1: akqXbnyNbcmX5dg7dzIiFidii1Y.roa (hash: /zGLvFEdN3lIxDna16Tnt6hs0xPYiD8skJ1cc+rFg6o=)
                          2: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: x9EfKUhk8c0qFGdP5ChTvNRNczD18fzZR7RA+Ee1/RQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:37:19:3e:28:df:a2:71:48:c4:ec:cc:f0:69:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
        Validity
            Not Before: May 17 16:02:18 2024 GMT
            Not After : May 18 16:02:18 2024 GMT
        Subject: CN=f5fa5463c115640ac042fe47f9bab5886a52198a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:54:8e:b6:aa:31:3c:74:0d:28:35:07:1b:
                    f7:6b:c8:4c:1f:c1:39:69:6f:94:a0:39:b8:00:ae:
                    b0:00:e9:b5:52:87:a2:42:70:6f:76:60:24:33:bf:
                    79:09:d8:6f:12:dc:e1:d6:0e:84:dd:6a:7b:d7:df:
                    ca:74:bc:cb:93:15:cd:48:b2:ad:3b:d7:49:26:d8:
                    03:33:12:8c:f6:fa:3d:20:1d:50:be:e7:d2:2d:8e:
                    18:79:2b:76:13:a8:ed:42:1d:96:f7:91:2f:65:64:
                    19:84:0a:7f:6f:80:bf:07:c7:64:88:c6:9d:94:bf:
                    90:89:82:f3:44:e9:ad:22:0b:ed:ec:68:5c:f8:65:
                    3e:ff:22:62:b8:12:8c:8a:7b:05:fc:4e:bb:29:a2:
                    6d:07:0b:25:ef:d7:71:30:93:1f:7f:ea:98:76:63:
                    cd:c5:3d:79:15:5e:cd:a5:db:bc:fc:17:fc:aa:f4:
                    9d:b4:67:1f:b9:29:29:c4:e6:5c:4b:70:ef:11:e1:
                    23:fa:e0:12:22:6f:ec:77:36:0c:30:97:6f:7a:03:
                    2d:9f:d4:33:36:fe:c3:af:94:bf:40:58:0f:d1:ec:
                    07:3d:c7:1b:82:da:d2:af:c6:78:48:1a:18:74:63:
                    ad:a6:3c:9a:15:00:85:14:bb:10:d4:cc:09:56:ed:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:54:63:C1:15:64:0A:C0:42:FE:47:F9:BA:B5:88:6A:52:19:8A
            X509v3 Authority Key Identifier:
                keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:10:0a:c9:aa:21:88:30:ad:59:6a:82:a1:50:c6:59:98:cd:
         dd:fa:e8:96:e5:b9:d0:8a:6e:94:14:65:a8:55:60:2b:4b:78:
         30:d8:68:70:c9:b4:b2:e2:20:32:0a:ea:c3:19:e6:90:c5:52:
         49:cf:49:54:c3:66:0a:15:27:23:ff:15:0c:96:4c:17:53:0b:
         6c:83:14:86:6a:bd:4a:48:dd:3f:0a:01:1e:60:0d:ae:bd:2c:
         9d:42:f8:bc:cc:3e:92:e3:2e:e9:a9:3f:cd:ec:53:ef:cf:65:
         aa:24:4b:a7:08:f3:5b:3b:76:b2:19:de:d7:93:dc:15:a9:f7:
         e1:0f:2a:ac:00:04:0b:5c:36:03:d9:2a:57:d5:ac:d7:d2:78:
         b9:9e:b4:69:15:66:b5:73:5d:a4:f1:b5:e9:a9:8b:3e:d8:e7:
         2f:f6:a9:8e:42:76:e4:13:10:07:f6:ae:e6:b1:e6:19:61:81:
         94:e7:9a:56:52:63:67:6e:52:20:e5:9b:fe:89:cf:88:02:8c:
         1e:bc:10:07:6d:45:7d:1c:69:35:c3:a0:cb:18:d4:b5:22:21:
         59:fa:85:04:a9:ee:a9:fe:58:84:77:fc:d3:0a:3b:f5:c2:03:
         9f:dc:c9:77:b8:3d:3f:f2:de:f8:05:ec:d5:78:97:28:c2:da:
         3d:a4:b1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSjcZPijfonFIxOzM8GkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NzFkMGJhMDg5ZDllOWY0NmMyOTEzMTk2NzRmYWM4
MTI4ZDAwHhcNMjQwNTE3MTYwMjE4WhcNMjQwNTE4MTYwMjE4WjAzMTEwLwYDVQQD
EyhmNWZhNTQ2M2MxMTU2NDBhYzA0MmZlNDdmOWJhYjU4ODZhNTIxOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhUjraqMTx0DSg1Bxv3a8hMH8E5
aW+UoDm4AK6wAOm1UoeiQnBvdmAkM795CdhvEtzh1g6E3Wp719/KdLzLkxXNSLKt
O9dJJtgDMxKM9vo9IB1QvufSLY4YeSt2E6jtQh2W95EvZWQZhAp/b4C/B8dkiMad
lL+QiYLzROmtIgvt7Ghc+GU+/yJiuBKMinsF/E67KaJtBwsl79dxMJMff+qYdmPN
xT15FV7Npdu8/Bf8qvSdtGcfuSkpxOZcS3DvEeEj+uASIm/sdzYMMJdvegMtn9Qz
Nv7Dr5S/QFgP0ewHPccbgtrSr8Z4SBoYdGOtpjyaFQCFFLsQ1MwJVu1WmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX6VGPBFWQKwEL+R/m6tYhqUhmKMB8GA1UdIwQY
MBaAFKpbRx0LoInZ6fRsKRMZZ0+sgSjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80YmUwMjctODhlOS00N2UzLWJiODgt
NmYyZTI1MjliZTgyLzEvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80YmUwMjctODhlOS00N2UzLWJiODgtNmYyZTI1MjliZTgy
LzEvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRAKyaoh
iDCtWWqCoVDGWZjN3froluW50IpulBRlqFVgK0t4MNhocMm0suIgMgrqwxnmkMVS
Sc9JVMNmChUnI/8VDJZMF1MLbIMUhmq9SkjdPwoBHmANrr0snUL4vMw+kuMu6ak/
zexT789lqiRLpwjzWzt2shne15PcFan34Q8qrAAEC1w2A9kqV9Ws19J4uZ60aRVm
tXNdpPG16amLPtjnL/apjkJ25BMQB/au5rHmGWGBlOeaVlJjZ25SIOWb/onPiAKM
HrwQB21FfRxpNcOgyxjUtSIhWfqFBKnuqf5YhHf80wo79cIDn9zJd7g9P/Le+AXs
1XiXKMLaPaSxlg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:26:54 2024 by rpki-client on console-fra.rpki-client.org