Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          +TLt49NGrWdJ/OxBPOiH+Ov5xgm7rAVjcV/8AZ6YyIY=
Subject key identifier:   A0:74:21:14:55:DA:34:AD:AB:7D:28:68:DA:9E:5B:38:80:F1:A3:A2
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       018F51384B83E03AA6CA994BDFAA8153BCF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          0B4F
Signing time:             Tue 07 May 2024 04:03:14 +0000
Manifest this update:     Tue 07 May 2024 04:03:14 +0000
Manifest next update:     Wed 08 May 2024 04:03:14 +0000
Files and hashes:         1: 1-OurgVfTD7pKsf0V3bEdJdKxNGA.roa (hash: +Dy1+BOIoNFH7Xx9tQ2F8405tMUbLJARnihqd0dDWUM=)
                          2: 9aZEA4Nk8EErOYwavy5TNiAwQvA.roa (hash: yJxRteR9hjsDYywi96aJDl8Kp+eWsAq2bp4QRouucu8=)
                          3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: BFQWahvzJ1O4o2CPska4lqqys5CL3Vq3f0Ec30GosT0=)
                          4: HMsvAiDbh4kC8ggLmj0y0DoXO64.roa (hash: uUoaPJoC7VBtn0vdccXfZO2Ub/4VCgEVJ/mOlyL3+eQ=)
                          5: PwlmJUFqueOwEioQdT4pzc4oVZQ.roa (hash: N2AO6zfCGZzYLMDnuJkqpNktpXH2yKyYjD7Wksnl44U=)
                          6: V2WDoJrybND7YYaECxFZWDEVUeM.roa (hash: nCs9N0q2Y1C5KQ1y/Yrni6QZ9aXf5Ic7+h/NE8hDkkI=)
                          7: akLDB6hDDvATflhi7YprZV3axYA.roa (hash: OuGq/dSYrWQ7vy/6C1Sw/NEQKCO6xlZqwu0YA/9eHUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:4b:83:e0:3a:a6:ca:99:4b:df:aa:81:53:bc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: May  7 04:03:14 2024 GMT
            Not After : May  8 04:03:14 2024 GMT
        Subject: CN=a074211455da34adab7d2868da9e5b3880f1a3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:fd:f3:86:b6:41:4a:af:33:9e:5e:82:37:
                    2c:77:25:c0:67:ad:cf:ac:12:6b:fd:28:67:ed:7e:
                    86:1a:24:cb:67:ef:9d:b7:51:76:d7:7a:67:64:e6:
                    57:36:47:c2:fc:60:c7:88:56:27:e1:8a:fb:0a:2e:
                    37:46:2c:7e:a3:55:a3:7c:ff:60:01:d2:18:f2:db:
                    2d:1e:82:43:4a:40:7e:a6:7c:09:9f:d6:09:03:59:
                    0c:11:1f:dc:f9:d0:f3:02:97:7a:f3:6e:50:81:d6:
                    f9:04:f0:0b:24:18:69:21:4d:c2:65:da:a7:0f:29:
                    cd:92:41:ba:ea:6d:f9:58:aa:7e:39:49:32:1a:5e:
                    b9:ad:0b:1e:e2:5f:fd:5d:ef:39:73:85:01:3c:ad:
                    4f:00:fa:64:b5:a7:cc:32:5e:8a:84:89:a7:2f:23:
                    4b:83:d0:a9:ec:51:36:7e:55:71:42:f7:e7:7b:f9:
                    86:59:db:5b:a4:d1:97:eb:11:1a:7d:82:4b:9b:a7:
                    68:e1:84:c6:e5:2d:ce:38:cf:47:f6:6d:8a:71:57:
                    5b:a9:84:ec:7e:be:09:89:69:26:f9:1e:77:3e:e7:
                    f8:09:63:d4:10:c4:d8:88:37:8e:21:9b:27:16:66:
                    60:f1:be:22:14:8e:c4:b3:7e:a8:57:a9:f1:3f:a6:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:21:14:55:DA:34:AD:AB:7D:28:68:DA:9E:5B:38:80:F1:A3:A2
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:1d:0d:75:c3:e2:b9:d9:92:26:36:52:03:75:24:24:21:
         9c:7c:23:d6:2a:dd:10:93:88:4d:15:95:15:b6:73:b0:03:97:
         67:79:3a:9c:63:38:fc:51:18:a8:c2:4f:49:29:b0:f2:18:4e:
         2c:21:13:64:b4:d5:9c:b6:f5:55:ef:23:1c:04:3c:73:ec:68:
         99:d2:db:67:f4:61:44:d8:04:38:e1:78:c6:93:de:e9:eb:b7:
         9b:ca:19:fc:96:ca:b9:09:2c:93:41:5a:21:fc:f7:bb:07:ca:
         41:9e:c7:06:e2:ba:9f:89:82:bc:14:a7:63:f9:b0:ff:78:23:
         27:36:3a:17:88:42:b4:af:10:28:7c:f3:b9:15:f3:8a:f1:bc:
         c7:9a:09:fd:60:41:2c:ba:aa:95:cb:e5:58:82:4e:27:23:78:
         da:78:ef:55:70:c1:f5:5f:82:ba:f7:df:9d:3c:7a:c6:fc:6b:
         8a:c1:f3:33:75:e6:b3:38:c1:5b:3a:8b:8e:3b:01:e5:8f:5e:
         69:7b:59:c5:db:d9:cf:f4:23:1a:6e:d6:ae:76:6a:c4:3b:ee:
         e3:fa:78:70:a8:e5:d0:31:91:8e:33:79:4a:ef:d0:4f:0d:b0:
         b3:d0:14:cf:b3:88:a2:71:ac:da:a8:3a:94:a5:5e:cd:0c:12:
         26:23:d3:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROEuD4DqmyplL36qBU7z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjQwNTA3MDQwMzE0WhcNMjQwNTA4MDQwMzE0WjAzMTEwLwYDVQQD
EyhhMDc0MjExNDU1ZGEzNGFkYWI3ZDI4NjhkYTllNWIzODgwZjFhM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBv984a2QUqvM55egjcsdyXAZ63P
rBJr/Shn7X6GGiTLZ++dt1F213pnZOZXNkfC/GDHiFYn4Yr7Ci43Rix+o1WjfP9g
AdIY8tstHoJDSkB+pnwJn9YJA1kMER/c+dDzApd6825Qgdb5BPALJBhpIU3CZdqn
DynNkkG66m35WKp+OUkyGl65rQse4l/9Xe85c4UBPK1PAPpktafMMl6KhImnLyNL
g9Cp7FE2flVxQvfne/mGWdtbpNGX6xEafYJLm6do4YTG5S3OOM9H9m2KcVdbqYTs
fr4JiWkm+R53Puf4CWPUEMTYiDeOIZsnFmZg8b4iFI7Es36oV6nxP6a5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB0IRRV2jStq30oaNqeWziA8aOiMB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh0dDXXD
4rnZkiY2UgN1JCQhnHwj1irdEJOITRWVFbZzsAOXZ3k6nGM4/FEYqMJPSSmw8hhO
LCETZLTVnLb1Ve8jHAQ8c+xomdLbZ/RhRNgEOOF4xpPe6eu3m8oZ/JbKuQksk0Fa
Ifz3uwfKQZ7HBuK6n4mCvBSnY/mw/3gjJzY6F4hCtK8QKHzzuRXzivG8x5oJ/WBB
LLqqlcvlWIJOJyN42njvVXDB9V+CuvffnTx6xvxrisHzM3XmszjBWzqLjjsB5Y9e
aXtZxdvZz/QjGm7WrnZqxDvu4/p4cKjl0DGRjjN5Su/QTw2ws9AUz7OIonGs2qg6
lKVezQwSJiPTmA==
-----END CERTIFICATE-----
Generated at Tue May 7 10:02:21 2024 by rpki-client on console-fra.rpki-client.org