Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File:                     Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier:          Qwg7Aj92p+2mSblc9fWN8fw4QpkRWDjU2KjVJDCjrJ8=
Subject key identifier:   D8:06:03:CA:A6:D1:01:29:BC:22:B4:AB:04:54:D8:42:6D:74:D6:A7
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer:       /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial:       018F497F85A60BDDB72AA7978796C0A11336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number:          0A9A
Signing time:             Sun 05 May 2024 16:04:05 +0000
Manifest this update:     Sun 05 May 2024 16:04:05 +0000
Manifest next update:     Mon 06 May 2024 16:04:05 +0000
Files and hashes:         1: GyCW7_agtd8HAHuz_GWTU4PF_bo.roa (hash: n6oELK/+8OlfyKyCEH16j6e6+8FoR7ic6tjVeZwAWFc=)
                          2: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: QhZLe4KqYVw/urCxzLDcpUc75NvFxpBFsngAcxtXZC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:85:a6:0b:dd:b7:2a:a7:97:87:96:c0:a1:13:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
        Validity
            Not Before: May  5 16:04:05 2024 GMT
            Not After : May  6 16:04:05 2024 GMT
        Subject: CN=d80603caa6d10129bc22b4ab0454d8426d74d6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:bf:1f:9d:2e:b6:4d:99:6f:8e:89:28:9b:
                    a5:64:ed:b9:c5:97:b3:9a:48:cf:96:76:7e:84:68:
                    32:0d:47:3b:13:36:af:49:01:d2:d6:82:9d:98:6f:
                    0b:f7:eb:a8:c7:19:bb:34:3e:e9:46:d8:7d:cc:e6:
                    5b:8f:18:ea:7a:82:b1:a4:87:63:ff:56:a3:55:88:
                    08:2d:89:80:bd:8a:e6:b3:1b:83:10:6d:f1:24:f3:
                    70:25:3d:0c:02:ed:dd:d5:bb:ca:24:60:e6:0a:79:
                    d3:b9:71:fe:64:bf:4d:bc:57:cc:c9:7f:cf:03:7e:
                    c8:ad:76:f8:08:96:15:d1:10:9b:cd:d3:dd:8f:2e:
                    a4:de:60:76:92:04:ab:e9:26:46:83:ec:ce:63:7e:
                    ac:4e:98:6e:ca:b2:a7:93:e0:d2:d7:e0:3b:30:c2:
                    f1:92:3b:7f:03:2b:0c:de:6c:55:2e:0f:bb:72:d9:
                    93:87:ae:0e:82:fd:ff:78:90:a1:cf:6e:76:c5:79:
                    94:e9:32:8a:9c:ed:63:60:65:c8:cc:9d:1f:12:cb:
                    36:75:86:7d:cd:39:d1:4f:66:bb:1c:a8:cf:5f:9d:
                    a4:e6:2c:df:01:e8:77:07:03:27:4f:fa:87:fd:03:
                    d5:91:bb:39:a2:1b:2b:91:33:2a:47:55:e0:64:ef:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:03:CA:A6:D1:01:29:BC:22:B4:AB:04:54:D8:42:6D:74:D6:A7
            X509v3 Authority Key Identifier:
                keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:a9:bb:24:6e:a1:b0:40:69:47:d8:86:10:86:e2:7e:e1:
         9e:f6:e9:31:cd:e9:67:07:07:ed:36:4b:ea:be:59:09:71:b7:
         16:ce:7a:e2:1b:2b:b5:f1:93:4a:f9:a8:68:a8:de:e5:d8:78:
         ab:7f:88:00:e5:2c:b7:19:90:76:09:f8:29:1d:dd:d2:03:ed:
         53:7b:ec:d6:c3:09:3e:c2:4f:88:a9:57:22:38:33:05:34:46:
         c1:b7:69:df:ba:06:1b:df:51:b0:5d:e9:d7:28:75:7f:d5:89:
         ea:0c:7d:00:61:0c:d0:47:e8:aa:81:da:dd:e9:e7:ea:c2:3a:
         f3:32:05:52:9d:65:11:70:c1:4c:e2:d8:90:23:8c:85:0c:c6:
         0c:94:9b:13:08:2d:c9:51:fe:75:d4:66:07:b2:6e:a3:ae:3d:
         f1:78:6b:8e:5a:dc:47:5f:9e:c2:eb:8c:1e:e9:06:4a:82:eb:
         07:f8:8a:d2:92:02:5c:3a:61:e5:7e:6d:23:02:80:2e:c4:f4:
         5c:e0:b4:89:40:40:b6:58:14:3d:76:67:13:a5:97:6b:c7:97:
         7b:bd:40:70:28:06:ba:10:69:12:48:1d:7b:fb:df:1b:a9:ee:
         fe:db:41:df:36:4b:14:c9:5d:75:30:12:76:6c:3c:ad:3b:65:
         44:17:90:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Jf4WmC923KqeXh5bAoRM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj
N2U3OWMwHhcNMjQwNTA1MTYwNDA1WhcNMjQwNTA2MTYwNDA1WjAzMTEwLwYDVQQD
EyhkODA2MDNjYWE2ZDEwMTI5YmMyMmI0YWIwNDU0ZDg0MjZkNzRkNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucO/H50utk2Zb46JKJulZO25xZez
mkjPlnZ+hGgyDUc7EzavSQHS1oKdmG8L9+uoxxm7ND7pRth9zOZbjxjqeoKxpIdj
/1ajVYgILYmAvYrmsxuDEG3xJPNwJT0MAu3d1bvKJGDmCnnTuXH+ZL9NvFfMyX/P
A37IrXb4CJYV0RCbzdPdjy6k3mB2kgSr6SZGg+zOY36sTphuyrKnk+DS1+A7MMLx
kjt/AysM3mxVLg+7ctmTh64Ogv3/eJChz252xXmU6TKKnO1jYGXIzJ0fEss2dYZ9
zTnRT2a7HKjPX52k5izfAeh3BwMnT/qH/QPVkbs5ohsrkTMqR1XgZO9kJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgGA8qm0QEpvCK0qwRU2EJtdNanMB8GA1UdIwQY
MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt
ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh
LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM+puyRu
obBAaUfYhhCG4n7hnvbpMc3pZwcH7TZL6r5ZCXG3Fs564hsrtfGTSvmoaKje5dh4
q3+IAOUstxmQdgn4KR3d0gPtU3vs1sMJPsJPiKlXIjgzBTRGwbdp37oGG99RsF3p
1yh1f9WJ6gx9AGEM0EfoqoHa3enn6sI68zIFUp1lEXDBTOLYkCOMhQzGDJSbEwgt
yVH+ddRmB7Juo6498XhrjlrcR1+ewuuMHukGSoLrB/iK0pICXDph5X5tIwKALsT0
XOC0iUBAtlgUPXZnE6WXa8eXe71AcCgGuhBpEkgde/vfG6nu/ttB3zZLFMlddTAS
dmw8rTtlRBeQQQ==
-----END CERTIFICATE-----
Generated at Sun May 5 17:42:24 2024 by rpki-client on console-fra.rpki-client.org