Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File:                     sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier:          Dk+lsr2wAooyEBBBeOym+CU4laeluG9vXY4Pcj8AZuw=
Subject key identifier:   35:C8:1C:8E:AE:A0:F4:4D:F9:B5:3B:C9:A9:78:FA:F9:F5:6D:BE:4D
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer:       /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial:       0191FAB51354CCBEE1609E25A863F6B71205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number:          0101
Signing time:             Mon 16 Sep 2024 12:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:56 +0000
Files and hashes:         1: 1-rsGXPg1k9wawwEeQ2-VgBHG0-M.roa (hash: j67Q8VWSuiEBrHGU5FG5FASvU4l8BzdoPNpVFgdDgmA=)
                          2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: H8Sabfs4QMOf9WmTCqAtXKrhwixxyIR6aCKpccgbDhY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:13:54:cc:be:e1:60:9e:25:a8:63:f6:b7:12:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
        Validity
            Not Before: Sep 16 12:00:56 2024 GMT
            Not After : Sep 17 12:00:56 2024 GMT
        Subject: CN=35c81c8eaea0f44df9b53bc9a978faf9f56dbe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:8d:bc:f8:d6:86:bf:16:ae:1f:f3:7c:64:
                    27:71:97:f9:47:dc:f9:c7:17:10:0c:71:a3:cf:c9:
                    62:39:e4:3e:29:54:46:f6:1e:e5:ac:ea:66:20:95:
                    81:51:f8:fd:34:58:23:21:c2:0d:7a:4d:9b:98:ab:
                    00:03:3b:44:c5:13:5f:67:98:30:4c:b1:5e:a1:d5:
                    95:4e:68:e3:d8:d9:81:a5:1c:f3:84:fc:7f:ea:89:
                    ca:7e:5b:ef:f3:2c:d4:f6:4d:ad:b5:f6:71:88:b2:
                    80:7a:c3:7d:73:2b:5f:fc:7b:8e:98:1d:23:aa:c7:
                    fa:fc:7c:7a:1d:9a:8b:06:9a:ee:4e:df:d4:f4:40:
                    ee:07:ab:0f:ab:c8:7a:25:71:6a:fc:3a:29:c2:3e:
                    d7:a1:2c:48:5e:ab:b5:a4:84:d4:28:1d:77:04:05:
                    c9:3a:1a:b2:d0:3f:f1:d1:53:38:8f:87:d3:8f:cb:
                    a0:42:de:78:3c:13:80:6f:9e:0b:35:2c:1c:a8:46:
                    9a:db:7c:60:7c:9d:3e:00:a2:4c:13:87:a9:8d:9a:
                    48:6a:ce:a0:91:59:92:4b:00:6f:57:7f:ac:bb:3d:
                    7d:41:74:de:93:59:88:c7:20:3f:3a:e8:2d:e3:cd:
                    73:65:43:ff:c9:73:0a:f7:4c:45:74:66:5c:7f:ae:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C8:1C:8E:AE:A0:F4:4D:F9:B5:3B:C9:A9:78:FA:F9:F5:6D:BE:4D
            X509v3 Authority Key Identifier:
                keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:67:0e:60:d5:94:fd:b3:58:07:d7:1a:51:5d:67:a4:52:
         ac:72:62:65:2d:57:34:ec:2e:2b:d1:f1:32:11:d9:33:06:ef:
         96:2a:e7:01:c7:22:e9:7a:97:ba:48:98:ea:8d:38:50:4d:14:
         f8:9e:10:bb:8b:86:1b:3a:71:05:1e:0e:c9:4a:fa:89:29:e5:
         f7:23:d2:da:d0:74:6c:a0:63:40:03:4d:0a:bb:36:42:ae:89:
         82:08:37:6f:45:2a:71:13:bb:4e:7b:fc:67:00:99:c9:c0:d2:
         79:b2:23:be:80:0f:f4:0b:c5:18:a7:cc:90:36:63:ae:6d:10:
         2c:fc:61:7e:19:58:c0:9b:3e:99:58:dc:97:c7:f9:b1:bf:9c:
         c0:32:79:80:e9:35:44:7f:29:13:83:49:43:f0:55:44:ca:6f:
         15:bc:da:a2:79:d8:e8:f0:e7:5c:ca:1c:d7:2d:a8:58:94:01:
         aa:f8:87:d4:78:ff:37:9d:b9:10:77:fe:b9:58:7e:1e:62:d4:
         b0:f4:97:3c:4f:9b:6b:89:cc:00:e1:f2:7b:a5:76:ed:44:cd:
         ac:1d:07:b5:03:1f:62:f6:49:fb:39:7b:99:25:c7:cf:2c:c5:
         25:b0:69:ce:48:77:85:32:62:1c:b9:e2:0e:b0:55:2a:f3:7d:
         cb:3f:1a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6tRNUzL7hYJ4lqGP2txIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwODBmODAwMWQ1OTkzMzM3M2ZlOGU1ODg0OWU0YjkxZGVh
YTJiYjIwHhcNMjQwOTE2MTIwMDU2WhcNMjQwOTE3MTIwMDU2WjAzMTEwLwYDVQQD
EygzNWM4MWM4ZWFlYTBmNDRkZjliNTNiYzlhOTc4ZmFmOWY1NmRiZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU6NvPjWhr8Wrh/zfGQncZf5R9z5
xxcQDHGjz8liOeQ+KVRG9h7lrOpmIJWBUfj9NFgjIcINek2bmKsAAztExRNfZ5gw
TLFeodWVTmjj2NmBpRzzhPx/6onKflvv8yzU9k2ttfZxiLKAesN9cytf/HuOmB0j
qsf6/Hx6HZqLBpruTt/U9EDuB6sPq8h6JXFq/Dopwj7XoSxIXqu1pITUKB13BAXJ
Ohqy0D/x0VM4j4fTj8ugQt54PBOAb54LNSwcqEaa23xgfJ0+AKJME4epjZpIas6g
kVmSSwBvV3+suz19QXTek1mIxyA/Ougt481zZUP/yXMK90xFdGZcf64i1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXIHI6uoPRN+bU7yal4+vn1bb5NMB8GA1UdIwQY
MBaAFLCA+AAdWZMzc/6OWISeS5HeqiuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMt
OWYxNzZlMjRjMDM0LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMDIyNjItZTM3Zi00MTQyLTlhMmMtOWYxNzZlMjRjMDM0
LzEvc0lENEFCMVprek56X281WWhKNUxrZDZxSzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFe9nDmDV
lP2zWAfXGlFdZ6RSrHJiZS1XNOwuK9HxMhHZMwbvlirnAcci6XqXukiY6o04UE0U
+J4Qu4uGGzpxBR4OyUr6iSnl9yPS2tB0bKBjQANNCrs2Qq6Jggg3b0UqcRO7Tnv8
ZwCZycDSebIjvoAP9AvFGKfMkDZjrm0QLPxhfhlYwJs+mVjcl8f5sb+cwDJ5gOk1
RH8pE4NJQ/BVRMpvFbzaonnY6PDnXMoc1y2oWJQBqviH1Hj/N525EHf+uVh+HmLU
sPSXPE+ba4nMAOHye6V27UTNrB0HtQMfYvZJ+zl7mSXHzyzFJbBpzkh3hTJiHLni
DrBVKvN9yz8axQ==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:28 2024 by rpki-client on console-fra.rpki-client.org