Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File:                     ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier:          wZgljyvrL3sYBW9rQo2xSYJzzz2POoqP/LyHXI54Fic=
Subject key identifier:   06:9A:D3:7E:BD:FE:2A:E6:0B:0B:8D:91:0D:96:2E:92:A9:B3:5D:D8
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       018F87499F1C28EC0704E113C1DA73265B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: 6kFn0QvjkvjVrxVy2TY7iKIHano.roa (hash: E8Pmmkf0Vtv5vIgcUgGzanqfD8iL1PerC8HwBCoNUCI=)
                          2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: pHswt41PK5icIJ9Ft72EVRh+e6NI97mksSz1B1QqSY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9f:1c:28:ec:07:04:e1:13:c1:da:73:26:5b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=069ad37ebdfe2ae60b0b8d910d962e92a9b35dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:69:f8:e9:11:14:a3:e4:81:b9:95:57:50:
                    c8:7c:6b:d0:f0:0c:db:bd:d3:e1:6f:5c:eb:cf:d9:
                    41:07:f4:59:a2:54:d5:74:50:07:b6:c7:2a:3d:33:
                    ba:6f:83:89:62:f7:cd:0b:13:82:8d:c0:ee:5d:e6:
                    aa:6d:68:be:65:cd:34:b1:12:98:02:14:06:63:81:
                    30:30:03:b2:e0:77:a4:fc:7a:9e:61:8a:63:4c:a5:
                    6a:34:a6:a6:45:d1:79:5a:3a:ae:da:67:a3:1d:9f:
                    22:4a:bc:6f:8c:60:2d:73:78:c4:5d:45:b0:14:52:
                    f6:fe:19:79:1c:4a:ac:d7:7b:7f:aa:ec:ff:78:7f:
                    da:1d:3e:24:50:25:df:3b:58:fe:c8:e9:bd:8f:28:
                    74:bf:f7:92:ec:6d:3d:02:27:5d:c0:64:33:f5:28:
                    72:c5:5f:cb:75:5f:4f:8a:15:95:33:b3:76:7f:44:
                    6a:e7:6c:e6:ef:1f:5a:b3:ac:fb:0d:a8:26:5e:81:
                    ea:f1:6f:dd:64:eb:1a:0b:6a:c0:ac:bd:1b:59:01:
                    e2:87:9e:cf:c6:ce:dc:16:e3:5b:1c:93:5e:5d:ff:
                    0e:41:c3:ca:1c:df:1c:aa:90:c9:b0:12:39:f1:a7:
                    45:0b:ff:2c:f8:36:1b:0b:94:cd:c8:84:bc:c5:0b:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9A:D3:7E:BD:FE:2A:E6:0B:0B:8D:91:0D:96:2E:92:A9:B3:5D:D8
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:85:b0:f3:d0:bf:6c:84:cb:b0:be:50:d3:16:a9:e2:bf:
         87:ef:ba:72:ad:32:17:c6:08:8f:4f:15:c8:ab:d8:75:d0:0f:
         cb:98:14:53:c0:6b:1d:fa:a6:32:a5:ca:da:5f:e9:a7:7f:b9:
         69:55:64:de:e0:80:9a:21:30:ab:51:dc:42:79:79:b6:cc:2c:
         97:e3:4b:5b:d6:d1:bb:aa:34:4b:e8:f6:28:1f:31:d8:28:77:
         94:50:29:f2:9a:f7:61:ab:69:29:63:ff:d7:f7:45:1d:df:fa:
         ef:57:82:4a:b8:ab:3f:39:3d:72:7d:32:01:d2:5e:2a:c4:50:
         ce:9e:6a:cd:8a:03:9f:03:27:27:37:09:8e:52:c1:ea:c2:5d:
         dd:5a:4a:78:31:aa:1c:46:af:48:4d:63:ca:e0:f2:2b:6d:36:
         6f:09:bc:de:01:ce:c4:0d:58:c8:71:76:56:ef:1c:ce:88:2d:
         74:a8:fa:7d:93:ad:31:84:e9:49:82:62:9a:15:8b:97:14:28:
         86:b7:ef:7f:ba:bc:2d:2d:92:d3:a2:4e:24:5d:af:7f:be:11:
         10:c7:02:19:45:94:11:a2:c8:eb:84:26:c2:95:43:39:86:86:
         39:d9:d5:c9:a2:6e:a1:32:34:8d:05:fc:af:d6:c0:44:c0:cb:
         11:36:12:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZ8cKOwHBOETwdpzJluDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdmNjlhMDRiZDljYWQ1MjNiMzlmNzdhMmRkYWI0NGMy
OTExOTIwHhcNMjQwNTE3MTYwMTQwWhcNMjQwNTE4MTYwMTQwWjAzMTEwLwYDVQQD
EygwNjlhZDM3ZWJkZmUyYWU2MGIwYjhkOTEwZDk2MmU5MmE5YjM1ZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DFp+OkRFKPkgbmVV1DIfGvQ8Azb
vdPhb1zrz9lBB/RZolTVdFAHtscqPTO6b4OJYvfNCxOCjcDuXeaqbWi+Zc00sRKY
AhQGY4EwMAOy4Hek/HqeYYpjTKVqNKamRdF5Wjqu2mejHZ8iSrxvjGAtc3jEXUWw
FFL2/hl5HEqs13t/quz/eH/aHT4kUCXfO1j+yOm9jyh0v/eS7G09AiddwGQz9Shy
xV/LdV9PihWVM7N2f0Rq52zm7x9as6z7DagmXoHq8W/dZOsaC2rArL0bWQHih57P
xs7cFuNbHJNeXf8OQcPKHN8cqpDJsBI58adFC/8s+DYbC5TNyIS8xQvU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaa0369/irmCwuNkQ2WLpKps13YMB8GA1UdIwQY
MBaAFJLX9poEvZytUjs593ot2rRMKRGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYt
Yjg0NDg3ZjkyMGU0LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYtYjg0NDg3ZjkyMGU0
LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj6FsPPQ
v2yEy7C+UNMWqeK/h++6cq0yF8YIj08VyKvYddAPy5gUU8BrHfqmMqXK2l/pp3+5
aVVk3uCAmiEwq1HcQnl5tswsl+NLW9bRu6o0S+j2KB8x2Ch3lFAp8pr3YatpKWP/
1/dFHd/671eCSrirPzk9cn0yAdJeKsRQzp5qzYoDnwMnJzcJjlLB6sJd3VpKeDGq
HEavSE1jyuDyK202bwm83gHOxA1YyHF2Vu8czogtdKj6fZOtMYTpSYJimhWLlxQo
hrfvf7q8LS2S06JOJF2vf74REMcCGUWUEaLI64QmwpVDOYaGOdnVyaJuoTI0jQX8
r9bARMDLETYSxg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:27:16 2024 by rpki-client on console-fra.rpki-client.org