Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          ExSxWNNRHQDnFUG+hxdex5qQZHna1D0v11rlTVlv/NQ=
Subject key identifier:   5A:57:51:13:AA:FD:B2:63:C7:D4:F9:FF:2A:02:DC:B3:05:89:42:37
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       018F8892104A7BF7AC35CB33979B1D8DA645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          09E6
Signing time:             Fri 17 May 2024 22:00:24 +0000
Manifest this update:     Fri 17 May 2024 22:00:24 +0000
Manifest next update:     Sat 18 May 2024 22:00:24 +0000
Files and hashes:         1: BV_dIcP3PiR-50lmtWY1MpNX43E.roa (hash: aipX5fks9jFF5BdX3LVy3U/nej7nx45YhybwaV4patY=)
                          2: O71N5VU1m0nQQOrXfvDlvRvKYTs.roa (hash: in/d6kcHGNn1Dpmxi7DoVZxkGNbtGlTYvci9cqY3wLU=)
                          3: SmhFolwIn3kTRgGOffk_ac06YNk.roa (hash: TAXLQh72sSmLf9IV/AKqeAGXws+KnSPg76pj5FP6m4o=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: VZ31GIVwSwY11MvJbZSnJZcYprNJH2CakWdbjCfSiYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:10:4a:7b:f7:ac:35:cb:33:97:9b:1d:8d:a6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: May 17 22:00:24 2024 GMT
            Not After : May 18 22:00:24 2024 GMT
        Subject: CN=5a575113aafdb263c7d4f9ff2a02dcb305894237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:93:ec:04:4c:59:da:c6:13:db:66:43:cd:
                    3e:cd:f4:be:35:ea:cf:90:7a:b4:0e:6a:1c:ce:56:
                    9e:20:1c:a8:fe:0c:80:dc:df:2f:33:a0:b2:e7:91:
                    9b:4e:6b:25:e1:12:96:71:6c:5e:df:4e:44:f3:19:
                    39:e0:2d:64:39:60:17:60:83:c5:8f:f7:55:19:90:
                    33:6b:1c:39:7a:20:de:3e:0b:2b:c7:75:af:06:de:
                    8c:2d:f0:d9:f3:f8:83:96:ef:a8:1b:e4:e7:df:57:
                    69:fa:0b:74:56:0d:c5:93:81:0f:32:2a:2f:a2:f1:
                    8d:10:41:0b:29:73:24:51:b5:0e:c8:51:23:c4:09:
                    a7:1f:06:94:28:b0:fe:60:72:63:98:e5:63:eb:c4:
                    06:ca:b4:e7:1f:cb:8c:91:78:e1:3b:46:47:92:9b:
                    ea:2a:e2:67:04:2b:10:c1:42:c4:e5:2a:d2:44:c0:
                    28:bd:4d:75:2b:87:af:50:89:15:2a:cf:01:e7:7b:
                    37:75:03:9d:eb:09:4a:93:0a:15:5a:e7:c7:ca:1c:
                    43:72:40:6c:28:7b:19:84:e7:05:0d:3a:44:6e:94:
                    13:2e:5b:3c:c3:b2:ec:89:4d:25:7a:a5:b5:62:c5:
                    2d:c9:79:f2:03:38:82:95:6d:85:a1:d9:68:62:c8:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:57:51:13:AA:FD:B2:63:C7:D4:F9:FF:2A:02:DC:B3:05:89:42:37
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1a:89:0d:58:02:72:89:10:0f:4e:82:8a:dc:b4:a4:99:53:
         b4:72:46:73:46:78:00:52:fd:e1:f4:45:f3:d1:6c:e6:89:6c:
         e1:5c:7a:2b:de:d1:3a:45:c8:59:6c:e1:0c:8f:b2:2e:60:e0:
         aa:85:35:9c:33:1a:d4:76:ff:44:b6:30:79:17:24:2b:af:47:
         2a:34:2e:ec:7f:3c:d8:c9:a2:61:d2:c5:56:6c:bc:da:43:ad:
         1a:76:cf:d4:1a:c7:d5:eb:50:c5:57:6a:8d:a3:42:5c:9c:a4:
         16:bc:7f:49:39:09:6f:f1:64:11:9b:e4:a5:29:c0:09:bc:4c:
         3b:30:e2:c0:88:5f:7e:4a:21:78:05:b4:fa:44:09:ba:c2:89:
         cd:c6:cc:18:8f:d7:10:cd:a0:cb:51:d1:46:7e:46:0c:a9:75:
         fb:93:2e:72:24:d0:8a:ab:82:0a:bf:d4:83:11:25:f4:dd:10:
         e4:97:53:33:01:80:28:9d:ca:ab:fb:b4:a5:c5:65:44:ed:9f:
         73:a0:84:c9:87:81:14:99:38:24:98:8b:7e:6d:32:c3:c8:c4:
         85:11:76:0a:bd:9c:10:e2:ed:be:de:47:06:bf:d0:70:fd:7e:
         e9:72:3d:0d:ec:c7:3a:cf:f5:49:79:bd:a3:c0:89:27:dc:93:
         41:55:f2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkhBKe/esNcszl5sdjaZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGIzZTZhN2M4NzgzZmM4YTU3MTlmYmQ5ZjM3YjMyYzhj
N2M1Y2EwHhcNMjQwNTE3MjIwMDI0WhcNMjQwNTE4MjIwMDI0WjAzMTEwLwYDVQQD
Eyg1YTU3NTExM2FhZmRiMjYzYzdkNGY5ZmYyYTAyZGNiMzA1ODk0MjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2CT7ARMWdrGE9tmQ80+zfS+NerP
kHq0DmoczlaeIByo/gyA3N8vM6Cy55GbTmsl4RKWcWxe305E8xk54C1kOWAXYIPF
j/dVGZAzaxw5eiDePgsrx3WvBt6MLfDZ8/iDlu+oG+Tn31dp+gt0Vg3Fk4EPMiov
ovGNEEELKXMkUbUOyFEjxAmnHwaUKLD+YHJjmOVj68QGyrTnH8uMkXjhO0ZHkpvq
KuJnBCsQwULE5SrSRMAovU11K4evUIkVKs8B53s3dQOd6wlKkwoVWufHyhxDckBs
KHsZhOcFDTpEbpQTLls8w7LsiU0leqW1YsUtyXnyAziClW2FodloYsjvSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpXUROq/bJjx9T5/yoC3LMFiUI3MB8GA1UdIwQY
MBaAFGtLPmp8h4P8ilcZ+9nzezLIx8XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmIt
NDMzMmM5NTdhMjJmLzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmItNDMzMmM5NTdhMjJm
LzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhqJDVgC
cokQD06City0pJlTtHJGc0Z4AFL94fRF89Fs5ols4Vx6K97ROkXIWWzhDI+yLmDg
qoU1nDMa1Hb/RLYweRckK69HKjQu7H882MmiYdLFVmy82kOtGnbP1BrH1etQxVdq
jaNCXJykFrx/STkJb/FkEZvkpSnACbxMOzDiwIhffkoheAW0+kQJusKJzcbMGI/X
EM2gy1HRRn5GDKl1+5MuciTQiquCCr/UgxEl9N0Q5JdTMwGAKJ3Kq/u0pcVlRO2f
c6CEyYeBFJk4JJiLfm0yw8jEhRF2Cr2cEOLtvt5HBr/QcP1+6XI9DezHOs/1SXm9
o8CJJ9yTQVXyTQ==
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:00 2024 by rpki-client on console-fra.rpki-client.org