Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File:                     xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier:          kKEM3NykHz6PNNWkYhKuxIgSQbO891owPNyTiXeuXbc=
Subject key identifier:   C3:0C:C4:A4:48:11:73:6F:DC:ED:A4:EB:7A:E5:63:A0:55:A2:D5:2D
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer:       /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial:       018F87ED6A9DF7534BE55015CCF5EC36EB43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number:          AE
Signing time:             Fri 17 May 2024 19:00:34 +0000
Manifest this update:     Fri 17 May 2024 19:00:34 +0000
Manifest next update:     Sat 18 May 2024 19:00:34 +0000
Files and hashes:         1: 6LhPUI-gmyCqv6fqP-Nf6XwkQwo.roa (hash: +EPtXUuwUzGLzsL5b26eU7EitQzi9kmFWV9fYO8XubU=)
                          2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: +xWtjQN9KOhZ47ecLZgoJoQA+qxL+tWyAUnr9tl6LWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6a:9d:f7:53:4b:e5:50:15:cc:f5:ec:36:eb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
        Validity
            Not Before: May 17 19:00:34 2024 GMT
            Not After : May 18 19:00:34 2024 GMT
        Subject: CN=c30cc4a44811736fdceda4eb7ae563a055a2d52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:3c:b1:bf:58:7e:7d:3a:d9:fb:c8:66:3d:
                    bf:1c:77:74:55:41:3c:1d:e9:25:42:09:3c:3e:fd:
                    9f:01:98:7a:10:3c:c0:91:22:4b:dc:14:ea:c6:78:
                    d7:15:e5:a0:12:d9:44:43:c1:56:07:25:78:f0:0e:
                    16:28:28:11:49:99:40:be:a8:54:75:b7:21:19:00:
                    00:ab:a7:59:28:5c:6f:6f:c6:f4:44:95:e3:4c:6f:
                    8c:d2:e7:d0:c2:31:de:4d:bc:d7:ab:24:1a:39:21:
                    67:fb:a1:02:20:bc:1f:36:84:3c:eb:38:03:67:dc:
                    b1:ff:e7:fa:fe:c5:71:7c:ca:9e:ea:b3:a8:59:32:
                    a6:06:74:a9:cb:cc:24:d4:41:21:1e:a5:9d:c8:2a:
                    df:b0:df:ae:3f:e6:04:4c:e4:60:24:95:ea:a6:f5:
                    57:68:ef:87:50:e7:9a:85:df:47:1c:ba:c3:5d:42:
                    38:8f:0c:3e:2c:b1:61:7c:25:92:5f:44:19:66:64:
                    7f:9f:7c:63:2b:d1:40:e1:1c:98:e8:7b:44:ed:6b:
                    b0:ef:e1:7f:5b:66:89:2c:8d:c1:a9:12:77:e7:a3:
                    37:23:b6:f2:e7:a8:2c:e5:9a:67:cf:9a:e0:f1:2e:
                    39:c0:09:0a:48:d7:0c:ac:df:16:0d:39:1a:98:55:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0C:C4:A4:48:11:73:6F:DC:ED:A4:EB:7A:E5:63:A0:55:A2:D5:2D
            X509v3 Authority Key Identifier:
                keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:36:d0:80:10:35:45:12:6a:99:92:90:0b:f4:3c:bc:ba:4c:
         11:be:83:db:a0:a3:af:27:0a:cd:cd:b7:cd:41:fc:4c:da:97:
         d3:3a:77:24:55:81:6e:53:c2:c4:2e:13:ec:79:1e:19:f3:4e:
         1d:61:dc:c9:6d:b3:cf:59:4b:2f:83:37:eb:fa:40:9d:f1:6b:
         c9:6c:20:ee:66:d0:64:0d:dc:4f:db:c5:06:6d:9c:1e:4f:78:
         32:70:1b:35:cf:26:79:77:fe:09:89:4c:bd:31:7c:bf:9b:0b:
         5f:b5:0b:d5:12:dc:f1:37:38:1b:2f:cf:05:02:71:da:25:a5:
         be:2a:26:a2:df:f8:20:df:79:5a:95:fd:8b:3b:94:51:4f:8f:
         d8:a8:81:4a:e5:da:61:dc:04:9a:ab:4f:a6:fd:02:28:79:ee:
         16:c6:7a:4b:52:35:d2:65:ef:a6:36:9e:d8:44:e2:a3:d2:ec:
         91:40:be:f2:4e:9b:67:88:de:d9:3b:95:f5:58:d7:62:86:ec:
         dd:e6:63:57:fe:a5:5e:21:70:e3:ee:11:e9:e9:1e:a4:d5:39:
         e4:be:20:ae:11:22:72:85:53:29:8b:b8:6a:5d:0b:bc:be:29:
         cc:93:1a:6d:aa:28:e4:76:e8:51:ac:2b:10:03:05:7d:e3:40:
         f4:da:5b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Wqd91NL5VAVzPXsNutDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZDc2YzFhZjhmYWQyZWJjNjM0ZWEyZTIzMzcwZjEwYzVj
NTlkMGIwHhcNMjQwNTE3MTkwMDM0WhcNMjQwNTE4MTkwMDM0WjAzMTEwLwYDVQQD
EyhjMzBjYzRhNDQ4MTE3MzZmZGNlZGE0ZWI3YWU1NjNhMDU1YTJkNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu788sb9Yfn062fvIZj2/HHd0VUE8
HeklQgk8Pv2fAZh6EDzAkSJL3BTqxnjXFeWgEtlEQ8FWByV48A4WKCgRSZlAvqhU
dbchGQAAq6dZKFxvb8b0RJXjTG+M0ufQwjHeTbzXqyQaOSFn+6ECILwfNoQ86zgD
Z9yx/+f6/sVxfMqe6rOoWTKmBnSpy8wk1EEhHqWdyCrfsN+uP+YETORgJJXqpvVX
aO+HUOeahd9HHLrDXUI4jww+LLFhfCWSX0QZZmR/n3xjK9FA4RyY6HtE7Wuw7+F/
W2aJLI3BqRJ356M3I7by56gs5Zpnz5rg8S45wAkKSNcMrN8WDTkamFXCYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMMxKRIEXNv3O2k63rlY6BVotUtMB8GA1UdIwQY
MBaAFMXXbBr4+tLrxjTqLiM3DxDFxZ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQt
ZmRlNmZiOWFmMjMwLzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQtZmRlNmZiOWFmMjMw
LzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjbQgBA1
RRJqmZKQC/Q8vLpMEb6D26CjrycKzc23zUH8TNqX0zp3JFWBblPCxC4T7HkeGfNO
HWHcyW2zz1lLL4M36/pAnfFryWwg7mbQZA3cT9vFBm2cHk94MnAbNc8meXf+CYlM
vTF8v5sLX7UL1RLc8Tc4Gy/PBQJx2iWlviomot/4IN95WpX9izuUUU+P2KiBSuXa
YdwEmqtPpv0CKHnuFsZ6S1I10mXvpjae2ETio9LskUC+8k6bZ4je2TuV9VjXYobs
3eZjV/6lXiFw4+4R6ekepNU55L4grhEicoVTKYu4al0LvL4pzJMabaoo5HboUawr
EAMFfeNA9Npb5w==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:50 2024 by rpki-client on console-ams.rpki-client.org