Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File:                     SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier:          5IbYRfTmmypUnT5dwgK8uZRQ7CYQ2EY5wJFsjxlCgbU=
Subject key identifier:   06:90:B6:C1:12:BC:33:ED:52:D2:3D:74:AF:77:3D:8C:44:45:CD:08
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer:       /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial:       018F87ED8F7C477011435F8D81BDF432FD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number:          1062
Signing time:             Fri 17 May 2024 19:00:43 +0000
Manifest this update:     Fri 17 May 2024 19:00:43 +0000
Manifest next update:     Sat 18 May 2024 19:00:43 +0000
Files and hashes:         1: 8vXyoh2kRETDr7JPB0gRccIqx50.roa (hash: cbBQKTOtpk2Mki9NVKViV8lyB2YMRbyDs09dUDbbZsM=)
                          2: FUrTB7OhKzcwlHyitEUMM-VFANs.roa (hash: IFdOowPouAFNaVsrTBKBHmVUDBrmgNPQGOJJ3xzx2LI=)
                          3: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: Zy8ZMAFns5vdrIdMMMQ8uj/0x0z4UhPYy5EnI+/fCzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:8f:7c:47:70:11:43:5f:8d:81:bd:f4:32:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
        Validity
            Not Before: May 17 19:00:43 2024 GMT
            Not After : May 18 19:00:43 2024 GMT
        Subject: CN=0690b6c112bc33ed52d23d74af773d8c4445cd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:3d:a1:59:d5:66:87:55:be:ce:f5:0c:b7:
                    5d:d0:7a:1e:30:2b:40:7b:31:2d:28:3a:46:1d:58:
                    25:61:68:19:b6:25:54:51:66:69:aa:21:e2:99:6a:
                    a7:1a:62:8f:6b:8b:05:85:bd:60:0e:a2:b7:40:2a:
                    7a:e0:c0:15:9d:b3:4f:3f:1f:97:88:6d:e6:0a:1a:
                    13:ab:5d:5a:47:70:d2:af:6a:80:70:c7:c5:dd:ea:
                    d7:d6:e5:e5:1f:37:95:1f:7c:37:ce:51:11:c9:ba:
                    f8:64:82:fa:c7:b9:f6:97:d4:81:f8:05:68:73:bd:
                    e7:e4:ba:ab:77:56:70:c5:d1:6c:b6:9f:f4:9c:1b:
                    18:d5:fe:67:66:40:81:0d:ca:15:13:a9:24:cb:fd:
                    eb:77:60:c1:a3:fc:8d:60:bf:28:12:bc:86:ab:6d:
                    92:90:67:31:cd:2a:8e:71:69:14:b9:e8:3e:41:34:
                    a8:6a:97:fd:8f:43:40:71:98:90:cc:ec:3c:9a:8d:
                    7a:9e:e5:c4:f7:27:2f:01:60:5d:63:71:89:a5:48:
                    51:08:f0:4c:57:34:56:66:02:82:38:98:d2:b8:4c:
                    c1:cf:ef:0a:4f:b2:93:29:41:3c:d8:0d:92:69:4a:
                    6e:7c:d3:b3:3c:12:fa:fe:7e:39:75:0a:7b:f1:b4:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:B6:C1:12:BC:33:ED:52:D2:3D:74:AF:77:3D:8C:44:45:CD:08
            X509v3 Authority Key Identifier:
                keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:4d:f4:ae:63:de:6b:c6:37:7c:d5:13:c1:95:89:3b:a4:
         46:92:06:ec:da:1b:bd:54:3f:71:68:75:00:22:8a:9d:9a:71:
         f4:16:f9:b3:a7:65:21:48:4a:ac:2b:ad:bb:60:fa:28:bb:e8:
         81:35:f1:3c:cf:ff:25:f7:ec:eb:46:fe:17:e6:af:c8:1a:70:
         c0:b4:9a:e4:64:28:61:a0:ff:d4:a9:c9:58:8c:55:8c:ec:80:
         6e:b2:05:d1:b2:ab:02:4e:bb:53:f0:b6:0e:78:b1:b0:aa:dd:
         34:b7:79:37:1f:a5:a9:da:c3:34:b0:42:ee:2e:3f:d2:44:78:
         b3:b0:87:40:4c:65:af:b3:d8:c0:32:0f:71:44:63:80:5e:a6:
         b5:17:ce:55:9c:25:85:d0:c8:6a:f2:e5:45:0b:9b:5c:0a:33:
         4b:71:d9:45:d4:66:bc:f9:eb:18:a5:86:80:11:37:62:b0:63:
         e7:a8:23:1b:97:6d:86:48:6d:f8:3f:f8:11:a1:e6:70:60:b1:
         ae:f6:b3:4a:49:c5:ef:2b:5d:88:89:b5:98:6a:d9:cf:43:4b:
         bf:49:8f:bd:72:5e:d9:3c:f8:aa:89:b6:4f:d2:ef:98:1e:cf:
         ab:58:12:88:25:a4:a6:41:c1:e7:8e:49:a9:83:c0:20:92:e1:
         6d:55:d9:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Y98R3ARQ1+Ngb30Mv1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj
ZWYyMGQwHhcNMjQwNTE3MTkwMDQzWhcNMjQwNTE4MTkwMDQzWjAzMTEwLwYDVQQD
EygwNjkwYjZjMTEyYmMzM2VkNTJkMjNkNzRhZjc3M2Q4YzQ0NDVjZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJs9oVnVZodVvs71DLdd0HoeMCtA
ezEtKDpGHVglYWgZtiVUUWZpqiHimWqnGmKPa4sFhb1gDqK3QCp64MAVnbNPPx+X
iG3mChoTq11aR3DSr2qAcMfF3erX1uXlHzeVH3w3zlERybr4ZIL6x7n2l9SB+AVo
c73n5Lqrd1ZwxdFstp/0nBsY1f5nZkCBDcoVE6kky/3rd2DBo/yNYL8oEryGq22S
kGcxzSqOcWkUueg+QTSoapf9j0NAcZiQzOw8mo16nuXE9ycvAWBdY3GJpUhRCPBM
VzRWZgKCOJjSuEzBz+8KT7KTKUE82A2SaUpufNOzPBL6/n45dQp78bR8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaQtsESvDPtUtI9dK93PYxERc0IMB8GA1UdIwQY
MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt
OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3
LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApo1N9K5j
3mvGN3zVE8GViTukRpIG7NobvVQ/cWh1ACKKnZpx9Bb5s6dlIUhKrCutu2D6KLvo
gTXxPM//Jffs60b+F+avyBpwwLSa5GQoYaD/1KnJWIxVjOyAbrIF0bKrAk67U/C2
DnixsKrdNLd5Nx+lqdrDNLBC7i4/0kR4s7CHQExlr7PYwDIPcURjgF6mtRfOVZwl
hdDIavLlRQubXAozS3HZRdRmvPnrGKWGgBE3YrBj56gjG5dthkht+D/4EaHmcGCx
rvazSknF7ytdiIm1mGrZz0NLv0mPvXJe2Tz4qom2T9LvmB7Pq1gSiCWkpkHB545J
qYPAIJLhbVXZhg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:51 2024 by rpki-client on console-ams.rpki-client.org