Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
File:                     KQhfxTTBPgiC4mColfPPDFVD7wg.mft (raw, json)
Hash identifier:          ra7REZVw797Yf5GBx4LMUbf2rugR8tero9/vTGjB8Qg=
Subject key identifier:   29:82:27:27:6C:44:B8:A4:D3:9B:61:2D:B9:81:6A:88:EE:D7:28:AA
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Certificate issuer:       /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial:       018F836BD54611CE071C7FA59F363CDB79D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
Manifest number:          EB
Signing time:             Thu 16 May 2024 22:00:33 +0000
Manifest this update:     Thu 16 May 2024 22:00:33 +0000
Manifest next update:     Fri 17 May 2024 22:00:33 +0000
Files and hashes:         1: 6GMizNGhNcGUZM0yDmczb8U6Alw.roa (hash: my5+NCG5luIW3EV5szm2saO5LS9pJKdFlGyvkoNY8IU=)
                          2: KQhfxTTBPgiC4mColfPPDFVD7wg.crl (hash: kwhOHZKwzNncKRoijwNqeEIiqOJsoohpwqMwlagQh2k=)
                          3: mrAggarOK13LGKNhPZXlj26tMrU.roa (hash: W4ZhbDDea2hgg19DP2UBWdDllThxJ4Giw2Vxs/ZdKzs=)
                          4: tUL9e54uvY4D8yoqAKIRlcsugxw.roa (hash: CxkLKMXSR2h2TXdW5qPctHlueh2vk9YLgD30b1wz3w0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6b:d5:46:11:ce:07:1c:7f:a5:9f:36:3c:db:79:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
        Validity
            Not Before: May 16 22:00:33 2024 GMT
            Not After : May 17 22:00:33 2024 GMT
        Subject: CN=298227276c44b8a4d39b612db9816a88eed728aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:c8:26:b2:cf:00:1a:a0:5b:8d:8a:1d:de:
                    65:83:8b:36:7c:73:08:87:58:25:c3:86:64:59:6d:
                    89:d8:46:16:77:e9:b9:78:58:29:5d:c6:b1:b9:b1:
                    f9:7f:7b:c5:df:f8:d1:28:ac:28:70:68:91:b3:24:
                    f9:03:0b:a0:01:33:b3:d1:4f:bb:1c:37:70:a1:91:
                    6e:26:10:cd:bf:88:0f:9e:ed:fb:c9:0e:67:cb:24:
                    8d:d1:af:00:ca:2f:fe:8d:7b:4f:34:0c:c0:cc:90:
                    7f:ba:43:eb:c2:29:a9:78:a0:b9:60:0b:6b:9b:32:
                    a1:f9:4e:69:f1:ac:57:32:8b:5e:c1:30:6a:06:bc:
                    c9:73:cb:a8:41:62:6c:b4:76:0c:64:4b:04:ca:dc:
                    a1:6e:2c:af:5d:82:14:35:12:45:fc:16:42:cb:1c:
                    26:e2:0d:33:e0:17:e7:b2:50:b9:48:f7:70:cb:fb:
                    88:dc:e1:0f:a3:fd:d0:0e:d4:30:57:d2:63:be:fb:
                    75:f3:17:ff:2f:de:e8:db:43:8f:ef:29:0f:51:35:
                    87:c1:6c:8a:08:10:bc:a2:e3:f6:ff:b3:e5:3c:30:
                    45:90:ba:2a:29:7f:4d:81:37:41:f6:49:8b:ba:1d:
                    26:99:39:e1:e6:c7:fa:ec:91:3b:80:c7:af:e4:62:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:27:27:6C:44:B8:A4:D3:9B:61:2D:B9:81:6A:88:EE:D7:28:AA
            X509v3 Authority Key Identifier:
                keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:20:57:6c:cb:a0:2b:13:2e:f8:a8:c1:c2:fd:48:e8:6f:cd:
         42:1f:7d:5b:61:d7:8b:50:42:bd:c9:f3:cc:a5:7b:09:31:63:
         e8:68:27:7f:95:68:67:11:07:76:f1:73:ee:24:f7:b7:a3:eb:
         e9:2d:36:45:10:34:3c:f8:2a:35:cc:0f:81:c3:89:74:08:26:
         38:7d:dc:29:52:33:1f:ef:d8:63:03:0b:36:13:34:ee:cf:15:
         c1:3e:86:56:16:0d:b8:5d:96:04:59:53:8e:2f:8b:f6:3f:ac:
         12:e0:1a:d3:b2:af:e7:75:dd:93:a2:0a:f0:30:6b:ba:65:e2:
         a5:eb:5b:c4:95:57:2e:ec:2a:af:cb:37:92:19:d9:a7:1c:fc:
         e8:65:f8:42:7a:44:6b:0c:5f:aa:72:e4:a6:48:2c:7f:d5:74:
         9d:fa:ed:4b:e3:04:b3:39:0c:53:8c:40:39:0c:2b:c0:67:ad:
         ca:a0:fc:93:f2:f5:76:f5:e3:48:16:e0:e5:3a:96:15:d7:5c:
         1c:61:ed:0a:0e:62:78:e3:13:a6:03:2c:74:9b:99:55:39:cb:
         87:47:f6:38:8e:c1:c2:c5:4d:64:06:b9:55:b7:ca:cf:69:97:
         0d:37:a8:62:04:43:bf:cf:25:41:01:4e:7a:0f:ec:36:31:05:
         1c:81:87:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Da9VGEc4HHH+lnzY823nUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDg1ZmM1MzRjMTNlMDg4MmUyNjBhODk1ZjNjZjBjNTU0
M2VmMDgwHhcNMjQwNTE2MjIwMDMzWhcNMjQwNTE3MjIwMDMzWjAzMTEwLwYDVQQD
EygyOTgyMjcyNzZjNDRiOGE0ZDM5YjYxMmRiOTgxNmE4OGVlZDcyOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRXIJrLPABqgW42KHd5lg4s2fHMI
h1glw4ZkWW2J2EYWd+m5eFgpXcaxubH5f3vF3/jRKKwocGiRsyT5AwugATOz0U+7
HDdwoZFuJhDNv4gPnu37yQ5nyySN0a8Ayi/+jXtPNAzAzJB/ukPrwimpeKC5YAtr
mzKh+U5p8axXMotewTBqBrzJc8uoQWJstHYMZEsEytyhbiyvXYIUNRJF/BZCyxwm
4g0z4BfnslC5SPdwy/uI3OEPo/3QDtQwV9Jjvvt18xf/L97o20OP7ykPUTWHwWyK
CBC8ouP2/7PlPDBFkLoqKX9NgTdB9kmLuh0mmTnh5sf67JE7gMev5GJOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmCJydsRLik05thLbmBaoju1yiqMB8GA1UdIwQY
MBaAFCkIX8U0wT4IguJgqJXzzwxVQ+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NmQ0OTAtMDE5Ni00NWFjLTgzZWIt
YzMyOTcxMjllNGQzLzEvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NmQ0OTAtMDE5Ni00NWFjLTgzZWItYzMyOTcxMjllNGQz
LzEvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCBXbMug
KxMu+KjBwv1I6G/NQh99W2HXi1BCvcnzzKV7CTFj6Ggnf5VoZxEHdvFz7iT3t6Pr
6S02RRA0PPgqNcwPgcOJdAgmOH3cKVIzH+/YYwMLNhM07s8VwT6GVhYNuF2WBFlT
ji+L9j+sEuAa07Kv53Xdk6IK8DBrumXipetbxJVXLuwqr8s3khnZpxz86GX4QnpE
awxfqnLkpkgsf9V0nfrtS+MEszkMU4xAOQwrwGetyqD8k/L1dvXjSBbg5TqWFddc
HGHtCg5ieOMTpgMsdJuZVTnLh0f2OI7BwsVNZAa5VbfKz2mXDTeoYgRDv88lQQFO
eg/sNjEFHIGHow==
-----END CERTIFICATE-----
Generated at Thu May 16 22:43:16 2024 by rpki-client on console-ams.rpki-client.org