Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File:                     _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier:          PLyOrVGenXBNdeZy6AFfVAPSjEplCKQOdpK0H4m72n4=
Subject key identifier:   B7:A1:3E:A4:F0:62:5F:23:6F:89:E7:C6:F5:25:E9:54:B4:16:DD:E7
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer:       /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial:       018F6865144D47F00C190C591E8776ACB335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number:          01C1
Signing time:             Sat 11 May 2024 16:03:25 +0000
Manifest this update:     Sat 11 May 2024 16:03:25 +0000
Manifest next update:     Sun 12 May 2024 16:03:25 +0000
Files and hashes:         1: 01yhuJM8jGz6iBinHte0488RoYU.roa (hash: YCEKkwfUnyCF8/rlMbDE7mP6O6byMMvSa5iNPa0mRYw=)
                          2: 2r9ndtrebcHANzmBSt46YsZ_hNQ.roa (hash: mp/JudskkUJFVTcBxuTtE4uWN7xV7HUGWO9OJcZlGSw=)
                          3: Q1E30Sp-PHTn2Qe5dVfmq-XnmuA.roa (hash: /kTd2sdECiCHgJc5kND1g2NcuDfNlYyHa1czHHdeMe4=)
                          4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 9vrer8OxsFUkVdCDZS4bupRwNbKJi3lQxKngbJZGSro=)
                          5: _q-J7vefwGMNLQr7mLDVHbJKTUI.roa (hash: nVMQqstghval13oFxLjdbkXkHrA4zKqakGB9IpFcllc=)
                          6: w09migIyqOCf0iTQAzd2MGTqRpE.roa (hash: LAIePTexVq6zov2S2qxswbcdyGpSisGWl8ODCeW+0cM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:68:65:14:4d:47:f0:0c:19:0c:59:1e:87:76:ac:b3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
        Validity
            Not Before: May 11 16:03:25 2024 GMT
            Not After : May 12 16:03:25 2024 GMT
        Subject: CN=b7a13ea4f0625f236f89e7c6f525e954b416dde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:ea:9d:3d:e6:db:9c:e3:db:89:bd:8a:4e:
                    eb:fe:6a:f5:96:e4:2f:76:79:d0:58:55:82:45:d0:
                    08:d1:67:e4:75:1d:bc:62:79:eb:86:f4:6c:b0:e6:
                    22:84:34:97:10:56:4e:47:7c:ee:74:c1:05:b4:50:
                    63:be:05:46:f4:d7:fd:41:18:03:c7:f9:be:46:8b:
                    05:8d:64:85:5a:9c:6e:a8:30:35:39:fd:17:73:12:
                    f1:0a:3c:7f:96:cd:82:e2:bd:2a:07:2c:43:27:2d:
                    c0:ae:2e:67:50:b2:c8:9c:d5:d7:d3:4d:7f:26:9d:
                    21:a9:82:7d:8f:49:92:d2:e2:26:b9:85:59:4b:15:
                    5d:5c:b7:2a:ec:23:f0:8f:36:e9:65:fd:0c:f6:02:
                    b7:54:bc:7b:7f:2a:27:6d:76:ee:13:ac:23:18:c7:
                    79:49:d3:47:68:57:48:b0:fd:e6:64:10:45:a0:e9:
                    57:08:52:0b:eb:54:6b:f7:e4:90:65:0f:53:3a:0c:
                    85:bc:84:55:3b:7f:b1:a9:d0:25:78:59:4d:35:36:
                    33:f6:a3:2f:7e:d2:9d:58:93:c7:e8:f7:f7:e8:c3:
                    8e:7d:99:3a:b3:df:ef:4d:7b:2d:ee:1c:8a:c1:b9:
                    99:89:fb:6b:8d:53:d8:6d:01:2c:ab:22:57:56:af:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A1:3E:A4:F0:62:5F:23:6F:89:E7:C6:F5:25:E9:54:B4:16:DD:E7
            X509v3 Authority Key Identifier:
                keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:d7:6d:f5:7d:67:71:54:de:b1:4e:12:8e:83:62:d2:77:
         51:8d:fd:2b:b6:ae:44:0b:ac:24:f9:d1:09:2b:6f:08:4a:18:
         44:32:f7:7a:a3:43:14:9f:d7:3b:8f:05:28:04:77:a7:87:bc:
         af:27:6a:56:b0:17:5e:a3:0c:d1:73:49:da:a2:b1:58:f0:cf:
         02:ee:0a:48:09:34:5b:2b:f0:06:38:7d:af:42:a0:e9:5f:e8:
         86:99:7b:90:25:c6:b0:ac:e4:f9:5b:e7:88:87:68:af:db:41:
         b5:5b:9a:86:50:47:14:7a:88:01:56:35:44:b2:4a:c1:50:36:
         8f:7c:f2:0b:9f:fb:fe:05:5e:03:f2:10:0f:62:a3:d4:f0:f9:
         06:1f:f7:10:87:99:96:9e:d9:3e:8b:61:1c:05:24:35:be:bf:
         ff:af:88:8e:4c:aa:da:0b:1d:a9:6e:29:cc:e1:1a:db:68:ea:
         0d:b6:99:ee:aa:65:77:46:b8:aa:7f:37:49:b1:de:4d:84:6a:
         25:74:62:17:69:88:b8:43:55:92:c5:b6:8b:dc:ad:59:45:f5:
         d3:05:5d:60:f6:6d:82:5b:54:ea:25:02:ab:93:5c:9b:3f:6f:
         43:01:ac:f4:3d:5e:a8:78:ed:41:02:31:fc:39:60:f2:2d:cc:
         69:c3:ae:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9oZRRNR/AMGQxZHod2rLM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjQwNTExMTYwMzI1WhcNMjQwNTEyMTYwMzI1WjAzMTEwLwYDVQQD
EyhiN2ExM2VhNGYwNjI1ZjIzNmY4OWU3YzZmNTI1ZTk1NGI0MTZkZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHPqnT3m25zj24m9ik7r/mr1luQv
dnnQWFWCRdAI0WfkdR28YnnrhvRssOYihDSXEFZOR3zudMEFtFBjvgVG9Nf9QRgD
x/m+RosFjWSFWpxuqDA1Of0XcxLxCjx/ls2C4r0qByxDJy3Ari5nULLInNXX001/
Jp0hqYJ9j0mS0uImuYVZSxVdXLcq7CPwjzbpZf0M9gK3VLx7fyonbXbuE6wjGMd5
SdNHaFdIsP3mZBBFoOlXCFIL61Rr9+SQZQ9TOgyFvIRVO3+xqdAleFlNNTYz9qMv
ftKdWJPH6Pf36MOOfZk6s9/vTXst7hyKwbmZiftrjVPYbQEsqyJXVq89IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLehPqTwYl8jb4nnxvUl6VS0Ft3nMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAievXbfV9
Z3FU3rFOEo6DYtJ3UY39K7auRAusJPnRCStvCEoYRDL3eqNDFJ/XO48FKAR3p4e8
rydqVrAXXqMM0XNJ2qKxWPDPAu4KSAk0WyvwBjh9r0Kg6V/ohpl7kCXGsKzk+Vvn
iIdor9tBtVuahlBHFHqIAVY1RLJKwVA2j3zyC5/7/gVeA/IQD2Kj1PD5Bh/3EIeZ
lp7ZPothHAUkNb6//6+Ijkyq2gsdqW4pzOEa22jqDbaZ7qpld0a4qn83SbHeTYRq
JXRiF2mIuENVksW2i9ytWUX10wVdYPZtgltU6iUCq5Ncmz9vQwGs9D1eqHjtQQIx
/Dlg8i3MacOuYQ==
-----END CERTIFICATE-----
Generated at Sat May 11 19:45:12 2024 by rpki-client on console-ams.rpki-client.org