Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
File:                     a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft (raw, json)
Hash identifier:          jOONCHhgb4/cK0OshnsYsVeNs0ViRYpiQzLhW+48DY8=
Subject key identifier:   22:4B:CF:40:95:87:13:4F:99:31:7C:DE:DA:62:6C:A0:CD:88:29:88
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Certificate issuer:       /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial:       018F89391AA54F998846064ED99C1F7CB8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
Manifest number:          02F7
Signing time:             Sat 18 May 2024 01:02:52 +0000
Manifest this update:     Sat 18 May 2024 01:02:52 +0000
Manifest next update:     Sun 19 May 2024 01:02:52 +0000
Files and hashes:         1: K92fr4gLVGxWcDzSsjttkOy897k.roa (hash: kfAgu2y4Gdsxa9kgSX67tHq+3bNRudNMQuLhTQZ2dhI=)
                          2: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl (hash: 9E52mFjTk6BMUvQ5lLcOzj5gWlbcy4ePulyXj+Lf1u4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:1a:a5:4f:99:88:46:06:4e:d9:9c:1f:7c:b8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
        Validity
            Not Before: May 18 01:02:52 2024 GMT
            Not After : May 19 01:02:52 2024 GMT
        Subject: CN=224bcf409587134f99317cdeda626ca0cd882988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:1c:13:4d:a2:a6:e5:dd:28:2b:d3:1d:0a:
                    9b:cc:2c:4a:d5:97:ba:e5:24:6c:c9:28:a7:d9:25:
                    77:8b:27:81:d5:d7:07:02:35:2a:c0:7c:b1:d1:77:
                    c7:59:b7:12:fa:4b:d2:05:f8:df:c1:80:e3:4f:62:
                    37:77:73:cc:f3:a3:af:31:21:e8:26:d2:b9:40:b8:
                    f8:88:96:9f:a0:b8:2a:9f:85:91:63:35:3f:ae:78:
                    5b:d3:1d:10:74:27:2e:56:13:57:ae:04:43:d7:d4:
                    41:89:a3:3c:60:59:c0:e5:5f:bd:9c:42:3b:85:d7:
                    0c:88:e7:3f:10:48:8b:09:be:f2:9e:2b:d1:d2:76:
                    fa:f1:0a:19:85:ea:6c:8f:07:ac:8a:68:16:49:3c:
                    c4:d1:d0:9c:6c:e3:46:71:68:8d:9a:bb:c5:25:4a:
                    3b:0f:43:0d:6b:e5:99:e5:c9:61:8a:58:6b:a3:11:
                    10:01:06:d6:94:58:06:33:1d:d9:bb:9e:39:8d:d8:
                    d7:be:ce:03:54:94:07:ef:2e:2d:7c:e5:b7:e2:4b:
                    e4:e9:be:4d:d5:39:63:49:dd:98:62:22:25:1e:04:
                    d6:38:5c:3b:6c:1d:6a:8c:bb:9c:b1:a3:2d:b7:27:
                    d7:c4:3c:0d:78:e9:8b:0c:a3:8b:e0:38:d3:3c:93:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4B:CF:40:95:87:13:4F:99:31:7C:DE:DA:62:6C:A0:CD:88:29:88
            X509v3 Authority Key Identifier:
                keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:08:df:df:3e:1f:a2:60:24:98:4e:19:d4:e6:4e:54:c3:
         7d:1e:5f:fa:c4:88:50:d0:1f:0f:ae:02:29:c7:ce:dd:31:0b:
         58:da:2b:b0:85:1a:9b:e1:89:2e:ee:4b:55:60:af:cf:b5:eb:
         39:97:3d:20:05:08:40:f9:8f:2f:ec:0d:e9:1a:bc:80:68:6a:
         11:ef:b7:05:a6:b0:28:90:6f:cf:b2:b8:b3:a7:31:40:e3:f3:
         32:c8:36:82:00:27:6b:11:13:1e:b0:bb:2c:a7:89:e5:7f:a1:
         8f:3b:58:96:34:52:f5:43:57:b9:9d:d4:e5:d9:ea:d7:8f:63:
         a5:33:0e:e8:79:a7:7c:d6:54:cf:a4:e4:df:c8:74:3a:bc:8c:
         4e:5d:d4:ad:98:7f:82:6a:44:ef:f1:39:a4:8a:0c:e4:86:a1:
         e3:99:78:7c:1e:11:8d:7b:5d:66:5e:fa:5a:4f:a9:69:2d:68:
         5f:66:d8:e3:fc:53:5c:75:71:ab:b7:12:5c:b6:7c:45:8f:6f:
         a1:67:73:c8:0e:f0:a5:b4:00:86:32:16:4b:7a:bf:d3:a9:e9:
         7a:e9:46:92:90:e1:3c:a0:69:61:5c:37:06:c5:51:1a:64:5e:
         16:3b:90:00:9d:11:44:7f:d3:d7:01:02:a6:bb:9a:eb:82:8e:
         2a:07:c0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JORqlT5mIRgZO2ZwffLjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDFhOTViOWI5NDFkMzQyZDA3YjhhMTdkN2Q4MzVkZTEy
YzhiZjYwHhcNMjQwNTE4MDEwMjUyWhcNMjQwNTE5MDEwMjUyWjAzMTEwLwYDVQQD
EygyMjRiY2Y0MDk1ODcxMzRmOTkzMTdjZGVkYTYyNmNhMGNkODgyOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTIcE02ipuXdKCvTHQqbzCxK1Ze6
5SRsySin2SV3iyeB1dcHAjUqwHyx0XfHWbcS+kvSBfjfwYDjT2I3d3PM86OvMSHo
JtK5QLj4iJafoLgqn4WRYzU/rnhb0x0QdCcuVhNXrgRD19RBiaM8YFnA5V+9nEI7
hdcMiOc/EEiLCb7ynivR0nb68QoZhepsjwesimgWSTzE0dCcbONGcWiNmrvFJUo7
D0MNa+WZ5clhilhroxEQAQbWlFgGMx3Zu545jdjXvs4DVJQH7y4tfOW34kvk6b5N
1TljSd2YYiIlHgTWOFw7bB1qjLucsaMttyfXxDwNeOmLDKOL4DjTPJMrewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJLz0CVhxNPmTF83tpibKDNiCmIMB8GA1UdIwQY
MBaAFGtBqVublB00LQe4oX19g13hLIv2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBHcFc1dVVIVFF0QjdpaGZYMkRYZUVzaV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZTgxMTAtYjM3ZS00NDFhLTk5OGYt
OTAxNGY3MmUxYTM2LzEvYTBHcFc1dVVIVFF0QjdpaGZYMkRYZUVzaV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ZTgxMTAtYjM3ZS00NDFhLTk5OGYtOTAxNGY3MmUxYTM2
LzEvYTBHcFc1dVVIVFF0QjdpaGZYMkRYZUVzaV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi4I398+
H6JgJJhOGdTmTlTDfR5f+sSIUNAfD64CKcfO3TELWNorsIUam+GJLu5LVWCvz7Xr
OZc9IAUIQPmPL+wN6Rq8gGhqEe+3BaawKJBvz7K4s6cxQOPzMsg2ggAnaxETHrC7
LKeJ5X+hjztYljRS9UNXuZ3U5dnq149jpTMO6HmnfNZUz6Tk38h0OryMTl3UrZh/
gmpE7/E5pIoM5Iah45l4fB4RjXtdZl76Wk+paS1oX2bY4/xTXHVxq7cSXLZ8RY9v
oWdzyA7wpbQAhjIWS3q/06npeulGkpDhPKBpYVw3BsVRGmReFjuQAJ0RRH/T1wEC
prua64KOKgfA+Q==
-----END CERTIFICATE-----
Generated at Sat May 18 02:14:18 2024 by rpki-client on console-ams.rpki-client.org