Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File:                     tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier:          P59uEbszj+JoBVhc0Re9IJaTxQU1FtdfYhkoDZFhV5g=
Subject key identifier:   9B:39:97:C3:F7:94:CF:A0:85:AB:68:C8:17:91:05:B8:D5:19:D0:57
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer:       /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial:       018F874A5C98D77CB240A458AA076A6034E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number:          0E4E
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: IZoznliVtjVIYkEcgrXIXJKiizY.roa (hash: yHcwTtYvKUCq71UZTrraFcP1X2JvhkVWNBqzF0x1JwY=)
                          2: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: zd5/LZZtDcMBSl33yn15HmNOE5ohmgJ/5m1h2JXp1bo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5c:98:d7:7c:b2:40:a4:58:aa:07:6a:60:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=9b3997c3f794cfa085ab68c8179105b8d519d057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:5b:17:07:d5:f6:48:83:e8:4e:99:91:d0:
                    00:b4:0e:15:ab:aa:d9:45:8a:ae:84:15:bd:13:75:
                    89:cf:25:3b:90:aa:07:65:42:ee:85:f7:10:54:34:
                    5e:33:ae:96:60:70:52:e2:56:29:16:3e:fc:4a:14:
                    da:98:6f:c4:c7:da:66:cf:3b:b8:4e:28:b6:70:8e:
                    c4:c4:78:d5:f0:9b:45:a8:99:0e:4a:60:ff:e7:01:
                    d4:c2:7a:83:c8:5e:15:25:5c:01:b2:db:41:20:8b:
                    59:28:b0:4c:bf:76:f9:1a:01:1d:6c:5c:c2:66:21:
                    c8:9c:a2:33:49:32:46:ca:d5:46:42:18:a6:04:3f:
                    e4:a3:33:eb:f3:7c:b3:d6:64:77:a5:71:97:6d:28:
                    09:fd:e2:0d:07:da:18:a7:eb:6e:72:48:2c:15:9f:
                    1b:41:72:e8:13:af:3b:d7:8e:a3:93:eb:97:bf:20:
                    d8:06:ab:5a:b6:40:df:52:59:30:c2:55:9a:d3:ac:
                    92:9e:6d:60:98:4c:05:65:b2:a3:10:19:86:6a:97:
                    6d:98:43:60:fc:d5:62:74:87:c3:23:ea:04:f5:18:
                    65:30:71:7e:5b:b9:93:49:6b:f5:98:d0:16:31:98:
                    1c:f3:6e:55:2a:7e:1c:0a:d6:f7:24:a6:1c:85:8a:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:39:97:C3:F7:94:CF:A0:85:AB:68:C8:17:91:05:B8:D5:19:D0:57
            X509v3 Authority Key Identifier:
                keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3b:e9:0c:54:89:5a:4c:b0:5b:10:fa:88:f2:b2:c3:ce:69:
         18:5c:a7:6c:17:04:2a:61:1a:cb:70:16:9e:ce:1e:0c:3c:e6:
         0f:05:47:e8:18:fb:9b:e1:ec:f7:79:79:a4:b8:fc:1e:36:a5:
         83:a7:27:10:48:4a:48:da:11:8e:d8:db:0b:08:32:54:cf:b6:
         83:4e:28:9d:19:dc:8b:d8:fa:35:9f:2c:a2:4b:7e:fd:b0:24:
         94:e4:4e:f7:4b:c4:fd:84:da:cd:b2:7a:93:a2:a2:b2:9e:03:
         f9:88:03:f6:23:4e:62:dd:87:b0:06:0e:28:b7:96:60:61:f3:
         d8:bb:81:09:0f:b6:cd:f0:cc:eb:84:06:b6:7d:1b:fc:d9:44:
         6c:ef:a6:bf:00:97:94:84:dc:a2:2a:7d:bb:3e:65:97:69:6d:
         3a:97:f5:bb:d7:e4:4b:77:f5:87:a4:41:42:c0:b8:56:2d:c3:
         60:93:a3:e8:71:7d:32:09:b3:58:25:d8:08:35:a9:cf:90:b1:
         71:dc:64:1a:5e:72:4d:ae:8e:c0:d0:3a:a7:b8:98:1b:16:0f:
         1a:2e:20:86:3f:17:3c:96:29:92:0f:cb:27:51:2e:4e:e0:17:
         48:c6:8a:62:8d:5d:40:09:ce:0f:03:50:bb:3a:38:16:09:b6:
         6e:37:90:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSlyY13yyQKRYqgdqYDTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl
ZTM5YjUwHhcNMjQwNTE3MTYwMjI4WhcNMjQwNTE4MTYwMjI4WjAzMTEwLwYDVQQD
Eyg5YjM5OTdjM2Y3OTRjZmEwODVhYjY4YzgxNzkxMDViOGQ1MTlkMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZpbFwfV9kiD6E6ZkdAAtA4Vq6rZ
RYquhBW9E3WJzyU7kKoHZULuhfcQVDReM66WYHBS4lYpFj78ShTamG/Ex9pmzzu4
Tii2cI7ExHjV8JtFqJkOSmD/5wHUwnqDyF4VJVwBsttBIItZKLBMv3b5GgEdbFzC
ZiHInKIzSTJGytVGQhimBD/kozPr83yz1mR3pXGXbSgJ/eINB9oYp+tuckgsFZ8b
QXLoE687146jk+uXvyDYBqtatkDfUlkwwlWa06ySnm1gmEwFZbKjEBmGapdtmENg
/NVidIfDI+oE9RhlMHF+W7mTSWv1mNAWMZgc825VKn4cCtb3JKYchYrvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs5l8P3lM+ghatoyBeRBbjVGdBXMB8GA1UdIwQY
MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt
ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl
LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDvpDFSJ
WkywWxD6iPKyw85pGFynbBcEKmEay3AWns4eDDzmDwVH6Bj7m+Hs93l5pLj8Hjal
g6cnEEhKSNoRjtjbCwgyVM+2g04onRnci9j6NZ8sokt+/bAklORO90vE/YTazbJ6
k6Kisp4D+YgD9iNOYt2HsAYOKLeWYGHz2LuBCQ+2zfDM64QGtn0b/NlEbO+mvwCX
lITcoip9uz5ll2ltOpf1u9fkS3f1h6RBQsC4Vi3DYJOj6HF9MgmzWCXYCDWpz5Cx
cdxkGl5yTa6OwNA6p7iYGxYPGi4ghj8XPJYpkg/LJ1EuTuAXSMaKYo1dQAnODwNQ
uzo4Fgm2bjeQFQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:06:10 2024 by rpki-client on console-ams.rpki-client.org