Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
File:                     rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft (raw, json)
Hash identifier:          uCqxKOtch+kCVqmMncIL2w2RC7NNQEOCs6DiIoBBYG8=
Subject key identifier:   DA:39:44:85:45:FB:9C:19:78:66:A5:9B:17:9C:D9:16:57:52:F7:B0
Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Certificate issuer:       /CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Certificate serial:       018F87B62BC6B4F568FFA9D9228E2B6269A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
Manifest number:          0E7A
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: b5B4w1b2xL25CByDFdL1VZjHb1o.roa (hash: RO9L54RB4Vz32uVQ2Z8Ibg+42Gw260npdHKcKdP8vMs=)
                          2: rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl (hash: xd2zpPNmuIl+KRQn+LBCR6ukffF33KGeRL5FtTko4lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:2b:c6:b4:f5:68:ff:a9:d9:22:8e:2b:62:69:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=da39448545fb9c197866a59b179cd9165752f7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:da:8e:a6:01:ac:cf:c5:45:63:2a:ab:60:
                    c7:e8:26:82:6a:63:98:16:1a:f8:18:f1:c8:ec:08:
                    d7:ad:e1:58:b0:3a:a9:82:db:90:08:e1:ae:df:6a:
                    ce:90:7d:46:de:d0:24:34:42:4e:3c:9e:4b:02:53:
                    b5:bb:18:8c:46:02:7d:68:7e:e3:14:20:98:65:47:
                    99:03:70:bb:cb:4d:d6:d2:5e:7c:62:a7:2f:50:64:
                    62:0b:d0:a3:f4:db:51:99:cc:8c:78:c4:33:6f:cd:
                    e7:24:c9:24:54:f9:ac:32:f4:43:f5:9f:12:3b:cb:
                    d2:38:5a:ed:a1:86:88:b4:66:40:9b:83:9e:be:a9:
                    89:d3:f9:03:a6:3c:d6:b4:f7:d4:a5:4c:d1:b2:3e:
                    a9:2d:bb:fb:7e:7a:76:91:db:5a:06:4f:13:61:00:
                    b8:ff:43:f3:d7:42:7d:8b:30:b5:59:69:60:78:a8:
                    a1:fe:21:fd:c6:aa:3d:28:35:c7:f3:f4:7a:b2:cf:
                    eb:6c:3b:9f:0d:86:25:a8:bc:87:8e:85:0d:3d:c4:
                    75:05:63:d8:51:f2:da:e6:01:cd:70:29:77:fb:0e:
                    1d:ae:50:09:bd:96:be:71:e9:2d:00:db:de:c6:54:
                    bd:7b:e8:b8:6d:88:d2:91:04:94:4c:04:25:2f:ad:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:39:44:85:45:FB:9C:19:78:66:A5:9B:17:9C:D9:16:57:52:F7:B0
            X509v3 Authority Key Identifier:
                keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:0d:23:06:97:53:5a:eb:1c:b4:97:cd:f4:23:b7:c4:56:
         b0:40:86:e3:e9:d1:2d:76:9b:9d:0c:57:3a:fb:1b:1f:d3:1e:
         2b:1d:e9:e8:67:0c:ae:17:24:17:af:02:e0:f2:4c:23:0f:44:
         aa:ec:b3:94:88:da:21:39:91:fa:05:f4:e2:a9:2e:9e:33:e2:
         00:b7:9a:7d:09:a8:cf:40:19:54:5d:10:18:27:28:8b:5c:d8:
         36:48:1b:84:5c:c0:7b:3b:6a:84:58:6c:56:f2:dc:f0:05:83:
         78:f9:46:f4:fa:6b:cf:01:a7:97:29:56:7c:ee:83:a5:6b:34:
         87:a7:b4:33:18:89:49:50:36:05:95:34:e2:e9:98:71:d4:01:
         c5:d3:83:c1:6d:87:cc:8d:7d:bb:89:27:78:eb:66:42:74:27:
         19:4a:6b:04:c6:54:90:be:28:1e:42:2e:8f:4b:cf:5a:60:22:
         38:4c:27:fe:a9:1e:c6:e8:82:ff:67:b2:ff:ed:21:91:5f:29:
         dc:2d:a5:ea:86:6e:b2:0a:73:8d:e6:08:a0:db:dd:9b:91:5d:
         fa:90:0a:c7:25:86:94:12:01:3c:f3:e2:a0:c5:2d:1d:36:12:
         7a:b9:07:a4:24:c5:06:52:3e:ba:c3:01:1a:1f:73:a7:bb:ff:
         31:4e:cd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtivGtPVo/6nZIo4rYmmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZjIwZWZjMGFlNDAxM2U2ZjQ4NjdjMTVmMjM3N2IyMzUw
OTViODYwHhcNMjQwNTE3MTgwMDEzWhcNMjQwNTE4MTgwMDEzWjAzMTEwLwYDVQQD
EyhkYTM5NDQ4NTQ1ZmI5YzE5Nzg2NmE1OWIxNzljZDkxNjU3NTJmN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6najqYBrM/FRWMqq2DH6CaCamOY
Fhr4GPHI7AjXreFYsDqpgtuQCOGu32rOkH1G3tAkNEJOPJ5LAlO1uxiMRgJ9aH7j
FCCYZUeZA3C7y03W0l58YqcvUGRiC9Cj9NtRmcyMeMQzb83nJMkkVPmsMvRD9Z8S
O8vSOFrtoYaItGZAm4OevqmJ0/kDpjzWtPfUpUzRsj6pLbv7fnp2kdtaBk8TYQC4
/0Pz10J9izC1WWlgeKih/iH9xqo9KDXH8/R6ss/rbDufDYYlqLyHjoUNPcR1BWPY
UfLa5gHNcCl3+w4drlAJvZa+cektANvexlS9e+i4bYjSkQSUTAQlL62rLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo5RIVF+5wZeGalmxec2RZXUvewMB8GA1UdIwQY
MBaAFK7yDvwK5AE+b0hnwV8jd7I1CVuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xMzZmYWYtY2YyMC00MjY1LTk4YTMt
ZDliODJkOWVjYzQ1LzEvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xMzZmYWYtY2YyMC00MjY1LTk4YTMtZDliODJkOWVjYzQ1
LzEvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnINIwaX
U1rrHLSXzfQjt8RWsECG4+nRLXabnQxXOvsbH9MeKx3p6GcMrhckF68C4PJMIw9E
quyzlIjaITmR+gX04qkunjPiALeafQmoz0AZVF0QGCcoi1zYNkgbhFzAeztqhFhs
VvLc8AWDePlG9PprzwGnlylWfO6DpWs0h6e0MxiJSVA2BZU04umYcdQBxdODwW2H
zI19u4kneOtmQnQnGUprBMZUkL4oHkIuj0vPWmAiOEwn/qkexuiC/2ey/+0hkV8p
3C2l6oZusgpzjeYIoNvdm5Fd+pAKxyWGlBIBPPPioMUtHTYSerkHpCTFBlI+usMB
Gh9zp7v/MU7NSA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:15:05 2024 by rpki-client on console-fra.rpki-client.org