Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File:                     suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier:          v5JxGiOAQW1vEG3spgPgfMr+S9IIS3aVhiU7WVw6mvI=
Subject key identifier:   B0:B2:E0:9D:94:0B:39:FE:BD:1F:9B:E1:FD:66:8F:F7:D6:64:CD:EC
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer:       /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial:       018F96BD1F8FC3505600D9E05105D9C35ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number:          1112
Signing time:             Mon 20 May 2024 16:02:07 +0000
Manifest this update:     Mon 20 May 2024 16:02:07 +0000
Manifest next update:     Tue 21 May 2024 16:02:07 +0000
Files and hashes:         1: sqA98Gx_eDAiYOxmr1xWvf2hXn4.roa (hash: an3jTpLCi3zlLuwqVN0XH6gbhmqCmaOuPXlLwpoET4k=)
                          2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: GzWAqyA9UiAykE65wJeI/v+AB3TJbhPdNgSU1bkqu7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:1f:8f:c3:50:56:00:d9:e0:51:05:d9:c3:5a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
        Validity
            Not Before: May 20 16:02:07 2024 GMT
            Not After : May 21 16:02:07 2024 GMT
        Subject: CN=b0b2e09d940b39febd1f9be1fd668ff7d664cdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:4e:61:27:cd:b0:b6:68:3c:b3:54:79:4a:
                    61:8d:2e:e7:ee:1f:e7:ca:d7:a7:89:9f:d2:6d:77:
                    26:d4:d3:15:3a:eb:3c:62:84:10:01:b7:e2:be:c9:
                    77:0d:cd:01:bf:34:ff:b0:4c:80:dc:59:53:6b:d9:
                    3e:6a:10:f4:69:ce:19:6f:39:c4:c1:86:73:d1:9c:
                    8e:8b:3a:e3:fb:56:6a:ef:3c:d6:b8:2d:a4:26:40:
                    b6:de:8a:15:6c:93:c5:7b:6e:41:e5:c5:6d:79:c0:
                    74:19:e8:7e:35:21:d9:55:7a:04:c6:b2:cf:c6:e4:
                    25:98:07:f7:9c:e6:58:d6:a1:c4:b0:84:39:11:a3:
                    28:cd:1f:ff:bd:e5:a1:bf:ff:61:d3:88:9f:89:83:
                    ce:08:13:dd:92:e4:d1:81:6f:0a:34:bb:62:fb:af:
                    d8:b2:54:57:62:b7:70:ce:fc:e6:8c:d4:91:9a:a2:
                    71:68:6a:fd:be:7d:f5:0c:65:79:0c:04:65:ae:54:
                    b8:fa:ab:9c:3a:ba:17:5b:b1:1e:22:46:7c:55:57:
                    21:2d:b0:5c:ae:19:94:3e:f9:c8:1c:64:7e:99:56:
                    a9:0a:21:bc:44:bf:c5:33:12:89:fe:e7:f3:fc:7d:
                    f3:5a:d2:7d:d3:b9:4d:89:27:27:5b:e6:70:e8:cb:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:E0:9D:94:0B:39:FE:BD:1F:9B:E1:FD:66:8F:F7:D6:64:CD:EC
            X509v3 Authority Key Identifier:
                keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:2f:ff:24:66:79:4a:ee:a4:fd:8c:fa:e8:00:d5:cf:fe:
         08:f4:23:c7:82:ca:6a:fb:b7:e3:57:5b:97:2b:20:68:a4:00:
         0a:ef:a5:39:bc:57:6a:85:df:2b:e7:2b:2c:df:85:93:80:b0:
         5f:3e:07:71:1a:23:48:76:b8:87:f9:54:0a:c3:bf:de:00:a7:
         03:61:a1:f2:ea:c3:8f:ea:1e:42:4b:8e:4e:e8:08:f5:98:8b:
         24:80:c1:6f:72:be:b2:ee:c0:43:93:9c:b2:9a:b9:f7:fc:c2:
         84:c1:49:74:ae:47:3d:8b:d7:ed:8a:8d:96:dc:f0:9c:a8:30:
         3d:1d:41:db:e0:83:f0:4c:71:33:f1:39:11:ff:44:ca:fd:5e:
         ac:f3:21:36:8e:27:19:ae:4c:89:35:58:77:d2:f5:d2:1b:1e:
         53:15:b8:f2:f4:da:ca:ac:5b:a2:f7:54:18:0c:4b:d2:ac:5d:
         1d:3a:27:47:ba:77:2f:4f:00:56:13:ed:31:8d:02:c2:9a:42:
         10:87:e3:28:07:a4:72:87:fd:6c:f9:cb:f8:a4:d0:e9:7a:29:
         0e:d4:a4:7c:a5:23:22:ff:1b:36:fb:8f:f5:27:ea:5c:06:da:
         c9:b7:82:00:99:97:a9:19:0b:4e:e4:8f:71:53:92:cd:e0:fc:
         55:3a:09:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+WvR+Pw1BWANngUQXZw1q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2
NzRmZWIwHhcNMjQwNTIwMTYwMjA3WhcNMjQwNTIxMTYwMjA3WjAzMTEwLwYDVQQD
EyhiMGIyZTA5ZDk0MGIzOWZlYmQxZjliZTFmZDY2OGZmN2Q2NjRjZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWNOYSfNsLZoPLNUeUphjS7n7h/n
yteniZ/SbXcm1NMVOus8YoQQAbfivsl3Dc0BvzT/sEyA3FlTa9k+ahD0ac4ZbznE
wYZz0ZyOizrj+1Zq7zzWuC2kJkC23ooVbJPFe25B5cVtecB0Geh+NSHZVXoExrLP
xuQlmAf3nOZY1qHEsIQ5EaMozR//veWhv/9h04ifiYPOCBPdkuTRgW8KNLti+6/Y
slRXYrdwzvzmjNSRmqJxaGr9vn31DGV5DARlrlS4+qucOroXW7EeIkZ8VVchLbBc
rhmUPvnIHGR+mVapCiG8RL/FMxKJ/ufz/H3zWtJ907lNiScnW+Zw6MvcUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCy4J2UCzn+vR+b4f1mj/fWZM3sMB8GA1UdIwQY
MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt
NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl
LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAcv/yRm
eUrupP2M+ugA1c/+CPQjx4LKavu341dblysgaKQACu+lObxXaoXfK+crLN+Fk4Cw
Xz4HcRojSHa4h/lUCsO/3gCnA2Gh8urDj+oeQkuOTugI9ZiLJIDBb3K+su7AQ5Oc
spq59/zChMFJdK5HPYvX7YqNltzwnKgwPR1B2+CD8ExxM/E5Ef9Eyv1erPMhNo4n
Ga5MiTVYd9L10hseUxW48vTayqxbovdUGAxL0qxdHTonR7p3L08AVhPtMY0CwppC
EIfjKAekcof9bPnL+KTQ6XopDtSkfKUjIv8bNvuP9SfqXAbaybeCAJmXqRkLTuSP
cVOSzeD8VToJsA==
-----END CERTIFICATE-----
Generated at Mon May 20 17:39:43 2024 by rpki-client on console-fra.rpki-client.org