Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File:                     G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier:          4rG7KqmescxRPAX4x5ARDkTjMM0C59NQGi3A4WrUX9E=
Subject key identifier:   60:38:38:51:18:1E:A8:13:2A:D9:20:58:63:92:71:DC:68:39:64:15
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer:       /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial:       018F48D859AE59CDFB42404C0D4198927B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 13:01:29 +0000
Manifest this update:     Sun 05 May 2024 13:01:29 +0000
Manifest next update:     Mon 06 May 2024 13:01:29 +0000
Files and hashes:         1: A5mjfi_VWIqDn3yNH3VM0Cj16Sw.roa (hash: 2DFZL81VhHrPbOFd90UWHinwxaTsasLtBZ6p6pM1ME8=)
                          2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: +MKui4N2Pl7aGCC+5v3uLokLGuCYDL21whO6Awqy68s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:d8:59:ae:59:cd:fb:42:40:4c:0d:41:98:92:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
        Validity
            Not Before: May  5 13:01:29 2024 GMT
            Not After : May  6 13:01:29 2024 GMT
        Subject: CN=60383851181ea8132ad92058639271dc68396415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:f0:cf:8a:87:f1:56:62:06:6b:ba:6b:d2:
                    5c:0b:fd:8e:f4:7c:84:cc:e4:74:dc:43:38:92:7a:
                    ba:fa:d5:2f:7e:7d:af:95:b9:43:95:ab:ac:9d:0a:
                    50:68:54:f6:bb:3e:3e:c2:0b:a5:d1:a8:a3:c5:9b:
                    cf:f9:51:03:5c:a4:47:e5:dd:35:6a:2b:14:7a:86:
                    cb:ba:fe:81:aa:65:ae:53:3b:35:52:44:e4:d5:9b:
                    56:ab:6f:1f:48:e2:ed:81:2a:67:64:b4:df:80:0f:
                    34:47:cb:79:0f:51:ba:cd:54:63:74:1c:80:ec:ec:
                    f1:60:46:e5:42:bf:e9:9d:d8:00:52:95:e6:54:67:
                    01:27:0b:a8:d1:44:27:c9:58:9e:2b:12:3b:8d:fa:
                    09:fa:74:de:d1:99:75:4e:d5:e3:ad:ba:4a:35:07:
                    74:c2:44:19:25:7e:61:2a:42:82:fd:7c:b8:93:1c:
                    d3:4c:40:21:61:dd:d3:ad:7a:f6:76:f2:6e:79:11:
                    60:9d:f7:4c:18:b7:ec:a4:1c:e4:57:f7:98:a2:4d:
                    8a:ce:8c:6d:e4:a3:fb:14:67:6f:62:25:f2:43:e0:
                    3d:a7:a3:5e:17:34:93:01:73:72:cb:1b:33:cb:63:
                    2d:6a:ae:f1:7f:85:8e:fb:74:b5:aa:7f:1a:c0:42:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:38:51:18:1E:A8:13:2A:D9:20:58:63:92:71:DC:68:39:64:15
            X509v3 Authority Key Identifier:
                keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:87:64:10:d9:3f:e7:b5:b5:c8:07:3e:bc:96:11:7b:a9:c0:
         63:d5:76:33:08:4c:2e:05:c3:c2:e1:56:8d:67:98:d3:ea:5b:
         5d:19:54:63:31:86:80:ea:49:f0:cf:54:03:4c:ad:3e:7b:88:
         24:fb:7d:f7:09:f8:af:62:64:fb:25:9e:45:3f:12:4a:53:6a:
         f8:f6:b2:16:fc:de:af:3c:20:7c:27:4d:82:3e:75:57:5f:75:
         7d:3d:ff:d4:e9:a1:97:bc:26:f8:d8:34:8a:0c:79:a4:8d:54:
         f0:06:5d:ca:97:2b:b7:0a:4f:e9:91:d2:e2:c5:89:25:38:94:
         db:49:03:1b:ce:3c:f4:3a:88:16:db:e5:a4:13:d0:66:21:f4:
         e1:0f:6e:2e:18:3d:7e:34:f8:96:cc:e1:ed:e2:2c:f0:d2:e3:
         1a:71:25:b3:0e:c2:ac:31:5e:43:0f:a1:fd:74:92:7a:d7:72:
         d4:98:ae:c7:01:22:88:d0:2f:c1:31:f4:9d:99:af:67:cd:2e:
         09:3b:f5:7d:ce:90:24:00:0e:db:a0:cf:f2:cb:6d:48:aa:ba:
         21:9f:71:b1:36:33:c2:0d:d0:a6:13:e5:0e:03:e7:11:9f:b5:
         c6:24:86:4d:2e:7c:b8:33:3d:44:c9:b1:38:48:20:8a:63:20:
         22:67:b6:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9I2FmuWc37QkBMDUGYknuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy
YmZkZTYwHhcNMjQwNTA1MTMwMTI5WhcNMjQwNTA2MTMwMTI5WjAzMTEwLwYDVQQD
Eyg2MDM4Mzg1MTE4MWVhODEzMmFkOTIwNTg2MzkyNzFkYzY4Mzk2NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Hwz4qH8VZiBmu6a9JcC/2O9HyE
zOR03EM4knq6+tUvfn2vlblDlausnQpQaFT2uz4+wgul0aijxZvP+VEDXKRH5d01
aisUeobLuv6BqmWuUzs1UkTk1ZtWq28fSOLtgSpnZLTfgA80R8t5D1G6zVRjdByA
7OzxYEblQr/pndgAUpXmVGcBJwuo0UQnyVieKxI7jfoJ+nTe0Zl1TtXjrbpKNQd0
wkQZJX5hKkKC/Xy4kxzTTEAhYd3TrXr2dvJueRFgnfdMGLfspBzkV/eYok2Kzoxt
5KP7FGdvYiXyQ+A9p6NeFzSTAXNyyxszy2Mtaq7xf4WO+3S1qn8awEJJ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA4OFEYHqgTKtkgWGOScdxoOWQVMB8GA1UdIwQY
MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt
MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz
LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4dkENk/
57W1yAc+vJYRe6nAY9V2MwhMLgXDwuFWjWeY0+pbXRlUYzGGgOpJ8M9UA0ytPnuI
JPt99wn4r2Jk+yWeRT8SSlNq+PayFvzerzwgfCdNgj51V191fT3/1Omhl7wm+Ng0
igx5pI1U8AZdypcrtwpP6ZHS4sWJJTiU20kDG8489DqIFtvlpBPQZiH04Q9uLhg9
fjT4lszh7eIs8NLjGnElsw7CrDFeQw+h/XSSetdy1JiuxwEiiNAvwTH0nZmvZ80u
CTv1fc6QJAAO26DP8sttSKq6IZ9xsTYzwg3QphPlDgPnEZ+1xiSGTS58uDM9RMmx
OEggimMgIme20w==
-----END CERTIFICATE-----
Generated at Sun May 5 14:32:33 2024 by rpki-client on console-ams.rpki-client.org