Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
File:                     t4UKnl5747TStkImX4JbhQwHI2Y.mft (raw, json)
Hash identifier:          DZQZJWw5BvJnEoNWyRBcvp8QPSwFHnH/1L8PV7rdUu8=
Subject key identifier:   11:00:98:AC:F9:EA:8D:5D:3F:C5:D3:03:7D:D1:FE:C6:10:31:56:7F
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Certificate issuer:       /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial:       0191FAEC6867D8FD454A45637B0C14A369D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
Manifest number:          0150
Signing time:             Mon 16 Sep 2024 13:01:22 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:22 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:22 +0000
Files and hashes:         1: 1-RKNfvfWy-2XjISmvzoXgVTiXws.roa (hash: LZ8xqHX/rrba8NpaVkZ8Fd6UIo9+BUvoBCsUvIu4R/I=)
                          2: t4UKnl5747TStkImX4JbhQwHI2Y.crl (hash: pWGBy01LMdvB/cmwC5asMTbMUUzeG8OOAJwEU4wFY+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:68:67:d8:fd:45:4a:45:63:7b:0c:14:a3:69:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
        Validity
            Not Before: Sep 16 13:01:22 2024 GMT
            Not After : Sep 17 13:01:22 2024 GMT
        Subject: CN=110098acf9ea8d5d3fc5d3037dd1fec61031567f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:0c:12:8c:36:7b:9e:1e:ff:d8:f6:00:d0:
                    75:fd:9e:83:83:ae:3d:55:d0:3e:c3:d0:4a:88:7e:
                    2b:53:25:1b:42:08:87:7e:ec:e6:b6:31:0d:2c:ab:
                    15:04:8c:e7:13:16:23:72:07:ec:ed:ac:8b:15:1d:
                    65:49:c4:de:8e:dd:bf:b4:a0:c9:7d:d6:04:a1:d7:
                    f4:38:64:6a:70:5e:4c:9f:b0:46:05:c9:6a:47:57:
                    83:71:0d:fa:0c:28:94:58:f5:9d:0f:10:24:11:16:
                    f6:3d:76:75:6a:ed:57:b9:09:cb:2b:6b:b2:7b:4e:
                    33:f2:cf:34:8e:62:cb:78:ef:df:fb:6d:5c:da:93:
                    67:9c:26:9a:a4:df:a0:15:50:27:1b:7c:16:ec:f9:
                    cc:02:4f:99:41:bb:da:06:f0:a6:44:f4:8a:5a:1a:
                    af:e9:8e:2f:a5:bb:8f:45:55:65:9f:99:62:13:b2:
                    0c:8f:18:3f:0d:40:99:e9:31:f7:23:a1:ba:b2:85:
                    5a:4c:bc:b4:0b:91:d8:51:8d:46:8a:a0:73:e6:6c:
                    98:0b:3a:42:f3:4e:7d:84:e9:5c:7c:ae:6a:0e:64:
                    ea:5c:1d:c1:78:50:30:bd:36:6c:ba:68:0c:5f:58:
                    0c:f4:11:1d:1e:46:32:69:c9:80:2c:e4:58:39:25:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:98:AC:F9:EA:8D:5D:3F:C5:D3:03:7D:D1:FE:C6:10:31:56:7F
            X509v3 Authority Key Identifier:
                keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:49:89:11:0d:f4:10:21:28:b0:02:03:0c:eb:23:3a:f0:03:
         33:06:cd:9e:ee:e0:54:d9:4e:57:b9:71:0c:cc:b1:f7:a9:db:
         3f:48:01:f1:72:06:e2:29:ff:39:f2:98:64:08:23:85:98:6e:
         1a:98:4d:7f:9c:26:c3:c7:93:86:a2:50:05:b9:0e:a7:28:92:
         0d:f9:5b:f9:7a:5d:09:b8:3e:dd:0b:30:b6:e6:5e:fd:cb:98:
         d8:78:01:95:40:8e:2a:1b:a3:7b:1f:9d:54:a1:d3:e8:49:67:
         db:2b:5f:20:a0:0d:e7:93:be:ab:d2:cb:43:bb:64:5b:8e:68:
         6b:74:75:69:a1:8c:02:24:cc:8e:80:b4:21:b8:a9:a3:bf:b6:
         a4:2d:7f:9f:f5:b9:87:1a:1d:8b:fc:fd:a4:63:1d:f5:bf:95:
         00:0a:20:de:a0:9d:95:18:83:88:01:96:aa:b7:6a:ae:15:e0:
         b8:72:35:e7:f0:07:25:48:9e:d4:38:43:c9:db:30:fb:9b:b2:
         bd:bb:6b:38:d5:ad:f9:36:c5:10:b2:ed:f1:68:04:0d:c4:e6:
         f0:aa:c9:83:d2:e3:83:5c:29:fb:9e:0b:75:f5:f5:f5:97:f6:
         f9:e3:3c:0c:fd:04:79:8c:eb:4a:a2:ea:62:34:64:ed:11:fa:
         d0:a6:05:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67Ghn2P1FSkVjewwUo2nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODUwYTllNWU3YmUzYjRkMmI2NDIyNjVmODI1Yjg1MGMw
NzIzNjYwHhcNMjQwOTE2MTMwMTIyWhcNMjQwOTE3MTMwMTIyWjAzMTEwLwYDVQQD
EygxMTAwOThhY2Y5ZWE4ZDVkM2ZjNWQzMDM3ZGQxZmVjNjEwMzE1NjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySgMEow2e54e/9j2ANB1/Z6Dg649
VdA+w9BKiH4rUyUbQgiHfuzmtjENLKsVBIznExYjcgfs7ayLFR1lScTejt2/tKDJ
fdYEodf0OGRqcF5Mn7BGBclqR1eDcQ36DCiUWPWdDxAkERb2PXZ1au1XuQnLK2uy
e04z8s80jmLLeO/f+21c2pNnnCaapN+gFVAnG3wW7PnMAk+ZQbvaBvCmRPSKWhqv
6Y4vpbuPRVVln5liE7IMjxg/DUCZ6TH3I6G6soVaTLy0C5HYUY1GiqBz5myYCzpC
8059hOlcfK5qDmTqXB3BeFAwvTZsumgMX1gM9BEdHkYyacmALORYOSWJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEAmKz56o1dP8XTA33R/sYQMVZ/MB8GA1UdIwQY
MBaAFLeFCp5ee+O00rZCJl+CW4UMByNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQt
OGEwMTAyYWU3YTlmLzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQtOGEwMTAyYWU3YTlm
LzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0mJEQ30
ECEosAIDDOsjOvADMwbNnu7gVNlOV7lxDMyx96nbP0gB8XIG4in/OfKYZAgjhZhu
GphNf5wmw8eThqJQBbkOpyiSDflb+XpdCbg+3QswtuZe/cuY2HgBlUCOKhujex+d
VKHT6Eln2ytfIKAN55O+q9LLQ7tkW45oa3R1aaGMAiTMjoC0Ibipo7+2pC1/n/W5
hxodi/z9pGMd9b+VAAog3qCdlRiDiAGWqrdqrhXguHI15/AHJUie1DhDydsw+5uy
vbtrONWt+TbFELLt8WgEDcTm8KrJg9Ljg1wp+54LdfX19Zf2+eM8DP0EeYzrSqLq
YjRk7RH60KYF/A==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:16:38 2024 by rpki-client on console-fra.rpki-client.org