Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File:                     avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier:          D2ytsQ3w7J+NgAdkgM5m7kbrkuZ/AEGyWO09SaRATeE=
Subject key identifier:   D7:93:38:E6:47:EB:AB:9F:63:E0:F4:7F:F8:23:D2:65:F2:86:D3:FD
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer:       /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial:       018F88FFA3F4FAB49902D7789BC9FD75D1EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number:          9B
Signing time:             Sat 18 May 2024 00:00:05 +0000
Manifest this update:     Sat 18 May 2024 00:00:05 +0000
Manifest next update:     Sun 19 May 2024 00:00:05 +0000
Files and hashes:         1: 6bx91UkTF2LfOrJy3bRWFP0Yn4Q.roa (hash: 2OfFpmS0jLw8C1Ljj+oP+4GfoVXVmX+5xiX8Ca/ZM7Y=)
                          2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: aGRVAavJnVtpqBJ4uozXSBQ9P5EU517HEIErEtYJsZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:a3:f4:fa:b4:99:02:d7:78:9b:c9:fd:75:d1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
        Validity
            Not Before: May 18 00:00:05 2024 GMT
            Not After : May 19 00:00:05 2024 GMT
        Subject: CN=d79338e647ebab9f63e0f47ff823d265f286d3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:4e:5f:73:b0:3d:e2:79:f9:ba:be:26:0f:
                    37:7a:02:6e:eb:47:b3:c4:56:ed:ff:a8:cc:45:b6:
                    e3:74:d6:5e:c0:4c:7e:94:60:05:01:b1:2d:45:c7:
                    b8:f8:9b:f4:99:19:fa:4f:67:fb:d2:fb:7e:84:13:
                    06:82:5c:a4:db:71:9e:bd:12:02:be:86:a5:9c:c3:
                    2a:84:c8:4f:61:6c:b0:a2:87:3c:e6:2b:4c:b3:e8:
                    97:63:95:c4:83:c1:02:23:d3:31:a9:d9:23:0b:ae:
                    3e:5d:d7:b4:c5:dc:14:a0:e6:9b:28:fe:9e:34:de:
                    01:e4:22:53:5b:9c:4e:da:93:cc:91:81:78:86:15:
                    9f:ba:5d:ff:61:ca:2b:f0:3b:af:18:79:03:fc:00:
                    da:aa:cd:6b:50:0a:4f:ed:bd:ef:bb:28:a6:fd:0d:
                    0f:59:29:72:cd:2b:a2:d9:da:2b:69:ae:0a:cd:31:
                    c6:cf:2c:dd:20:20:46:e2:bc:35:9e:e4:da:78:17:
                    7a:f1:55:62:22:08:66:4f:62:db:eb:53:77:cd:27:
                    7f:94:29:9f:69:e9:75:7d:55:f5:b1:11:cc:cd:2a:
                    ba:3b:77:38:8f:06:93:28:32:23:89:31:d9:c5:c9:
                    db:8c:4f:a5:52:03:ad:32:fd:79:27:03:3f:40:d2:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:93:38:E6:47:EB:AB:9F:63:E0:F4:7F:F8:23:D2:65:F2:86:D3:FD
            X509v3 Authority Key Identifier:
                keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:58:58:d7:2a:d7:f6:54:bd:21:ac:2d:36:6a:be:d6:49:46:
         c6:bd:01:cd:28:52:99:de:d0:ea:a4:62:a4:e1:3a:8e:91:ec:
         ba:ae:7f:2a:db:12:2c:7e:ae:ba:2b:1c:55:35:e2:5e:b5:a7:
         70:f3:c3:29:9e:ea:9f:9d:b6:c4:61:6b:0b:1d:7f:f9:ac:58:
         2e:a2:c6:bf:21:7e:fa:23:cf:40:88:e0:63:31:5c:61:ef:48:
         6b:62:eb:32:2d:7e:65:6f:fb:c1:6d:b9:b3:f3:36:61:ca:fe:
         cc:42:af:44:d7:c4:ef:e5:9d:48:57:ee:bc:18:35:1d:48:37:
         7d:48:d7:b6:30:d0:f4:de:f4:dc:09:cc:3e:c9:60:e4:e4:18:
         8c:06:ce:2f:16:6a:ec:b1:95:c9:fe:0b:d8:ca:25:0a:12:9a:
         ea:63:7b:5b:45:8e:9f:0a:6e:b8:dc:81:2e:12:49:74:7c:7f:
         66:63:56:df:c9:dd:e3:d6:56:3e:b2:b7:aa:f0:ed:80:46:b6:
         70:8d:0d:f5:90:2f:fa:6a:70:2c:c0:8b:75:37:4c:c1:f5:1d:
         c7:4e:75:3c:16:20:a6:96:a4:e6:cc:4b:c6:43:12:83:09:f1:
         31:c5:31:dd:0b:bc:96:b2:d9:95:d4:01:df:6d:c8:24:d1:b5:
         83:6e:79:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+I/6P0+rSZAtd4m8n9ddHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjNhYTAxNDBiNzk4MzUwMGVhODI5ZjNjMzZiYmZiNjVh
Zjk5NzIwHhcNMjQwNTE4MDAwMDA1WhcNMjQwNTE5MDAwMDA1WjAzMTEwLwYDVQQD
EyhkNzkzMzhlNjQ3ZWJhYjlmNjNlMGY0N2ZmODIzZDI2NWYyODZkM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzxOX3OwPeJ5+bq+Jg83egJu60ez
xFbt/6jMRbbjdNZewEx+lGAFAbEtRce4+Jv0mRn6T2f70vt+hBMGglyk23GevRIC
voalnMMqhMhPYWywooc85itMs+iXY5XEg8ECI9MxqdkjC64+Xde0xdwUoOabKP6e
NN4B5CJTW5xO2pPMkYF4hhWful3/Ycor8DuvGHkD/ADaqs1rUApP7b3vuyim/Q0P
WSlyzSui2doraa4KzTHGzyzdICBG4rw1nuTaeBd68VViIghmT2Lb61N3zSd/lCmf
ael1fVX1sRHMzSq6O3c4jwaTKDIjiTHZxcnbjE+lUgOtMv15JwM/QNISHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeTOOZH66ufY+D0f/gj0mXyhtP9MB8GA1UdIwQY
MBaAFGrzqgFAt5g1AOqCnzw2u/tlr5lyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTkt
YjhmM2I3NzllNTRiLzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTktYjhmM2I3NzllNTRi
LzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlhY1yrX
9lS9IawtNmq+1klGxr0BzShSmd7Q6qRipOE6jpHsuq5/KtsSLH6uuiscVTXiXrWn
cPPDKZ7qn522xGFrCx1/+axYLqLGvyF++iPPQIjgYzFcYe9Ia2LrMi1+ZW/7wW25
s/M2Ycr+zEKvRNfE7+WdSFfuvBg1HUg3fUjXtjDQ9N703AnMPslg5OQYjAbOLxZq
7LGVyf4L2MolChKa6mN7W0WOnwpuuNyBLhJJdHx/ZmNW38nd49ZWPrK3qvDtgEa2
cI0N9ZAv+mpwLMCLdTdMwfUdx051PBYgppak5sxLxkMSgwnxMcUx3Qu8lrLZldQB
323IJNG1g255Nw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:02:44 2024 by rpki-client on console-fra.rpki-client.org