Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File:                     ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier:          t8yNftBDA6x7b3onf2Pdebh7LS1hNr5kgPP2zI31SRs=
Subject key identifier:   7A:65:BE:CD:B1:8E:66:D6:34:97:89:3F:C8:B8:C2:60:71:B1:67:91
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer:       /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial:       018F8B26BB4B37921CE879C6BD8FE018AB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number:          041B
Signing time:             Sat 18 May 2024 10:02:02 +0000
Manifest this update:     Sat 18 May 2024 10:02:02 +0000
Manifest next update:     Sun 19 May 2024 10:02:02 +0000
Files and hashes:         1: HUfixC5zQEOQTwSnjgZvrxadU6U.roa (hash: wUv1se6bt8XAx5Dx6PWMA3FAtRSpxXbSgjkmDh5sBd8=)
                          2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: EFQXq2okXmYO1An7TOH1QhJI2yO0zkB4iXVdKxy1sDg=)
                          3: ZPpPYvuDljIdOn4Z_Reh_yj7TPY.roa (hash: uHZ0u5mYM1Q1CJvebK9NQYwnBsqcS/p31i4GrIkpxjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 10:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:26:bb:4b:37:92:1c:e8:79:c6:bd:8f:e0:18:ab:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
        Validity
            Not Before: May 18 10:02:02 2024 GMT
            Not After : May 19 10:02:02 2024 GMT
        Subject: CN=7a65becdb18e66d63497893fc8b8c26071b16791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:df:91:5a:82:ab:d6:a0:b9:86:18:0c:f3:
                    d6:ea:76:5a:a5:44:01:61:17:e5:26:25:7c:09:14:
                    68:01:7e:7a:41:52:10:21:e1:ad:58:02:cf:6d:a1:
                    e9:4d:0f:d8:6b:85:22:42:ba:8e:15:02:2d:05:84:
                    8f:a7:ab:99:90:73:83:87:94:17:57:d4:0f:aa:83:
                    98:ea:b0:23:d0:74:e3:d4:08:16:1e:3d:3f:26:42:
                    e9:73:16:69:b2:e4:68:94:6a:61:b6:90:4d:b7:cf:
                    cd:eb:19:86:95:08:61:a4:b4:f4:60:3f:6d:5a:7b:
                    17:1f:00:ae:95:02:62:c1:a5:e7:80:20:f5:bc:0e:
                    cc:25:5f:e5:e0:32:68:fb:23:c7:46:58:f2:d2:6c:
                    77:2d:53:e6:62:85:98:4e:b9:c9:80:09:de:e8:00:
                    22:71:af:ff:b8:87:f3:bc:99:3d:f8:00:72:09:34:
                    55:83:f6:93:55:8e:4a:fd:6c:e7:f3:a0:60:ff:05:
                    45:c1:49:9d:ea:02:f9:6d:89:1e:95:ba:e2:f1:8f:
                    a3:fe:74:56:ba:de:25:a0:8c:e2:1d:ef:ff:96:65:
                    91:96:60:03:4c:1d:8c:8b:50:13:25:08:44:e9:e9:
                    82:86:86:7e:00:bd:ec:18:45:19:4e:c2:16:6b:bf:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:65:BE:CD:B1:8E:66:D6:34:97:89:3F:C8:B8:C2:60:71:B1:67:91
            X509v3 Authority Key Identifier:
                keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:61:e6:11:88:1e:86:52:cc:5c:c1:a6:74:e2:56:19:73:
         ec:1a:59:bb:5b:6a:fe:27:45:49:e0:7b:c2:6b:ca:d8:d8:0d:
         d9:92:19:42:9f:d8:65:20:8c:cd:87:d9:a8:c9:6c:01:89:b8:
         ac:8d:47:51:46:77:20:b9:e8:48:dd:2f:a6:12:23:1c:2a:33:
         ce:3d:fa:26:a6:39:ac:1a:fd:63:55:0d:cd:ac:2b:26:bd:0d:
         2f:ae:ff:2e:24:e2:d7:fe:41:1e:7f:c6:31:ca:e6:84:41:89:
         c0:f2:c7:d6:4b:5e:08:26:43:47:57:78:63:59:ab:fe:61:67:
         a1:0d:eb:9f:fc:e6:f4:d5:b0:41:09:04:7c:ad:94:8d:f8:31:
         de:e7:bf:4c:ba:4d:25:59:61:6f:3b:5c:fc:0d:ac:e7:d0:3b:
         99:b4:58:49:b7:e1:da:50:68:df:95:84:c0:be:3b:8f:01:62:
         b9:0c:ce:bc:91:9d:1c:db:61:32:6a:5d:2b:54:31:2f:c7:f4:
         85:3a:c6:79:5a:ad:3d:cf:c8:93:18:70:1d:69:df:01:b5:13:
         b5:02:c6:2c:29:82:99:3c:7f:20:a0:e7:1e:15:5f:3a:7c:fe:
         cf:3c:a8:5e:0a:a3:40:bd:1a:59:a2:a2:5e:34:9c:3e:69:54:
         ca:38:fd:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+LJrtLN5Ic6HnGvY/gGKuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTNhMGMxZjFkODFlZTA2OTY0M2I0MGMzMjM5OTliYjU1
ODQ2MzEwHhcNMjQwNTE4MTAwMjAyWhcNMjQwNTE5MTAwMjAyWjAzMTEwLwYDVQQD
Eyg3YTY1YmVjZGIxOGU2NmQ2MzQ5Nzg5M2ZjOGI4YzI2MDcxYjE2NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAvfkVqCq9aguYYYDPPW6nZapUQB
YRflJiV8CRRoAX56QVIQIeGtWALPbaHpTQ/Ya4UiQrqOFQItBYSPp6uZkHODh5QX
V9QPqoOY6rAj0HTj1AgWHj0/JkLpcxZpsuRolGphtpBNt8/N6xmGlQhhpLT0YD9t
WnsXHwCulQJiwaXngCD1vA7MJV/l4DJo+yPHRljy0mx3LVPmYoWYTrnJgAne6AAi
ca//uIfzvJk9+AByCTRVg/aTVY5K/Wzn86Bg/wVFwUmd6gL5bYkelbri8Y+j/nRW
ut4loIziHe//lmWRlmADTB2Mi1ATJQhE6emChoZ+AL3sGEUZTsIWa79RyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHplvs2xjmbWNJeJP8i4wmBxsWeRMB8GA1UdIwQY
MBaAFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUt
M2Q1N2I2NmIyMTM0LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUtM2Q1N2I2NmIyMTM0
LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+lh5hGI
HoZSzFzBpnTiVhlz7BpZu1tq/idFSeB7wmvK2NgN2ZIZQp/YZSCMzYfZqMlsAYm4
rI1HUUZ3ILnoSN0vphIjHCozzj36JqY5rBr9Y1UNzawrJr0NL67/LiTi1/5BHn/G
McrmhEGJwPLH1kteCCZDR1d4Y1mr/mFnoQ3rn/zm9NWwQQkEfK2Ujfgx3ue/TLpN
JVlhbztc/A2s59A7mbRYSbfh2lBo35WEwL47jwFiuQzOvJGdHNthMmpdK1QxL8f0
hTrGeVqtPc/IkxhwHWnfAbUTtQLGLCmCmTx/IKDnHhVfOnz+zzyoXgqjQL0aWaKi
XjScPmlUyjj91Q==
-----END CERTIFICATE-----
Generated at Sat May 18 14:01:32 2024 by rpki-client on console-ams.rpki-client.org