Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          31AwixcGShEKIU5k34v8QFlrPEDTcLQ9tdyAFJUy4ck=
Subject key identifier:   35:5D:72:8C:F9:0D:2D:E8:90:90:FB:99:A5:EF:65:4B:62:93:7D:EB
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       018F84B59D594D08C81B58169092AF4FAE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 04:00:45 +0000
Manifest this update:     Fri 17 May 2024 04:00:45 +0000
Manifest next update:     Sat 18 May 2024 04:00:45 +0000
Files and hashes:         1: 70N2nRQiDL2LT1eFUg_Fkz-wkCU.roa (hash: 4uaIa9o7d/8apcdRMv8Fh2XKMQb472iYtzk8oIdKXeI=)
                          2: KVt_no_lfHWTZhzNwemlJDM2ftE.roa (hash: Ov1wEZbxMW0tXUjppWm22mwdnVcmSbVO0/ASdOTvEqc=)
                          3: KnjslgaopCmCG6TO0JqHDEEJW6w.roa (hash: F+UaxGL2gzRNJ5UYB+AUXvvmATQZnVDX+4cApftbjok=)
                          4: T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa (hash: 4AIB/qUCeMRHNuKC1cR9OduIG6PR1WdNsYvLIWvPs/c=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: RQe+Bb+CTZZsM/UrCHFM6t48xYstOumjQdn6qCG97sE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:b5:9d:59:4d:08:c8:1b:58:16:90:92:af:4f:ae:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: May 17 04:00:45 2024 GMT
            Not After : May 18 04:00:45 2024 GMT
        Subject: CN=355d728cf90d2de89090fb99a5ef654b62937deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:02:63:a8:4d:8e:55:5d:9f:2f:4c:25:75:
                    54:b6:4b:37:5c:2d:d9:c3:86:3b:83:03:73:d4:dd:
                    19:e2:9e:0c:2b:cd:27:5f:b2:35:91:3e:c8:f6:20:
                    78:a8:45:1d:6d:4b:e3:72:dd:9f:df:38:6b:af:09:
                    db:2d:6f:e2:b7:80:97:0e:5b:d0:74:7b:27:4e:7e:
                    73:5e:57:3e:1a:b5:de:12:7c:84:7d:c4:8b:49:16:
                    8c:9c:6c:d8:44:d3:7a:a5:23:d5:ae:4d:d6:07:28:
                    7f:05:fc:fd:45:d1:ad:1c:60:bc:8c:83:33:4b:e7:
                    33:14:ed:b0:cb:7e:9c:9d:a4:e3:5a:f3:d5:27:99:
                    8b:ab:ee:e0:54:59:7b:ce:1c:dc:03:03:86:8f:f8:
                    64:c0:43:d0:ea:b9:54:3e:26:9f:1e:b9:d5:2a:13:
                    e0:aa:c2:48:51:72:91:3e:3f:32:79:3e:a0:72:55:
                    a4:31:d0:10:83:f1:2c:a6:48:fd:92:51:3b:fa:8b:
                    22:2d:7a:cb:e4:2c:51:20:a1:55:14:ea:23:89:f4:
                    d4:9b:00:7a:22:fe:ae:57:41:dd:69:c8:9a:73:96:
                    17:70:1c:2f:2e:ea:01:90:52:3b:d8:98:14:01:a6:
                    e2:04:23:26:18:2e:65:1f:44:92:75:c9:5b:aa:19:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:72:8C:F9:0D:2D:E8:90:90:FB:99:A5:EF:65:4B:62:93:7D:EB
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:26:ac:56:b3:9b:88:34:23:6b:27:e8:39:f9:ea:0e:53:71:
         3e:21:63:df:17:30:ab:c0:c3:82:c3:1a:ec:c5:bb:70:5a:56:
         07:1f:4b:6a:db:69:e6:ae:94:03:f9:86:9f:34:81:fd:4e:16:
         3d:ed:42:4c:25:e9:08:17:c2:02:e2:ec:b6:f4:79:1f:d0:b4:
         2f:b7:9a:80:90:82:56:9c:23:54:b9:48:5e:bc:6b:d8:35:f2:
         82:cc:66:eb:64:cb:8b:9f:53:54:a3:0d:d4:40:f6:c4:bd:2c:
         5e:b5:c7:22:d7:30:78:5c:77:84:f4:1d:a8:86:e8:6c:02:ae:
         0b:bc:a5:c6:8e:bf:db:e5:d1:4e:cc:13:78:78:ae:7a:42:fb:
         bc:9b:0f:1f:1d:a8:0d:aa:0c:c9:de:87:c8:d1:a3:89:6f:6d:
         ab:93:99:1d:69:fc:08:31:bf:23:80:c4:8e:10:a6:60:f6:04:
         ae:8d:fc:61:78:7c:8f:5c:cb:4e:90:96:3e:cf:02:02:66:bc:
         20:e0:dd:a4:2c:ea:58:1c:bd:9e:67:fe:d6:f0:c8:5b:8a:46:
         67:bd:7d:1b:49:0d:15:3e:33:7a:d2:49:25:5a:c5:8a:91:d5:
         c2:ba:4b:a8:1f:67:a6:25:f4:9f:20:bc:d5:42:9f:0b:93:10:
         2d:0c:31:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+EtZ1ZTQjIG1gWkJKvT64nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjQwNTE3MDQwMDQ1WhcNMjQwNTE4MDQwMDQ1WjAzMTEwLwYDVQQD
EygzNTVkNzI4Y2Y5MGQyZGU4OTA5MGZiOTlhNWVmNjU0YjYyOTM3ZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkkCY6hNjlVdny9MJXVUtks3XC3Z
w4Y7gwNz1N0Z4p4MK80nX7I1kT7I9iB4qEUdbUvjct2f3zhrrwnbLW/it4CXDlvQ
dHsnTn5zXlc+GrXeEnyEfcSLSRaMnGzYRNN6pSPVrk3WByh/Bfz9RdGtHGC8jIMz
S+czFO2wy36cnaTjWvPVJ5mLq+7gVFl7zhzcAwOGj/hkwEPQ6rlUPiafHrnVKhPg
qsJIUXKRPj8yeT6gclWkMdAQg/Espkj9klE7+osiLXrL5CxRIKFVFOojifTUmwB6
Iv6uV0Hdaciac5YXcBwvLuoBkFI72JgUAabiBCMmGC5lH0SSdclbqhkSuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVdcoz5DS3okJD7maXvZUtik33rMB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACasVrOb
iDQjayfoOfnqDlNxPiFj3xcwq8DDgsMa7MW7cFpWBx9Lattp5q6UA/mGnzSB/U4W
Pe1CTCXpCBfCAuLstvR5H9C0L7eagJCCVpwjVLlIXrxr2DXygsxm62TLi59TVKMN
1ED2xL0sXrXHItcweFx3hPQdqIbobAKuC7ylxo6/2+XRTswTeHiuekL7vJsPHx2o
DaoMyd6HyNGjiW9tq5OZHWn8CDG/I4DEjhCmYPYEro38YXh8j1zLTpCWPs8CAma8
IODdpCzqWBy9nmf+1vDIW4pGZ719G0kNFT4zetJJJVrFipHVwrpLqB9npiX0nyC8
1UKfC5MQLQwxrQ==
-----END CERTIFICATE-----
Generated at Fri May 17 04:45:57 2024 by rpki-client on console-fra.rpki-client.org