Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          DKnRP5uP0ugAJq3p2pLNHoueUaSYDl49JVVG83UOmxg=
Subject key identifier:   F0:9E:95:55:F2:48:72:5A:3F:CD:B3:AB:1F:19:28:A6:BE:14:D7:94
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       018F8749F839CD5148CEB160D85C788310A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1087
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: 1-Jfjr0TAKqCpSl3R4pR5UYejoh0.roa (hash: HC5b9FyO0eZIokGGpC1Fg+FnUw8J/4S+KK0BV0Fc3kg=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: rl0TYZgZ5hLDtN/aitCEvi22razml901etfVnaiHSZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f8:39:cd:51:48:ce:b1:60:d8:5c:78:83:10:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=f09e9555f248725a3fcdb3ab1f1928a6be14d794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:f2:79:56:57:d1:24:a7:28:82:bc:5d:30:
                    62:84:3a:4e:7f:1a:9c:93:21:72:9d:b3:68:d4:f7:
                    a1:89:7f:74:76:a3:41:ce:c9:51:c6:bc:5a:04:fd:
                    21:d4:63:08:3f:f4:36:9d:f8:4a:aa:bb:4b:78:57:
                    3c:c2:bc:1a:c4:52:8b:e6:68:dd:90:d1:75:5b:3a:
                    88:b0:b3:b6:ca:b0:45:23:5b:95:24:87:b4:86:8b:
                    6b:25:ea:72:54:a6:4f:9e:48:63:83:4d:a3:ba:16:
                    d0:4a:34:99:eb:a5:56:91:71:c7:6d:dc:89:81:1b:
                    1d:c8:15:12:f9:ab:ae:46:7d:34:76:cd:14:c7:db:
                    a6:53:4e:08:b1:92:26:31:23:ce:30:66:53:0b:40:
                    55:42:85:a0:46:a3:0b:3f:41:ef:af:27:2c:39:3c:
                    64:3d:3c:90:2a:c1:e2:55:e3:c6:b3:a6:a6:91:8a:
                    36:9d:e4:f4:9c:e9:a5:3d:e3:81:4a:bb:b2:97:20:
                    5b:2c:f9:25:16:b3:29:bd:28:19:36:07:bf:2c:a3:
                    7f:d7:fd:0e:21:b5:cd:5d:d7:2e:3a:24:6d:5d:7f:
                    4e:eb:4b:70:a5:2c:93:f1:88:9d:5c:46:0f:8f:60:
                    7c:ce:86:72:5b:ba:a9:ca:da:a9:01:af:e8:be:ac:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9E:95:55:F2:48:72:5A:3F:CD:B3:AB:1F:19:28:A6:BE:14:D7:94
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:94:ee:55:61:7d:12:39:c6:f9:bb:d8:1e:9e:0e:db:5d:
         71:1c:cc:b3:92:32:a4:b6:21:d9:81:6c:0f:36:00:de:02:71:
         6b:24:0a:4a:f7:71:af:3f:f4:02:4b:46:1c:67:c5:ff:d9:a6:
         d6:8a:07:cb:e7:bb:52:49:8a:29:4c:a1:ac:fd:c9:fb:11:1c:
         23:39:96:b7:c3:f3:cc:13:34:8d:01:e1:9d:9f:8f:8a:0f:23:
         00:73:29:19:5f:cf:1d:1a:7a:c7:8f:c8:0f:b8:9e:1a:49:53:
         cd:2d:2a:6a:08:68:b0:b1:1f:97:04:72:94:77:bc:20:e2:dc:
         21:ed:a7:4c:fa:d4:45:1b:57:e5:b6:64:4c:2a:f2:1d:00:f7:
         a6:d8:71:82:6f:ac:31:1f:36:f5:de:3d:0a:89:14:c7:fb:99:
         da:84:c6:ac:8b:bf:ad:3d:3e:f2:81:8f:39:fe:d8:b0:3b:e5:
         98:11:c4:7d:69:7b:8b:e3:fa:45:98:06:64:5d:01:46:4e:13:
         1a:a6:08:01:8b:31:69:03:a5:b7:ac:10:d0:d6:13:36:b4:92:
         02:1c:64:4a:36:b6:19:f6:42:3d:b0:a1:63:03:86:f3:d9:7e:
         7b:8f:43:8f:b4:9e:99:08:5e:a0:6a:3b:ec:bc:c4:de:ad:56:
         60:4b:28:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSfg5zVFIzrFg2Fx4gxCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5
OWNmZjYwHhcNMjQwNTE3MTYwMjAyWhcNMjQwNTE4MTYwMjAyWjAzMTEwLwYDVQQD
EyhmMDllOTU1NWYyNDg3MjVhM2ZjZGIzYWIxZjE5MjhhNmJlMTRkNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvXyeVZX0SSnKIK8XTBihDpOfxqc
kyFynbNo1PehiX90dqNBzslRxrxaBP0h1GMIP/Q2nfhKqrtLeFc8wrwaxFKL5mjd
kNF1WzqIsLO2yrBFI1uVJIe0hotrJepyVKZPnkhjg02juhbQSjSZ66VWkXHHbdyJ
gRsdyBUS+auuRn00ds0Ux9umU04IsZImMSPOMGZTC0BVQoWgRqMLP0HvrycsOTxk
PTyQKsHiVePGs6amkYo2neT0nOmlPeOBSruylyBbLPklFrMpvSgZNge/LKN/1/0O
IbXNXdcuOiRtXX9O60twpSyT8YidXEYPj2B8zoZyW7qpytqpAa/ovqwzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCelVXySHJaP82zqx8ZKKa+FNeUMB8GA1UdIwQY
MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt
ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw
LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsECU7lVh
fRI5xvm72B6eDttdcRzMs5IypLYh2YFsDzYA3gJxayQKSvdxrz/0AktGHGfF/9mm
1ooHy+e7UkmKKUyhrP3J+xEcIzmWt8PzzBM0jQHhnZ+Pig8jAHMpGV/PHRp6x4/I
D7ieGklTzS0qaghosLEflwRylHe8IOLcIe2nTPrURRtX5bZkTCryHQD3pthxgm+s
MR829d49CokUx/uZ2oTGrIu/rT0+8oGPOf7YsDvlmBHEfWl7i+P6RZgGZF0BRk4T
GqYIAYsxaQOlt6wQ0NYTNrSSAhxkSja2GfZCPbChYwOG89l+e49Dj7SemQheoGo7
7LzE3q1WYEsoVQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:11:40 2024 by rpki-client on console-ams.rpki-client.org