Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File:                     qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier:          +EsyhBfycEi+oZki0omYMVVBKX2cq9cJr6ry1mZLRd8=
Subject key identifier:   AF:2C:AA:57:F0:96:DF:0E:85:49:BC:E9:94:5B:28:BA:C2:C3:AE:11
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer:       /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial:       018F87ED3C86E66B7CB1B52CF91C332320D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number:          0EC3
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: BlPl9tMqzpyPmk5KgzzeKug8IMA.roa (hash: ojy6HpVcW5GTs7IUBgIM8sLwSOUbMlfXdTji+WHjM40=)
                          2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: kT1iOoHe9JOM5kOUN1+1KL6bmc5L1uqJc5CBXqeIvB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3c:86:e6:6b:7c:b1:b5:2c:f9:1c:33:23:20:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=af2caa57f096df0e8549bce9945b28bac2c3ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:a2:d3:78:c1:10:a3:d6:77:c2:df:50:20:
                    40:19:5b:3d:79:80:b3:cd:34:87:e9:ce:4c:88:ff:
                    a5:93:dc:1d:f1:08:a7:a5:e0:53:a4:5c:88:e9:27:
                    a1:2b:91:85:98:d4:10:5f:5d:dc:54:7e:0d:72:a3:
                    e8:03:50:b4:89:91:48:6c:3b:bd:6a:ee:8c:26:53:
                    4d:3b:d6:da:72:5c:a7:87:15:70:01:2e:03:bc:c1:
                    5e:c1:93:f0:24:25:6e:a2:75:6e:c5:e4:17:23:c4:
                    54:42:80:34:0e:e2:d1:5c:ee:97:d6:66:59:85:eb:
                    61:bf:f3:24:28:8d:01:bd:d3:87:d5:35:33:34:44:
                    1c:05:cc:5d:16:e6:d6:a9:86:af:b9:da:b5:29:4c:
                    73:ea:8c:ca:99:7a:d9:43:ac:f6:45:59:52:47:2d:
                    da:75:e4:ef:9c:5d:57:01:94:38:a4:de:44:90:a0:
                    da:b2:c8:cb:87:cb:88:5d:68:5b:3a:f4:7b:c0:75:
                    9d:31:dc:f1:33:6c:0d:77:ae:da:c2:fa:a8:40:64:
                    34:5e:cf:a4:bd:2f:cc:24:64:d6:7d:40:d4:bb:4b:
                    a0:8d:7d:b4:4c:1f:38:19:78:ed:ae:e4:e8:a8:55:
                    20:3f:62:11:b0:5d:43:7f:16:f8:05:4e:3f:14:8b:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:AA:57:F0:96:DF:0E:85:49:BC:E9:94:5B:28:BA:C2:C3:AE:11
            X509v3 Authority Key Identifier:
                keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:05:1b:43:04:a0:87:e5:0c:a2:e8:9e:5e:be:e0:21:2e:3e:
         b9:38:f6:c9:47:3f:81:03:19:3d:39:c9:2e:80:96:95:99:a9:
         f7:f0:56:0f:60:f8:1d:1b:82:67:09:57:1c:42:3c:4b:5f:80:
         57:25:ed:e6:b0:63:0f:9e:b0:6f:54:06:9f:44:95:5d:c6:9d:
         52:38:e5:af:44:bb:81:d7:56:72:5b:0a:33:04:04:4a:24:c0:
         87:74:57:82:33:ae:23:86:25:5c:ff:05:29:23:37:3b:1b:3d:
         0b:69:f2:45:4f:09:d0:d9:ce:5d:b5:13:6e:9d:f3:44:81:c6:
         d5:9c:95:ec:5f:69:1a:11:b4:17:d3:b2:df:b9:e7:78:1d:54:
         71:b4:3d:90:de:4f:a8:d5:81:00:b0:2c:74:48:49:10:c2:91:
         58:f9:1a:90:90:cd:1f:49:58:de:9b:92:dd:c1:49:e4:51:a7:
         b7:10:74:ee:5a:84:27:0e:60:9f:0c:21:63:00:a4:e8:59:47:
         cd:01:d2:64:52:78:29:3d:7b:02:cf:40:95:a4:a3:96:60:3a:
         f8:76:2d:6f:5d:f6:39:9a:64:33:09:5b:08:7c:51:fe:d8:8f:
         e9:0a:30:7d:1b:f9:13:a9:a6:49:a5:ad:51:43:23:0b:19:c6:
         52:26:1b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7TyG5mt8sbUs+RwzIyDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1
YmQyNDkwHhcNMjQwNTE3MTkwMDIyWhcNMjQwNTE4MTkwMDIyWjAzMTEwLwYDVQQD
EyhhZjJjYWE1N2YwOTZkZjBlODU0OWJjZTk5NDViMjhiYWMyYzNhZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eei03jBEKPWd8LfUCBAGVs9eYCz
zTSH6c5MiP+lk9wd8QinpeBTpFyI6SehK5GFmNQQX13cVH4NcqPoA1C0iZFIbDu9
au6MJlNNO9baclynhxVwAS4DvMFewZPwJCVuonVuxeQXI8RUQoA0DuLRXO6X1mZZ
hethv/MkKI0BvdOH1TUzNEQcBcxdFubWqYavudq1KUxz6ozKmXrZQ6z2RVlSRy3a
deTvnF1XAZQ4pN5EkKDassjLh8uIXWhbOvR7wHWdMdzxM2wNd67awvqoQGQ0Xs+k
vS/MJGTWfUDUu0ugjX20TB84GXjtruToqFUgP2IRsF1Dfxb4BU4/FIsQTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8sqlfwlt8OhUm86ZRbKLrCw64RMB8GA1UdIwQY
MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt
YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw
LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQUbQwSg
h+UMouieXr7gIS4+uTj2yUc/gQMZPTnJLoCWlZmp9/BWD2D4HRuCZwlXHEI8S1+A
VyXt5rBjD56wb1QGn0SVXcadUjjlr0S7gddWclsKMwQESiTAh3RXgjOuI4YlXP8F
KSM3Oxs9C2nyRU8J0NnOXbUTbp3zRIHG1ZyV7F9pGhG0F9Oy37nneB1UcbQ9kN5P
qNWBALAsdEhJEMKRWPkakJDNH0lY3puS3cFJ5FGntxB07lqEJw5gnwwhYwCk6FlH
zQHSZFJ4KT17As9AlaSjlmA6+HYtb132OZpkMwlbCHxR/tiP6QowfRv5E6mmSaWt
UUMjCxnGUiYbuQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:15:56 2024 by rpki-client on console-fra.rpki-client.org