Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File:                     imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier:          JSQnk2clgP3Yv1Ck8vkYYhb+bDjVBQTZIXmDQqp6yUc=
Subject key identifier:   64:34:1B:B0:B5:37:AF:B3:6A:E0:D0:41:43:B3:1B:7C:7E:78:E5:DD
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer:       /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial:       018F87ED092F5006AF025EB6EC3B3E411D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number:          63
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: Copte6TvWHBm6EPg4d9TMwirSqI.roa (hash: tDte1b4LPzkGKysyBjgSekT0BdSTOu9c8b/fPp+kWXY=)
                          2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: zfsBTavZXLSGvnWoXPcNEMZkrCxC/WQJUHyIwtWn618=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:09:2f:50:06:af:02:5e:b6:ec:3b:3e:41:1d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=64341bb0b537afb36ae0d04143b31b7c7e78e5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:86:a0:a8:e8:44:77:05:7f:d0:f0:8a:49:
                    9c:28:c1:71:15:ac:3f:cd:f3:9c:c3:54:20:8a:39:
                    2a:fc:b6:73:17:2c:f9:19:62:3d:56:aa:81:94:c1:
                    65:e1:0d:a4:69:16:4e:85:50:55:83:8b:ff:c9:6e:
                    ee:1a:86:4d:f5:de:f9:b7:a8:95:c8:a8:ad:f6:1d:
                    a9:46:5b:6f:b7:0f:1a:42:bc:6d:c9:af:ff:d9:a8:
                    ec:ea:54:6c:61:ae:66:9c:0e:e1:22:83:b4:94:90:
                    06:71:84:d8:90:ef:f8:78:4d:15:96:78:52:cc:66:
                    cc:95:28:0c:c2:42:d6:80:16:b0:31:01:3b:b7:8a:
                    f3:1b:65:25:67:59:a0:40:5a:e1:f1:bd:a7:b5:5c:
                    67:e0:29:2f:8b:0a:ac:19:b0:ca:35:6a:b3:41:a4:
                    46:53:d2:7e:e0:3a:71:c8:8c:87:03:73:37:0e:2a:
                    f5:8d:85:ea:45:19:48:82:d7:bf:9f:c3:23:71:57:
                    a2:40:c3:7d:e2:49:5b:4f:f3:57:0d:44:c9:a4:b2:
                    f0:67:c7:fc:7b:62:7d:65:fc:43:b3:fb:18:89:6c:
                    df:25:4a:b0:95:86:78:cf:fd:99:17:ec:52:8f:d2:
                    27:f9:9d:fe:db:5e:63:af:ca:c3:2e:0f:6f:cd:c7:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:1B:B0:B5:37:AF:B3:6A:E0:D0:41:43:B3:1B:7C:7E:78:E5:DD
            X509v3 Authority Key Identifier:
                keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:44:3e:73:c1:b8:69:8a:03:89:6c:f8:4d:a1:bc:31:e7:e2:
         57:66:8b:22:fe:32:61:36:ad:c9:50:f7:41:43:51:6a:8f:6b:
         d5:19:e9:67:67:97:5c:cd:bf:19:97:c9:20:93:94:d6:6c:6d:
         b3:4a:ff:11:cb:56:fb:a0:df:71:ea:a8:a4:ba:4b:ce:79:28:
         ce:1c:30:8a:f1:c8:e9:30:48:99:49:0a:ac:8f:cb:18:88:13:
         cc:b6:08:d7:f8:e0:3c:a8:c6:7b:0e:25:1f:83:94:52:c6:da:
         1a:d1:5b:47:83:e0:5a:7f:fb:e8:7b:9c:37:c9:d5:e5:66:5b:
         4c:47:13:ae:68:0c:99:09:33:83:54:17:da:5e:8c:cb:5a:e1:
         5b:04:83:05:89:e9:05:12:df:0a:85:23:b3:13:26:00:52:e2:
         f9:f7:54:f0:ab:aa:16:55:16:43:bb:1c:9c:d2:f4:03:8a:0e:
         86:b6:eb:bb:c7:d4:80:19:60:09:f9:69:ff:fa:53:c6:f9:a9:
         04:f7:94:30:da:30:7d:fe:12:50:e2:6a:38:98:c6:35:d7:ca:
         9d:7e:52:40:53:0a:e3:3c:93:2b:74:46:74:7e:cb:75:60:ef:
         f1:92:f9:22:5e:72:d0:78:07:83:ae:a5:26:b5:58:23:77:fa:
         42:82:e1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7QkvUAavAl627Ds+QR0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAxZDJlYTFmOTQ4Y2EwMThjMzM1YmVkYTcyZGJlYzA3
OWQ2ZTYwHhcNMjQwNTE3MTkwMDA5WhcNMjQwNTE4MTkwMDA5WjAzMTEwLwYDVQQD
Eyg2NDM0MWJiMGI1MzdhZmIzNmFlMGQwNDE0M2IzMWI3YzdlNzhlNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zGGoKjoRHcFf9DwikmcKMFxFaw/
zfOcw1Qgijkq/LZzFyz5GWI9VqqBlMFl4Q2kaRZOhVBVg4v/yW7uGoZN9d75t6iV
yKit9h2pRltvtw8aQrxtya//2ajs6lRsYa5mnA7hIoO0lJAGcYTYkO/4eE0VlnhS
zGbMlSgMwkLWgBawMQE7t4rzG2UlZ1mgQFrh8b2ntVxn4CkviwqsGbDKNWqzQaRG
U9J+4DpxyIyHA3M3Dir1jYXqRRlIgte/n8MjcVeiQMN94klbT/NXDUTJpLLwZ8f8
e2J9ZfxDs/sYiWzfJUqwlYZ4z/2ZF+xSj9In+Z3+215jr8rDLg9vzceRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ0G7C1N6+zauDQQUOzG3x+eOXdMB8GA1UdIwQY
MBaAFIpgHS6h+UjKAYwzW+2nLb7AedbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEt
YTQyNTgyMDcwOTQ5LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEtYTQyNTgyMDcwOTQ5
LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0Q+c8G4
aYoDiWz4TaG8MefiV2aLIv4yYTatyVD3QUNRao9r1RnpZ2eXXM2/GZfJIJOU1mxt
s0r/EctW+6DfceqopLpLznkozhwwivHI6TBImUkKrI/LGIgTzLYI1/jgPKjGew4l
H4OUUsbaGtFbR4PgWn/76HucN8nV5WZbTEcTrmgMmQkzg1QX2l6My1rhWwSDBYnp
BRLfCoUjsxMmAFLi+fdU8KuqFlUWQ7scnNL0A4oOhrbru8fUgBlgCflp//pTxvmp
BPeUMNowff4SUOJqOJjGNdfKnX5SQFMK4zyTK3RGdH7LdWDv8ZL5Il5y0HgHg66l
JrVYI3f6QoLhWg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:01:12 2024 by rpki-client on console-ams.rpki-client.org