Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          +7rsu9n5UOPlR51CH7l3ZbUhaAznNQE/a2ymVB9Zig8=
Subject key identifier:   85:99:F4:44:00:79:A2:62:B5:2D:0E:18:DA:72:28:A4:D9:79:66:8A
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       018F41C44BC2B215F970B7DAB2A32DF08006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 04:02:14 +0000
Manifest this update:     Sat 04 May 2024 04:02:14 +0000
Manifest next update:     Sun 05 May 2024 04:02:14 +0000
Files and hashes:         1: 3GGQ9ItMoUocsLKm6Cx9d0oHKKE.roa (hash: g2ua26/jDcbhnvj+WDeF0m0JQF6LgS8ALM4vGjV878c=)
                          2: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: V+kYDgXkHxVVCb7+zsuClQpee/86F5xw3Xh3uvPZsTg=)
                          3: ucNKD2Dl9dnDLHB_27rJBVD1pAQ.roa (hash: 4bvcch7vDhXeHrOh3Sif474Vqk4OawBCOQXC8bOt6Z0=)
                          4: ucQk23cjMlYkJ0sVhAIvA7nM0PI.roa (hash: wDENZC7TQGixu2f9DrGqePmSVJkx791QxEinV4EuWCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:4b:c2:b2:15:f9:70:b7:da:b2:a3:2d:f0:80:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: May  4 04:02:14 2024 GMT
            Not After : May  5 04:02:14 2024 GMT
        Subject: CN=8599f4440079a262b52d0e18da7228a4d979668a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:29:d9:4a:0b:27:ff:1e:40:37:19:f3:89:
                    2e:4a:f8:92:05:23:aa:e6:e8:25:3d:fd:6c:f9:84:
                    3a:db:76:2a:37:2a:b7:51:db:94:b7:10:62:d8:08:
                    b4:de:86:62:8a:40:5a:cc:f8:7d:dc:2e:11:dd:57:
                    4a:87:84:cd:51:05:0b:ee:58:a5:e8:98:0f:e8:b8:
                    d0:1e:c8:47:56:47:53:41:e3:57:14:cc:97:e4:28:
                    09:9d:74:e2:16:e6:09:71:6b:52:e5:9a:a7:ea:2f:
                    ec:ea:c6:e7:77:5b:de:ab:98:51:f1:34:d2:1c:e6:
                    38:ea:be:f4:ba:fc:53:a0:4e:d8:cd:0b:63:9d:37:
                    b5:62:5f:60:3b:ff:c3:a7:0a:b9:aa:15:7d:40:37:
                    64:18:53:af:88:c7:93:7c:2c:53:44:29:a4:65:aa:
                    b4:91:8a:28:f2:5b:fa:cc:f6:fe:0b:e7:bd:c2:18:
                    d5:84:c3:05:4c:f2:24:46:aa:99:69:29:46:2b:08:
                    88:88:0b:1c:71:57:9c:73:9a:b1:6a:a0:b1:3f:14:
                    b8:77:f7:3a:83:32:8f:bf:b1:91:aa:c4:c8:2a:25:
                    15:2c:13:2c:f3:10:34:28:20:82:8e:86:db:4d:70:
                    4e:5f:b2:80:70:95:e4:ab:29:7b:79:bd:5a:33:d0:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:99:F4:44:00:79:A2:62:B5:2D:0E:18:DA:72:28:A4:D9:79:66:8A
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:72:94:e0:b4:cf:49:94:e9:a4:91:cb:67:33:57:b6:26:ff:
         99:54:ed:f4:5a:73:d7:f0:15:29:7f:f6:ef:49:ea:b1:7e:7a:
         ec:11:0c:08:65:3d:8e:8e:5a:c6:b2:fa:cd:11:41:47:f2:39:
         db:a6:c0:fc:e8:34:32:74:52:ef:46:b8:a5:7f:31:4d:ba:38:
         f4:09:5c:c8:4a:09:e1:1b:22:95:5a:ec:41:3d:89:f7:5f:55:
         f9:24:c6:5f:c5:c6:82:29:4e:43:27:9b:e5:56:58:8d:f1:49:
         e0:f1:f6:b4:ec:23:b3:c4:3e:19:1f:1f:2c:50:e9:b9:3f:61:
         89:f3:35:c8:17:e2:83:33:f0:d5:aa:0b:ec:71:2c:fc:d9:a1:
         dc:0c:d1:e5:7c:dd:9a:d2:1a:0a:9f:15:83:d7:69:60:ed:da:
         80:d7:da:72:f8:a0:a5:70:19:44:18:28:e2:a1:9a:fe:db:cc:
         fa:77:6c:42:df:8f:6a:03:d4:8a:8c:82:25:84:49:2e:82:fc:
         62:a1:dd:1b:df:ff:0a:f1:5d:6e:25:57:a8:4e:3f:7b:ee:c8:
         49:04:73:70:dc:3f:0d:ae:8d:d3:2e:e9:ec:b7:50:0d:36:44:
         bd:bf:1e:ad:e0:33:11:8c:a0:c2:dc:cf:19:50:0c:88:22:b1:
         40:54:22:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxEvCshX5cLfasqMt8IAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4
NTNkNzcwHhcNMjQwNTA0MDQwMjE0WhcNMjQwNTA1MDQwMjE0WjAzMTEwLwYDVQQD
Eyg4NTk5ZjQ0NDAwNzlhMjYyYjUyZDBlMThkYTcyMjhhNGQ5Nzk2NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAwp2UoLJ/8eQDcZ84kuSviSBSOq
5uglPf1s+YQ623YqNyq3UduUtxBi2Ai03oZiikBazPh93C4R3VdKh4TNUQUL7lil
6JgP6LjQHshHVkdTQeNXFMyX5CgJnXTiFuYJcWtS5Zqn6i/s6sbnd1veq5hR8TTS
HOY46r70uvxToE7YzQtjnTe1Yl9gO//Dpwq5qhV9QDdkGFOviMeTfCxTRCmkZaq0
kYoo8lv6zPb+C+e9whjVhMMFTPIkRqqZaSlGKwiIiAsccVecc5qxaqCxPxS4d/c6
gzKPv7GRqsTIKiUVLBMs8xA0KCCCjobbTXBOX7KAcJXkqyl7eb1aM9BXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWZ9EQAeaJitS0OGNpyKKTZeWaKMB8GA1UdIwQY
MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt
NGE4YjZiNDA4MmIxLzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx
LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXKU4LTP
SZTppJHLZzNXtib/mVTt9Fpz1/AVKX/270nqsX567BEMCGU9jo5axrL6zRFBR/I5
26bA/Og0MnRS70a4pX8xTbo49AlcyEoJ4RsilVrsQT2J919V+STGX8XGgilOQyeb
5VZYjfFJ4PH2tOwjs8Q+GR8fLFDpuT9hifM1yBfigzPw1aoL7HEs/Nmh3AzR5Xzd
mtIaCp8Vg9dpYO3agNfacvigpXAZRBgo4qGa/tvM+ndsQt+PagPUioyCJYRJLoL8
YqHdG9//CvFdbiVXqE4/e+7ISQRzcNw/Da6N0y7p7LdQDTZEvb8ereAzEYygwtzP
GVAMiCKxQFQiWw==
-----END CERTIFICATE-----
Generated at Sat May 4 09:18:05 2024 by rpki-client on console-ams.rpki-client.org