Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File:                     QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier:          FzGjcyQKhvlweumKT6FW/ViW9g7RxmyLPvon+H5tQus=
Subject key identifier:   99:F9:D0:22:C2:86:8E:A3:18:5A:0C:2E:CE:C9:1F:22:F8:66:7C:BC
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer:       /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial:       018F8748C4E8E30A50B0ADC062EBB968106B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number:          023D
Signing time:             Fri 17 May 2024 16:00:44 +0000
Manifest this update:     Fri 17 May 2024 16:00:44 +0000
Manifest next update:     Sat 18 May 2024 16:00:44 +0000
Files and hashes:         1: J8-PqKXLKprLZa67IT7Okq7NDEA.roa (hash: cCSd54AzWFQJHcMzHD6IJiHasyEimZEu0nUKC/p8NvY=)
                          2: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: wsFc484HvmnAwhdZi7n1Y8XWe/fnoge1pGztEqUYuTA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c4:e8:e3:0a:50:b0:ad:c0:62:eb:b9:68:10:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
        Validity
            Not Before: May 17 16:00:44 2024 GMT
            Not After : May 18 16:00:44 2024 GMT
        Subject: CN=99f9d022c2868ea3185a0c2ecec91f22f8667cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:71:e9:94:b5:94:ff:b7:18:2a:fd:17:66:
                    4b:33:0f:6a:4c:e6:70:8e:c7:11:2a:b1:80:4b:71:
                    c0:f0:4d:fd:c9:75:c9:e4:ee:a7:3b:e2:43:81:64:
                    ff:ce:a8:43:a7:f7:36:c7:08:40:db:52:f3:47:b2:
                    10:7a:da:20:2f:5a:78:d8:eb:1c:e0:18:4c:ab:ea:
                    a4:c3:35:b4:f8:0d:d7:37:47:03:e3:48:70:56:1c:
                    d4:49:b5:a2:16:19:e5:54:81:41:21:1d:e2:35:5a:
                    d3:9c:67:00:67:85:c0:85:10:22:2a:ac:45:01:26:
                    19:ab:23:69:d0:67:b5:10:55:2e:d6:6b:3f:03:03:
                    6f:58:79:72:71:95:0b:d5:4d:83:5a:26:e2:3d:79:
                    68:56:e1:5b:39:9f:14:88:b4:a1:05:7c:2d:6f:99:
                    b2:98:c1:6b:77:56:59:0e:df:70:a0:2b:da:54:24:
                    35:cb:30:0d:89:18:81:8a:da:97:af:cf:64:68:4c:
                    7d:bf:a1:17:ab:62:59:30:77:b5:05:b4:2d:08:0f:
                    81:6c:a3:36:a4:7b:2d:a8:4b:ef:eb:1a:ab:63:4a:
                    25:9f:55:39:52:1b:0f:de:a6:86:78:4e:d1:61:a7:
                    81:65:53:dc:b1:75:53:aa:a4:6f:cb:87:f1:5c:24:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:D0:22:C2:86:8E:A3:18:5A:0C:2E:CE:C9:1F:22:F8:66:7C:BC
            X509v3 Authority Key Identifier:
                keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:f8:cb:ea:7e:54:3d:4e:3d:c3:eb:4b:c6:9f:d6:c4:25:
         2c:c2:a8:a8:ee:0e:8e:c4:b8:79:c4:3e:d8:d3:fb:5e:98:d0:
         ef:57:0b:d0:b0:fa:9d:6f:f7:4a:bc:7f:68:be:44:d2:e9:cf:
         64:24:ff:d0:66:8d:ac:a2:cd:9b:34:71:f8:33:1b:80:71:a5:
         b0:2c:82:bb:58:b3:5a:c4:5e:10:3f:48:e4:f6:51:eb:22:2b:
         77:44:58:8c:2f:d1:8d:4b:25:cd:37:06:78:13:e9:45:d6:cb:
         3a:b9:8d:c1:42:20:44:50:ee:3b:71:3e:6e:03:2a:6d:ff:bf:
         f5:70:c1:62:e1:12:a9:14:33:64:6d:cc:00:11:ef:a4:4b:ba:
         81:99:eb:55:c8:26:30:72:b2:af:8d:79:ce:15:51:d8:0a:cf:
         68:82:2f:ff:63:55:af:d3:61:48:ab:8d:7f:13:44:cd:43:83:
         5f:ab:46:e5:fb:43:ea:a3:64:c4:83:f5:e4:5a:f9:d5:34:46:
         0a:81:8c:fb:5b:e0:ad:6b:c8:0b:14:db:5f:f3:16:fc:ff:97:
         f0:fa:7c:b6:37:6d:f5:30:6d:5d:bc:73:97:82:cf:3f:9e:d1:
         68:21:90:4a:96:16:f7:9e:b0:6c:5b:20:f3:3d:23:81:b4:d9:
         bd:68:2e:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSMTo4wpQsK3AYuu5aBBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi
MWE0Y2IwHhcNMjQwNTE3MTYwMDQ0WhcNMjQwNTE4MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg5OWY5ZDAyMmMyODY4ZWEzMTg1YTBjMmVjZWM5MWYyMmY4NjY3Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUFx6ZS1lP+3GCr9F2ZLMw9qTOZw
jscRKrGAS3HA8E39yXXJ5O6nO+JDgWT/zqhDp/c2xwhA21LzR7IQetogL1p42Osc
4BhMq+qkwzW0+A3XN0cD40hwVhzUSbWiFhnlVIFBIR3iNVrTnGcAZ4XAhRAiKqxF
ASYZqyNp0Ge1EFUu1ms/AwNvWHlycZUL1U2DWibiPXloVuFbOZ8UiLShBXwtb5my
mMFrd1ZZDt9woCvaVCQ1yzANiRiBitqXr89kaEx9v6EXq2JZMHe1BbQtCA+BbKM2
pHstqEvv6xqrY0oln1U5UhsP3qaGeE7RYaeBZVPcsXVTqqRvy4fxXCTnuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn50CLCho6jGFoMLs7JHyL4Zny8MB8GA1UdIwQY
MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt
MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk
LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitL4y+p+
VD1OPcPrS8af1sQlLMKoqO4OjsS4ecQ+2NP7XpjQ71cL0LD6nW/3Srx/aL5E0unP
ZCT/0GaNrKLNmzRx+DMbgHGlsCyCu1izWsReED9I5PZR6yIrd0RYjC/RjUslzTcG
eBPpRdbLOrmNwUIgRFDuO3E+bgMqbf+/9XDBYuESqRQzZG3MABHvpEu6gZnrVcgm
MHKyr415zhVR2ArPaIIv/2NVr9NhSKuNfxNEzUODX6tG5ftD6qNkxIP15Fr51TRG
CoGM+1vgrWvICxTbX/MW/P+X8Pp8tjdt9TBtXbxzl4LPP57RaCGQSpYW956wbFsg
8z0jgbTZvWguXA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:08:28 2024 by rpki-client on console-fra.rpki-client.org