Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
File:                     rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json)
Hash identifier:          LCAmh6epr9j/vKxCr9cIp+N9Ch16YKHsINolbu+4E1g=
Subject key identifier:   CB:8F:88:2F:B7:E1:7E:0E:53:F5:B3:D0:47:56:96:0F:50:9F:60:92
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018FB345D2B396DE7031A684ECC8941A053C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
Manifest number:          1300
Signing time:             Sun 26 May 2024 05:00:48 +0000
Manifest this update:     Sun 26 May 2024 05:00:48 +0000
Manifest next update:     Mon 27 May 2024 05:00:48 +0000
Files and hashes:         1: 0Jg3_aFQiZraSb10sLr9ixkf3ZA.roa (hash: yKNaz/EP+R3aprSpHPvVSImY2K0vAlSWjZBFCi+RPvs=)
                          2: 1-auehSmgzeVMNLqdBgB6sju514E.roa (hash: YltSPXEyHAVoSHs429q/hOSpsDL4nqqeQUpBs1kkgiE=)
                          3: 2kXJtwAYLlgHbuatV-hSXHAL23k.roa (hash: kN3dV/tjZCssLimsk4/mmyHpwtM1JjtVM1L+DQ3zlo0=)
                          4: 7MsLgVfA8KVXLyhNVVPweJej120.roa (hash: WP2ThwcyCvRKPqDvO/ozP4Uhly1YdIPQpszDtI+pYWM=)
                          5: Gduot1mSMk5blfCeQrcWqepCmso.roa (hash: rv1EQrtK3bT34xjB0gmBgh6Jx9PU1UlJIwschtUWfdE=)
                          6: RqIoqzKF1SeZu7y97KXtXSlLN_k.roa (hash: oX8skCfWz9nrYPu3BmkEe0K1TbgNoTCncVn5v0h5GWQ=)
                          7: Yx9forOTGqvfyiqNo1N0pLpbsPM.roa (hash: CMsEJ2ZnrG8Q7Q0VL0Y6bVHXkO+qQ4Kegc0sSn8fweo=)
                          8: ZkrwdpP0bg8c8HJ8lGblkkax-So.roa (hash: YDdRD19jLF9KlvIb73aX0vW3vsSWBXLvv98q1gpR5sI=)
                          9: bw0SFyLfM7H2jlnBn0C1PYCI2lI.roa (hash: RZ0wly/O0T7QssYgp7Mv7Mg0MRm6WAO9OmEry23e4GU=)
                          10: eMV3Di_dTL1HphRi2fO01gm720Q.roa (hash: 21HiTocon3V3V1cJXg/tp6pDyuWUpvOfhCyqHPf3s6w=)
                          11: fp8gzEDKtYikspMecjEpcceoR9o.roa (hash: eLE32kkcjJW8BxEnYDQhx1QKNcY+t5lDXzkjKtoc1rI=)
                          12: gorROWGkALO1eUI-zk6FWSRDML8.roa (hash: kI0i05hla7uPji4XCyxUaqzO4RWkzHIontKUNfbNAbM=)
                          13: hXGGb5Ji0ggYGlx7VB8wK5ioXQk.roa (hash: zNw/B88XzIT9hhxPO3vMysF5YLzAfJ8Lxz/pLWCHV/o=)
                          14: huGx7ZCw10nCfq_YBoAbwzCRORc.roa (hash: UKNpvkXVBGsbWA05tP1A97ZVijUBTesn7XA9HJhTxyw=)
                          15: m9u7fNOf7Lf8fjE-AiikLrhk_B8.roa (hash: 088rM33EQj2plDxL5yVRuuD6JnWEHMLa70MgioQostw=)
                          16: meaUpZSoMJhHPxVhWujN8rkLcqY.roa (hash: hME7Ry7ifDyMOAcnNtGO/lk/rkO/hB5htJB3Lw7+dGU=)
                          17: ngfNFtMT1qHzOqXTUGPei_Y2Xt8.roa (hash: 3S36FTguCTypHJD63aCfxFkuSrfi3bqvH6gg84dKtLE=)
                          18: ofFEoms9bW0UeR2WC94DVLw07jc.roa (hash: VfTkvPInCBGJjilsT42f8iKbMWTl56Kk0M8E3xWT8+s=)
                          19: rWrgAZNKSIVZ_pcJ7_wU90y1kEc.roa (hash: EMnFGbYghen0swwK3EASfZIyO1i6i6zyo+ZSiDmVZsg=)
                          20: rdIgKB4PjgmAlITYKG3yc1V-wm8.roa (hash: R3LRr4YwJ19p8LhS0y7kmlpIeJ568r+h8BUZ7GfkHVg=)
                          21: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: dFc/f2NcXNr08f2ZmbySCGZV0t2XNvac6Pe5Oh4GikQ=)
                          22: sJJyDBDfrWGkpQeDVXIktBozsGQ.roa (hash: 0TZwpBZF98lc6WREfkgc2fAcgph9P2UgWEjgPO8xWrg=)
                          23: wfvcsgz-Qo2gKzW3xu6hPj8ZJg4.roa (hash: wNWGebSUTJcEa3TL3vTcmiDvbpHFpM/FmN/5uNSQ4cg=)
                          24: wtiQzD4ir8krc_cdtwLwsOIwjvk.roa (hash: Xeu7tGvDLBkZAjzFbqQWFQnxzlMBvpB7BO9RQhQynz0=)
                          25: zK-FiRk6lWeoDkFhJy9Z2gPiOvc.roa (hash: eK+mWy+BUFxRDk24BwhZ9fAKInB/Yg9Tv47Z94MNVdg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:45:d2:b3:96:de:70:31:a6:84:ec:c8:94:1a:05:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: May 26 05:00:48 2024 GMT
            Not After : May 27 05:00:48 2024 GMT
        Subject: CN=cb8f882fb7e17e0e53f5b3d04756960f509f6092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:ba:be:00:e4:60:09:5b:25:04:4e:02:3f:
                    19:57:50:69:90:2b:5a:85:d9:24:46:64:da:ed:c7:
                    3d:76:b7:59:0a:bf:c0:8f:0f:4a:15:f5:04:d5:98:
                    65:a6:ca:18:b6:8b:11:86:01:e9:91:c3:fc:05:eb:
                    89:2c:45:64:60:0f:43:7b:4e:12:68:d6:b8:b0:dd:
                    22:50:fe:4d:aa:28:a4:ec:ca:c3:33:39:3b:01:aa:
                    fe:dc:ae:6c:a8:58:6d:8a:52:d2:fc:a6:7f:e2:a5:
                    a0:f1:f0:33:ef:9a:53:42:03:26:7a:99:a6:0a:be:
                    7e:08:f6:ad:da:e4:83:b3:19:da:f5:f6:ee:3d:10:
                    20:a6:c1:3b:f4:b4:59:13:18:3a:c6:36:00:83:35:
                    a8:08:93:e7:ef:3d:91:47:4c:82:52:af:9f:43:16:
                    06:fb:04:61:55:9c:3a:8d:f9:a3:9a:8a:17:e0:01:
                    fc:09:a8:2f:4b:4e:f9:82:b2:18:fa:1d:6c:59:8d:
                    d5:af:51:a9:50:f9:bb:e2:22:d3:48:6c:bc:4b:58:
                    81:1a:71:e9:e5:b8:0b:ba:4b:36:dc:e3:10:13:e4:
                    cf:d8:3d:b0:33:ad:2f:41:1b:62:10:3c:19:95:58:
                    6a:d8:f4:1e:ef:6f:31:8e:4c:fa:ea:a7:20:ec:08:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8F:88:2F:B7:E1:7E:0E:53:F5:B3:D0:47:56:96:0F:50:9F:60:92
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:4d:6e:cd:47:41:ed:ce:19:c1:bb:e4:61:1b:58:22:17:
         f3:2d:16:9b:c8:7d:bf:7f:c2:38:50:4a:e6:6a:f5:7b:80:ad:
         a1:9a:2f:de:53:fa:c5:60:fd:60:15:7b:9c:d1:4d:02:69:09:
         c2:d7:e2:8e:ea:ff:ec:b5:61:ae:73:fd:22:92:16:22:b1:f6:
         4d:8d:2c:30:75:72:27:17:e5:fd:cc:19:97:56:8a:f3:f5:a1:
         1e:77:43:20:e1:e7:d3:2f:d5:56:34:81:bb:a9:a1:25:92:6f:
         f1:97:9d:19:32:7e:3f:75:2d:27:9b:6a:68:46:e8:01:2f:93:
         fd:09:6a:ed:58:af:cc:22:33:2d:d1:20:06:d9:f8:22:a1:e4:
         b6:ef:fb:24:9d:3f:d9:fc:d2:f2:c9:b4:08:ed:25:8a:76:c3:
         0a:c1:ea:62:c4:ee:59:1d:99:64:89:a3:5e:ba:63:b2:72:bd:
         00:05:4e:d1:5b:f8:0b:8e:3c:92:7c:5b:f4:6d:95:26:27:b5:
         f8:16:5d:e4:76:b2:22:1f:b3:ba:c5:f2:38:91:6f:60:22:97:
         e7:b8:c8:1f:e8:74:96:56:a9:54:1f:ca:b2:80:c9:87:50:33:
         88:59:c6:cc:56:64:da:b3:79:b1:5c:df:98:d7:5e:1b:7f:fa:
         54:c5:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:52:05 2024 by rpki-client on console-ams.rpki-client.org