Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          JJBJYEWL+ySusqIfDQq1odPjOolE5dxPo6Niv9yvmBY=
Subject key identifier:   E7:15:8D:C0:39:E9:F1:EE:C0:06:45:A3:F5:45:CA:17:64:DE:AE:53
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       018F1D1346F79E60FF1E0FD015B26276EE0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          1148
Signing time:             Sat 27 Apr 2024 01:02:33 +0000
Manifest this update:     Sat 27 Apr 2024 01:02:33 +0000
Manifest next update:     Sun 28 Apr 2024 01:02:33 +0000
Files and hashes:         1: 0xUUmjjeEaP_p1ViXNsOStGWyKM.roa (hash: YxF2j7mqW0WQAuLrxdWVjA4f5sHh3RVa35O9qTcnNCE=)
                          2: 5a4gBLOD001NgDyxLG2he_xwtJ4.roa (hash: eDAVUVf6FpIvugJevfiGfMbytsJ+v1oaBnZAwfxOW4w=)
                          3: DAK0Ho_XnLsPqZAhfOsaOPGS4Y4.roa (hash: uV6SfJ0lgIjONEO1uPSBOHlMMlwfDrN/EsDJKUwk34c=)
                          4: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: s7koNAxt+r9QIO85r9OxdKuKs6r2qaExXLyi8WwCLOE=)
                          5: qnUZBYe_-1R1NTzGxxb2zUZPD7I.roa (hash: 1bOBHJdCoXLVJ/3a54RtrLd5wuJJ49kPLZGriJwGwx4=)
                          6: yzrzc-sPqCXP0vKszYw8O2ztITQ.roa (hash: bp5D5sdJaDq1pbBhi2NfmKJaSlx3gFKExLwnDIbkxjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1d:13:46:f7:9e:60:ff:1e:0f:d0:15:b2:62:76:ee:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Apr 27 01:02:33 2024 GMT
            Not After : Apr 28 01:02:33 2024 GMT
        Subject: CN=e7158dc039e9f1eec00645a3f545ca1764deae53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:d1:b1:ed:67:17:96:46:88:6a:ec:a2:9e:
                    c6:50:71:bd:d2:0c:d5:ba:2e:8d:56:2d:a5:8c:23:
                    12:7b:c9:ac:dc:cd:8f:c0:d0:93:16:e6:50:bb:ea:
                    9b:ef:fe:b2:1d:de:37:a2:9b:b9:d1:7e:b7:93:77:
                    ce:af:91:b3:3f:03:88:2b:8a:b4:67:ad:71:3c:36:
                    f6:d0:d4:9b:6f:d1:13:4c:35:8b:83:68:d4:18:48:
                    a1:e1:ee:28:08:c9:d6:05:c1:58:83:97:86:47:c0:
                    b8:c5:34:c8:d4:cf:f4:2a:4b:23:76:49:6f:c0:4d:
                    81:b9:54:09:21:65:9e:1a:07:18:6f:da:df:8a:69:
                    ec:d4:f8:81:66:05:27:55:0e:e6:4c:ae:ad:ad:06:
                    c7:b1:cf:ca:6a:9b:c8:2b:b5:e6:ab:b0:a3:10:d8:
                    6b:41:ff:e3:38:77:2a:e6:eb:97:9e:50:39:2f:c0:
                    b7:1a:e0:f2:60:4b:af:19:cb:39:56:08:5f:f5:59:
                    8f:e7:e4:1b:0b:ee:08:de:eb:ef:41:df:38:3c:e1:
                    cb:65:87:0b:50:d3:5f:56:d5:f0:b5:83:25:da:f5:
                    c9:80:50:37:52:ec:db:36:ce:60:f8:59:b3:69:25:
                    82:99:2a:95:11:94:06:f5:37:1a:ef:ff:1d:68:1a:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:8D:C0:39:E9:F1:EE:C0:06:45:A3:F5:45:CA:17:64:DE:AE:53
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:01:e2:f4:a8:35:8e:71:a6:b9:e9:7f:59:e9:5b:90:5b:c7:
         dd:e8:77:ee:47:c0:b0:fa:4f:d6:ce:30:cf:9d:69:66:68:bc:
         60:9c:fd:c0:89:22:e4:ab:e8:94:7a:51:59:cc:eb:80:56:71:
         8c:ed:46:5f:68:2d:17:91:e6:fd:50:8e:39:8c:c5:39:79:fc:
         d6:82:95:04:06:c9:9b:28:47:43:5d:a1:e6:cf:ce:8c:9b:89:
         4b:75:98:02:e5:95:a7:4f:ef:18:3f:5d:77:40:23:17:11:d6:
         d0:ba:fa:2a:55:fb:f4:6c:00:ab:5e:e2:9c:d1:7c:2b:47:b9:
         ed:4a:99:3e:09:80:e0:f5:45:27:d1:67:a0:f1:13:ba:e1:ec:
         15:97:bc:4b:2a:87:e8:df:7f:0c:06:4a:55:16:e6:69:19:77:
         a0:18:cf:e7:8d:03:3f:4f:c5:f1:a8:41:3d:86:dc:89:81:39:
         9d:76:74:ff:70:a7:91:86:26:81:67:dd:6c:85:c3:25:b7:7b:
         10:7c:fd:13:f2:72:89:34:0b:f2:9c:49:19:93:26:d5:c9:fb:
         e7:2d:72:84:9b:0c:ed:23:4e:9d:dc:07:fe:60:af:e1:ec:e4:
         46:f2:71:b8:f7:54:99:d1:8b:a2:1b:5c:ef:44:98:5a:22:50:
         48:41:8f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8dE0b3nmD/Hg/QFbJidu4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4
MzNjNTYwHhcNMjQwNDI3MDEwMjMzWhcNMjQwNDI4MDEwMjMzWjAzMTEwLwYDVQQD
EyhlNzE1OGRjMDM5ZTlmMWVlYzAwNjQ1YTNmNTQ1Y2ExNzY0ZGVhZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUXRse1nF5ZGiGrsop7GUHG90gzV
ui6NVi2ljCMSe8ms3M2PwNCTFuZQu+qb7/6yHd43opu50X63k3fOr5GzPwOIK4q0
Z61xPDb20NSbb9ETTDWLg2jUGEih4e4oCMnWBcFYg5eGR8C4xTTI1M/0Kksjdklv
wE2BuVQJIWWeGgcYb9rfimns1PiBZgUnVQ7mTK6trQbHsc/KapvIK7Xmq7CjENhr
Qf/jOHcq5uuXnlA5L8C3GuDyYEuvGcs5Vghf9VmP5+QbC+4I3uvvQd84POHLZYcL
UNNfVtXwtYMl2vXJgFA3UuzbNs5g+FmzaSWCmSqVEZQG9Tca7/8daBoXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcVjcA56fHuwAZFo/VFyhdk3q5TMB8GA1UdIwQY
MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt
OGM1NmQ4ZmUxN2I1LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1
LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAHi9Kg1
jnGmuel/WelbkFvH3eh37kfAsPpP1s4wz51pZmi8YJz9wIki5KvolHpRWczrgFZx
jO1GX2gtF5Hm/VCOOYzFOXn81oKVBAbJmyhHQ12h5s/OjJuJS3WYAuWVp0/vGD9d
d0AjFxHW0Lr6KlX79GwAq17inNF8K0e57UqZPgmA4PVFJ9FnoPETuuHsFZe8SyqH
6N9/DAZKVRbmaRl3oBjP540DP0/F8ahBPYbciYE5nXZ0/3CnkYYmgWfdbIXDJbd7
EHz9E/JyiTQL8pxJGZMm1cn75y1yhJsM7SNOndwH/mCv4ezkRvJxuPdUmdGLohtc
70SYWiJQSEGP+w==
-----END CERTIFICATE-----
Generated at Sat Apr 27 11:08:24 2024 by rpki-client on console-ams.rpki-client.org