Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          2xAXaeYrB6K5ydrlmmV5+uiaJBR1B/DwpQnifHTRiqg=
Subject key identifier:   BA:5A:9B:D6:37:5E:E3:FC:63:C5:8B:FF:A9:77:55:E3:56:79:E5:34
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       018F874A065C0A21166F868851D8FD2EBD8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          0C72
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: 3a0ZIiEmKdFGHFiZvM0gEM0X1LY.roa (hash: jv235UZxdE/5byfef5FnuCc5ND7yTFYp4qkogAzihOw=)
                          2: Rl8YhxulkjbDp7JhYiTxhwUmA6I.roa (hash: U6tWE+pXmQOF0u8mQlwq6IZGoIcojg4+tqcJPT0czoU=)
                          3: _2wvTvK9m8He5L4YoTHV0XpLIUE.roa (hash: EeMZ44zJAOCYfqIZllPU5rCQypJtErEamProZPUlW+o=)
                          4: aCmgWGJPA8mNHJTGfEz1N2lEQd0.roa (hash: krKcVJOE80vnYIwwDEzEmHbRWWK4Rh+nI1zrdSqwH4c=)
                          5: c4eDP5p4mFd2bTG986cLGbw9lsQ.roa (hash: 3w3acOcDsfF62mIl6WOONCKgLZOBDzx0DT0rVgzfxxM=)
                          6: f4DDPPEjDPsJoeeZ6KZE5S9OsYo.roa (hash: mc2/jUPpnmwAY1C1S7EB5oCua/gtkBTSmiLv5kM9Ji8=)
                          7: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: 5hD4P5UTGGzFXz03INsrI5p0TIdKACmy1hAg2n14Cus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:06:5c:0a:21:16:6f:86:88:51:d8:fd:2e:bd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=ba5a9bd6375ee3fc63c58bffa97755e35679e534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:4c:72:b1:99:77:bb:92:e9:66:c8:65:1b:
                    33:38:66:e2:fd:a0:df:73:bd:23:d4:57:f3:9b:3e:
                    a7:9f:7a:df:bd:68:37:5b:02:88:c7:3b:28:dc:59:
                    08:d7:60:c4:dc:ed:a4:b8:0d:bd:37:94:ce:fb:cf:
                    56:df:47:37:1c:d8:ed:3e:65:d9:e3:9d:3d:f3:8b:
                    cd:6b:75:c0:c6:1a:6c:de:71:4f:60:16:33:12:c3:
                    50:d5:36:5b:1a:b8:71:5c:1a:ba:a4:55:de:2a:e0:
                    db:85:56:33:57:ae:a8:67:38:4f:2b:9d:52:e8:80:
                    86:fc:7e:77:58:64:f7:6f:9d:e7:5d:14:8d:67:35:
                    9a:37:75:03:51:77:e5:41:04:8c:fb:44:31:b6:46:
                    ed:9d:5a:13:21:78:14:03:a7:c0:19:0a:1e:51:68:
                    5c:bb:97:e4:b7:38:bb:d4:1e:39:a6:3e:36:b4:62:
                    7e:b9:08:b7:9b:ed:3b:cc:47:0b:59:64:8a:d4:90:
                    0c:79:29:75:2e:63:c7:c8:72:ff:b6:38:46:54:b9:
                    d1:cc:f0:26:a4:dd:db:31:57:5e:de:11:f5:6e:41:
                    75:c5:55:dd:31:4a:a5:6e:37:50:dd:61:26:e7:62:
                    de:8e:a7:3d:48:0a:cf:5d:a3:06:22:0b:15:cf:2c:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5A:9B:D6:37:5E:E3:FC:63:C5:8B:FF:A9:77:55:E3:56:79:E5:34
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:54:03:f0:80:b0:f1:64:00:7e:fc:65:58:69:3f:ac:25:2d:
         85:3a:dd:14:ff:76:42:19:7f:6e:37:e7:b9:0c:b8:96:a2:34:
         f8:50:3f:ea:be:13:73:08:dc:64:7a:7a:63:77:47:c0:30:fb:
         4d:79:70:12:02:70:40:78:c5:86:45:dd:00:ec:00:90:b7:00:
         2c:39:99:ce:d9:37:1f:17:52:86:16:e2:1a:73:9d:fc:9f:4d:
         7c:cd:f2:36:1f:ea:86:a6:a6:2f:b5:44:f9:12:d9:1d:73:5a:
         31:63:53:ed:cc:16:3d:8f:24:24:1a:b1:2f:03:30:9e:65:73:
         b5:b6:43:42:27:ac:00:3b:e5:06:8a:86:dd:ab:bc:0a:5e:0a:
         a0:eb:29:b3:97:5d:b9:44:0c:fc:9d:45:5e:45:96:e7:67:95:
         76:70:97:b6:01:60:ba:83:b9:d0:5b:d5:a9:85:8e:3e:76:b6:
         63:53:e8:f4:d0:99:b5:62:83:35:79:f0:b7:61:cd:36:b1:b5:
         1f:0b:e6:13:c7:91:c2:82:c3:a3:3e:fd:00:93:d6:d0:57:e2:
         ce:e6:1e:5f:7f:6b:52:69:94:29:17:85:d4:f6:3c:b5:b1:b1:
         07:d1:2f:3b:c9:2f:59:26:81:29:dc:c9:24:c9:bc:c5:d5:5e:
         1d:52:22:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSgZcCiEWb4aIUdj9Lr2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj
MDc0ODkwHhcNMjQwNTE3MTYwMjA2WhcNMjQwNTE4MTYwMjA2WjAzMTEwLwYDVQQD
EyhiYTVhOWJkNjM3NWVlM2ZjNjNjNThiZmZhOTc3NTVlMzU2NzllNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L1McrGZd7uS6WbIZRszOGbi/aDf
c70j1Ffzmz6nn3rfvWg3WwKIxzso3FkI12DE3O2kuA29N5TO+89W30c3HNjtPmXZ
450984vNa3XAxhps3nFPYBYzEsNQ1TZbGrhxXBq6pFXeKuDbhVYzV66oZzhPK51S
6ICG/H53WGT3b53nXRSNZzWaN3UDUXflQQSM+0QxtkbtnVoTIXgUA6fAGQoeUWhc
u5fktzi71B45pj42tGJ+uQi3m+07zEcLWWSK1JAMeSl1LmPHyHL/tjhGVLnRzPAm
pN3bMVde3hH1bkF1xVXdMUqlbjdQ3WEm52Lejqc9SArPXaMGIgsVzywkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpam9Y3XuP8Y8WL/6l3VeNWeeU0MB8GA1UdIwQY
MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt
YTA0NWZmOGUyYWMwLzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw
LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlQD8ICw
8WQAfvxlWGk/rCUthTrdFP92Qhl/bjfnuQy4lqI0+FA/6r4TcwjcZHp6Y3dHwDD7
TXlwEgJwQHjFhkXdAOwAkLcALDmZztk3HxdShhbiGnOd/J9NfM3yNh/qhqamL7VE
+RLZHXNaMWNT7cwWPY8kJBqxLwMwnmVztbZDQiesADvlBoqG3au8Cl4KoOsps5dd
uUQM/J1FXkWW52eVdnCXtgFguoO50FvVqYWOPna2Y1Po9NCZtWKDNXnwt2HNNrG1
HwvmE8eRwoLDoz79AJPW0FfizuYeX39rUmmUKReF1PY8tbGxB9EvO8kvWSaBKdzJ
JMm8xdVeHVIiug==
-----END CERTIFICATE-----
Generated at Fri May 17 18:39:00 2024 by rpki-client on console-fra.rpki-client.org