Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
File:                     GtoiXLfylBbnU0aV-_shdi_uk8g.mft (raw, json)
Hash identifier:          +HSpsdYVrMLD4Tr0zKetga+OKbGWJp0rqq0TT+BAoq0=
Subject key identifier:   CC:DD:67:D1:09:A7:0B:92:E6:85:E3:0C:A0:AB:22:38:B1:01:02:56
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       018F5437C7D176119074ECEC58FDAEAE8F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
Manifest number:          1048
Signing time:             Tue 07 May 2024 18:01:32 +0000
Manifest this update:     Tue 07 May 2024 18:01:32 +0000
Manifest next update:     Wed 08 May 2024 18:01:32 +0000
Files and hashes:         1: GQIvntaNzvvi75vGNYIQ4Hy7nEU.roa (hash: VAPFpy1PKo1pUOrXvIWyuSoBxDweGy5Xr9hpAIir8SI=)
                          2: GtoiXLfylBbnU0aV-_shdi_uk8g.crl (hash: kfrvtneH6GrQnb2M/tHIMZAio8P8wRQ9csMx9SohZDI=)
                          3: Jv9HRixiq9uLD4irEDpO3pt8wr8.roa (hash: U7xROwec+QF/MHQhH33xrPWiso272jz4FDkvQW7GBOQ=)
                          4: XbIQ9wnFDnrTuJ5RnDypt3OoOPM.roa (hash: hsEO3APGi3G6iLSoz2Xezq2M+O55skz4qrc2mKFIFVE=)
                          5: t-2bMAmI1E5qjavWr2xDA-5Gph8.roa (hash: Z3d+ls00z6hTzrJWtuc1GX4EAaH8OlSWFLHfos7LfCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:c7:d1:76:11:90:74:ec:ec:58:fd:ae:ae:8f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: May  7 18:01:32 2024 GMT
            Not After : May  8 18:01:32 2024 GMT
        Subject: CN=ccdd67d109a70b92e685e30ca0ab2238b1010256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:e4:c9:e3:2e:2d:29:2d:3e:d6:81:48:d9:
                    0d:c2:4b:e4:c7:41:78:54:30:1b:3e:81:3e:52:9c:
                    d1:25:3c:43:44:01:66:79:4c:34:a4:8e:74:a2:9e:
                    f8:d5:03:e0:2f:64:00:52:c9:80:2c:fd:a1:67:8b:
                    85:90:42:e0:59:7f:07:8c:c2:dc:6c:56:94:34:b0:
                    d2:a2:6f:8b:68:44:17:3b:15:7c:4f:a4:e0:62:13:
                    e8:a7:dd:6e:16:bb:85:eb:8a:61:31:cb:3e:42:d0:
                    5f:ce:01:bd:c0:46:48:81:01:40:70:10:94:de:4f:
                    d7:bc:9f:81:19:27:a6:8c:4a:7f:06:46:b8:bf:25:
                    ca:37:63:05:60:0b:93:76:2e:60:12:b7:e5:06:8d:
                    ea:92:a0:19:11:a6:59:3a:e6:5a:e2:65:cd:61:41:
                    f8:dc:b4:5e:62:a7:83:68:28:e3:07:1b:79:60:9f:
                    2f:29:77:02:9e:4e:b9:41:12:f6:96:eb:97:8b:4f:
                    79:08:d4:55:17:2f:43:36:7e:21:27:7d:ff:8e:1e:
                    7a:73:42:04:de:85:b1:55:d1:4f:ed:bd:3a:80:bc:
                    97:e0:ea:cc:a3:b4:a8:e9:08:60:22:8f:57:df:e0:
                    ac:85:bc:74:a7:aa:f7:78:e1:ff:03:2c:49:be:eb:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DD:67:D1:09:A7:0B:92:E6:85:E3:0C:A0:AB:22:38:B1:01:02:56
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:df:dc:83:0b:82:99:75:37:5e:a6:70:60:f3:dd:e9:ee:04:
         2d:cd:55:59:db:79:27:c0:21:63:67:3f:25:94:16:c7:2a:cb:
         6d:94:62:aa:34:ce:92:47:ea:01:37:38:c6:14:26:77:d7:c9:
         f3:42:9e:5c:86:4d:ba:8a:2f:85:d0:52:84:cb:e1:49:75:db:
         91:83:b3:71:0d:56:d1:dc:09:ea:47:0f:bc:ac:5a:5a:e8:78:
         62:c4:77:92:06:cb:e8:a1:8f:6e:2c:1b:5a:cc:13:2b:76:ea:
         92:f7:54:e9:57:f7:46:f0:a8:96:c9:cc:59:f6:e5:5f:28:8d:
         7c:09:43:a6:6e:7f:a0:05:48:74:d2:d9:39:e5:ba:24:e9:66:
         1b:9f:f6:97:93:5c:f5:b9:58:fd:b6:d5:ed:42:ff:47:ca:aa:
         a9:6c:80:7d:df:90:5e:1c:5e:d8:7c:52:a4:2c:a9:ec:b1:00:
         19:72:4e:b7:80:03:c0:55:be:e3:91:56:af:5a:57:8d:d8:af:
         a3:a7:41:7b:b3:e8:6d:d3:2e:91:13:cc:57:f1:9a:81:76:5f:
         83:89:f7:15:e0:a4:c6:ff:90:7e:52:24:d8:c9:82:b4:24:4a:
         44:7d:8b:a0:24:2f:40:f6:93:35:81:0f:30:d5:7a:eb:2d:d5:
         4c:82:54:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9UN8fRdhGQdOzsWP2uro8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZGEyMjVjYjdmMjk0MTZlNzUzNDY5NWZiZmIyMTc2MmZl
ZTkzYzgwHhcNMjQwNTA3MTgwMTMyWhcNMjQwNTA4MTgwMTMyWjAzMTEwLwYDVQQD
EyhjY2RkNjdkMTA5YTcwYjkyZTY4NWUzMGNhMGFiMjIzOGIxMDEwMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvObkyeMuLSktPtaBSNkNwkvkx0F4
VDAbPoE+UpzRJTxDRAFmeUw0pI50op741QPgL2QAUsmALP2hZ4uFkELgWX8HjMLc
bFaUNLDSom+LaEQXOxV8T6TgYhPop91uFruF64phMcs+QtBfzgG9wEZIgQFAcBCU
3k/XvJ+BGSemjEp/Bka4vyXKN2MFYAuTdi5gErflBo3qkqAZEaZZOuZa4mXNYUH4
3LReYqeDaCjjBxt5YJ8vKXcCnk65QRL2luuXi095CNRVFy9DNn4hJ33/jh56c0IE
3oWxVdFP7b06gLyX4OrMo7So6QhgIo9X3+Cshbx0p6r3eOH/AyxJvus4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzdZ9EJpwuS5oXjDKCrIjixAQJWMB8GA1UdIwQY
MBaAFBraIly38pQW51NGlfv7IXYv7pPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUt
NzUyNWQ0ZDQwOGI1LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUtNzUyNWQ0ZDQwOGI1
LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN/cgwuC
mXU3XqZwYPPd6e4ELc1VWdt5J8AhY2c/JZQWxyrLbZRiqjTOkkfqATc4xhQmd9fJ
80KeXIZNuoovhdBShMvhSXXbkYOzcQ1W0dwJ6kcPvKxaWuh4YsR3kgbL6KGPbiwb
WswTK3bqkvdU6Vf3RvColsnMWfblXyiNfAlDpm5/oAVIdNLZOeW6JOlmG5/2l5Nc
9blY/bbV7UL/R8qqqWyAfd+QXhxe2HxSpCyp7LEAGXJOt4ADwFW+45FWr1pXjdiv
o6dBe7PobdMukRPMV/GagXZfg4n3FeCkxv+QflIk2MmCtCRKRH2LoCQvQPaTNYEP
MNV66y3VTIJUiw==
-----END CERTIFICATE-----
Generated at Tue May 7 20:57:36 2024 by rpki-client on console-fra.rpki-client.org