Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File:                     smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier:          QPp2j7HDxu3K8pizGVAeP6rB6iIvxwPQy57QjPovNN4=
Subject key identifier:   A4:54:9E:B9:8B:18:D7:12:94:33:9C:A5:03:08:09:1F:12:EB:39:FC
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer:       /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial:       018F55161B943C4BE2CCD7E8EA8F65743F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number:          0C15
Signing time:             Tue 07 May 2024 22:04:23 +0000
Manifest this update:     Tue 07 May 2024 22:04:23 +0000
Manifest next update:     Wed 08 May 2024 22:04:23 +0000
Files and hashes:         1: gWh6Wk1LztjLY4cJieIrlrOv81k.roa (hash: X+mt5gykzuaxS7MckaWIkBuTxnA4YhoMqCK0nkS2JBw=)
                          2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: 1ZDQbSHNY2zM6KdGacUOQ9e5/ijmKVg4s7OCqfmnaGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:16:1b:94:3c:4b:e2:cc:d7:e8:ea:8f:65:74:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
        Validity
            Not Before: May  7 22:04:23 2024 GMT
            Not After : May  8 22:04:23 2024 GMT
        Subject: CN=a4549eb98b18d71294339ca50308091f12eb39fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:b6:30:84:d6:ed:77:30:8d:b5:f1:e9:11:
                    97:ce:a4:79:a1:e7:a4:1b:50:73:c7:fa:0b:5e:9f:
                    8e:fc:51:b6:b1:7b:bf:76:e0:19:04:6c:9c:69:93:
                    6d:d4:62:76:69:c8:5b:65:63:e7:1d:91:2a:4e:da:
                    97:4e:31:14:85:c9:4a:de:a2:a6:a3:dd:bc:67:c6:
                    a7:c2:7b:41:82:a7:82:b6:45:f1:ce:d3:e1:d7:3e:
                    3c:73:05:43:f0:fe:48:7e:5b:34:e0:6a:97:bf:2b:
                    e8:4c:f5:75:dc:8d:53:19:0e:29:90:1e:50:fe:45:
                    61:3d:eb:ea:a3:c2:cd:80:8a:ae:22:33:5e:e5:c6:
                    48:e2:c5:82:b3:99:41:9a:db:be:6f:ef:78:74:f4:
                    e1:3f:9e:20:86:f2:d0:96:6f:c0:2d:1d:27:c7:49:
                    8e:f2:dc:c0:a5:8e:30:f4:a7:19:49:9b:f0:05:c3:
                    f7:50:01:ec:43:ce:b2:21:4f:2a:32:7e:7e:9b:4f:
                    bf:a5:1a:eb:90:64:a5:28:9c:5d:a1:46:c9:9d:fe:
                    96:5f:f5:9e:b5:c3:77:75:74:25:b9:f6:91:22:dc:
                    41:76:43:4f:56:c8:b9:34:01:65:c7:a7:37:da:c9:
                    d5:4e:d4:e3:53:9e:72:8a:92:4f:a5:2d:f9:31:62:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:54:9E:B9:8B:18:D7:12:94:33:9C:A5:03:08:09:1F:12:EB:39:FC
            X509v3 Authority Key Identifier:
                keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:50:f1:5d:4e:b0:79:69:1a:00:1a:ed:63:97:93:76:36:56:
         1d:a4:25:62:77:a9:7d:23:14:65:74:84:dd:8d:86:00:c1:ea:
         9a:a8:51:db:3f:b2:72:c1:d6:c7:b5:98:24:3b:7a:55:c6:aa:
         09:f8:fc:97:b5:69:44:c2:29:89:62:63:81:c6:21:49:2c:5d:
         fc:e3:ce:19:22:c7:f9:a4:20:4a:3a:77:d2:c2:e1:eb:a8:1d:
         d7:7b:d9:e5:78:5b:9f:9b:e7:a6:f8:cf:b2:f8:81:71:ad:d7:
         8a:0a:f3:43:58:29:e8:2b:29:87:54:6b:68:99:e7:01:09:42:
         5f:50:2c:15:5b:bf:54:35:5e:b9:d1:04:cc:1f:b4:87:36:db:
         79:89:b3:a4:3f:c0:9c:9c:bc:31:2f:88:10:69:74:ec:10:32:
         f6:d0:d8:7f:71:37:8e:aa:1e:84:8b:40:4b:dc:68:66:a8:68:
         26:2c:57:f2:d2:4a:e6:6a:6f:f3:60:05:a2:5a:b9:ae:81:1a:
         93:39:73:7b:4b:a8:3e:ad:09:fc:7b:da:95:7a:44:e9:0c:e7:
         3c:b1:2c:f9:e6:a4:6a:51:36:59:d4:9f:3e:6b:f9:32:5d:18:
         2f:9a:cd:c7:da:5b:88:4c:5b:f0:a0:39:6d:27:9e:0c:0a:68:
         e4:31:7b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9VFhuUPEvizNfo6o9ldD9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1
YmRmNDIwHhcNMjQwNTA3MjIwNDIzWhcNMjQwNTA4MjIwNDIzWjAzMTEwLwYDVQQD
EyhhNDU0OWViOThiMThkNzEyOTQzMzljYTUwMzA4MDkxZjEyZWIzOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUK2MITW7XcwjbXx6RGXzqR5oeek
G1Bzx/oLXp+O/FG2sXu/duAZBGycaZNt1GJ2achbZWPnHZEqTtqXTjEUhclK3qKm
o928Z8anwntBgqeCtkXxztPh1z48cwVD8P5Ifls04GqXvyvoTPV13I1TGQ4pkB5Q
/kVhPevqo8LNgIquIjNe5cZI4sWCs5lBmtu+b+94dPThP54ghvLQlm/ALR0nx0mO
8tzApY4w9KcZSZvwBcP3UAHsQ86yIU8qMn5+m0+/pRrrkGSlKJxdoUbJnf6WX/We
tcN3dXQlufaRItxBdkNPVsi5NAFlx6c32snVTtTjU55yipJPpS35MWIHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRUnrmLGNcSlDOcpQMICR8S6zn8MB8GA1UdIwQY
MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt
NDQ2YTg5MTNkNGI4LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4
LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVDxXU6w
eWkaABrtY5eTdjZWHaQlYnepfSMUZXSE3Y2GAMHqmqhR2z+ycsHWx7WYJDt6Vcaq
Cfj8l7VpRMIpiWJjgcYhSSxd/OPOGSLH+aQgSjp30sLh66gd13vZ5Xhbn5vnpvjP
sviBca3XigrzQ1gp6Csph1RraJnnAQlCX1AsFVu/VDVeudEEzB+0hzbbeYmzpD/A
nJy8MS+IEGl07BAy9tDYf3E3jqoehItAS9xoZqhoJixX8tJK5mpv82AFolq5roEa
kzlze0uoPq0J/HvalXpE6QznPLEs+eakalE2WdSfPmv5Ml0YL5rNx9pbiExb8KA5
bSeeDApo5DF72w==
-----END CERTIFICATE-----
Generated at Wed May 8 02:39:37 2024 by rpki-client on console-fra.rpki-client.org