Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File:                     SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier:          86JTLpjUX/rV+O09M5Ebyt7wDGPax1sY6CkqHoYCF88=
Subject key identifier:   E2:D2:79:75:8A:88:7B:27:6F:83:CD:4C:31:25:F5:A4:7B:BA:E0:3D
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer:       /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial:       018F88923F3B84EB526F944283798856B4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number:          0CF5
Signing time:             Fri 17 May 2024 22:00:36 +0000
Manifest this update:     Fri 17 May 2024 22:00:36 +0000
Manifest next update:     Sat 18 May 2024 22:00:36 +0000
Files and hashes:         1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: 6AaCecbqj3dcADenmWzyRVEFRY8hyGGRh4r1pDdaW3s=)
                          2: WeK1z97yQbPYGIo8av-F4JURaK0.roa (hash: H4I7EhJAkgI4NDzXJVjuwB8HNCzCkfR6f+lO4w6WwFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:3f:3b:84:eb:52:6f:94:42:83:79:88:56:b4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
        Validity
            Not Before: May 17 22:00:36 2024 GMT
            Not After : May 18 22:00:36 2024 GMT
        Subject: CN=e2d279758a887b276f83cd4c3125f5a47bbae03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:59:26:8c:69:39:99:1a:9f:d2:fb:cc:94:
                    05:36:b2:5a:e3:bc:a1:90:e1:ed:c3:09:b9:a5:15:
                    ab:4c:d7:5c:62:17:c6:bd:98:eb:c5:c0:a7:f6:77:
                    0d:d8:01:a7:75:23:05:cd:d3:ee:72:cb:e4:da:ea:
                    8a:48:cb:94:83:9f:b5:10:d3:5d:b9:78:a5:0e:4d:
                    28:c8:22:ef:91:83:4d:db:6b:39:de:31:ba:aa:09:
                    93:82:37:b4:23:cd:0a:1a:37:0a:8f:1e:b7:75:0f:
                    82:aa:53:9d:da:75:a9:8d:8b:67:0b:ad:bc:58:ca:
                    d3:a7:d2:ac:5e:3b:cb:ef:d6:ec:3a:eb:52:76:56:
                    19:f0:f6:36:df:82:db:b5:76:eb:bf:12:83:ff:8f:
                    dd:86:b4:18:23:47:bd:33:03:bd:6d:97:63:60:2f:
                    ed:9a:aa:28:44:f7:1c:1c:c9:15:72:6e:e1:c2:d6:
                    11:2b:90:8e:9a:48:2a:db:d9:f8:05:4c:53:e6:c5:
                    6d:6c:b7:47:98:a6:87:43:ac:bb:7a:c5:10:76:2f:
                    11:88:f6:2e:85:cb:07:83:34:4a:98:19:57:ba:80:
                    43:77:b3:17:76:85:5e:0f:53:33:03:89:5c:53:ab:
                    d7:4b:f4:65:0d:66:f7:e8:94:e9:ee:ea:e2:d1:17:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D2:79:75:8A:88:7B:27:6F:83:CD:4C:31:25:F5:A4:7B:BA:E0:3D
            X509v3 Authority Key Identifier:
                keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dc:09:61:e8:e3:c3:13:b2:80:58:d0:c2:08:d6:4e:3c:90:
         3c:5d:58:d0:31:b4:54:21:53:f7:5d:41:cc:0e:94:79:69:a1:
         a0:07:1a:2e:1c:09:16:c2:6b:84:72:74:34:7d:78:ee:52:b0:
         6b:a4:8d:7a:ef:12:20:11:e4:d2:bc:60:b8:df:75:f9:10:e9:
         27:41:fe:79:a1:99:0c:18:a9:54:41:83:3e:e8:2d:f3:7f:7a:
         96:c9:7e:92:78:8b:0f:2c:d6:f8:85:da:28:f9:28:3c:0c:0a:
         40:3e:7d:a6:7f:ed:56:94:84:d4:53:9f:45:b9:3f:a0:5d:bf:
         c8:ef:f7:76:18:9e:89:e0:5a:43:d9:12:6d:7b:d1:b0:7d:84:
         7e:b5:ea:2d:3e:c1:9c:c4:cc:cc:dd:53:1a:b9:89:a6:e3:6b:
         40:f0:37:db:c7:a2:57:2d:aa:85:4a:4f:1e:4e:ae:42:d8:3a:
         e8:98:ae:24:62:ed:d6:99:3f:09:10:94:df:03:68:cb:89:3a:
         f5:7d:a1:aa:be:e1:de:97:b8:44:4d:62:1c:2b:5f:d7:0e:8a:
         af:df:2a:3a:63:0a:de:d4:4d:4e:2f:24:14:91:0f:a6:42:76:
         b4:a9:d9:8b:26:24:2b:d5:4e:ab:cb:34:a2:a7:92:57:44:f9:
         4d:34:18:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikj87hOtSb5RCg3mIVrT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz
OGViZDIwHhcNMjQwNTE3MjIwMDM2WhcNMjQwNTE4MjIwMDM2WjAzMTEwLwYDVQQD
EyhlMmQyNzk3NThhODg3YjI3NmY4M2NkNGMzMTI1ZjVhNDdiYmFlMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzRZJoxpOZkan9L7zJQFNrJa47yh
kOHtwwm5pRWrTNdcYhfGvZjrxcCn9ncN2AGndSMFzdPucsvk2uqKSMuUg5+1ENNd
uXilDk0oyCLvkYNN22s53jG6qgmTgje0I80KGjcKjx63dQ+CqlOd2nWpjYtnC628
WMrTp9KsXjvL79bsOutSdlYZ8PY234LbtXbrvxKD/4/dhrQYI0e9MwO9bZdjYC/t
mqooRPccHMkVcm7hwtYRK5COmkgq29n4BUxT5sVtbLdHmKaHQ6y7esUQdi8RiPYu
hcsHgzRKmBlXuoBDd7MXdoVeD1MzA4lcU6vXS/RlDWb36JTp7uri0Rf2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLSeXWKiHsnb4PNTDEl9aR7uuA9MB8GA1UdIwQY
MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt
YzZkOWY5MTViZDhiLzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi
LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9wJYejj
wxOygFjQwgjWTjyQPF1Y0DG0VCFT911BzA6UeWmhoAcaLhwJFsJrhHJ0NH147lKw
a6SNeu8SIBHk0rxguN91+RDpJ0H+eaGZDBipVEGDPugt8396lsl+kniLDyzW+IXa
KPkoPAwKQD59pn/tVpSE1FOfRbk/oF2/yO/3dhieieBaQ9kSbXvRsH2EfrXqLT7B
nMTMzN1TGrmJpuNrQPA328eiVy2qhUpPHk6uQtg66JiuJGLt1pk/CRCU3wNoy4k6
9X2hqr7h3pe4RE1iHCtf1w6Kr98qOmMK3tRNTi8kFJEPpkJ2tKnZiyYkK9VOq8s0
oqeSV0T5TTQY8Q==
-----END CERTIFICATE-----
Generated at Sat May 18 02:23:50 2024 by rpki-client on console-ams.rpki-client.org