Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File:                     zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier:          kgd4SNP8E7TIq4J5bRfcYlkXeygTnmgTPH+d2KmILMI=
Subject key identifier:   88:3B:AB:93:0B:A8:E8:20:17:B5:11:F8:9A:34:60:C3:CF:D5:AF:66
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer:       /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial:       018F86DA6BDADBED4E73AE24290D29918CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number:          10CD
Signing time:             Fri 17 May 2024 14:00:12 +0000
Manifest this update:     Fri 17 May 2024 14:00:12 +0000
Manifest next update:     Sat 18 May 2024 14:00:12 +0000
Files and hashes:         1: hSgYiaZfixtGZunemF60MrFulhE.roa (hash: nPab10XVMgcuJv1GCw/n4Pc4QQN7zjq4uPj5XTRhjH0=)
                          2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: qb2Y7yORfFSqK+rB04w+qEAcWqPzbfLDDUrRAHS6MlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:6b:da:db:ed:4e:73:ae:24:29:0d:29:91:8c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
        Validity
            Not Before: May 17 14:00:12 2024 GMT
            Not After : May 18 14:00:12 2024 GMT
        Subject: CN=883bab930ba8e82017b511f89a3460c3cfd5af66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:12:03:2c:46:97:53:96:58:2c:8b:62:22:b1:
                    f8:e4:0a:b2:fa:5d:90:d6:86:0a:a4:72:83:8c:fa:
                    67:0c:16:16:a2:bf:32:1e:0d:51:36:04:00:31:6c:
                    73:18:70:3d:35:af:41:55:78:c4:0e:a9:a9:03:05:
                    04:d6:e0:3f:f6:de:45:54:00:e8:cc:64:65:7c:14:
                    25:5e:cd:30:7d:7f:47:2f:ba:68:dd:c4:da:46:74:
                    7a:15:ad:52:de:09:cb:b0:82:db:e6:31:55:e2:25:
                    de:97:a4:52:9c:42:46:76:b2:2f:49:70:1e:23:7f:
                    34:a5:b9:89:88:de:04:b6:76:2e:fa:c3:2d:09:cb:
                    7a:bc:85:a3:da:28:4e:52:e3:01:54:51:ef:02:bb:
                    ae:40:5b:52:95:d0:97:f4:3d:2b:29:ab:54:4a:13:
                    90:80:c8:c9:e2:5f:7c:77:d9:fe:c7:f6:99:b1:a8:
                    2e:25:db:5c:18:63:78:7a:82:28:52:f8:fd:16:bb:
                    02:1f:99:9f:05:92:3d:4e:9d:29:79:14:e7:e1:4a:
                    78:6a:e7:c2:7b:36:79:b2:9f:da:af:6b:5c:88:15:
                    81:8c:4e:01:01:29:aa:44:b6:a1:b6:29:25:cd:d9:
                    4a:17:c2:d2:0f:89:68:19:33:cb:60:60:f3:9c:34:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:AB:93:0B:A8:E8:20:17:B5:11:F8:9A:34:60:C3:CF:D5:AF:66
            X509v3 Authority Key Identifier:
                keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:87:54:2a:8f:7b:ad:8f:73:a4:d1:ab:db:8f:ec:f0:ff:e0:
         59:f6:0e:a5:ad:04:cb:a9:05:dd:b6:bb:47:ba:95:ad:e9:c1:
         82:74:65:1d:35:d6:06:84:40:a9:db:ce:65:b6:46:51:63:47:
         c4:59:de:68:4c:2c:c3:e4:10:2b:76:7f:ae:b3:3d:3d:65:32:
         ef:76:de:3e:17:cd:c1:dd:18:19:7f:a4:48:3c:d0:14:8b:1b:
         ab:0d:8e:82:e6:09:ff:21:e2:21:17:f8:13:ca:cf:a2:dd:8d:
         7b:d2:88:e7:34:bf:4e:ff:7e:c8:19:0c:41:b9:81:00:aa:fd:
         71:c3:45:fb:77:c2:76:76:d9:6c:23:32:b6:e1:91:31:9c:b6:
         77:d9:30:4b:98:d4:f9:d7:bb:25:54:7f:61:68:28:4f:f4:86:
         e2:da:86:86:2f:e9:a3:68:35:63:f8:82:2a:74:c6:f3:c4:4e:
         12:9a:19:cc:a6:ae:3a:c0:66:9e:6f:d1:7d:d5:66:02:aa:dc:
         bf:d8:5c:0d:cb:50:ab:fd:83:4a:c9:4a:2b:a7:20:f4:0b:3d:
         d2:30:5a:8a:e1:fe:27:17:99:a4:01:37:a6:5e:8a:83:c5:92:
         ac:7d:9c:6a:7a:6c:51:57:33:ed:1a:04:b7:59:36:3d:9b:e1:
         d3:78:fc:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2mva2+1Oc64kKQ0pkYzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjQwNTE3MTQwMDEyWhcNMjQwNTE4MTQwMDEyWjAzMTEwLwYDVQQD
Eyg4ODNiYWI5MzBiYThlODIwMTdiNTExZjg5YTM0NjBjM2NmZDVhZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BIDLEaXU5ZYLItiIrH45Aqy+l2Q
1oYKpHKDjPpnDBYWor8yHg1RNgQAMWxzGHA9Na9BVXjEDqmpAwUE1uA/9t5FVADo
zGRlfBQlXs0wfX9HL7po3cTaRnR6Fa1S3gnLsILb5jFV4iXel6RSnEJGdrIvSXAe
I380pbmJiN4EtnYu+sMtCct6vIWj2ihOUuMBVFHvAruuQFtSldCX9D0rKatUShOQ
gMjJ4l98d9n+x/aZsaguJdtcGGN4eoIoUvj9FrsCH5mfBZI9Tp0peRTn4Up4aufC
ezZ5sp/ar2tciBWBjE4BASmqRLahtiklzdlKF8LSD4loGTPLYGDznDQpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg7q5MLqOggF7UR+Jo0YMPP1a9mMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdodUKo97
rY9zpNGr24/s8P/gWfYOpa0Ey6kF3ba7R7qVrenBgnRlHTXWBoRAqdvOZbZGUWNH
xFneaEwsw+QQK3Z/rrM9PWUy73bePhfNwd0YGX+kSDzQFIsbqw2OguYJ/yHiIRf4
E8rPot2Ne9KI5zS/Tv9+yBkMQbmBAKr9ccNF+3fCdnbZbCMytuGRMZy2d9kwS5jU
+de7JVR/YWgoT/SG4tqGhi/po2g1Y/iCKnTG88ROEpoZzKauOsBmnm/RfdVmAqrc
v9hcDctQq/2DSslKK6cg9As90jBaiuH+JxeZpAE3pl6Kg8WSrH2canpsUVcz7RoE
t1k2PZvh03j8Hg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:41:37 2024 by rpki-client on console-fra.rpki-client.org