Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File:                     GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier:          q8FRJV01JLbekpzTAJf4hAPXstnwDHrVJaBCsLJT2NM=
Subject key identifier:   BC:9C:F7:F2:7D:AA:6F:21:E5:21:EC:E2:91:C0:7D:C4:45:51:B6:BD
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer:       /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial:       018F4C1021CEE5072133CA5ACF287E60241E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 04:01:16 +0000
Manifest this update:     Mon 06 May 2024 04:01:16 +0000
Manifest next update:     Tue 07 May 2024 04:01:16 +0000
Files and hashes:         1: 28nyzvc8WoekT4gQz_aS76dp54k.roa (hash: bPD207i4lL0hojueHKP8KuHkMYjNfLayyVNIRcpDO6s=)
                          2: 8zqAkBSNxwEbxrdIs9OySbnEH3k.roa (hash: LVByO2USf5ugkih7KO2vAeCKBXH9ZxOBKvA5NSk8kP0=)
                          3: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: Q5BYIAGEShbETA7a7GAtloDSX2idROE8v4ABE1hil7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:21:ce:e5:07:21:33:ca:5a:cf:28:7e:60:24:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
        Validity
            Not Before: May  6 04:01:16 2024 GMT
            Not After : May  7 04:01:16 2024 GMT
        Subject: CN=bc9cf7f27daa6f21e521ece291c07dc44551b6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:61:9b:20:0e:c1:04:a0:9c:9b:23:ca:b0:
                    92:d5:87:ff:e5:90:47:16:cc:4b:8b:ac:ed:04:99:
                    62:63:19:54:79:74:f4:4b:a9:d1:03:1e:81:3b:19:
                    03:bf:c4:b6:06:32:59:00:e0:46:69:27:78:db:25:
                    a4:30:2f:e8:89:f9:0f:28:7b:58:3e:56:ba:81:df:
                    02:ba:8e:0c:97:73:4b:c1:42:ae:9b:6d:e3:a6:c0:
                    d8:0c:be:b7:6d:01:4a:79:05:14:68:26:d5:2a:3f:
                    dd:e2:e7:49:c1:07:03:5b:d1:d6:d9:25:5c:4b:33:
                    19:4e:73:51:95:bf:dc:09:66:fa:17:4d:9f:b4:86:
                    49:81:d5:92:e2:c8:09:55:83:bd:0a:01:fb:b6:ca:
                    2e:6c:d3:16:b7:e5:bd:bf:05:b5:f5:9f:3f:af:35:
                    29:26:e6:79:08:6e:dd:13:35:88:47:7a:16:7e:b3:
                    a6:0b:0c:63:34:9e:02:6f:2c:39:44:d1:70:bc:67:
                    cc:04:a4:6f:10:f8:87:be:05:2f:3f:15:88:71:96:
                    5c:2d:75:48:2c:5c:94:29:83:e7:b8:f0:39:d3:b8:
                    ce:0a:fd:29:a4:ae:a4:0d:e7:c8:f2:3e:4f:87:e8:
                    75:94:8c:ac:eb:72:05:93:e0:e4:08:45:2a:78:b6:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9C:F7:F2:7D:AA:6F:21:E5:21:EC:E2:91:C0:7D:C4:45:51:B6:BD
            X509v3 Authority Key Identifier:
                keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:cc:2f:44:a8:e6:43:26:da:1b:6f:c6:60:09:6e:de:92:
         b7:32:9d:54:97:87:48:bf:64:3e:a3:fe:55:a0:3f:a9:c1:7c:
         0c:79:33:ff:c9:57:36:85:54:f6:19:a5:d7:ed:fb:84:30:fc:
         b3:1c:d4:ad:2d:18:95:eb:45:5c:9d:86:3e:1b:8d:95:73:b5:
         1e:5a:45:5f:39:1b:26:06:be:97:ab:5b:ea:83:70:86:32:50:
         39:ea:63:e4:d9:92:db:52:13:06:ec:fe:1e:35:1b:bf:11:43:
         d5:83:68:91:6b:1c:e0:12:63:09:06:a4:65:7e:7d:57:3f:dc:
         75:a0:97:6d:fb:2f:c5:e0:a8:30:f1:ef:07:bc:9d:9b:90:d7:
         58:82:ae:4b:b3:34:b4:f4:08:36:6f:b8:e5:99:2c:d5:a8:6f:
         4d:fb:37:d0:04:1d:e1:43:1b:7b:b2:3c:cf:d2:47:e2:3d:20:
         d0:4c:9a:66:9e:cb:2c:28:6a:24:9e:47:e4:8c:59:cd:46:50:
         ce:ae:27:88:99:ff:0a:69:0d:dd:08:57:53:8e:cc:19:4d:1c:
         1f:1b:67:52:e3:19:e5:cc:c7:a7:39:f4:43:71:9f:03:b1:23:
         99:f9:cb:ba:c7:dd:de:89:c9:ec:0e:e0:2d:05:f0:f2:d7:2c:
         a7:37:e1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MECHO5QchM8pazyh+YCQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YzkxZjFjYjA4NzQyMzJhMDRmYmMwOTJiYWE2ODhhY2Nl
Y2M5ZDcwHhcNMjQwNTA2MDQwMTE2WhcNMjQwNTA3MDQwMTE2WjAzMTEwLwYDVQQD
EyhiYzljZjdmMjdkYWE2ZjIxZTUyMWVjZTI5MWMwN2RjNDQ1NTFiNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb5hmyAOwQSgnJsjyrCS1Yf/5ZBH
FsxLi6ztBJliYxlUeXT0S6nRAx6BOxkDv8S2BjJZAOBGaSd42yWkMC/oifkPKHtY
Pla6gd8Cuo4Ml3NLwUKum23jpsDYDL63bQFKeQUUaCbVKj/d4udJwQcDW9HW2SVc
SzMZTnNRlb/cCWb6F02ftIZJgdWS4sgJVYO9CgH7tsoubNMWt+W9vwW19Z8/rzUp
JuZ5CG7dEzWIR3oWfrOmCwxjNJ4Cbyw5RNFwvGfMBKRvEPiHvgUvPxWIcZZcLXVI
LFyUKYPnuPA507jOCv0ppK6kDefI8j5Ph+h1lIys63IFk+DkCEUqeLaPwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyc9/J9qm8h5SHs4pHAfcRFUba9MB8GA1UdIwQY
MBaAFBnJHxywh0IyoE+8CSuqaIrM7MnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNDYzMzctNGYxZi00NDRlLTgzZDct
MDU0ZDY1ZDcyNDdmLzEvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wNDYzMzctNGYxZi00NDRlLTgzZDctMDU0ZDY1ZDcyNDdm
LzEvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1HML0So
5kMm2htvxmAJbt6StzKdVJeHSL9kPqP+VaA/qcF8DHkz/8lXNoVU9hml1+37hDD8
sxzUrS0YletFXJ2GPhuNlXO1HlpFXzkbJga+l6tb6oNwhjJQOepj5NmS21ITBuz+
HjUbvxFD1YNokWsc4BJjCQakZX59Vz/cdaCXbfsvxeCoMPHvB7ydm5DXWIKuS7M0
tPQINm+45Zks1ahvTfs30AQd4UMbe7I8z9JH4j0g0EyaZp7LLChqJJ5H5IxZzUZQ
zq4niJn/CmkN3QhXU47MGU0cHxtnUuMZ5czHpzn0Q3GfA7EjmfnLusfd3onJ7A7g
LQXw8tcspzfhsw==
-----END CERTIFICATE-----
Generated at Mon May 6 10:56:39 2024 by rpki-client on console-ams.rpki-client.org