Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          hDl21LnJciXkXaHtIbwhS2WFicWD+A27aftU3yOYOss=
Subject key identifier:   4E:B0:62:BF:9D:97:8D:C4:9C:36:1E:29:56:B7:36:8B:74:F4:78:9D
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       018F877F4656A4403BFC5B12F5E2723493A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          061C
Signing time:             Fri 17 May 2024 17:00:16 +0000
Manifest this update:     Fri 17 May 2024 17:00:16 +0000
Manifest next update:     Sat 18 May 2024 17:00:16 +0000
Files and hashes:         1: VjrRCOvo-d_fmBvI55c3DgYiEQ8.roa (hash: kyRIxzPMt6l9705nXdxmOyAFOIfgTIugLd/8J8jYuOw=)
                          2: _C1rLxCQ9TeQMKyMSOD3ju0-2Qo.roa (hash: KMvcK5xBXUcaLm7fQqDrtMeyfwIFKSMcK9PKEyER5Jo=)
                          3: cJn78bflEyzInDsjmek_l7YcMic.roa (hash: 3UkXQR4VcDkOZFOHOJNyzhwHUwtE78NtAE/zNx3x8cc=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: cCY5AdSTrpOPTZDcoCX+0BTUQJy9PdPtjuXDZdAI9ug=)
                          5: uv6dxkNqyoodQALij4dQFFrrnaI.roa (hash: kxF/jSyvoVzn+NWjPJAoQ4VjcFC5WZl3QLrYu2epLow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:46:56:a4:40:3b:fc:5b:12:f5:e2:72:34:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: May 17 17:00:16 2024 GMT
            Not After : May 18 17:00:16 2024 GMT
        Subject: CN=4eb062bf9d978dc49c361e2956b7368b74f4789d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:23:f4:69:0e:1f:52:e2:03:ed:74:3f:a1:
                    21:06:93:1b:b1:e0:b4:31:44:f8:74:cb:b5:fc:07:
                    0d:31:82:4a:c6:11:af:fe:df:66:91:2f:91:03:d7:
                    5d:f8:4e:23:82:03:30:79:9b:fa:d2:4e:1b:f8:06:
                    83:06:9a:38:2c:1e:c3:84:cd:4d:cb:e6:08:7c:92:
                    b8:64:b1:f5:8b:7b:a7:60:53:53:92:83:fd:46:69:
                    e7:cc:d9:94:1b:44:cf:3e:74:81:f2:c2:9a:03:a7:
                    7c:9e:35:54:3b:16:4c:7f:35:18:26:41:60:62:09:
                    94:8c:ea:14:0a:ba:3e:1a:4e:c1:e1:46:4c:fa:05:
                    b9:3d:c0:af:ed:c4:00:fd:5e:f6:84:25:21:4b:ea:
                    30:b5:54:68:c4:e8:99:95:ac:8b:68:a1:98:10:08:
                    c3:0c:69:75:91:71:92:06:e8:3a:7c:b7:74:37:5a:
                    9d:2a:60:4a:ac:bd:ee:cb:05:bb:2d:6d:37:3f:62:
                    51:31:64:03:ec:22:24:5c:ed:c8:93:78:0b:87:2f:
                    e4:ff:e3:4e:be:eb:95:c1:9d:b4:75:69:7d:ee:cf:
                    d6:d3:50:64:42:bf:32:1d:69:5c:9c:a9:3d:73:46:
                    68:c1:db:87:13:3e:0c:f4:26:e8:27:55:e0:1b:ea:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B0:62:BF:9D:97:8D:C4:9C:36:1E:29:56:B7:36:8B:74:F4:78:9D
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:1f:e1:c7:3e:d0:6a:7c:e2:b2:ac:4f:65:3a:5b:ff:1c:
         af:eb:16:66:0d:88:82:9e:f6:ae:a4:d5:f0:10:b9:2e:a9:c7:
         5b:61:2a:ca:08:1e:3d:0a:09:60:f9:19:79:37:1e:ee:ca:29:
         29:8d:a3:1b:5e:b9:e7:b6:62:ad:48:61:65:51:38:ab:f1:58:
         59:e5:e4:e2:3f:66:53:45:7a:a3:f9:0c:57:11:60:d5:dc:8b:
         d9:7d:48:dc:04:a0:40:76:07:51:6e:59:0b:83:c3:bc:53:37:
         da:07:93:c3:21:72:ca:70:2f:53:f0:d2:10:26:6f:5a:7e:3c:
         0a:d8:29:fe:60:67:45:d9:ef:4e:5b:64:1b:6a:62:d9:e8:43:
         a2:46:ad:ab:38:e9:83:59:3b:08:02:fd:7c:92:34:cb:20:77:
         a7:f3:12:f2:a2:74:20:99:65:6b:f9:9a:32:1e:1c:d2:cf:34:
         ad:df:48:cb:1d:d0:de:46:88:1a:ce:52:22:0c:21:84:e1:13:
         38:2c:4f:c6:4c:d6:38:e1:ed:da:a5:3e:a1:79:9b:78:a3:97:
         4a:f9:de:33:70:b8:c4:d9:05:af:8e:34:52:d3:3d:d4:ff:00:
         b2:20:02:f7:c6:65:2f:91:8e:04:7c:80:34:c8:f4:26:18:6d:
         ec:46:50:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Hf0ZWpEA7/FsS9eJyNJOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz
OGM1YjMwHhcNMjQwNTE3MTcwMDE2WhcNMjQwNTE4MTcwMDE2WjAzMTEwLwYDVQQD
Eyg0ZWIwNjJiZjlkOTc4ZGM0OWMzNjFlMjk1NmI3MzY4Yjc0ZjQ3ODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi0j9GkOH1LiA+10P6EhBpMbseC0
MUT4dMu1/AcNMYJKxhGv/t9mkS+RA9dd+E4jggMweZv60k4b+AaDBpo4LB7DhM1N
y+YIfJK4ZLH1i3unYFNTkoP9RmnnzNmUG0TPPnSB8sKaA6d8njVUOxZMfzUYJkFg
YgmUjOoUCro+Gk7B4UZM+gW5PcCv7cQA/V72hCUhS+owtVRoxOiZlayLaKGYEAjD
DGl1kXGSBug6fLd0N1qdKmBKrL3uywW7LW03P2JRMWQD7CIkXO3Ik3gLhy/k/+NO
vuuVwZ20dWl97s/W01BkQr8yHWlcnKk9c0ZowduHEz4M9CboJ1XgG+rjoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6wYr+dl43EnDYeKVa3Not09HidMB8GA1UdIwQY
MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct
ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0
LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN0f4cc+
0Gp84rKsT2U6W/8cr+sWZg2Igp72rqTV8BC5LqnHW2EqyggePQoJYPkZeTce7sop
KY2jG16557ZirUhhZVE4q/FYWeXk4j9mU0V6o/kMVxFg1dyL2X1I3ASgQHYHUW5Z
C4PDvFM32geTwyFyynAvU/DSECZvWn48Ctgp/mBnRdnvTltkG2pi2ehDokatqzjp
g1k7CAL9fJI0yyB3p/MS8qJ0IJlla/maMh4c0s80rd9Iyx3Q3kaIGs5SIgwhhOET
OCxPxkzWOOHt2qU+oXmbeKOXSvneM3C4xNkFr440UtM91P8AsiAC98ZlL5GOBHyA
NMj0Jhht7EZQTw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:43:43 2024 by rpki-client on console-fra.rpki-client.org