Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File:                     qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier:          5D1D3N1XJIXiNSMVymreyLiXShibHlTL/5kje0GWVEY=
Subject key identifier:   BF:93:04:53:D8:1F:46:1C:F0:3B:07:E2:6F:74:E5:70:03:E9:60:64
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer:       /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial:       018F874951DB7EF32DAE7A8FF7985019CCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number:          0510
Signing time:             Fri 17 May 2024 16:01:20 +0000
Manifest this update:     Fri 17 May 2024 16:01:20 +0000
Manifest next update:     Sat 18 May 2024 16:01:20 +0000
Files and hashes:         1: fe6RukFedJVFro-XVQw80lphPeM.roa (hash: n+sTbPEEmBm7ILPJKeppn126kb98KGFKkRgrqMZvXK8=)
                          2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: dKlbRGUyf0xAwXbwVsb93I9N7ayIdCUiG5ruKrSlXqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:51:db:7e:f3:2d:ae:7a:8f:f7:98:50:19:cc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
        Validity
            Not Before: May 17 16:01:20 2024 GMT
            Not After : May 18 16:01:20 2024 GMT
        Subject: CN=bf930453d81f461cf03b07e26f74e57003e96064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:5f:42:e7:8d:25:fc:87:45:66:5f:a5:ef:
                    12:1b:01:a3:c2:26:aa:5a:d5:10:5b:b3:9b:d7:de:
                    59:df:17:16:6e:c9:60:91:5f:86:3b:d3:dd:d6:19:
                    eb:52:59:93:81:5d:6e:c2:ff:3f:b4:c3:df:0c:49:
                    84:97:db:d3:78:c2:22:84:16:43:59:80:22:04:6c:
                    bb:00:4f:71:fb:4a:fe:0d:0f:89:3b:02:b4:e4:16:
                    a6:67:21:61:90:05:7d:d6:05:ee:0c:30:8c:d8:f4:
                    eb:cc:3f:f7:e4:be:03:b9:91:a2:63:79:6b:ca:cb:
                    c7:f8:b5:e2:8a:22:a6:b4:e7:9b:b8:6d:78:aa:da:
                    e9:4d:29:3f:09:55:5f:73:3d:f7:b3:0a:ec:8a:69:
                    2f:f6:b6:8c:5e:76:05:ee:50:84:c1:cc:af:f7:55:
                    cf:37:cc:63:46:2e:7a:1b:29:74:82:e4:4a:3d:45:
                    b4:83:cd:e1:ae:ad:08:02:26:54:61:09:d6:d1:16:
                    5e:1b:f2:6d:b5:5f:d0:38:0a:f9:d7:f7:14:af:ed:
                    19:ae:9a:e3:e8:8b:08:3a:3b:e8:dc:5d:e4:ec:fc:
                    bc:d5:a7:5f:b2:51:7c:4f:dd:32:6a:a6:b3:07:fc:
                    81:4f:c8:81:d2:b9:40:ff:7e:4f:42:1e:7c:43:c0:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:93:04:53:D8:1F:46:1C:F0:3B:07:E2:6F:74:E5:70:03:E9:60:64
            X509v3 Authority Key Identifier:
                keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:87:0e:4f:91:8c:d2:c9:7c:56:58:72:b6:b2:bb:a2:ee:22:
         99:d9:bd:c2:cc:82:bc:64:e7:73:12:0a:57:25:df:49:e3:81:
         a1:9e:5f:9c:7e:b7:e0:1e:53:ac:ad:6d:ae:37:3a:89:0b:51:
         51:7f:3f:ff:79:7f:f9:ed:29:f3:f7:27:06:8e:c1:9d:8a:71:
         5a:61:5f:6b:7f:75:46:d6:5c:9e:d3:c7:f6:cb:40:b2:e5:fb:
         89:e7:40:3b:26:56:f8:83:1c:d4:21:21:99:23:da:cc:2b:b9:
         44:08:0c:30:66:15:02:54:c4:81:85:4c:5b:0d:e7:e1:d3:40:
         44:a3:eb:4f:91:45:68:dd:8c:04:ac:25:a3:dd:e9:1c:a4:47:
         fa:ff:13:5a:3a:a9:5f:ca:43:67:36:f3:2b:53:3d:81:21:08:
         ae:43:e2:23:47:3d:31:c0:5c:78:b1:19:fa:2d:af:82:09:41:
         cd:70:5d:fe:4c:a8:b0:46:aa:fc:04:9c:4f:27:17:6a:77:ef:
         59:75:10:77:7c:d3:74:ff:5d:ae:37:27:48:b3:ad:f9:5e:58:
         71:88:d4:5d:38:a7:f5:8a:4a:52:85:53:06:8a:48:67:71:6f:
         c3:13:d1:9d:5c:1f:96:2b:07:ea:ae:07:6a:9e:95:30:90:4e:
         ac:16:c2:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSVHbfvMtrnqP95hQGczbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjQwNTE3MTYwMTIwWhcNMjQwNTE4MTYwMTIwWjAzMTEwLwYDVQQD
EyhiZjkzMDQ1M2Q4MWY0NjFjZjAzYjA3ZTI2Zjc0ZTU3MDAzZTk2MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY9fQueNJfyHRWZfpe8SGwGjwiaq
WtUQW7Ob195Z3xcWbslgkV+GO9Pd1hnrUlmTgV1uwv8/tMPfDEmEl9vTeMIihBZD
WYAiBGy7AE9x+0r+DQ+JOwK05BamZyFhkAV91gXuDDCM2PTrzD/35L4DuZGiY3lr
ysvH+LXiiiKmtOebuG14qtrpTSk/CVVfcz33swrsimkv9raMXnYF7lCEwcyv91XP
N8xjRi56Gyl0guRKPUW0g83hrq0IAiZUYQnW0RZeG/JttV/QOAr51/cUr+0Zrprj
6IsIOjvo3F3k7Py81adfslF8T90yaqazB/yBT8iB0rlA/35PQh58Q8AQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+TBFPYH0Yc8DsH4m905XAD6WBkMB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4cOT5GM
0sl8VlhytrK7ou4imdm9wsyCvGTncxIKVyXfSeOBoZ5fnH634B5TrK1trjc6iQtR
UX8//3l/+e0p8/cnBo7BnYpxWmFfa391RtZcntPH9stAsuX7iedAOyZW+IMc1CEh
mSPazCu5RAgMMGYVAlTEgYVMWw3n4dNARKPrT5FFaN2MBKwlo93pHKRH+v8TWjqp
X8pDZzbzK1M9gSEIrkPiI0c9McBceLEZ+i2vgglBzXBd/kyosEaq/AScTycXanfv
WXUQd3zTdP9drjcnSLOt+V5YcYjUXTin9YpKUoVTBopIZ3FvwxPRnVwflisH6q4H
ap6VMJBOrBbC2Q==
-----END CERTIFICATE-----
Generated at Fri May 17 18:21:23 2024 by rpki-client on console-ams.rpki-client.org