Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
File:                     9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json)
Hash identifier:          g3bPPa3O21KbCpesFZEYuRnUdt6IYQx9WyF8owqC+5E=
Subject key identifier:   7E:AB:5E:41:F2:3B:78:63:D0:A4:F9:39:D3:25:23:56:43:F5:E5:3F
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Certificate issuer:       /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial:       018F3E1D7792E9B67E9136537968F3DFB0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 11:01:09 +0000
Manifest this update:     Fri 03 May 2024 11:01:09 +0000
Manifest next update:     Sat 04 May 2024 11:01:09 +0000
Files and hashes:         1: 6dyGxfXLluhMGcuqcGxQu1CEC5U.roa (hash: fCbp86OQRBkTjBSeS5XEqaJ0Gesqy3Os9XuvnXmZc4k=)
                          2: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: P83T8+XxTvPIozbDxkrarNRPlU0gTFt6vP+Tgqpp0WA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:1d:77:92:e9:b6:7e:91:36:53:79:68:f3:df:b0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
        Validity
            Not Before: May  3 11:01:09 2024 GMT
            Not After : May  4 11:01:09 2024 GMT
        Subject: CN=7eab5e41f23b7863d0a4f939d325235643f5e53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:6b:5d:24:50:63:e3:35:fe:68:d6:70:f1:
                    a8:0a:2f:61:f0:22:b9:04:65:c4:c0:c3:f3:7b:e4:
                    3b:be:c1:f7:73:08:1d:06:52:b4:ee:4c:16:8d:7f:
                    9e:a8:75:8d:b8:12:89:da:9c:9a:ba:b7:ae:f3:36:
                    ea:f4:be:0b:44:f0:1a:30:51:18:f6:2c:6d:8c:f2:
                    a5:48:90:c7:76:13:6b:b4:dc:ec:04:c1:10:df:c3:
                    2a:e1:f4:4a:09:36:da:70:df:83:2a:27:02:8b:75:
                    e6:0a:a5:e3:46:48:91:c0:df:36:6d:6e:10:21:5b:
                    2b:b9:3d:09:1c:6d:09:c7:1c:50:51:99:84:bc:75:
                    47:20:c7:07:d8:25:f2:52:72:f2:92:48:04:62:26:
                    30:bd:ee:fb:a8:7e:0e:f6:22:7a:7c:2d:a3:49:40:
                    d2:12:35:10:ef:85:90:37:01:5e:fc:e3:88:ef:13:
                    66:ed:64:8f:ed:5d:b6:16:a4:da:0d:af:32:5e:8b:
                    58:9f:f3:e0:bc:13:f2:0e:f6:9e:77:8b:e9:92:1d:
                    4f:35:53:d0:3f:31:64:97:2e:93:b6:b8:a2:89:6f:
                    ed:a0:6a:e2:58:58:26:65:31:a1:10:5d:c3:9f:92:
                    2d:11:12:71:c0:17:8d:7e:24:e7:6e:c9:00:ca:a6:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AB:5E:41:F2:3B:78:63:D0:A4:F9:39:D3:25:23:56:43:F5:E5:3F
            X509v3 Authority Key Identifier:
                keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:13:3d:c6:89:7b:6a:28:96:f1:49:90:b5:cf:d2:79:5b:e7:
         8e:f6:04:b4:13:b6:eb:e3:dc:cd:bc:cc:c7:5b:1b:e3:a6:33:
         7a:3a:26:1f:03:6a:3d:f0:d2:74:f6:00:9b:e8:f9:05:ba:d1:
         9e:e8:fe:bc:41:34:8f:a2:d3:2b:57:02:dc:d2:63:21:b2:7a:
         83:b1:d6:57:1f:6c:33:c4:65:61:62:05:94:ad:c1:23:8f:bf:
         0d:ac:ca:9b:77:c4:32:60:5d:7a:74:3c:bb:e9:0c:70:f8:f0:
         88:42:5a:c1:a3:15:21:f6:77:82:d5:a5:de:72:69:cf:a2:0d:
         d1:2c:37:90:74:d6:be:69:8e:b4:3b:fa:5b:2d:7a:01:c4:bc:
         c5:57:a0:5d:bc:51:00:42:d7:5c:b1:59:09:c9:03:1a:f8:00:
         f0:12:e3:c1:75:55:34:86:ae:01:30:2e:0f:2a:48:5c:63:99:
         68:ee:7a:7d:78:ed:72:e4:ed:36:53:2b:fd:a2:15:8f:5a:ab:
         33:21:d7:9a:41:57:bc:f7:85:4e:95:67:dd:b9:e4:09:e4:ac:
         35:ac:35:c7:6c:c8:6d:2f:15:20:93:06:86:f5:f6:61:26:dd:
         fb:70:c7:f6:7a:df:38:a5:af:d5:d5:ba:cf:cf:36:47:86:3a:
         df:30:53:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+HXeS6bZ+kTZTeWjz37D8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGJmYjAxYjAzY2FhNmZjZTg4N2I0Mzg0MjUzZGIyMGU1
OWZhNzEwHhcNMjQwNTAzMTEwMTA5WhcNMjQwNTA0MTEwMTA5WjAzMTEwLwYDVQQD
Eyg3ZWFiNWU0MWYyM2I3ODYzZDBhNGY5MzlkMzI1MjM1NjQzZjVlNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/xrXSRQY+M1/mjWcPGoCi9h8CK5
BGXEwMPze+Q7vsH3cwgdBlK07kwWjX+eqHWNuBKJ2pyaureu8zbq9L4LRPAaMFEY
9ixtjPKlSJDHdhNrtNzsBMEQ38Mq4fRKCTbacN+DKicCi3XmCqXjRkiRwN82bW4Q
IVsruT0JHG0JxxxQUZmEvHVHIMcH2CXyUnLykkgEYiYwve77qH4O9iJ6fC2jSUDS
EjUQ74WQNwFe/OOI7xNm7WSP7V22FqTaDa8yXotYn/PgvBPyDvaed4vpkh1PNVPQ
PzFkly6TtriiiW/toGriWFgmZTGhEF3Dn5ItERJxwBeNfiTnbskAyqaFSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6rXkHyO3hj0KT5OdMlI1ZD9eU/MB8GA1UdIwQY
MBaAFPVL+wGwPKpvzoh7Q4QlPbIOWfpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGIt
YWMwNTk4ZWMzNDJmLzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGItYWMwNTk4ZWMzNDJm
LzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBM9xol7
aiiW8UmQtc/SeVvnjvYEtBO26+PczbzMx1sb46YzejomHwNqPfDSdPYAm+j5BbrR
nuj+vEE0j6LTK1cC3NJjIbJ6g7HWVx9sM8RlYWIFlK3BI4+/DazKm3fEMmBdenQ8
u+kMcPjwiEJawaMVIfZ3gtWl3nJpz6IN0Sw3kHTWvmmOtDv6Wy16AcS8xVegXbxR
AELXXLFZCckDGvgA8BLjwXVVNIauATAuDypIXGOZaO56fXjtcuTtNlMr/aIVj1qr
MyHXmkFXvPeFTpVn3bnkCeSsNaw1x2zIbS8VIJMGhvX2YSbd+3DH9nrfOKWv1dW6
z882R4Y63zBTJQ==
-----END CERTIFICATE-----
Generated at Fri May 3 16:01:35 2024 by rpki-client on console-fra.rpki-client.org