Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File:                     USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier:          CMJCj7c1ng9Infln+RzwDp6u13gCaomiFrbqJT1eN1E=
Subject key identifier:   E5:87:06:D8:24:05:82:EC:21:B2:E5:4F:0D:E7:98:37:76:05:1E:D0
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer:       /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial:       018F8635F5CBEA4A236E7ED1BB21A1924408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number:          0E09
Signing time:             Fri 17 May 2024 11:00:34 +0000
Manifest this update:     Fri 17 May 2024 11:00:34 +0000
Manifest next update:     Sat 18 May 2024 11:00:34 +0000
Files and hashes:         1: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: zhU0AdD70OwfpG20AMFH1OrSLruszyBNQ0KXE4OeBlU=)
                          2: aSlgO2I7aRf7YQ4ppCmYk_xSm_E.roa (hash: FisyP0elcar9KtTZlaA8jzoQUv03sbcvXhbWbCqLt3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:f5:cb:ea:4a:23:6e:7e:d1:bb:21:a1:92:44:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
        Validity
            Not Before: May 17 11:00:34 2024 GMT
            Not After : May 18 11:00:34 2024 GMT
        Subject: CN=e58706d8240582ec21b2e54f0de7983776051ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:58:02:92:01:6b:53:b6:05:87:63:94:71:
                    6c:3f:70:0a:ed:f3:4f:5f:f1:b2:33:ff:f1:a3:60:
                    94:8e:d1:1b:32:0e:2e:32:37:81:0f:69:40:1b:ee:
                    c7:96:f8:78:5c:4d:05:05:bd:02:29:5f:3e:cf:30:
                    58:db:0c:42:8b:be:bd:75:40:85:0e:bb:84:cc:ca:
                    20:41:05:4e:09:d1:07:c3:e4:a9:29:d7:c5:2b:a6:
                    f0:7f:6f:f0:a5:87:f7:16:86:cc:4c:06:cc:b1:47:
                    32:b8:61:34:e9:25:66:4f:d4:4b:a2:34:76:54:e9:
                    c1:ac:16:7f:a5:57:d1:d4:bd:13:5c:9c:9e:27:27:
                    5f:3e:d1:48:4a:e7:e6:33:9d:6c:96:1a:bb:c4:71:
                    9d:95:3d:ee:1f:4a:5c:d5:4d:88:16:4b:c7:04:35:
                    1b:46:f7:7a:b8:a7:50:53:f7:68:59:7f:b3:cd:e8:
                    68:7e:79:32:bc:25:01:20:c0:45:1c:b2:4d:f8:03:
                    1e:5b:26:f3:73:21:e9:f8:9b:56:6f:31:68:0a:05:
                    f0:e8:9a:3c:0d:f2:4c:63:e3:cb:0a:98:c3:26:c4:
                    b6:a6:8a:48:96:ac:12:84:90:40:72:10:54:f3:1a:
                    16:9b:09:d1:f9:7c:c0:35:55:ad:33:19:fd:6d:70:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:06:D8:24:05:82:EC:21:B2:E5:4F:0D:E7:98:37:76:05:1E:D0
            X509v3 Authority Key Identifier:
                keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:5e:e3:e1:b6:cd:bd:1e:8d:74:2e:5c:7e:3c:ce:85:09:
         9c:3e:38:95:f1:5a:16:4f:ff:1e:d0:c6:c6:2b:f8:85:ba:4d:
         a9:f7:c3:28:3e:2f:e4:0d:8b:17:b4:f5:1a:af:0f:6b:e3:f2:
         6c:79:75:c3:6a:ff:e1:fa:80:40:27:8c:29:f4:65:28:7b:a4:
         c2:80:b3:17:c5:d0:2f:2c:58:66:95:d7:86:c7:e7:4d:94:9e:
         3c:9e:45:96:bf:42:53:3f:f2:bb:14:ea:ff:d6:fa:6f:d2:86:
         3d:c2:79:56:cd:60:1e:45:2e:21:6c:0e:64:1d:69:0c:76:4a:
         20:c1:39:5b:ae:99:a9:05:07:70:e2:f5:c6:3a:0d:84:69:23:
         b3:75:08:f4:4b:10:53:12:22:0e:cb:76:3c:39:49:4f:74:a5:
         c8:3a:54:23:89:2a:0d:e2:a1:29:de:7b:f9:54:2e:2c:f2:09:
         36:fd:36:08:1c:69:43:b7:b2:eb:5d:69:f6:07:c3:c7:b4:31:
         2a:63:25:35:bb:58:06:e5:f3:91:bc:34:ac:32:78:3d:71:a2:
         db:5f:10:89:ef:4b:cf:71:14:cd:af:be:4b:16:85:13:08:2a:
         73:b3:a2:f9:c8:da:41:02:3e:85:21:c7:c3:fb:fb:52:93:37:
         09:4c:a0:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNfXL6kojbn7RuyGhkkQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk
ZWE4ZjYwHhcNMjQwNTE3MTEwMDM0WhcNMjQwNTE4MTEwMDM0WjAzMTEwLwYDVQQD
EyhlNTg3MDZkODI0MDU4MmVjMjFiMmU1NGYwZGU3OTgzNzc2MDUxZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLVYApIBa1O2BYdjlHFsP3AK7fNP
X/GyM//xo2CUjtEbMg4uMjeBD2lAG+7Hlvh4XE0FBb0CKV8+zzBY2wxCi769dUCF
DruEzMogQQVOCdEHw+SpKdfFK6bwf2/wpYf3FobMTAbMsUcyuGE06SVmT9RLojR2
VOnBrBZ/pVfR1L0TXJyeJydfPtFISufmM51slhq7xHGdlT3uH0pc1U2IFkvHBDUb
Rvd6uKdQU/doWX+zzehofnkyvCUBIMBFHLJN+AMeWybzcyHp+JtWbzFoCgXw6Jo8
DfJMY+PLCpjDJsS2popIlqwShJBAchBU8xoWmwnR+XzANVWtMxn9bXA8TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWHBtgkBYLsIbLlTw3nmDd2BR7QMB8GA1UdIwQY
MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt
ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4
LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVJe4+G2
zb0ejXQuXH48zoUJnD44lfFaFk//HtDGxiv4hbpNqffDKD4v5A2LF7T1Gq8Pa+Py
bHl1w2r/4fqAQCeMKfRlKHukwoCzF8XQLyxYZpXXhsfnTZSePJ5Flr9CUz/yuxTq
/9b6b9KGPcJ5Vs1gHkUuIWwOZB1pDHZKIME5W66ZqQUHcOL1xjoNhGkjs3UI9EsQ
UxIiDst2PDlJT3SlyDpUI4kqDeKhKd57+VQuLPIJNv02CBxpQ7ey611p9gfDx7Qx
KmMlNbtYBuXzkbw0rDJ4PXGi218Qie9Lz3EUza++SxaFEwgqc7Oi+cjaQQI+hSHH
w/v7UpM3CUyg1Q==
-----END CERTIFICATE-----
Generated at Fri May 17 18:22:12 2024 by rpki-client on console-ams.rpki-client.org