Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File:                     umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier:          x8JvFEg5Bv2ZC1vfPIY+pBmqgpS/fnlEJ4zUpqMrKxo=
Subject key identifier:   53:54:7E:45:E5:BB:48:FF:3B:4C:0E:88:05:9A:EF:13:84:09:52:71
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer:       /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial:       018F88247565597104188D7FB529DCF4C551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number:          1185
Signing time:             Fri 17 May 2024 20:00:41 +0000
Manifest this update:     Fri 17 May 2024 20:00:41 +0000
Manifest next update:     Sat 18 May 2024 20:00:41 +0000
Files and hashes:         1: BBpf_5X_8hHqfT58gcuF4KsIgsA.roa (hash: V3wpPTUdN1akCSqTVcQbODeTjp2no7FB69F3UC/xLUQ=)
                          2: Cfc8wUkHTHORB5ENz8D6JGoOAX4.roa (hash: jZ+NEt101OCvLfMMNRklHlqRoG1dluSL6pH2xrXNgqY=)
                          3: N7p9fg8KHnPoYmMFCs4NGS10eCo.roa (hash: NwZc+X7F9nkOFSwua9s8tZ8ou59PlCso7DbHuCDJpNo=)
                          4: XPqb1e-UpO0xTkEw7g1HQLSm9ys.roa (hash: wO9fVIDjsPgmGGKDSOUIWfT1Msy/J29EpvyN6cYQlk4=)
                          5: Z97uEXyHiYNVchLluvaU_uUhyXQ.roa (hash: k7oWDcUB+tiV6klmzGiSljdbbj//d2LywFueuMo3SHA=)
                          6: jiKl7KXy7uDZcCf0jONPCCanmjQ.roa (hash: I2URJ4U8fPQvh8mFEeeFkmio7q2u3stHu9cWTRW1I2s=)
                          7: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: uiK0wCiFxpA8iU5SGWNHhyWpAEbGzgkekp7CyGif7jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:75:65:59:71:04:18:8d:7f:b5:29:dc:f4:c5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
        Validity
            Not Before: May 17 20:00:41 2024 GMT
            Not After : May 18 20:00:41 2024 GMT
        Subject: CN=53547e45e5bb48ff3b4c0e88059aef1384095271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:f5:01:a9:4c:09:15:7c:a6:bc:06:ab:3b:
                    7a:60:49:51:ac:15:bb:f9:05:e6:05:d9:5e:d5:fa:
                    fd:4d:01:5b:b9:85:17:da:4b:37:d4:a5:aa:aa:fd:
                    be:74:34:c7:92:6d:c4:1e:6f:b3:eb:26:c8:7e:ee:
                    6c:4e:89:5c:76:3b:11:b8:c8:7b:e6:46:af:83:38:
                    d1:4b:77:fb:97:9a:8d:6c:9f:fe:81:fd:90:69:08:
                    97:3a:75:8a:49:c5:2f:5f:6e:2d:bb:2d:9d:b1:32:
                    22:dd:6f:56:ca:ef:27:60:12:ae:05:39:ec:bc:e9:
                    0f:15:31:3a:eb:d9:bd:81:e7:8a:21:89:5d:33:35:
                    0b:d6:80:aa:a4:37:5c:a4:3b:c9:c6:6e:d5:40:cd:
                    2c:c7:c0:11:7e:16:6c:c1:c4:20:6a:12:ce:f3:1a:
                    a6:35:59:28:75:c9:bc:20:cb:50:c6:fb:ee:0b:f1:
                    04:76:0d:72:70:0f:f7:5d:a6:b6:22:ff:cb:f7:cc:
                    f3:84:76:0c:d6:b1:1f:62:d3:e6:46:2c:a3:c9:87:
                    13:c5:5b:a4:b7:a4:86:88:ba:38:91:ba:ef:d4:83:
                    cc:75:79:5d:ba:3e:53:8e:63:1e:69:41:da:6a:02:
                    30:7e:6b:4f:43:bc:8f:65:c7:c7:53:aa:6a:8d:62:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:54:7E:45:E5:BB:48:FF:3B:4C:0E:88:05:9A:EF:13:84:09:52:71
            X509v3 Authority Key Identifier:
                keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:43:63:4f:65:14:6f:c4:40:87:0d:ec:43:5c:c1:eb:6f:
         81:3f:bd:73:d6:07:a9:32:11:2e:cc:df:07:af:67:0e:f9:2c:
         df:39:1b:93:2c:81:ea:49:94:96:a4:82:f9:2a:04:e3:b2:02:
         82:10:6a:c1:e3:75:27:ed:8d:a7:68:e7:cd:73:97:6b:53:23:
         d8:e3:01:79:c6:f5:91:eb:96:de:6e:1d:17:b7:e8:08:95:d1:
         ee:f3:86:f2:74:3e:16:4b:57:c1:88:c3:eb:ed:ae:55:57:be:
         4d:e4:0b:2a:71:f4:ce:eb:5f:aa:23:f7:d9:b6:26:3d:b5:bc:
         d4:f2:ec:1b:0a:48:da:a0:14:37:c2:31:3f:c3:d2:20:5e:d5:
         77:6d:3c:50:6f:22:90:d0:5a:6e:50:bf:1d:83:bd:65:b1:3f:
         45:da:d3:a4:fb:69:e7:fc:5b:1c:70:70:09:a2:a0:92:db:c8:
         ad:de:85:a6:38:b4:06:ca:f4:87:b1:ae:09:8d:0f:e5:ad:3f:
         ab:a4:15:f9:ea:59:9a:fb:b2:91:77:ba:3b:b9:8f:2f:27:57:
         1e:ed:8b:e4:37:f1:9b:61:26:13:03:5e:07:f9:ef:22:2f:b7:
         68:bf:0a:b8:3b:bd:e4:2b:d8:bd:cc:f6:84:e3:c8:2b:e0:ec:
         3b:2c:5a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJHVlWXEEGI1/tSnc9MVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjBhNGQ4NzRkOTYwMWM4MTQyYzM1MmY4MGM1NmE0MzI3
NmNkNDcwHhcNMjQwNTE3MjAwMDQxWhcNMjQwNTE4MjAwMDQxWjAzMTEwLwYDVQQD
Eyg1MzU0N2U0NWU1YmI0OGZmM2I0YzBlODgwNTlhZWYxMzg0MDk1MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQn1AalMCRV8prwGqzt6YElRrBW7
+QXmBdle1fr9TQFbuYUX2ks31KWqqv2+dDTHkm3EHm+z6ybIfu5sTolcdjsRuMh7
5kavgzjRS3f7l5qNbJ/+gf2QaQiXOnWKScUvX24tuy2dsTIi3W9Wyu8nYBKuBTns
vOkPFTE669m9geeKIYldMzUL1oCqpDdcpDvJxm7VQM0sx8ARfhZswcQgahLO8xqm
NVkodcm8IMtQxvvuC/EEdg1ycA/3Xaa2Iv/L98zzhHYM1rEfYtPmRiyjyYcTxVuk
t6SGiLo4kbrv1IPMdXlduj5TjmMeaUHaagIwfmtPQ7yPZcfHU6pqjWLEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNUfkXlu0j/O0wOiAWa7xOECVJxMB8GA1UdIwQY
MBaAFLpgpNh02WAcgULDUvgMVqQyds1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWIt
ZTVhMzc3OGJlM2FkLzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWItZTVhMzc3OGJlM2Fk
LzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATitDY09l
FG/EQIcN7ENcwetvgT+9c9YHqTIRLszfB69nDvks3zkbkyyB6kmUlqSC+SoE47IC
ghBqweN1J+2Np2jnzXOXa1Mj2OMBecb1keuW3m4dF7foCJXR7vOG8nQ+FktXwYjD
6+2uVVe+TeQLKnH0zutfqiP32bYmPbW81PLsGwpI2qAUN8IxP8PSIF7Vd208UG8i
kNBablC/HYO9ZbE/RdrTpPtp5/xbHHBwCaKgktvIrd6Fpji0Bsr0h7GuCY0P5a0/
q6QV+epZmvuykXe6O7mPLydXHu2L5Dfxm2EmEwNeB/nvIi+3aL8KuDu95CvYvcz2
hOPIK+DsOyxaYA==
-----END CERTIFICATE-----
Generated at Fri May 17 21:01:52 2024 by rpki-client on console-fra.rpki-client.org