Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File:                     1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier:          9yW+pbjrYhF+yuQhMiKnM8yhMgFqIqPThk7+PJH7Ca0=
Subject key identifier:   D5:A6:F7:BA:E4:47:C6:0A:AF:F7:4F:F3:E7:C2:03:BA:3D:DF:56:88
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer:       /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial:       018F4A22125EBBBE3F27345DD4BFFDA32D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number:          115D
Signing time:             Sun 05 May 2024 19:01:37 +0000
Manifest this update:     Sun 05 May 2024 19:01:37 +0000
Manifest next update:     Mon 06 May 2024 19:01:37 +0000
Files and hashes:         1: 1-RCqGJ92HDHQUAGJ8DkneJFNOFs.roa (hash: C2vFuLXNQhDho2kDMZSP8qYDArH1MXaac5cDgSvBTZ8=)
                          2: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: PhaidjpLHh6N4/0zJzUzCS7HG4nVKXbPZhAOKidPPpQ=)
                          3: FFe7UeE3XtmgSwOIOo2vr8Pp6GE.roa (hash: d594oltg0F904G606PfeXavKMY1GMUS3pYcaF13dM9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:22:12:5e:bb:be:3f:27:34:5d:d4:bf:fd:a3:2d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
        Validity
            Not Before: May  5 19:01:37 2024 GMT
            Not After : May  6 19:01:37 2024 GMT
        Subject: CN=d5a6f7bae447c60aaff74ff3e7c203ba3ddf5688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:32:e6:1b:82:9c:07:87:1d:84:d5:ae:dc:
                    48:f6:2a:29:0e:ac:b0:af:57:2b:da:f2:32:12:20:
                    d0:44:b3:51:ee:62:00:03:eb:90:ad:1c:03:c2:da:
                    c8:06:67:05:76:8f:7d:6d:bb:97:c4:55:d7:6c:93:
                    89:18:64:ec:e0:0a:40:b9:6b:84:ca:93:07:00:4c:
                    56:a5:a8:9e:69:4f:f0:e2:ea:8f:aa:51:75:20:f1:
                    92:54:14:04:77:22:c5:67:4c:9d:3c:9d:d2:28:f5:
                    cc:3f:7e:c2:bf:87:89:09:cf:63:cb:de:6e:b1:48:
                    1f:10:4d:77:e3:da:8e:3e:b6:f2:1a:0a:51:6b:e6:
                    94:95:a2:d3:cb:49:78:ff:dc:f9:db:a4:5c:b5:f1:
                    bd:ca:b2:49:f8:24:c8:39:8d:67:6e:a0:16:87:9f:
                    d0:76:f0:be:a2:6c:8a:2e:84:83:5f:e9:60:6f:58:
                    54:c1:49:9c:0d:e5:98:c0:16:32:ed:22:1f:f5:bb:
                    30:e7:38:46:10:2e:23:c7:87:46:86:28:61:39:af:
                    5c:43:e8:76:6b:2b:03:7c:44:45:10:cc:0a:a8:63:
                    49:8b:af:8e:b2:5f:fe:de:db:89:95:01:b6:94:85:
                    1f:d8:4f:6b:20:f6:4a:20:95:0a:53:41:3f:0b:c8:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A6:F7:BA:E4:47:C6:0A:AF:F7:4F:F3:E7:C2:03:BA:3D:DF:56:88
            X509v3 Authority Key Identifier:
                keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:39:28:ed:a7:b4:19:82:bf:2c:00:a9:0e:14:c7:75:39:
         0d:b7:9d:51:c7:4c:63:48:b4:2f:c1:65:ff:5e:fb:46:e1:98:
         e2:97:c0:5a:17:3d:e6:96:27:39:bd:3c:ec:13:ab:e5:3c:7c:
         d6:ae:d9:21:2b:b8:36:53:0d:6f:42:cf:72:6f:d6:b9:fe:86:
         50:0b:8a:2e:37:39:6b:f4:22:e2:a7:08:40:36:8e:5f:6d:45:
         2b:2b:dc:be:9e:24:e0:bd:46:f5:25:3a:10:d2:4c:fc:f4:93:
         37:8c:9f:fe:cc:f0:e4:b4:15:74:d2:e9:38:91:93:93:7b:b2:
         ee:a5:0e:67:25:38:4a:16:e8:14:4b:06:6f:fe:33:70:f7:fd:
         8f:1d:e7:fc:57:8a:ca:f4:31:19:5f:98:f6:02:2c:1d:89:e4:
         a8:15:e9:16:46:71:02:79:1a:a5:94:9b:de:20:43:20:da:70:
         4c:c1:e9:56:62:20:67:48:ec:43:cd:6d:25:a1:cb:8e:d5:68:
         bb:54:81:30:c7:db:a3:c8:97:7f:33:2c:0d:ea:37:4b:99:09:
         4d:09:d8:ef:b0:05:96:5a:8f:da:a3:70:a6:ca:c3:a9:a9:69:
         e8:59:86:87:84:b8:9e:8e:98:3d:78:ea:bd:d3:8f:af:69:f3:
         db:ad:13:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9KIhJeu74/JzRd1L/9oy07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk
MDM5YjAwHhcNMjQwNTA1MTkwMTM3WhcNMjQwNTA2MTkwMTM3WjAzMTEwLwYDVQQD
EyhkNWE2ZjdiYWU0NDdjNjBhYWZmNzRmZjNlN2MyMDNiYTNkZGY1Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGsy5huCnAeHHYTVrtxI9iopDqyw
r1cr2vIyEiDQRLNR7mIAA+uQrRwDwtrIBmcFdo99bbuXxFXXbJOJGGTs4ApAuWuE
ypMHAExWpaieaU/w4uqPqlF1IPGSVBQEdyLFZ0ydPJ3SKPXMP37Cv4eJCc9jy95u
sUgfEE1349qOPrbyGgpRa+aUlaLTy0l4/9z526RctfG9yrJJ+CTIOY1nbqAWh5/Q
dvC+omyKLoSDX+lgb1hUwUmcDeWYwBYy7SIf9bsw5zhGEC4jx4dGhihhOa9cQ+h2
aysDfERFEMwKqGNJi6+Osl/+3tuJlQG2lIUf2E9rIPZKIJUKU0E/C8jENQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNWm97rkR8YKr/dP8+fCA7o931aIMB8GA1UdIwQY
MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy
LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk
MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYw5
KO2ntBmCvywAqQ4Ux3U5DbedUcdMY0i0L8Fl/177RuGY4pfAWhc95pYnOb087BOr
5Tx81q7ZISu4NlMNb0LPcm/Wuf6GUAuKLjc5a/Qi4qcIQDaOX21FKyvcvp4k4L1G
9SU6ENJM/PSTN4yf/szw5LQVdNLpOJGTk3uy7qUOZyU4ShboFEsGb/4zcPf9jx3n
/FeKyvQxGV+Y9gIsHYnkqBXpFkZxAnkapZSb3iBDINpwTMHpVmIgZ0jsQ81tJaHL
jtVou1SBMMfbo8iXfzMsDeo3S5kJTQnY77AFllqP2qNwpsrDqalp6FmGh4S4no6Y
PXjqvdOPr2nz260T3w==
-----END CERTIFICATE-----
Generated at Mon May 6 04:33:49 2024 by rpki-client on console-fra.rpki-client.org