Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File:                     Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier:          oAXkf9JyHuYyOIuLHJvh+AiDgHCxJHBwPzj+o3HH+sI=
Subject key identifier:   BE:7F:A5:E5:C3:65:FA:00:35:5F:CE:D6:4F:8E:E4:28:0D:A1:26:49
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer:       /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial:       018F866CBF1C3DC5032FEBF32278DC62565F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number:          01C8
Signing time:             Fri 17 May 2024 12:00:24 +0000
Manifest this update:     Fri 17 May 2024 12:00:24 +0000
Manifest next update:     Sat 18 May 2024 12:00:24 +0000
Files and hashes:         1: AxE22lzFBbmtAC1GmdqQZJ2fHL0.roa (hash: S1Z7RPkGeWijknehBamkx9rCcS6FTFRLyrRuvsGqAtQ=)
                          2: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: iGS2Thba6Jv6RUgnUyHpODOhOtVakSVdFaV6eo4/JtQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:bf:1c:3d:c5:03:2f:eb:f3:22:78:dc:62:56:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ed275c5a738888d580695edd36715959447921
        Validity
            Not Before: May 17 12:00:24 2024 GMT
            Not After : May 18 12:00:24 2024 GMT
        Subject: CN=be7fa5e5c365fa00355fced64f8ee4280da12649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:e4:c8:40:7f:3f:af:94:d5:75:05:df:31:
                    3e:56:13:8b:14:5c:28:46:f8:3a:34:66:83:9d:06:
                    87:71:d7:14:56:a7:db:81:ef:7a:62:bd:2f:72:43:
                    72:5a:e1:7c:f9:68:e1:5f:16:f8:9d:eb:fe:47:7c:
                    a7:26:29:9c:61:fe:bf:1d:8c:29:fa:1c:a1:72:70:
                    99:bf:e7:e4:e1:f3:5c:d4:c2:07:52:e5:ef:ba:53:
                    a7:24:ad:7a:0b:2e:43:80:d0:2f:66:70:4c:ef:2e:
                    86:71:b8:5a:da:90:55:c3:68:6e:b6:cd:6c:e8:79:
                    2e:48:04:c9:2e:70:8c:ed:31:66:ef:85:d4:7d:06:
                    b0:b4:93:23:a2:d7:c9:14:28:9a:14:9c:14:83:08:
                    47:a3:09:d0:cd:06:3f:54:7c:20:97:42:e4:5e:b8:
                    9d:d8:8e:af:be:9b:09:04:0a:db:33:8a:49:6c:e1:
                    de:60:ff:72:f0:b8:c9:db:40:ee:62:37:bd:42:20:
                    a4:9e:70:03:cb:ac:b2:34:0c:5f:b3:fc:59:7c:1b:
                    34:b7:01:05:22:c4:ed:7c:05:13:20:ea:ef:d9:1c:
                    ba:fc:ba:5c:46:04:f2:8e:69:90:64:9d:6c:5f:7f:
                    57:f8:da:4d:d8:f7:f8:41:de:0b:7a:32:a8:05:ae:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7F:A5:E5:C3:65:FA:00:35:5F:CE:D6:4F:8E:E4:28:0D:A1:26:49
            X509v3 Authority Key Identifier:
                keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ba:3a:f9:0a:c9:c5:c3:d9:06:72:c6:e3:f4:87:a3:7f:c6:
         05:b8:8e:3b:1e:3c:14:e9:b5:c4:3b:e4:e3:dd:84:07:d0:f7:
         0d:a7:92:27:a3:95:de:9a:29:82:e4:a5:5c:02:b3:32:76:77:
         60:a8:64:de:65:3a:c9:2d:cd:96:3d:49:18:4b:fa:b7:60:3b:
         5d:d9:28:ea:1c:3a:fc:af:d1:fc:17:a1:4a:91:db:2e:04:d7:
         3d:2b:68:7e:b5:87:4c:df:10:36:9d:2c:6c:21:85:83:2b:45:
         ed:7f:8e:35:06:69:aa:42:29:f3:ee:8e:6b:ef:f8:13:b4:61:
         66:4f:d4:70:af:aa:c4:e0:de:fe:dd:82:ad:cb:52:13:46:1f:
         ce:68:f8:f9:79:68:65:74:5c:c8:d5:e7:5b:d8:21:e7:8b:f8:
         90:cb:36:b1:2e:02:82:0f:90:5e:44:ac:ad:95:57:f2:bf:60:
         ac:14:8d:13:b7:ba:97:9d:eb:ea:29:58:a3:04:28:d3:42:0c:
         9e:26:8b:19:78:35:18:fd:e3:e2:8d:56:9d:fa:e0:3f:67:48:
         18:d7:a3:f8:3a:29:68:d1:58:ef:8d:8a:10:bb:a4:ad:02:56:
         47:90:bc:42:9f:70:37:9b:7e:ac:ba:30:d7:8e:91:2e:f9:5f:
         be:90:52:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbL8cPcUDL+vzInjcYlZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWQyNzVjNWE3Mzg4ODhkNTgwNjk1ZWRkMzY3MTU5NTk0
NDc5MjEwHhcNMjQwNTE3MTIwMDI0WhcNMjQwNTE4MTIwMDI0WjAzMTEwLwYDVQQD
EyhiZTdmYTVlNWMzNjVmYTAwMzU1ZmNlZDY0ZjhlZTQyODBkYTEyNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA267kyEB/P6+U1XUF3zE+VhOLFFwo
Rvg6NGaDnQaHcdcUVqfbge96Yr0vckNyWuF8+WjhXxb4nev+R3ynJimcYf6/HYwp
+hyhcnCZv+fk4fNc1MIHUuXvulOnJK16Cy5DgNAvZnBM7y6Gcbha2pBVw2huts1s
6HkuSATJLnCM7TFm74XUfQawtJMjotfJFCiaFJwUgwhHownQzQY/VHwgl0LkXrid
2I6vvpsJBArbM4pJbOHeYP9y8LjJ20DuYje9QiCknnADy6yyNAxfs/xZfBs0twEF
IsTtfAUTIOrv2Ry6/LpcRgTyjmmQZJ1sX39X+NpN2Pf4Qd4LejKoBa4H8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5/peXDZfoANV/O1k+O5CgNoSZJMB8GA1UdIwQY
MBaAFEbtJ1xac4iI1YBpXt02cVlZRHkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2Ut
M2Y4ZTdmMTAzODk5LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2UtM2Y4ZTdmMTAzODk5
LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbo6+QrJ
xcPZBnLG4/SHo3/GBbiOOx48FOm1xDvk492EB9D3DaeSJ6OV3popguSlXAKzMnZ3
YKhk3mU6yS3Nlj1JGEv6t2A7Xdko6hw6/K/R/BehSpHbLgTXPStofrWHTN8QNp0s
bCGFgytF7X+ONQZpqkIp8+6Oa+/4E7RhZk/UcK+qxODe/t2CrctSE0Yfzmj4+Xlo
ZXRcyNXnW9gh54v4kMs2sS4Cgg+QXkSsrZVX8r9grBSNE7e6l53r6ilYowQo00IM
niaLGXg1GP3j4o1WnfrgP2dIGNej+DopaNFY742KELukrQJWR5C8Qp9wN5t+rLow
146RLvlfvpBSxg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:46:47 2024 by rpki-client on console-fra.rpki-client.org