Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File:                     VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier:          I4rIv2SS9vLHMGyWRQ2R+g84ImM6djqzEwnqyoG5O1E=
Subject key identifier:   9E:8E:21:F5:DA:0E:96:19:64:5D:A4:5B:21:8F:61:12:C2:5C:03:39
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer:       /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial:       018F877F3A03A72484E94B910F99D1FAD02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number:          5B
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: jMigBTq/6df2umhDwN1uYs+Cb23HTIZErRRcfjtCvbA=)
                          2: Vdz0EK8dpP2jHgxiw9NLtYpntkk.roa (hash: +A0uIvlAXBwSLqy0MMH5eS/gAKgbP4KWp/uo31OLq1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3a:03:a7:24:84:e9:4b:91:0f:99:d1:fa:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=9e8e21f5da0e9619645da45b218f6112c25c0339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:24:28:23:e7:d8:a2:7b:cc:00:74:40:83:
                    35:82:0b:de:16:65:1b:a6:fb:63:96:00:85:b8:f2:
                    1a:73:13:ff:94:22:40:b4:04:d8:fe:82:94:3a:57:
                    49:f8:11:48:3a:aa:b9:51:0c:29:b6:d0:c9:13:9a:
                    7d:dc:ad:4a:eb:6c:99:0a:2b:1e:2e:3c:23:87:cc:
                    4b:80:d5:86:59:a5:56:40:5f:5e:38:fb:fe:b5:23:
                    17:ce:65:a2:aa:fe:9e:ad:5f:b3:05:91:26:38:90:
                    86:5a:98:bc:f4:ae:4d:da:b6:df:66:9a:ce:99:52:
                    f3:a5:e6:36:72:56:fe:47:16:cc:29:f3:3b:e9:49:
                    14:3b:3e:2b:3a:c3:0b:40:bc:47:79:2c:e3:a3:b8:
                    1b:fd:8b:05:9e:a9:f9:fe:7d:d6:c4:d0:b6:9b:cf:
                    60:fb:3e:29:39:82:e9:cc:87:e5:3e:d4:90:a4:99:
                    1d:fc:8d:d5:ca:13:1a:81:bb:7b:16:95:31:92:3f:
                    84:9f:ca:29:e6:78:21:4c:25:f1:81:ae:2f:29:8b:
                    4f:5c:3d:c0:6a:fb:d2:13:85:99:96:9f:c2:53:73:
                    81:35:fc:33:47:ac:cb:e7:77:1f:63:17:7b:ff:0d:
                    ba:98:72:aa:52:c3:33:ba:fa:24:51:12:e7:6e:cd:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8E:21:F5:DA:0E:96:19:64:5D:A4:5B:21:8F:61:12:C2:5C:03:39
            X509v3 Authority Key Identifier:
                keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:71:a9:b6:b6:36:50:d4:e1:f7:ba:80:71:48:70:a9:d0:
         93:51:4b:7d:75:4e:84:7f:c8:97:6e:90:bc:a3:54:dd:34:66:
         db:59:0f:51:93:8f:6c:c9:40:96:1d:a3:e5:ac:3e:c7:cf:ac:
         bf:b2:e8:bf:f9:b4:46:0e:f3:01:44:19:a6:7d:22:3e:15:11:
         82:5a:77:d2:f6:e1:c3:69:fe:e4:cb:c1:fd:6f:b1:24:32:97:
         38:4a:03:75:6e:94:19:f9:00:51:44:99:3b:6f:6c:35:a1:22:
         4b:98:8f:70:f4:7d:cc:19:35:79:03:fe:e5:ca:bc:dc:dd:93:
         c8:e6:72:76:f3:37:51:d6:0d:96:2f:3d:58:6b:61:c4:f5:0f:
         fe:29:cb:a8:15:8e:ad:cd:16:4a:31:ec:40:ff:0a:8c:44:57:
         55:1e:31:72:21:5e:ff:2b:db:a8:a8:33:18:49:5e:68:e5:8a:
         6e:b7:8a:9f:b5:67:7e:c7:66:e9:11:49:a8:69:ed:b4:a3:55:
         88:31:0e:9d:cf:df:12:cc:8a:cb:57:d8:41:5c:fa:54:17:48:
         af:ea:b7:18:03:97:94:65:35:01:16:00:15:d6:3e:45:1b:a8:
         bb:7f:af:57:ee:87:f9:33:ac:7b:bd:01:fe:fe:8d:2d:89:db:
         60:85:1a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HfzoDpySE6UuRD5nR+tAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OWE3Njk0MTJkMmQ5NjNiNDkxZWJlMzFkNDQxMTFkY2Fm
Y2NjOTQwHhcNMjQwNTE3MTcwMDEzWhcNMjQwNTE4MTcwMDEzWjAzMTEwLwYDVQQD
Eyg5ZThlMjFmNWRhMGU5NjE5NjQ1ZGE0NWIyMThmNjExMmMyNWMwMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgkkKCPn2KJ7zAB0QIM1ggveFmUb
pvtjlgCFuPIacxP/lCJAtATY/oKUOldJ+BFIOqq5UQwpttDJE5p93K1K62yZCise
Ljwjh8xLgNWGWaVWQF9eOPv+tSMXzmWiqv6erV+zBZEmOJCGWpi89K5N2rbfZprO
mVLzpeY2clb+RxbMKfM76UkUOz4rOsMLQLxHeSzjo7gb/YsFnqn5/n3WxNC2m89g
+z4pOYLpzIflPtSQpJkd/I3VyhMagbt7FpUxkj+En8op5nghTCXxga4vKYtPXD3A
avvSE4WZlp/CU3OBNfwzR6zL53cfYxd7/w26mHKqUsMzuvokURLnbs2NKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6OIfXaDpYZZF2kWyGPYRLCXAM5MB8GA1UdIwQY
MBaAFFWadpQS0tljtJHr4x1EER3K/MyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYt
N2UyNTNlNjM5OGU1LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYtN2UyNTNlNjM5OGU1
LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+lxqba2
NlDU4fe6gHFIcKnQk1FLfXVOhH/Il26QvKNU3TRm21kPUZOPbMlAlh2j5aw+x8+s
v7Lov/m0Rg7zAUQZpn0iPhURglp30vbhw2n+5MvB/W+xJDKXOEoDdW6UGfkAUUSZ
O29sNaEiS5iPcPR9zBk1eQP+5cq83N2TyOZydvM3UdYNli89WGthxPUP/inLqBWO
rc0WSjHsQP8KjERXVR4xciFe/yvbqKgzGEleaOWKbreKn7Vnfsdm6RFJqGnttKNV
iDEOnc/fEsyKy1fYQVz6VBdIr+q3GAOXlGU1ARYAFdY+RRuou3+vV+6H+TOse70B
/v6NLYnbYIUasQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:27:30 2024 by rpki-client on console-ams.rpki-client.org