Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File:                     stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier:          UnqTEUI8gUxvmM4rvWmzqryfd6NeZj7kY8ClAGmkDbc=
Subject key identifier:   36:39:02:94:F0:99:AF:1F:F6:79:E5:AF:B3:AB:AC:20:0E:F2:25:28
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer:       /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial:       018F8936C20DEFC41ACE90BCB82BBDE8D2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number:          1144
Signing time:             Sat 18 May 2024 01:00:18 +0000
Manifest this update:     Sat 18 May 2024 01:00:18 +0000
Manifest next update:     Sun 19 May 2024 01:00:18 +0000
Files and hashes:         1: KgmPi3EO2OMVkHaZFJSyVfDN3yk.roa (hash: MFbwarkp1pNDYcqjqRy6jNiKLwsjWjTlhVobRobSi4Y=)
                          2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: osMy8+F8zQOns1cjoRsa7BSbn1kV9dPbQ4MCz/ckFVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:c2:0d:ef:c4:1a:ce:90:bc:b8:2b:bd:e8:d2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
        Validity
            Not Before: May 18 01:00:18 2024 GMT
            Not After : May 19 01:00:18 2024 GMT
        Subject: CN=36390294f099af1ff679e5afb3abac200ef22528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:cb:43:d5:47:50:25:8b:dc:22:33:5d:13:
                    16:d5:24:fe:19:3e:b8:e9:b0:59:00:c1:42:66:85:
                    33:17:57:f4:ea:ed:f5:8d:dc:55:ae:66:d4:b0:b1:
                    b4:d3:0f:d4:e3:f3:ae:e8:23:95:eb:4d:ec:f1:f1:
                    df:22:66:21:40:e6:01:47:6c:f5:95:e8:ea:96:58:
                    eb:fc:05:1d:a6:21:2b:08:53:73:86:e3:16:93:be:
                    88:41:64:f2:85:d0:e7:d0:c2:49:0e:04:57:d4:80:
                    f4:50:a3:b1:81:b3:ff:48:19:a6:98:12:70:2c:25:
                    7f:bc:df:a8:64:17:f5:a4:21:65:7b:d4:db:2e:4a:
                    4a:3e:d1:da:77:91:b6:22:db:52:85:3f:3e:2f:e6:
                    0a:9c:a8:df:bc:ef:fc:f3:2f:e5:d7:64:cd:88:bf:
                    ab:86:c0:f5:f0:6b:f1:e3:e5:33:1b:78:fc:9e:f7:
                    c9:ba:94:6c:da:5e:41:45:be:86:9b:86:a2:42:5f:
                    41:d4:d9:4c:cf:9b:a2:7f:32:91:56:56:9c:41:f9:
                    7c:d2:2d:48:c0:c1:15:70:cd:80:45:b0:66:fc:aa:
                    6a:0c:32:2f:98:16:70:c6:34:fe:4e:6a:f7:5b:06:
                    d9:ec:64:ee:aa:f6:a1:92:0e:07:33:68:f5:35:8c:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:02:94:F0:99:AF:1F:F6:79:E5:AF:B3:AB:AC:20:0E:F2:25:28
            X509v3 Authority Key Identifier:
                keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:de:92:88:9e:1b:49:10:7e:bb:de:cc:f1:62:f5:4e:9e:a8:
         28:71:d3:67:ed:fc:a8:1f:e5:ab:16:5f:97:cc:71:4b:af:54:
         63:43:32:f1:a8:68:fe:a2:46:0c:c3:f3:06:d7:dd:4a:f5:67:
         f2:f7:50:47:76:15:c1:0e:a9:a2:9f:e8:39:05:8f:59:30:4b:
         59:4c:27:1d:f4:ac:2b:99:7c:b3:be:ab:35:80:93:cb:a9:69:
         c1:3d:46:8d:e8:85:2c:26:18:7d:db:e0:47:b2:5d:ae:1f:4f:
         40:b7:aa:11:c8:48:99:87:1f:4d:d7:8b:fd:d7:ed:c1:55:11:
         26:ae:5e:99:da:86:06:c0:ec:87:58:4e:50:0f:ec:17:dc:a2:
         56:be:ab:6b:ce:3c:99:27:59:f8:45:37:76:e3:23:1d:54:9b:
         7e:9a:3e:2d:34:cd:b8:24:6f:6e:89:b0:95:ba:41:9d:e1:49:
         77:6e:d7:03:77:a3:0c:74:51:50:06:65:a3:c9:3b:5d:0d:93:
         00:61:ff:42:f5:38:6f:3d:98:28:ef:32:5f:02:9f:47:36:74:
         09:e5:f3:6a:43:42:28:da:f6:17:6c:58:3c:3c:57:f5:8e:9e:
         ab:d5:19:bb:48:bc:21:cb:95:19:88:d7:08:32:db:07:87:16:
         f0:8c:d9:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNsIN78QazpC8uCu96NLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGIyYmZjZjU5ZDk5Y2E3MDgzMzcwOGZkMzAwMzJmMjNm
ZWY0ODUwHhcNMjQwNTE4MDEwMDE4WhcNMjQwNTE5MDEwMDE4WjAzMTEwLwYDVQQD
EygzNjM5MDI5NGYwOTlhZjFmZjY3OWU1YWZiM2FiYWMyMDBlZjIyNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3LQ9VHUCWL3CIzXRMW1ST+GT64
6bBZAMFCZoUzF1f06u31jdxVrmbUsLG00w/U4/Ou6COV603s8fHfImYhQOYBR2z1
lejqlljr/AUdpiErCFNzhuMWk76IQWTyhdDn0MJJDgRX1ID0UKOxgbP/SBmmmBJw
LCV/vN+oZBf1pCFle9TbLkpKPtHad5G2IttShT8+L+YKnKjfvO/88y/l12TNiL+r
hsD18Gvx4+UzG3j8nvfJupRs2l5BRb6Gm4aiQl9B1NlMz5uifzKRVlacQfl80i1I
wMEVcM2ARbBm/KpqDDIvmBZwxjT+Tmr3WwbZ7GTuqvahkg4HM2j1NYwPQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDY5ApTwma8f9nnlr7OrrCAO8iUoMB8GA1UdIwQY
MBaAFLLbK/z1nZnKcIM3CP0wAy8j/vSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzkt
NzM0OTk0YzUyYzFmLzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzktNzM0OTk0YzUyYzFm
LzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB96SiJ4b
SRB+u97M8WL1Tp6oKHHTZ+38qB/lqxZfl8xxS69UY0My8aho/qJGDMPzBtfdSvVn
8vdQR3YVwQ6pop/oOQWPWTBLWUwnHfSsK5l8s76rNYCTy6lpwT1GjeiFLCYYfdvg
R7Jdrh9PQLeqEchImYcfTdeL/dftwVURJq5emdqGBsDsh1hOUA/sF9yiVr6ra848
mSdZ+EU3duMjHVSbfpo+LTTNuCRvbomwlbpBneFJd27XA3ejDHRRUAZlo8k7XQ2T
AGH/QvU4bz2YKO8yXwKfRzZ0CeXzakNCKNr2F2xYPDxX9Y6eq9UZu0i8IcuVGYjX
CDLbB4cW8IzZew==
-----END CERTIFICATE-----
Generated at Sat May 18 02:35:41 2024 by rpki-client on console-fra.rpki-client.org