Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          m0L6Ed2n27jTwiOcsczQQSZ0K1YruacpO5rsJJB+AAo=
Subject key identifier:   2E:D4:A9:74:E1:E9:0F:2E:0D:FD:BE:2B:88:1A:6B:73:2A:58:C1:42
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       0190806AD7A9B87B8D9B86FB962DBFF25855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          1191
Signing time:             Fri 05 Jul 2024 01:03:23 +0000
Manifest this update:     Fri 05 Jul 2024 01:03:23 +0000
Manifest next update:     Sat 06 Jul 2024 01:03:23 +0000
Files and hashes:         1: QMo6Ma836o8tliGVMCOBow9A_wY.roa (hash: cZXy7gn98TG6p4GzW8QWO69HrkRWmpwFM/Ay5QjWonY=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: e8Gj1Ii1zdYgNNhMxBm9yHFJHC518VfhfVhyEa6aOpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jul 2024 01:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:80:6a:d7:a9:b8:7b:8d:9b:86:fb:96:2d:bf:f2:58:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Jul  5 01:03:23 2024 GMT
            Not After : Jul  6 01:03:23 2024 GMT
        Subject: CN=2ed4a974e1e90f2e0dfdbe2b881a6b732a58c142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:b7:75:14:2c:6a:e8:8d:39:31:98:b6:b7:
                    89:9a:f1:98:4f:aa:c0:72:4a:48:fc:f5:eb:cb:63:
                    af:6b:30:15:a0:df:ad:91:40:54:ea:83:95:27:fd:
                    1a:21:d7:85:37:55:00:e9:cf:1d:26:7d:ea:ff:ae:
                    b7:eb:15:fd:d5:3e:6b:0c:91:c1:41:6b:93:dd:d0:
                    ef:d4:a7:52:06:f9:3e:8c:b8:91:57:30:69:c8:f9:
                    ec:4d:12:43:4d:b7:44:e6:8d:4c:0a:86:26:ad:9c:
                    08:d6:ce:b0:07:00:09:49:f4:cf:77:29:bd:3b:9e:
                    26:52:d8:e6:75:61:f1:25:39:9e:95:10:9b:01:20:
                    53:6e:92:88:03:3e:7a:58:de:41:32:dd:b3:53:ad:
                    2b:75:7a:11:7e:4c:63:ed:47:56:06:75:48:a7:64:
                    aa:93:e0:ee:0e:16:4b:19:8b:db:8d:9e:16:72:c6:
                    ef:02:33:3c:a2:44:0c:3c:64:1c:fa:f1:5e:a2:ec:
                    71:50:da:1f:28:74:d0:0a:7e:c6:02:1a:31:9b:87:
                    cb:fa:f4:16:1b:f6:d8:ee:04:49:85:48:08:ba:4d:
                    58:4a:ca:39:98:1a:19:c0:95:0d:54:84:c0:6f:4e:
                    ce:06:25:58:dd:c5:a5:7c:d1:ce:9e:39:7a:16:73:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:A9:74:E1:E9:0F:2E:0D:FD:BE:2B:88:1A:6B:73:2A:58:C1:42
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:37:ef:bd:ac:ea:b4:ed:69:c5:08:f1:51:83:33:38:79:f5:
         0d:52:42:7e:58:9c:5c:d9:20:a7:cd:bb:2c:9f:30:86:52:35:
         95:6b:6d:6f:3d:85:f0:a0:1c:24:55:f4:f8:2d:04:5a:4e:7c:
         27:06:13:18:64:1d:83:77:98:0a:24:1d:48:ce:62:69:a5:f4:
         e4:3b:5d:35:7b:8c:2c:9f:95:ac:be:3e:a4:81:e7:18:ca:e3:
         b5:1c:3a:18:4b:de:c1:d4:23:1b:36:4a:83:a0:41:9d:2b:d2:
         77:62:59:48:89:cb:53:66:96:38:e1:71:85:62:0f:5e:87:65:
         2d:71:31:1a:28:c0:77:9f:10:96:9f:f3:51:6b:0d:10:c6:c4:
         5a:c2:b7:85:b4:e0:f9:3e:de:3e:b5:23:3e:fc:21:49:66:c4:
         a3:e8:57:d5:56:2c:9b:67:ef:5f:9f:e1:28:95:e9:ea:5d:44:
         b7:d7:82:d8:56:4d:9e:c9:28:05:62:83:8b:c3:4f:2d:8b:5a:
         e4:19:13:36:b9:2d:32:9a:6f:1a:52:59:cd:97:ca:88:21:6b:
         14:15:4e:d1:ed:ba:16:18:b3:06:c1:73:48:f5:a9:81:63:60:
         7b:e8:95:29:52:b6:52:d6:c1:c7:2b:19:2d:8d:68:92:60:3f:
         dd:11:3a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCAatepuHuNm4b7li2/8lhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2
ZjcxOGYwHhcNMjQwNzA1MDEwMzIzWhcNMjQwNzA2MDEwMzIzWjAzMTEwLwYDVQQD
EygyZWQ0YTk3NGUxZTkwZjJlMGRmZGJlMmI4ODFhNmI3MzJhNThjMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDO3dRQsauiNOTGYtreJmvGYT6rA
ckpI/PXry2OvazAVoN+tkUBU6oOVJ/0aIdeFN1UA6c8dJn3q/6636xX91T5rDJHB
QWuT3dDv1KdSBvk+jLiRVzBpyPnsTRJDTbdE5o1MCoYmrZwI1s6wBwAJSfTPdym9
O54mUtjmdWHxJTmelRCbASBTbpKIAz56WN5BMt2zU60rdXoRfkxj7UdWBnVIp2Sq
k+DuDhZLGYvbjZ4WcsbvAjM8okQMPGQc+vFeouxxUNofKHTQCn7GAhoxm4fL+vQW
G/bY7gRJhUgIuk1YSso5mBoZwJUNVITAb07OBiVY3cWlfNHOnjl6FnNfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7UqXTh6Q8uDf2+K4gaa3MqWMFCMB8GA1UdIwQY
MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt
MTdlMzE1ODk1NGRhLzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh
LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTfvvazq
tO1pxQjxUYMzOHn1DVJCflicXNkgp827LJ8whlI1lWttbz2F8KAcJFX0+C0EWk58
JwYTGGQdg3eYCiQdSM5iaaX05DtdNXuMLJ+VrL4+pIHnGMrjtRw6GEvewdQjGzZK
g6BBnSvSd2JZSInLU2aWOOFxhWIPXodlLXExGijAd58Qlp/zUWsNEMbEWsK3hbTg
+T7ePrUjPvwhSWbEo+hX1VYsm2fvX5/hKJXp6l1Et9eC2FZNnskoBWKDi8NPLYta
5BkTNrktMppvGlJZzZfKiCFrFBVO0e26FhizBsFzSPWpgWNge+iVKVK2UtbBxysZ
LY1okmA/3RE6AA==
-----END CERTIFICATE-----
Generated at Fri Jul 5 08:57:05 2024 by rpki-client on console-ams.rpki-client.org