Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File:                     vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier:          0Rro2iq40SLu/V/VUG/owTkbkaFpioYkvBHxzcGZLEI=
Subject key identifier:   59:11:91:36:0F:8E:CC:E9:D1:94:07:C3:1F:61:3D:E2:9C:61:72:06
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer:       /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial:       018F6AF69F59F14725721A5E15A5C3B4E9BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number:          1191
Signing time:             Sun 12 May 2024 04:01:38 +0000
Manifest this update:     Sun 12 May 2024 04:01:38 +0000
Manifest next update:     Mon 13 May 2024 04:01:38 +0000
Files and hashes:         1: GO89Jf8R1h1vnnX4cBwuviz5o2U.roa (hash: nHT5ps5GBVsBRZrZMmFeCfKTr0vHQqLk7ovfsiTM5vg=)
                          2: P22Xu7Odpb6rHs84C5Z0ip8hPqM.roa (hash: AYGw0zqszLh0A3A359kT4i4m2xr6R3QiaEpwdHejtU8=)
                          3: gpNvtjPtrvf3aZt3uFqWzr1IRcE.roa (hash: Bl1Z0T32RluorV5nyKeba/yLlNK1mvuJ9DJwXLe0w9Y=)
                          4: r_Z7OYtba1P4_awi4xJ1FN8aqfI.roa (hash: RPruRzib53i7Aab/w8EvgBFXjCKUTDt0Wz+vHIedgtA=)
                          5: sdlCS1G90XzSRvEBwCD70Tz8j3A.roa (hash: SschIVvwJghM6fCioOY40pK8KZp7mWr2zkO2f6JjnUg=)
                          6: tYsd1Z0PviLU9jOb8iR6GY412b4.roa (hash: qSPUHwSNY4XPxLtkWI4tLjAhHAkJ146npjI7riyn2Z4=)
                          7: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: 7Umun5BQVvi0M08KuiNU7qMqUiVqdkw+zmpldkqRBCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6a:f6:9f:59:f1:47:25:72:1a:5e:15:a5:c3:b4:e9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: May 12 04:01:38 2024 GMT
            Not After : May 13 04:01:38 2024 GMT
        Subject: CN=591191360f8ecce9d19407c31f613de29c617206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:0e:7a:70:c6:7c:0e:2a:ea:03:b5:08:ce:
                    fb:32:08:dc:6f:10:79:bd:cb:81:31:e0:b7:d0:b9:
                    91:06:ce:cb:7f:ee:7b:90:93:70:6b:57:83:f7:a3:
                    a7:26:65:2b:f2:79:d8:d9:9f:c0:6d:15:23:aa:3b:
                    b4:68:e8:bd:d4:28:ae:ef:78:de:3c:42:7b:73:68:
                    f5:46:ec:72:e2:4f:24:3c:57:b7:49:09:c4:f2:a8:
                    86:8d:79:b9:7b:34:66:39:a9:df:95:60:54:57:81:
                    36:d6:c2:2d:4e:a9:80:81:80:c7:16:c6:1a:ae:d5:
                    c3:38:c1:6a:b6:03:04:2f:c2:32:c1:a8:a4:c0:2b:
                    97:72:48:13:0b:85:91:2d:49:d0:81:1f:3e:92:55:
                    a7:c2:d8:e4:a6:9d:91:d4:99:94:b4:97:55:c9:a5:
                    48:f7:3c:1d:6e:b7:20:f1:87:98:ac:01:58:a3:14:
                    e9:18:27:16:8b:f0:a1:cc:70:e4:e5:37:cb:c6:1d:
                    9e:3f:4b:ae:16:56:f9:f3:a2:70:46:ef:c9:b8:2c:
                    98:ea:97:26:46:dc:d2:1d:aa:1e:83:3d:8f:10:5c:
                    de:9c:9a:9e:e3:53:1e:53:3a:8e:2f:f4:01:8a:b2:
                    91:67:dc:60:5e:bd:b3:3f:ec:e7:ad:56:ff:b7:28:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:11:91:36:0F:8E:CC:E9:D1:94:07:C3:1F:61:3D:E2:9C:61:72:06
            X509v3 Authority Key Identifier:
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:d5:fe:9e:40:1c:ee:51:8c:4d:8f:95:f7:51:8b:0d:f3:
         59:be:9c:d9:ec:74:2a:9b:e0:ca:bc:51:a1:58:f4:f2:bd:2a:
         e4:f5:58:45:d3:e9:a5:2a:f9:72:79:15:bc:35:fb:01:cb:12:
         62:db:9e:fd:8b:09:c3:2b:73:92:f7:99:8b:0d:d6:17:79:f5:
         45:29:f6:30:1d:88:6a:36:97:38:91:8d:c8:c1:3c:23:af:28:
         3a:49:22:0a:0f:b1:7c:b5:72:d2:da:16:f7:62:b0:59:81:73:
         cb:36:02:ce:d5:aa:de:48:cd:96:3b:9a:2e:7c:ab:c5:10:0a:
         49:12:3f:53:3a:28:0f:02:94:a7:c1:8b:71:e2:b6:f6:ed:7a:
         22:7d:72:87:15:1d:af:58:a6:10:46:aa:f9:27:90:3c:29:f6:
         ec:91:be:49:0a:3d:2c:d8:ed:3c:3c:95:cc:16:7a:c8:44:d2:
         03:51:8e:fb:3a:d3:da:c8:3d:a8:aa:9f:4a:c6:75:17:d4:19:
         dc:ab:97:5c:28:fe:cb:df:e3:25:4e:00:68:04:f2:cd:c7:25:
         ee:be:f4:9a:b3:20:99:e7:f6:da:83:32:82:18:5c:e4:f8:b4:
         71:cd:fd:22:ac:4b:a7:22:8f:35:4a:b0:09:17:a0:f5:ed:53:
         7e:c2:f4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9q9p9Z8UclchpeFaXDtOm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjQwNTEyMDQwMTM4WhcNMjQwNTEzMDQwMTM4WjAzMTEwLwYDVQQD
Eyg1OTExOTEzNjBmOGVjY2U5ZDE5NDA3YzMxZjYxM2RlMjljNjE3MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqYOenDGfA4q6gO1CM77MgjcbxB5
vcuBMeC30LmRBs7Lf+57kJNwa1eD96OnJmUr8nnY2Z/AbRUjqju0aOi91Ciu73je
PEJ7c2j1Ruxy4k8kPFe3SQnE8qiGjXm5ezRmOanflWBUV4E21sItTqmAgYDHFsYa
rtXDOMFqtgMEL8IywaikwCuXckgTC4WRLUnQgR8+klWnwtjkpp2R1JmUtJdVyaVI
9zwdbrcg8YeYrAFYoxTpGCcWi/ChzHDk5TfLxh2eP0uuFlb586JwRu/JuCyY6pcm
RtzSHaoegz2PEFzenJqe41MeUzqOL/QBirKRZ9xgXr2zP+znrVb/tyiquQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkRkTYPjszp0ZQHwx9hPeKcYXIGMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp/V/p5A
HO5RjE2PlfdRiw3zWb6c2ex0KpvgyrxRoVj08r0q5PVYRdPppSr5cnkVvDX7AcsS
Ytue/YsJwytzkveZiw3WF3n1RSn2MB2IajaXOJGNyME8I68oOkkiCg+xfLVy0toW
92KwWYFzyzYCztWq3kjNljuaLnyrxRAKSRI/UzooDwKUp8GLceK29u16In1yhxUd
r1imEEaq+SeQPCn27JG+SQo9LNjtPDyVzBZ6yETSA1GO+zrT2sg9qKqfSsZ1F9QZ
3KuXXCj+y9/jJU4AaATyzccl7r70mrMgmef22oMyghhc5Pi0cc39IqxLpyKPNUqw
CReg9e1TfsL0Qw==
-----END CERTIFICATE-----
Generated at Sun May 12 05:54:40 2024 by rpki-client on console-ams.rpki-client.org