Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          MRvgcWDOVYOBs7K5TN8EOLmwyDJP5mnXVd+XBiEOjPI=
Subject key identifier:   9F:DD:D5:93:9E:0C:8C:76:DA:AE:DE:1D:5C:95:46:52:09:7E:87:2B
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       018F8A49CF8838ABA02D3D66E9BEB4C6CFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          0B0E
Signing time:             Sat 18 May 2024 06:00:43 +0000
Manifest this update:     Sat 18 May 2024 06:00:43 +0000
Manifest next update:     Sun 19 May 2024 06:00:43 +0000
Files and hashes:         1: 4qwUMVt26BVgq1btEYLYDhhCZZA.roa (hash: 4bOBwI3QiE5wHhBTVNAeR2jgSoSHYNdIDRssIh/SdO0=)
                          2: K7e9xRY5XcwkODCl9ROBsNE36oo.roa (hash: T+0TjMpFVgOI+Frt+8yBazatfg42V6EvGLUgmCv7GVM=)
                          3: QK1ODHDJZ-Y66oElQQgJkber0-c.roa (hash: ADlQb7dKBe/OXizlfKSa11F5gsZsT0wudU/7e0/9oiA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: o02AperWXg4K9BDIDFYP+EBvnMjdzcVLkvg3vR/H+1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:49:cf:88:38:ab:a0:2d:3d:66:e9:be:b4:c6:cf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: May 18 06:00:43 2024 GMT
            Not After : May 19 06:00:43 2024 GMT
        Subject: CN=9fddd5939e0c8c76daaede1d5c954652097e872b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:aa:bc:eb:a2:b2:78:08:42:6a:f5:44:a1:
                    77:9b:d2:bf:77:48:99:8b:ae:cb:33:cd:80:fe:6a:
                    25:b8:32:7e:d0:06:37:74:43:46:c2:6c:38:ab:da:
                    bc:ed:76:77:d6:71:f5:32:06:c8:9a:ec:1d:e3:8a:
                    eb:f2:43:2f:e8:9b:ac:5f:97:c4:c0:fa:a6:4a:77:
                    dc:40:30:d6:ae:05:72:d4:9a:09:e4:76:9b:7b:e9:
                    bc:47:b1:d2:c2:e9:b5:6e:64:19:24:33:0e:e1:b3:
                    46:72:79:79:da:34:a5:78:b5:08:14:84:7c:67:a2:
                    75:37:75:93:3a:32:d3:18:e6:0e:e5:c4:f4:9c:29:
                    0a:3b:50:7a:8e:bc:80:4d:17:40:65:42:d6:c4:8f:
                    7a:d6:8f:d0:2a:2c:8f:d2:1c:9f:d0:80:cb:c6:f8:
                    d5:aa:89:f9:d8:12:a7:5c:24:0d:9f:89:fc:29:15:
                    36:5e:51:0e:4a:96:a7:61:87:a3:9a:3c:4e:51:82:
                    4e:ea:a6:ee:40:85:1f:03:ed:19:ac:13:83:ab:67:
                    fc:b5:4c:fb:3c:84:06:97:e1:5e:bf:ec:22:10:24:
                    d5:14:bc:45:b9:07:13:67:3b:8e:cb:9b:92:6e:80:
                    81:9d:52:69:86:72:d6:cf:8d:a7:17:d9:12:62:46:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DD:D5:93:9E:0C:8C:76:DA:AE:DE:1D:5C:95:46:52:09:7E:87:2B
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b2:a6:f6:39:4b:5e:91:27:a4:0c:77:36:dd:c4:72:71:4a:
         b5:65:88:b1:a3:7a:02:03:51:6c:52:94:94:55:22:9f:fc:bb:
         16:98:71:86:f3:be:19:55:ef:58:51:3b:d9:43:84:4c:b6:33:
         c5:63:53:85:3c:39:03:8b:c1:84:63:3c:38:58:1e:7c:fb:3e:
         44:fc:fc:b8:13:4a:23:08:d2:23:0a:7a:76:00:9c:67:59:83:
         9a:5b:d4:f5:c9:aa:7b:b6:07:8c:98:33:16:be:66:19:83:06:
         5b:10:7c:4d:02:b8:20:49:64:bb:46:e0:8d:6c:cb:53:be:61:
         9f:0a:3f:96:60:df:0f:23:9f:ec:fc:a9:9c:f4:32:cd:30:c4:
         4c:2a:d4:7f:92:66:b7:8b:47:69:86:d7:a3:5e:cb:83:74:8d:
         71:ce:df:c0:c1:93:e9:a4:aa:d4:98:ab:66:80:b1:6f:0a:a4:
         84:a6:ed:12:fe:88:8e:1b:6e:8b:a2:5d:41:16:60:da:ca:03:
         bd:ae:f0:f3:d4:a7:c4:c6:68:41:cd:95:5f:1b:e2:eb:26:fa:
         14:90:09:37:21:ec:19:63:7e:78:2f:a3:57:ee:79:2e:f6:ef:
         ac:f8:5c:8b:80:2a:4c:81:4c:6c:23:e5:92:46:a8:22:b0:e6:
         45:a3:32:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+KSc+IOKugLT1m6b60xs/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjQwNTE4MDYwMDQzWhcNMjQwNTE5MDYwMDQzWjAzMTEwLwYDVQQD
Eyg5ZmRkZDU5MzllMGM4Yzc2ZGFhZWRlMWQ1Yzk1NDY1MjA5N2U4NzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlSqvOuisngIQmr1RKF3m9K/d0iZ
i67LM82A/moluDJ+0AY3dENGwmw4q9q87XZ31nH1MgbImuwd44rr8kMv6JusX5fE
wPqmSnfcQDDWrgVy1JoJ5Habe+m8R7HSwum1bmQZJDMO4bNGcnl52jSleLUIFIR8
Z6J1N3WTOjLTGOYO5cT0nCkKO1B6jryATRdAZULWxI961o/QKiyP0hyf0IDLxvjV
qon52BKnXCQNn4n8KRU2XlEOSpanYYejmjxOUYJO6qbuQIUfA+0ZrBODq2f8tUz7
PIQGl+Fev+wiECTVFLxFuQcTZzuOy5uSboCBnVJphnLWz42nF9kSYka63QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/d1ZOeDIx22q7eHVyVRlIJfocrMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbKm9jlL
XpEnpAx3Nt3EcnFKtWWIsaN6AgNRbFKUlFUin/y7FphxhvO+GVXvWFE72UOETLYz
xWNThTw5A4vBhGM8OFgefPs+RPz8uBNKIwjSIwp6dgCcZ1mDmlvU9cmqe7YHjJgz
Fr5mGYMGWxB8TQK4IElku0bgjWzLU75hnwo/lmDfDyOf7PypnPQyzTDETCrUf5Jm
t4tHaYbXo17Lg3SNcc7fwMGT6aSq1JirZoCxbwqkhKbtEv6Ijhtui6JdQRZg2soD
va7w89SnxMZoQc2VXxvi6yb6FJAJNyHsGWN+eC+jV+55LvbvrPhci4AqTIFMbCPl
kkaoIrDmRaMyZg==
-----END CERTIFICATE-----
Generated at Sat May 18 14:36:48 2024 by rpki-client on console-ams.rpki-client.org