Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File:                     2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier:          XWBLNKzRe2ImLgsQO9Ph6gAShO8mN44Oi3+JVQnwwyk=
Subject key identifier:   34:05:5F:BE:C2:09:78:AB:6E:6A:5D:63:87:8A:BB:B0:E8:65:C3:EA
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer:       /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial:       018F3708EE57A53BF1193A45E3DE2E81C9F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 02:01:23 +0000
Manifest this update:     Thu 02 May 2024 02:01:23 +0000
Manifest next update:     Fri 03 May 2024 02:01:23 +0000
Files and hashes:         1: 0ZmhfBoM_G3NoQJ5hIYgdFdsbSU.roa (hash: bcr+w3E06quiZLwubiKJ0cQs04qYDWaoGwgsM5q6AXY=)
                          2: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: vjohDUz5PaWgdqkM1EkZkSzzC22+zQQh1BxlcmFqvwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:08:ee:57:a5:3b:f1:19:3a:45:e3:de:2e:81:c9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
        Validity
            Not Before: May  2 02:01:23 2024 GMT
            Not After : May  3 02:01:23 2024 GMT
        Subject: CN=34055fbec20978ab6e6a5d63878abbb0e865c3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:79:d9:51:bd:59:6f:9f:27:65:35:c0:2b:
                    62:f5:67:54:9b:b5:1c:45:75:d8:e1:72:5e:52:9b:
                    09:3d:7b:3e:d9:c5:ec:53:67:80:77:49:35:6b:82:
                    1b:bb:f7:5b:1f:10:ee:86:e5:66:99:8f:5e:98:a9:
                    10:d8:1e:1b:da:10:d9:52:5a:72:9c:df:5d:8b:8b:
                    4e:a3:2e:0d:b6:bf:2a:74:d4:06:5f:d7:fc:ad:6c:
                    92:16:54:60:7b:51:8b:dc:f2:4c:3a:49:31:c6:70:
                    4d:09:fc:16:32:f1:6d:5d:5d:bc:c5:f3:48:a3:4e:
                    94:81:f6:76:fe:99:03:a6:df:a9:fb:53:af:d2:99:
                    6e:7d:07:89:cd:a3:ed:97:5b:30:10:cb:e4:a1:d2:
                    59:b1:8a:14:8d:80:a4:d8:8d:5a:56:34:98:f0:86:
                    65:39:12:e5:61:6e:da:9d:8a:90:27:73:84:b9:e1:
                    42:78:5d:dc:22:65:5e:5b:31:45:1b:74:91:cc:92:
                    e5:38:7c:b4:71:5f:34:39:74:07:92:27:6d:7c:a0:
                    3a:55:6d:88:ce:39:ee:6a:ac:74:28:85:ed:10:bc:
                    d1:ca:83:9d:a2:e6:cc:d5:a3:f2:80:39:d2:b9:33:
                    18:8a:9b:f9:df:b5:e7:94:5d:e5:41:13:33:63:6f:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:5F:BE:C2:09:78:AB:6E:6A:5D:63:87:8A:BB:B0:E8:65:C3:EA
            X509v3 Authority Key Identifier:
                keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c0:70:b0:38:06:e2:cd:2e:41:79:db:d8:55:25:70:9e:60:
         19:50:11:03:3c:8f:69:0f:85:9d:f2:90:3c:b1:ac:a3:31:4c:
         16:11:ab:bf:25:f7:4a:37:e6:50:3f:42:f5:52:b4:c0:76:74:
         42:a9:86:48:00:a3:2b:ac:5e:cc:3a:22:92:9c:65:5d:32:17:
         dd:b7:85:2b:5c:41:dc:17:63:a8:9d:ad:dc:9e:45:0f:a7:72:
         5b:4a:11:67:dd:75:91:c8:9d:bf:61:34:c8:74:3f:42:b2:28:
         81:67:e1:7f:67:5a:1a:71:9f:69:fb:15:3e:7e:39:a4:6e:fa:
         a6:c2:60:aa:53:cf:1c:3c:69:f0:04:22:a1:15:47:1f:0a:c3:
         c4:98:f8:9d:bd:b9:73:14:12:1f:7c:2f:d9:43:7b:52:87:21:
         0c:3b:c9:ff:40:d7:c5:50:9c:36:d2:30:82:0f:e5:a1:69:96:
         7b:bd:4a:c4:2c:f7:cf:25:d3:9f:f2:e4:04:43:19:b1:34:e1:
         90:1c:9a:c3:f9:f4:0e:d1:78:3f:a5:64:3c:d6:0e:09:ba:13:
         b8:a2:79:bc:7f:81:e4:2d:f1:fe:e2:8f:0a:9b:bc:05:dd:1d:
         47:cb:76:70:42:ca:6f:bc:e9:5e:bb:b0:9a:1c:42:b0:59:df:
         4b:2f:85:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY83CO5XpTvxGTpF494ugcnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy
Y2U0NjYwHhcNMjQwNTAyMDIwMTIzWhcNMjQwNTAzMDIwMTIzWjAzMTEwLwYDVQQD
EygzNDA1NWZiZWMyMDk3OGFiNmU2YTVkNjM4NzhhYmJiMGU4NjVjM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWd52VG9WW+fJ2U1wCti9WdUm7Uc
RXXY4XJeUpsJPXs+2cXsU2eAd0k1a4Ibu/dbHxDuhuVmmY9emKkQ2B4b2hDZUlpy
nN9di4tOoy4Ntr8qdNQGX9f8rWySFlRge1GL3PJMOkkxxnBNCfwWMvFtXV28xfNI
o06UgfZ2/pkDpt+p+1Ov0plufQeJzaPtl1swEMvkodJZsYoUjYCk2I1aVjSY8IZl
ORLlYW7anYqQJ3OEueFCeF3cImVeWzFFG3SRzJLlOHy0cV80OXQHkidtfKA6VW2I
zjnuaqx0KIXtELzRyoOdoubM1aPygDnSuTMYipv537XnlF3lQRMzY2+xuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQFX77CCXirbmpdY4eKu7DoZcPqMB8GA1UdIwQY
MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt
YWM5YzhhNTBmMjRlLzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl
LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8BwsDgG
4s0uQXnb2FUlcJ5gGVARAzyPaQ+FnfKQPLGsozFMFhGrvyX3SjfmUD9C9VK0wHZ0
QqmGSACjK6xezDoikpxlXTIX3beFK1xB3BdjqJ2t3J5FD6dyW0oRZ911kcidv2E0
yHQ/QrIogWfhf2daGnGfafsVPn45pG76psJgqlPPHDxp8AQioRVHHwrDxJj4nb25
cxQSH3wv2UN7UochDDvJ/0DXxVCcNtIwgg/loWmWe71KxCz3zyXTn/LkBEMZsTTh
kByaw/n0DtF4P6VkPNYOCboTuKJ5vH+B5C3x/uKPCpu8Bd0dR8t2cELKb7zpXruw
mhxCsFnfSy+FfA==
-----END CERTIFICATE-----
Generated at Thu May 2 03:36:21 2024 by rpki-client on console-ams.rpki-client.org