Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File:                     STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier:          5H+NTEALYJPm96XnPGp+1c/PSohcaQtB+GOtJLYOr9U=
Subject key identifier:   03:FE:EF:71:F6:94:F8:B1:87:65:50:F7:47:B3:37:A7:04:D9:E9:B6
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer:       /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial:       018F87ED12B425CD98BD424C0461F6D4F847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number:          0703
Signing time:             Fri 17 May 2024 19:00:11 +0000
Manifest this update:     Fri 17 May 2024 19:00:11 +0000
Manifest next update:     Sat 18 May 2024 19:00:11 +0000
Files and hashes:         1: DBpYyHavcOYzrXAYBRgs92V23Gs.roa (hash: RVkjci3rSsHp/QoeVQzjl9eQwRfo9dQpLr0Ke0vIVXk=)
                          2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: fJTARJkfvxVobpyekWqJ5inWjeWenjXweZPn4f1OpZE=)
                          3: wJIwB-WtaZrrHIFdBBYgxn6GD1E.roa (hash: NqHmt7h+5fdv7B8QFPA7P2zaKRzx/fSTSqwwDs0WBdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:12:b4:25:cd:98:bd:42:4c:04:61:f6:d4:f8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
        Validity
            Not Before: May 17 19:00:11 2024 GMT
            Not After : May 18 19:00:11 2024 GMT
        Subject: CN=03feef71f694f8b1876550f747b337a704d9e9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:e6:72:9d:c0:7b:3d:4f:7c:7f:77:69:9c:
                    f2:9f:28:b1:9e:2b:ae:ea:5a:6a:64:3f:d5:01:a6:
                    a0:7b:2f:09:c2:92:92:6e:14:e0:3d:2e:fc:be:13:
                    07:e4:b4:41:a8:3e:bb:07:bc:2b:f2:12:a5:26:b8:
                    4b:bc:31:bc:ed:f6:8b:2b:9c:ff:15:5b:06:fe:e8:
                    d8:47:49:c8:ba:b0:9c:00:3f:50:31:5f:63:78:28:
                    cc:0a:c6:ac:8c:a8:7e:21:3e:99:cf:6c:1d:b0:b5:
                    66:e2:48:66:12:51:2d:66:a0:62:53:86:53:1f:b7:
                    d1:f4:b9:f9:7f:85:2c:3f:f8:08:2a:d7:60:c6:37:
                    7e:e3:c7:7a:ae:91:c1:82:e6:f4:cc:e5:91:11:ff:
                    e5:47:f4:57:da:76:a2:dd:ed:13:2c:e6:8a:f2:ac:
                    55:18:b4:ac:53:91:4d:80:88:4c:50:0f:78:d1:5c:
                    4c:84:e1:55:1b:3d:4d:d7:22:46:f8:9e:89:18:ac:
                    40:4b:07:28:dc:9c:84:03:92:15:5c:f8:4e:50:85:
                    05:a0:d8:d0:b2:db:72:10:6c:31:6f:d9:1a:87:fd:
                    be:13:6b:41:db:f1:a0:ab:6e:27:41:46:76:bd:82:
                    9f:53:08:00:98:fd:04:ae:27:82:af:29:59:77:56:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:EF:71:F6:94:F8:B1:87:65:50:F7:47:B3:37:A7:04:D9:E9:B6
            X509v3 Authority Key Identifier:
                keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f5:f6:e8:fd:11:c3:da:e6:ac:17:fb:56:9c:65:5e:31:a9:
         4b:06:96:3f:01:15:a6:de:3c:6f:42:ea:4e:ae:60:f4:f9:05:
         cd:0e:e8:26:7a:66:b9:07:70:c2:81:2b:2b:cf:25:40:be:cb:
         fb:43:df:ab:b6:f6:2f:58:5b:7b:8a:f2:54:34:fc:28:fe:c9:
         22:7d:52:61:b5:58:bd:c5:bb:c8:e5:95:01:79:18:16:2f:db:
         b8:0f:0c:8e:23:58:e5:c6:e6:8e:58:50:28:66:8c:59:cf:71:
         91:84:87:29:9a:d1:fa:32:a1:10:f7:12:9b:43:82:8e:31:08:
         e9:83:60:a8:32:24:82:e3:30:28:63:b3:94:5c:30:44:b0:28:
         a4:54:96:3c:0a:ae:6e:43:b1:03:06:40:3a:e0:e1:7c:e1:7d:
         18:23:7b:1d:5a:75:78:6d:16:c2:ff:3b:36:70:6f:00:21:f7:
         f6:f0:2e:a5:5b:7b:d0:c7:0d:26:41:05:1a:24:22:1a:f8:18:
         8b:0c:85:6d:d1:4e:81:dc:0d:89:49:b7:f7:9d:2c:8c:aa:8c:
         66:ad:b9:33:3a:9b:4f:e1:cd:0d:f5:c6:bb:19:37:7e:fb:ab:
         ce:c5:ed:dd:45:ce:86:71:e2:bf:91:84:f5:37:c9:23:2a:ba:
         8e:e9:a8:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7RK0Jc2YvUJMBGH21PhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi
NzEwNTEwHhcNMjQwNTE3MTkwMDExWhcNMjQwNTE4MTkwMDExWjAzMTEwLwYDVQQD
EygwM2ZlZWY3MWY2OTRmOGIxODc2NTUwZjc0N2IzMzdhNzA0ZDllOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc3mcp3Aez1PfH93aZzynyixniuu
6lpqZD/VAaagey8JwpKSbhTgPS78vhMH5LRBqD67B7wr8hKlJrhLvDG87faLK5z/
FVsG/ujYR0nIurCcAD9QMV9jeCjMCsasjKh+IT6Zz2wdsLVm4khmElEtZqBiU4ZT
H7fR9Ln5f4UsP/gIKtdgxjd+48d6rpHBgub0zOWREf/lR/RX2nai3e0TLOaK8qxV
GLSsU5FNgIhMUA940VxMhOFVGz1N1yJG+J6JGKxASwco3JyEA5IVXPhOUIUFoNjQ
sttyEGwxb9kah/2+E2tB2/Ggq24nQUZ2vYKfUwgAmP0ErieCrylZd1bzxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP+73H2lPixh2VQ90ezN6cE2em2MB8GA1UdIwQY
MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt
NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri
LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfX26P0R
w9rmrBf7VpxlXjGpSwaWPwEVpt48b0LqTq5g9PkFzQ7oJnpmuQdwwoErK88lQL7L
+0Pfq7b2L1hbe4ryVDT8KP7JIn1SYbVYvcW7yOWVAXkYFi/buA8MjiNY5cbmjlhQ
KGaMWc9xkYSHKZrR+jKhEPcSm0OCjjEI6YNgqDIkguMwKGOzlFwwRLAopFSWPAqu
bkOxAwZAOuDhfOF9GCN7HVp1eG0Wwv87NnBvACH39vAupVt70McNJkEFGiQiGvgY
iwyFbdFOgdwNiUm3950sjKqMZq25MzqbT+HNDfXGuxk3fvurzsXt3UXOhnHiv5GE
9TfJIyq6jumofg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:31:35 2024 by rpki-client on console-ams.rpki-client.org