Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          0TI1OW0LbgxmW/HR/++du79feGbyqH9SanRrEPZ4GYQ=
Subject key identifier:   17:91:A5:27:91:ED:D7:13:49:A0:71:86:51:6A:4A:E6:6F:9D:37:24
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       018F874AB57CAFDB986CE4CE388FCA864F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          038A
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: 2I6TlEo7fe1zUGqWpjpYie-fD0A.roa (hash: LxTfYNjhF+ycDS50AQnUP4HhajwC9JOPMYGMPRTcVis=)
                          2: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: rXaNLTAh52cRYlq4juCU2frXtglggTRffZ4ZCdY9HQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b5:7c:af:db:98:6c:e4:ce:38:8f:ca:86:4f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=1791a52791edd71349a07186516a4ae66f9d3724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:45:76:2f:d2:ed:fa:38:e7:d9:5a:30:12:
                    1b:8f:fd:da:8d:44:d2:4e:ae:4d:7b:5f:04:50:f0:
                    2b:65:20:bc:95:34:47:52:d6:06:a2:1f:ad:b1:d5:
                    17:69:5b:81:e7:82:c0:ad:c2:93:0f:e5:c0:13:64:
                    76:5c:58:09:d5:37:fb:15:da:56:c5:19:28:e3:d4:
                    05:a7:66:ae:0e:9e:5b:57:3c:e2:b2:d8:6f:da:dd:
                    ad:ed:a0:21:90:4f:1c:79:72:b1:2a:ac:ac:44:17:
                    a9:2d:cb:44:9e:a9:77:81:30:4a:b1:4a:b1:d5:74:
                    00:e1:2a:70:cb:21:59:87:0a:aa:7a:b1:2e:85:e5:
                    7b:d3:e1:ac:20:7d:d4:7f:1d:4e:c6:7b:4c:ae:a8:
                    66:ae:96:45:80:0f:c8:5f:d2:8d:0c:42:cb:3b:30:
                    62:95:bf:24:23:34:90:95:05:cb:cd:5e:00:46:65:
                    3c:b0:9e:87:ce:c5:86:61:ef:63:b8:ef:4c:ac:8d:
                    ec:29:b9:e3:b4:df:d2:a5:49:27:f4:57:47:4c:6c:
                    7f:e9:c8:14:d2:7f:c6:52:d7:36:d7:ad:9e:cf:8e:
                    ba:0c:cb:f1:ba:e4:c0:e3:ba:92:78:5c:0b:87:12:
                    b0:b4:d5:9f:12:24:b0:46:ee:65:fe:46:e7:a7:da:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:A5:27:91:ED:D7:13:49:A0:71:86:51:6A:4A:E6:6F:9D:37:24
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b1:ee:fc:ea:4d:c1:f6:e5:84:1d:ee:0b:b0:53:57:bd:d7:
         fd:14:8d:97:88:35:6b:94:d2:88:e6:46:bd:49:11:b6:65:17:
         7f:0e:17:9c:58:7c:cd:ef:57:ee:dd:0b:59:b2:07:f9:d5:16:
         5e:c0:f2:f8:94:aa:eb:d9:54:f1:af:37:ce:3e:08:79:15:b2:
         d6:65:c2:1a:49:98:03:7f:bb:f2:97:b7:78:5e:03:d6:65:6e:
         38:bd:46:96:7f:47:a0:d8:81:b2:1c:36:d9:5b:d6:96:a8:3c:
         35:df:d6:60:f7:d9:6d:4e:ca:4d:4f:cc:9d:e9:76:f9:eb:0e:
         d2:18:75:c8:82:fe:88:09:a8:98:f5:d6:fe:57:60:61:ae:c2:
         75:86:fc:d6:65:21:9a:80:7b:e1:c1:49:be:6c:e7:cf:80:d1:
         47:4d:05:9a:f7:b9:e7:5f:23:b1:37:3e:f5:37:0d:2a:4e:19:
         c3:e1:4d:cc:fa:ce:d9:d9:60:c0:20:6e:0c:b7:ea:42:df:3b:
         b5:46:50:48:d5:c2:4d:18:ec:7e:c6:b5:74:34:a5:fb:ce:8a:
         d0:36:67:c2:af:5d:5b:af:ce:2e:e2:aa:5a:58:ec:62:43:91:
         44:14:32:3d:a6:9a:41:b4:26:cc:1c:4a:a6:9c:53:a6:1c:81:
         c5:7d:65:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSrV8r9uYbOTOOI/Khk9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWU0OWUxYzc1NWZkZTAzOGJkMTg3NWM3ZjM5N2E1Njg2
NDYwMTQwHhcNMjQwNTE3MTYwMjUxWhcNMjQwNTE4MTYwMjUxWjAzMTEwLwYDVQQD
EygxNzkxYTUyNzkxZWRkNzEzNDlhMDcxODY1MTZhNGFlNjZmOWQzNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdNFdi/S7fo459laMBIbj/3ajUTS
Tq5Ne18EUPArZSC8lTRHUtYGoh+tsdUXaVuB54LArcKTD+XAE2R2XFgJ1Tf7FdpW
xRko49QFp2auDp5bVzzisthv2t2t7aAhkE8ceXKxKqysRBepLctEnql3gTBKsUqx
1XQA4SpwyyFZhwqqerEuheV70+GsIH3Ufx1OxntMrqhmrpZFgA/IX9KNDELLOzBi
lb8kIzSQlQXLzV4ARmU8sJ6HzsWGYe9juO9MrI3sKbnjtN/SpUkn9FdHTGx/6cgU
0n/GUtc2162ez466DMvxuuTA47qSeFwLhxKwtNWfEiSwRu5l/kbnp9qzqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeRpSeR7dcTSaBxhlFqSuZvnTckMB8GA1UdIwQY
MBaAFEIeSeHHVf3gOL0Ydcfzl6VoZGAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82Y2JiMGUtZjQ1NS00NTczLWE5Zjkt
MzhkNjcxNmIyMDA1LzEvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82Y2JiMGUtZjQ1NS00NTczLWE5ZjktMzhkNjcxNmIyMDA1
LzEvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObHu/OpN
wfblhB3uC7BTV73X/RSNl4g1a5TSiOZGvUkRtmUXfw4XnFh8ze9X7t0LWbIH+dUW
XsDy+JSq69lU8a83zj4IeRWy1mXCGkmYA3+78pe3eF4D1mVuOL1Gln9HoNiBshw2
2VvWlqg8Nd/WYPfZbU7KTU/Mnel2+esO0hh1yIL+iAmomPXW/ldgYa7CdYb81mUh
moB74cFJvmznz4DRR00Fmve5518jsTc+9TcNKk4Zw+FNzPrO2dlgwCBuDLfqQt87
tUZQSNXCTRjsfsa1dDSl+86K0DZnwq9dW6/OLuKqWljsYkORRBQyPaaaQbQmzBxK
ppxTphyBxX1lhg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:09:23 2024 by rpki-client on console-fra.rpki-client.org