Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier:          BBHWbMPYDor66yUTY+WX9uXE/Z4H6BCY8ZnsygE4W5Y=
Subject key identifier:   47:6A:E7:E8:19:CB:42:B5:A4:C8:5B:C3:60:3F:51:C1:2A:0E:60:2D
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer:       /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial:       018F87498DFBCB307024206ED4C3D9979132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number:          0497
Signing time:             Fri 17 May 2024 16:01:35 +0000
Manifest this update:     Fri 17 May 2024 16:01:35 +0000
Manifest next update:     Sat 18 May 2024 16:01:35 +0000
Files and hashes:         1: FJDfo9uNeuzaeFtBxgp66S0WRAA.roa (hash: WUWOgm3FxEU6+dEiJYSBQOaqBaoWQhLPeeteXCSqwxI=)
                          2: P0OxtFmFtiDHTNn92xY_JpRRpYE.roa (hash: h10jqpGcyY8uvsflw6sG4XOOrO1TLnvlhnWmFY3FNAM=)
                          3: Pm_z3REyQkP_ICGaQCDoZfaFcpE.roa (hash: QX4XTcCCvIbRCmyuQ9vuyXsnvOLtAZwluvFz2Nz6IGI=)
                          4: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: IFuODOphKM71l0UjEVe/fUXjXLMczFHSXvziyc+FGhw=)
                          5: YEIDM5VP6pDNSzhVyIBvi8lDeCI.roa (hash: VfO7RaDBQnJXW+DJDu274bJ0HgDUiIBNrxwmhRosZYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8d:fb:cb:30:70:24:20:6e:d4:c3:d9:97:91:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Validity
            Not Before: May 17 16:01:35 2024 GMT
            Not After : May 18 16:01:35 2024 GMT
        Subject: CN=476ae7e819cb42b5a4c85bc3603f51c12a0e602d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:a8:7e:f8:fe:b5:6d:37:93:53:1e:14:75:
                    9e:5c:43:4e:6d:cc:91:6c:5d:66:21:16:11:d1:bd:
                    2a:e1:da:71:a9:d1:ad:30:8d:66:e4:d6:97:a1:b1:
                    fb:23:8b:23:26:56:b4:7b:06:ef:25:e3:43:ee:ae:
                    70:b6:94:26:75:02:1c:6e:53:0c:8e:38:1a:52:7e:
                    d3:3b:78:7a:dd:45:ab:61:5f:f4:56:b4:4c:ce:b2:
                    87:90:ad:b1:69:9e:59:b0:55:b5:f3:fb:5f:f5:67:
                    e9:68:dd:9f:ed:ed:6a:be:dc:27:a1:87:da:dc:92:
                    5b:4b:74:ff:39:eb:64:e3:d3:2a:78:3d:96:7c:26:
                    a3:da:6f:fd:66:08:9c:da:c4:cc:32:97:07:b5:c9:
                    85:ce:d4:77:18:a6:96:66:32:36:78:20:46:c6:0b:
                    c2:ae:12:b7:76:7a:b4:f8:9e:28:25:cc:81:97:a7:
                    03:dd:df:88:27:17:6f:23:14:c1:62:d6:8f:c7:96:
                    64:ce:41:71:26:54:a2:88:8a:48:68:ac:96:71:1d:
                    85:4a:77:89:26:d9:69:67:3a:b6:ce:09:27:80:5c:
                    e2:54:16:27:06:44:42:8d:0e:1b:8d:3b:f2:84:2a:
                    65:dd:95:82:c6:78:4e:04:4c:48:8a:47:b1:e4:ec:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:E7:E8:19:CB:42:B5:A4:C8:5B:C3:60:3F:51:C1:2A:0E:60:2D
            X509v3 Authority Key Identifier:
                keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:51:5d:cb:99:1e:bf:65:b6:cc:93:34:1d:8c:1e:3a:43:e0:
         88:4b:ad:e9:c2:7e:02:e0:f5:39:9e:b6:93:91:b9:12:cd:29:
         d4:fa:29:1d:a9:55:10:4a:01:8d:4b:63:be:07:a1:50:59:8e:
         6f:81:e4:1c:6c:04:39:a9:42:b5:e0:ae:38:f1:e4:e9:e0:2e:
         22:6a:81:bb:09:28:eb:b9:b7:fd:0d:8c:0b:70:47:41:e8:5f:
         df:0f:6d:d0:c9:c4:b4:ed:59:fa:58:f7:98:45:ff:33:24:fe:
         87:77:8c:27:5d:30:e8:6b:00:6c:bb:c0:0d:c3:a0:20:5c:f4:
         3d:a1:d7:e4:f9:b7:cb:9f:db:15:25:99:a0:86:f6:45:21:0c:
         dd:24:4f:d1:1c:29:d1:d5:2d:61:ed:c5:12:9e:c4:37:45:b5:
         f2:c2:e7:a3:55:f5:03:eb:e8:69:61:1f:ba:f3:95:21:99:03:
         ab:74:df:c9:79:69:6d:85:a8:6f:e9:6e:63:81:dc:9a:d2:01:
         cd:ff:33:33:6b:2f:92:61:e6:f5:26:65:4f:cb:a3:e1:42:8c:
         ff:b2:89:f6:c4:0a:8e:cd:79:52:14:f2:72:59:fe:72:a9:08:
         a8:da:c4:89:fa:de:5e:f6:08:3c:44:dc:3d:16:b1:13:37:78:
         a3:e2:7a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSY37yzBwJCBu1MPZl5EyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjQ3YTcyNWM3NjhkNGRlNzhmYjMxYmI0MGZlMTZlYmEx
OWYyMGQwHhcNMjQwNTE3MTYwMTM1WhcNMjQwNTE4MTYwMTM1WjAzMTEwLwYDVQQD
Eyg0NzZhZTdlODE5Y2I0MmI1YTRjODViYzM2MDNmNTFjMTJhMGU2MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02aofvj+tW03k1MeFHWeXENObcyR
bF1mIRYR0b0q4dpxqdGtMI1m5NaXobH7I4sjJla0ewbvJeND7q5wtpQmdQIcblMM
jjgaUn7TO3h63UWrYV/0VrRMzrKHkK2xaZ5ZsFW18/tf9WfpaN2f7e1qvtwnoYfa
3JJbS3T/Oetk49MqeD2WfCaj2m/9Zgic2sTMMpcHtcmFztR3GKaWZjI2eCBGxgvC
rhK3dnq0+J4oJcyBl6cD3d+IJxdvIxTBYtaPx5ZkzkFxJlSiiIpIaKyWcR2FSneJ
JtlpZzq2zgkngFziVBYnBkRCjQ4bjTvyhCpl3ZWCxnhOBExIikex5OwmRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdq5+gZy0K1pMhbw2A/UcEqDmAtMB8GA1UdIwQY
MBaAFFP0enJcdo1N54+zG7QP4W66GfINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMt
NTc0NzEzODQ1ZGJjLzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMtNTc0NzEzODQ1ZGJj
LzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFFdy5ke
v2W2zJM0HYweOkPgiEut6cJ+AuD1OZ62k5G5Es0p1PopHalVEEoBjUtjvgehUFmO
b4HkHGwEOalCteCuOPHk6eAuImqBuwko67m3/Q2MC3BHQehf3w9t0MnEtO1Z+lj3
mEX/MyT+h3eMJ10w6GsAbLvADcOgIFz0PaHX5Pm3y5/bFSWZoIb2RSEM3SRP0Rwp
0dUtYe3FEp7EN0W18sLno1X1A+voaWEfuvOVIZkDq3TfyXlpbYWob+luY4HcmtIB
zf8zM2svkmHm9SZlT8uj4UKM/7KJ9sQKjs15UhTycln+cqkIqNrEifreXvYIPETc
PRaxEzd4o+J6Kg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:58 2024 by rpki-client on console-ams.rpki-client.org