Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          0qmG6y3gfCliTRZCIHsVfaeOcCh92jNZIRNiOYCfFME=
Subject key identifier:   CF:5A:26:73:2F:96:ED:46:75:A5:2E:36:E0:78:28:64:92:45:3E:A4
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       018F874AF9B85CBBE8ED164F694CB8F365C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: TMU3yyVqBpcm-SueLtMjBMmrOGM.roa (hash: MrGqP3N2SUuR2zsJEziUimKULBlboWtxiNL31qOGtBk=)
                          2: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: tkvG5gk5BtRuhODl2T9Q2ZXrRJhE8Of4as/v/3IM9oM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f9:b8:5c:bb:e8:ed:16:4f:69:4c:b8:f3:65:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=cf5a26732f96ed4675a52e36e078286492453ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:4e:6f:a0:b6:a8:0e:f3:d1:f9:9c:7e:85:
                    af:fd:70:2c:73:14:62:19:a7:cb:70:87:00:5c:c7:
                    7e:2a:a6:bb:4c:bc:ba:34:fc:2a:ba:e0:48:0d:80:
                    67:e0:86:b0:f7:a5:e9:db:20:1e:2f:80:ef:bf:f8:
                    92:67:e3:29:1a:fd:7a:55:23:7f:01:51:69:00:39:
                    98:95:01:fe:89:8b:48:75:02:a2:a2:1c:9a:7f:48:
                    14:0d:f0:61:56:46:ce:74:1d:f8:8e:28:ae:79:a6:
                    4c:93:5b:4a:4a:ca:e8:bf:b2:ad:e3:b8:c8:97:95:
                    da:cf:22:6e:46:c9:23:c1:ac:a1:7c:ff:59:04:e2:
                    6c:ec:d9:3e:ed:97:91:cc:2f:88:97:85:53:70:dc:
                    d3:38:70:83:4f:8a:5d:04:9e:6e:d3:f3:3a:f5:1d:
                    af:43:34:79:ab:3c:10:aa:8a:45:b8:84:ce:82:23:
                    51:d8:b4:69:52:24:7b:0e:90:80:b7:cd:bb:40:a1:
                    a1:4e:1c:24:7d:1a:ad:69:1b:cb:66:1d:44:cf:83:
                    8c:4a:3d:86:52:f3:65:a6:32:fa:1a:a4:69:07:ae:
                    98:3c:f8:26:a2:23:b5:5a:49:6e:6f:ef:2a:60:ac:
                    76:39:8e:bf:b9:72:b3:3d:4a:b9:3e:08:ff:5d:28:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5A:26:73:2F:96:ED:46:75:A5:2E:36:E0:78:28:64:92:45:3E:A4
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:59:cf:8d:e1:61:b2:ca:18:ee:e3:09:59:eb:f3:2d:53:
         de:4a:c9:3f:17:e6:d5:0b:da:c6:37:44:6c:27:95:55:e7:31:
         4d:81:1e:ce:7a:d9:62:63:5c:98:fd:5e:b3:b0:ab:80:92:ca:
         9d:2b:93:4a:70:ca:68:90:22:6d:5d:c2:83:9b:fd:23:5d:fd:
         6c:7f:df:09:4e:ed:e3:b7:a7:79:15:2e:e5:40:c8:21:00:db:
         eb:9a:88:cb:a5:e7:eb:23:4b:b5:58:fd:88:2d:57:b1:f2:af:
         ad:e7:4d:ec:50:b6:70:64:1c:df:b2:c6:f1:ce:c0:70:10:8c:
         35:18:08:e3:c4:da:aa:72:93:0e:6e:df:47:61:a1:7b:e7:fa:
         07:df:ae:9c:67:c0:c8:d5:7c:68:c3:83:2d:88:62:55:fe:08:
         97:25:31:49:64:7c:82:67:a8:29:7f:e6:4d:63:d7:82:e6:8f:
         9a:6c:1c:e8:05:78:f5:01:aa:3f:14:2d:83:62:09:3b:31:39:
         31:8f:51:94:dc:0a:aa:2b:ac:14:b2:00:5e:6f:18:57:ba:03:
         3a:8d:b7:b0:d6:5a:6a:02:59:0d:67:d3:24:9e:6b:2a:48:e4:
         89:81:b9:76:d9:90:26:ea:3c:ec:2e:85:2c:33:27:64:cd:6e:
         d6:c7:f5:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSvm4XLvo7RZPaUy482XIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjQwNTE3MTYwMzA4WhcNMjQwNTE4MTYwMzA4WjAzMTEwLwYDVQQD
EyhjZjVhMjY3MzJmOTZlZDQ2NzVhNTJlMzZlMDc4Mjg2NDkyNDUzZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX9Ob6C2qA7z0fmcfoWv/XAscxRi
GafLcIcAXMd+Kqa7TLy6NPwquuBIDYBn4Iaw96Xp2yAeL4Dvv/iSZ+MpGv16VSN/
AVFpADmYlQH+iYtIdQKiohyaf0gUDfBhVkbOdB34jiiueaZMk1tKSsrov7Kt47jI
l5XazyJuRskjwayhfP9ZBOJs7Nk+7ZeRzC+Il4VTcNzTOHCDT4pdBJ5u0/M69R2v
QzR5qzwQqopFuITOgiNR2LRpUiR7DpCAt827QKGhThwkfRqtaRvLZh1Ez4OMSj2G
UvNlpjL6GqRpB66YPPgmoiO1Wklub+8qYKx2OY6/uXKzPUq5Pgj/XSiUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9aJnMvlu1GdaUuNuB4KGSSRT6kMB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjadZz43h
YbLKGO7jCVnr8y1T3krJPxfm1QvaxjdEbCeVVecxTYEeznrZYmNcmP1es7CrgJLK
nSuTSnDKaJAibV3Cg5v9I139bH/fCU7t47eneRUu5UDIIQDb65qIy6Xn6yNLtVj9
iC1XsfKvredN7FC2cGQc37LG8c7AcBCMNRgI48TaqnKTDm7fR2Ghe+f6B9+unGfA
yNV8aMODLYhiVf4IlyUxSWR8gmeoKX/mTWPXguaPmmwc6AV49QGqPxQtg2IJOzE5
MY9RlNwKqiusFLIAXm8YV7oDOo23sNZaagJZDWfTJJ5rKkjkiYG5dtmQJuo87C6F
LDMnZM1u1sf1lQ==
-----END CERTIFICATE-----
Generated at Fri May 17 19:10:09 2024 by rpki-client on console-fra.rpki-client.org