Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File:                     puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier:          UFmJdth6hz1DAgPaBWW11yl/qiiXNM5nNhtfiNYMvaM=
Subject key identifier:   C8:A1:1D:F6:8E:B0:50:E9:30:4E:21:62:4A:BA:47:CF:F4:89:31:FD
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer:       /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial:       018F86A3814659982AD949543F805784266F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number:          10D0
Signing time:             Fri 17 May 2024 13:00:13 +0000
Manifest this update:     Fri 17 May 2024 13:00:13 +0000
Manifest next update:     Sat 18 May 2024 13:00:13 +0000
Files and hashes:         1: AOUsCduJrxObGqw-qXb3vUwUBp8.roa (hash: TwVi1wQhW8A8BjjE6/TM8dFuYRUR6DJeAKXAjsTaVdk=)
                          2: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: ZiTcSA/XyOvls/xSFSTFMl2nQXXhgdYz/gi1tXfpDGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:81:46:59:98:2a:d9:49:54:3f:80:57:84:26:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
        Validity
            Not Before: May 17 13:00:13 2024 GMT
            Not After : May 18 13:00:13 2024 GMT
        Subject: CN=c8a11df68eb050e9304e21624aba47cff48931fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:2f:04:d3:cd:2e:fb:91:10:44:ba:a5:28:
                    f8:aa:17:15:ff:06:84:1c:eb:58:e3:09:17:e5:9a:
                    fb:d5:80:f9:56:93:de:b5:e3:95:c3:8a:30:1c:2b:
                    2e:19:e7:30:00:3b:f6:38:64:94:e1:ac:33:e5:c8:
                    f3:f4:d4:fa:82:56:66:72:76:ea:ac:83:9d:10:1f:
                    1e:d0:41:0c:aa:31:2b:40:bd:7d:45:87:68:db:af:
                    3a:86:cc:eb:2d:48:c2:25:09:41:15:3b:34:9f:8c:
                    a8:6d:d4:b0:13:39:fc:8d:94:ab:e7:08:95:b8:ca:
                    5e:2b:f7:5e:a7:9a:a3:fd:63:ab:a0:84:b3:12:5b:
                    b3:5f:56:44:ab:25:f0:52:bc:04:e1:99:48:6e:cd:
                    d2:02:67:f3:c2:c0:6a:3d:4d:a0:79:a5:f9:af:02:
                    4b:b3:f5:f7:df:b7:63:73:2a:cf:fb:46:95:23:e7:
                    e2:a4:c1:b6:d6:a0:34:57:22:2a:07:49:36:ba:e5:
                    9b:db:73:11:d6:c1:78:60:24:1b:81:69:48:4a:ab:
                    54:7d:a5:be:22:33:1e:eb:dd:d9:0e:19:62:f0:50:
                    42:ae:e9:fb:8a:bb:a8:7a:77:37:c3:df:60:c8:ce:
                    e0:fb:a8:3a:46:4f:38:52:26:5e:63:35:b4:48:1a:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:1D:F6:8E:B0:50:E9:30:4E:21:62:4A:BA:47:CF:F4:89:31:FD
            X509v3 Authority Key Identifier:
                keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:30:69:f7:b8:a6:f4:a7:b1:4d:bc:2b:45:38:44:43:fd:
         67:3f:47:ed:ff:51:b3:9a:dc:24:11:d3:fc:80:6b:78:95:e9:
         1a:94:d0:df:9d:46:6c:25:4b:af:03:de:2c:ef:81:53:2d:e2:
         98:a6:c3:bf:e8:69:5e:b9:fd:dd:77:40:19:31:f2:47:b5:96:
         b0:20:1f:b7:ca:7a:a3:da:65:0c:be:c7:b4:ef:4a:c6:29:19:
         4a:33:87:53:9d:ff:e1:27:bc:e9:c5:49:55:e7:b2:b5:03:05:
         ed:8f:1f:cb:87:bf:01:23:21:86:a8:9b:b0:2f:c4:a0:33:bd:
         84:5d:65:08:78:aa:af:71:8e:77:76:70:ca:d1:ab:72:0c:8d:
         30:81:9c:f5:16:26:60:69:0d:9b:a3:54:a5:6d:cd:ff:43:f5:
         e5:df:14:97:0a:0f:5e:8d:1c:2a:a5:a8:ef:1b:72:a1:15:23:
         6f:44:7c:ad:4d:fd:15:41:05:d1:8c:64:e1:d1:54:4c:4b:c5:
         f4:94:46:74:50:67:ee:3c:11:76:2c:11:f7:0c:11:71:2d:d4:
         e1:98:50:39:d3:48:51:b6:5d:cb:17:b4:14:4b:cc:bf:74:75:
         38:b9:bd:cc:2b:c5:01:5a:c0:52:c1:d0:0e:78:2c:52:19:89:
         a7:0f:20:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go4FGWZgq2UlUP4BXhCZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZThhMjVhOTM3OTJhNThiM2EyZDgwZmIxYWFkOTU5ZTY1
YWVkZGYwHhcNMjQwNTE3MTMwMDEzWhcNMjQwNTE4MTMwMDEzWjAzMTEwLwYDVQQD
EyhjOGExMWRmNjhlYjA1MGU5MzA0ZTIxNjI0YWJhNDdjZmY0ODkzMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntQvBNPNLvuREES6pSj4qhcV/waE
HOtY4wkX5Zr71YD5VpPeteOVw4owHCsuGecwADv2OGSU4awz5cjz9NT6glZmcnbq
rIOdEB8e0EEMqjErQL19RYdo2686hszrLUjCJQlBFTs0n4yobdSwEzn8jZSr5wiV
uMpeK/dep5qj/WOroISzEluzX1ZEqyXwUrwE4ZlIbs3SAmfzwsBqPU2geaX5rwJL
s/X337djcyrP+0aVI+fipMG21qA0VyIqB0k2uuWb23MR1sF4YCQbgWlISqtUfaW+
IjMe693ZDhli8FBCrun7iruoenc3w99gyM7g+6g6Rk84UiZeYzW0SBo8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMihHfaOsFDpME4hYkq6R8/0iTH9MB8GA1UdIwQY
MBaAFKboolqTeSpYs6LYD7Gq2VnmWu3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzct
NGVhZWIyYTIzYjI3LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzctNGVhZWIyYTIzYjI3
LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPswafe4
pvSnsU28K0U4REP9Zz9H7f9Rs5rcJBHT/IBreJXpGpTQ351GbCVLrwPeLO+BUy3i
mKbDv+hpXrn93XdAGTHyR7WWsCAft8p6o9plDL7HtO9KxikZSjOHU53/4Se86cVJ
VeeytQMF7Y8fy4e/ASMhhqibsC/EoDO9hF1lCHiqr3GOd3ZwytGrcgyNMIGc9RYm
YGkNm6NUpW3N/0P15d8UlwoPXo0cKqWo7xtyoRUjb0R8rU39FUEF0Yxk4dFUTEvF
9JRGdFBn7jwRdiwR9wwRcS3U4ZhQOdNIUbZdyxe0FEvMv3R1OLm9zCvFAVrAUsHQ
DngsUhmJpw8gdg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:10:44 2024 by rpki-client on console-fra.rpki-client.org