Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          27cMwPwm9Z41CraUbkQTvuTwIUDs03niu0Lsa8tvuMI=
Subject key identifier:   5D:76:EF:62:58:68:28:8F:6C:8E:84:4C:26:C0:96:9D:32:79:D3:36
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       018F885B1167285EA9F7908BF5CE6329FA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          1152
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: JnqW-wWsSqtmrRAX52rymVykelo.roa (hash: abQkRRm5kyNwl/qgM/djUCT0XG/kbmD4uyoSc9njhPI=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: f2xWfcHK1avsHqvn2EYsPIwfkM/1no9zC2uso31BRSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:11:67:28:5e:a9:f7:90:8b:f5:ce:63:29:fa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=5d76ef625868288f6c8e844c26c0969d3279d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:52:12:4d:77:b2:8e:e5:2d:12:75:73:8d:
                    1f:9b:8b:5b:89:c6:1c:5b:83:ae:88:c6:42:8a:ea:
                    66:9c:b9:cf:08:c0:54:43:34:10:91:41:3a:79:d3:
                    9f:cb:f9:a2:69:d0:29:b1:e3:4d:34:ef:45:7c:87:
                    5e:01:23:db:dd:f5:04:40:13:94:d0:05:31:8c:96:
                    78:e2:c4:72:d6:fa:8f:6c:27:54:c1:d7:f6:79:54:
                    60:ef:40:1c:c2:4e:4e:e8:4b:48:1c:bf:65:5b:22:
                    44:04:ad:4a:20:bc:c9:b9:7f:a4:2c:71:11:62:0b:
                    f3:d3:c4:58:6d:dd:a4:1f:af:ec:fc:bd:54:94:01:
                    90:99:97:47:64:90:2c:91:ff:40:83:9a:c5:f9:27:
                    38:40:68:0a:4e:4c:fd:5c:a2:a4:d4:ba:24:ee:4d:
                    6e:fb:a0:15:3f:e7:35:31:37:d9:63:75:84:d8:51:
                    f0:5e:73:68:e1:a3:aa:fe:36:52:3a:08:0e:ea:09:
                    10:00:7d:8b:b6:53:c8:2c:b5:0f:cf:cf:11:96:19:
                    40:e1:8d:62:51:cf:15:ac:50:5c:46:d8:ab:2e:6c:
                    31:8b:5c:5c:a2:ac:63:1c:89:a4:ce:cb:eb:3e:a0:
                    6a:2a:de:09:7a:3e:c9:e3:ff:46:47:c6:d0:ff:ab:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:76:EF:62:58:68:28:8F:6C:8E:84:4C:26:C0:96:9D:32:79:D3:36
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:e3:09:52:21:e3:86:f1:47:4b:01:75:da:ec:6e:74:ea:
         c7:64:2b:85:c7:97:b8:37:34:96:43:f1:cd:fc:d4:8a:f1:75:
         5d:6b:36:6e:48:d4:6f:88:be:8c:d6:11:91:64:94:f6:7b:01:
         05:3d:90:be:57:42:ac:1c:7c:20:de:6b:3e:32:91:d8:d9:54:
         37:e3:8f:45:90:fc:02:4c:6b:fa:68:12:fe:08:db:75:b6:7b:
         16:02:df:c6:f1:0d:d8:57:61:08:66:9d:2a:0d:57:e2:b5:96:
         11:1b:5a:72:60:57:5c:f1:66:df:38:d5:91:89:ae:c1:1d:f7:
         7b:a5:a7:f2:83:2c:8d:c6:7b:b7:46:5a:c2:a5:95:e4:23:1a:
         f0:14:28:55:a8:0e:08:80:fb:70:7c:25:d0:39:43:89:49:55:
         b2:cf:fa:eb:d9:36:87:f2:b9:0d:64:a6:8c:16:52:0b:13:77:
         dd:7d:23:80:05:83:e3:55:10:03:67:1f:06:d0:e9:96:64:61:
         d0:32:dd:ed:1e:75:6c:26:1b:d5:a7:3f:85:ac:01:df:a5:0d:
         4d:be:d4:b8:f7:20:63:ff:1e:05:07:ee:4f:d4:43:86:bd:47:
         d7:24:57:31:16:79:48:3c:f8:d5:8d:47:ef:49:a1:52:33:44:
         67:59:ac:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWxFnKF6p95CL9c5jKfpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjQwNTE3MjEwMDIwWhcNMjQwNTE4MjEwMDIwWjAzMTEwLwYDVQQD
Eyg1ZDc2ZWY2MjU4NjgyODhmNmM4ZTg0NGMyNmMwOTY5ZDMyNzlkMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHFSEk13so7lLRJ1c40fm4tbicYc
W4OuiMZCiupmnLnPCMBUQzQQkUE6edOfy/miadApseNNNO9FfIdeASPb3fUEQBOU
0AUxjJZ44sRy1vqPbCdUwdf2eVRg70Acwk5O6EtIHL9lWyJEBK1KILzJuX+kLHER
Ygvz08RYbd2kH6/s/L1UlAGQmZdHZJAskf9Ag5rF+Sc4QGgKTkz9XKKk1Lok7k1u
+6AVP+c1MTfZY3WE2FHwXnNo4aOq/jZSOggO6gkQAH2LtlPILLUPz88RlhlA4Y1i
Uc8VrFBcRtirLmwxi1xcoqxjHImkzsvrPqBqKt4Jej7J4/9GR8bQ/6uAUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1272JYaCiPbI6ETCbAlp0yedM2MB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARObjCVIh
44bxR0sBddrsbnTqx2QrhceXuDc0lkPxzfzUivF1XWs2bkjUb4i+jNYRkWSU9nsB
BT2QvldCrBx8IN5rPjKR2NlUN+OPRZD8Akxr+mgS/gjbdbZ7FgLfxvEN2FdhCGad
Kg1X4rWWERtacmBXXPFm3zjVkYmuwR33e6Wn8oMsjcZ7t0ZawqWV5CMa8BQoVagO
CID7cHwl0DlDiUlVss/669k2h/K5DWSmjBZSCxN33X0jgAWD41UQA2cfBtDplmRh
0DLd7R51bCYb1ac/hawB36UNTb7UuPcgY/8eBQfuT9RDhr1H1yRXMRZ5SDz41Y1H
70mhUjNEZ1ms/w==
-----END CERTIFICATE-----
Generated at Fri May 17 21:45:06 2024 by rpki-client on console-fra.rpki-client.org