Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
File:                     bgRq62oBykikl1DYgbefenjVEIk.mft (raw, json)
Hash identifier:          o+q9WDQ12SaomJjkQs8jUMNU/Tv8YlisZfiV8twhh9g=
Subject key identifier:   9E:9E:C0:13:8C:B6:FF:20:95:C9:C7:D2:6B:7F:85:D1:38:8A:9F:0C
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Certificate issuer:       /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial:       018F874AACC41BF36B7EA95288D5F72F7FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:02:49 +0000
Manifest this update:     Fri 17 May 2024 16:02:49 +0000
Manifest next update:     Sat 18 May 2024 16:02:49 +0000
Files and hashes:         1: P2udyw1TmB2zCZHc3eNi4smQM7k.roa (hash: 5jKAbWDGxBtTEUuIVrzx8KljOhp/dwp4LiAXWy/6Qb4=)
                          2: bgRq62oBykikl1DYgbefenjVEIk.crl (hash: vC2h67N0v8UQLCH6p5HNbdiuEKxWyYLZOxlKam4NmCk=)
                          3: mcdIdvmUU5nV-vcx4OPw7JJ4Q9c.roa (hash: CsRbXXTqQoyK2Jjgv8/RJ7qUhQkAhyRC+3n7nY7ercg=)
                          4: zHIjUOUlLwVKCWcUnjdPw6fYKcs.roa (hash: l/K0aRwblL6EhPlKXVV/sxOdByhdqzWrLirpIBYjqhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ac:c4:1b:f3:6b:7e:a9:52:88:d5:f7:2f:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
        Validity
            Not Before: May 17 16:02:49 2024 GMT
            Not After : May 18 16:02:49 2024 GMT
        Subject: CN=9e9ec0138cb6ff2095c9c7d26b7f85d1388a9f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:f7:6b:f2:85:2a:0e:e4:97:9b:d7:37:67:
                    b5:10:50:21:8c:c5:87:00:c3:8f:d2:a0:55:85:36:
                    5d:f1:f5:fe:15:f2:78:45:7a:82:d2:3e:a9:82:49:
                    67:f1:05:63:d4:c8:f1:29:a6:0c:b9:bb:c9:f1:6c:
                    ad:ba:46:06:9d:f0:a2:fb:38:c7:7b:4f:29:67:7c:
                    aa:76:d0:d6:f5:38:c0:fc:08:5e:b6:14:a0:71:86:
                    39:cb:0e:f9:e9:51:6e:61:a6:c8:40:39:d6:00:90:
                    77:b5:a4:f1:be:2b:30:5c:5f:c4:74:02:1f:af:71:
                    ef:0d:7a:40:44:6c:e6:e8:cb:0d:4b:89:8b:d7:30:
                    2c:3b:1b:53:ce:67:31:4f:37:f9:7d:f8:e3:18:37:
                    62:15:b4:04:ef:80:80:d5:0b:8f:27:1c:23:0b:00:
                    58:cb:08:d9:e0:88:1a:d8:8d:b5:1f:aa:94:ca:a3:
                    52:5a:ea:07:81:09:13:6b:e4:75:7d:b0:75:12:88:
                    06:05:c9:81:27:8b:17:97:05:de:dd:0e:d0:0b:8f:
                    03:85:4c:8a:3d:45:22:2d:d6:1c:ed:46:77:f1:11:
                    f8:64:a0:87:6c:a3:0e:d0:6a:19:53:87:4b:82:c6:
                    f0:ee:1a:d7:3e:83:37:36:b0:11:0e:fe:c2:c5:b5:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:C0:13:8C:B6:FF:20:95:C9:C7:D2:6B:7F:85:D1:38:8A:9F:0C
            X509v3 Authority Key Identifier:
                keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:66:b5:d4:fa:ae:27:09:17:fd:57:10:ba:b1:27:55:4f:57:
         99:0b:21:86:a6:2c:c9:94:99:9f:17:ef:bd:ad:ea:e0:77:ff:
         f1:44:00:57:de:c0:15:cd:e6:67:ea:6d:1b:a7:f9:eb:4a:c5:
         77:bf:b2:3d:04:ab:6f:e8:c9:91:a5:e5:2b:14:e7:f8:37:48:
         23:87:88:53:ed:a7:9f:33:dd:92:8f:97:ac:e9:3b:59:8b:42:
         cc:05:f2:b0:03:20:73:5e:b1:32:0b:88:09:b0:b8:7d:c3:a8:
         40:fd:11:ec:e6:d6:ef:c4:f5:41:39:b0:2a:b5:1f:00:da:bd:
         1a:15:b4:45:a1:4e:fe:2e:6c:18:81:fb:bf:ef:2a:f8:6f:cc:
         ac:0b:4b:39:a4:a1:be:d3:16:db:f3:a2:94:58:57:a0:16:ec:
         42:44:2c:f1:89:b1:63:55:55:6d:40:50:11:3b:d8:99:30:8a:
         bd:03:f8:2f:0c:11:d7:2d:56:b3:ee:08:54:b5:b2:2c:92:e5:
         4f:4d:3a:1f:37:a1:bb:6f:c7:9c:1f:b1:ea:76:60:44:b7:2e:
         ff:42:70:fd:11:36:ee:02:24:12:dc:04:7c:e7:ac:49:10:09:
         89:1f:f5:25:e7:39:6e:7e:33:4a:db:07:86:3b:69:1f:28:03:
         77:ac:45:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSqzEG/NrfqlSiNX3L3/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMDQ2YWViNmEwMWNhNDhhNDk3NTBkODgxYjc5ZjdhNzhk
NTEwODkwHhcNMjQwNTE3MTYwMjQ5WhcNMjQwNTE4MTYwMjQ5WjAzMTEwLwYDVQQD
Eyg5ZTllYzAxMzhjYjZmZjIwOTVjOWM3ZDI2YjdmODVkMTM4OGE5ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH/3a/KFKg7kl5vXN2e1EFAhjMWH
AMOP0qBVhTZd8fX+FfJ4RXqC0j6pgkln8QVj1MjxKaYMubvJ8WytukYGnfCi+zjH
e08pZ3yqdtDW9TjA/AhethSgcYY5yw756VFuYabIQDnWAJB3taTxviswXF/EdAIf
r3HvDXpARGzm6MsNS4mL1zAsOxtTzmcxTzf5ffjjGDdiFbQE74CA1QuPJxwjCwBY
ywjZ4Iga2I21H6qUyqNSWuoHgQkTa+R1fbB1EogGBcmBJ4sXlwXe3Q7QC48DhUyK
PUUiLdYc7UZ38RH4ZKCHbKMO0GoZU4dLgsbw7hrXPoM3NrARDv7CxbXHoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6ewBOMtv8glcnH0mt/hdE4ip8MMB8GA1UdIwQY
MBaAFG4EautqAcpIpJdQ2IG3n3p41RCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmdScTYyb0J5a2lrbDFEWWdiZWZlbmpWRUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84MDlkYTAtZTM5NS00ZjgwLWFiMTct
M2Q0ZGE4ZDEyODA2LzEvYmdScTYyb0J5a2lrbDFEWWdiZWZlbmpWRUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi84MDlkYTAtZTM5NS00ZjgwLWFiMTctM2Q0ZGE4ZDEyODA2
LzEvYmdScTYyb0J5a2lrbDFEWWdiZWZlbmpWRUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGa11Pqu
JwkX/VcQurEnVU9XmQshhqYsyZSZnxfvva3q4Hf/8UQAV97AFc3mZ+ptG6f560rF
d7+yPQSrb+jJkaXlKxTn+DdII4eIU+2nnzPdko+XrOk7WYtCzAXysAMgc16xMguI
CbC4fcOoQP0R7ObW78T1QTmwKrUfANq9GhW0RaFO/i5sGIH7v+8q+G/MrAtLOaSh
vtMW2/OilFhXoBbsQkQs8YmxY1VVbUBQETvYmTCKvQP4LwwR1y1Ws+4IVLWyLJLl
T006Hzehu2/HnB+x6nZgRLcu/0Jw/RE27gIkEtwEfOesSRAJiR/1Jec5bn4zStsH
hjtpHygDd6xFRA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:12:00 2024 by rpki-client on console-fra.rpki-client.org