Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File:                     SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier:          osZI4L/METIA8hmFTz8gd69kt/Pnnl4oYGwEfRzI0eU=
Subject key identifier:   5F:4C:E3:E3:85:2A:CB:82:02:F0:9E:E2:4B:CB:6D:58:C8:1C:44:E3
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer:       /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial:       018F87ED91672604C8375A4AFF97ED7EB8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number:          03AF
Signing time:             Fri 17 May 2024 19:00:44 +0000
Manifest this update:     Fri 17 May 2024 19:00:44 +0000
Manifest next update:     Sat 18 May 2024 19:00:44 +0000
Files and hashes:         1: 5kctDk8Wf4BYwwyOTvhVEgLbNCc.roa (hash: Nr3IK7da9sCnFBQmx3qWayM9ggxh14MDv8UovVq5g2w=)
                          2: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: bc/P8FHrGNmFAPFH91avqvwUxh2BKg0NzH/Vtx9Z4A4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:91:67:26:04:c8:37:5a:4a:ff:97:ed:7e:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
        Validity
            Not Before: May 17 19:00:44 2024 GMT
            Not After : May 18 19:00:44 2024 GMT
        Subject: CN=5f4ce3e3852acb8202f09ee24bcb6d58c81c44e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:4c:8e:3b:83:e3:05:4a:d3:50:12:4f:69:
                    e3:30:ff:8e:7a:46:b8:b9:c0:e3:29:51:ad:9f:fd:
                    21:04:9c:7b:e9:a0:62:ab:b7:96:61:c8:34:36:a7:
                    6e:35:2d:55:44:4b:fa:e2:e9:6b:bf:ba:6e:64:b0:
                    13:7e:96:66:12:2c:0c:fd:af:e6:4b:29:de:56:cf:
                    6c:92:92:d3:ac:23:31:a7:dc:60:8f:c1:73:4d:28:
                    eb:c4:83:b8:6d:30:69:0d:f2:c6:de:72:f9:4f:00:
                    ec:6c:7d:53:7a:bb:57:98:8f:cf:f3:1a:50:01:0e:
                    2c:8f:3f:53:88:5f:64:5d:e6:22:70:fa:30:bd:92:
                    46:7b:cb:ff:29:f2:59:d4:f6:ae:bb:6c:f6:61:8a:
                    5e:e1:e1:ab:19:0b:80:4b:41:9d:5e:ac:13:fb:25:
                    08:4a:48:03:e4:fe:f5:06:f7:ee:35:97:e5:69:a6:
                    7a:d4:4c:93:91:be:93:42:79:38:9f:7c:20:46:d2:
                    12:f6:73:a7:c1:4f:7b:7f:1b:e6:6d:36:76:5e:cd:
                    48:6e:26:ec:b2:4d:73:de:98:cc:36:10:19:f8:2a:
                    8f:2c:e6:a7:94:f6:6c:11:04:b9:f7:4b:df:7e:9d:
                    fd:13:60:e0:62:61:fc:f2:76:ac:78:97:0c:0f:fd:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:E3:E3:85:2A:CB:82:02:F0:9E:E2:4B:CB:6D:58:C8:1C:44:E3
            X509v3 Authority Key Identifier:
                keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:1b:32:59:88:bb:bb:b4:7e:64:07:bb:05:81:78:ba:f7:
         29:0e:2e:b3:b8:af:97:8d:8d:a8:46:26:45:66:35:40:7e:51:
         ec:85:92:45:89:9d:00:34:ce:77:b5:db:94:21:fd:09:a7:bf:
         3d:de:22:3f:fa:c5:a5:fd:47:7b:c9:8e:db:02:2c:00:19:c9:
         8b:9e:0b:bf:8f:a8:55:42:4b:e2:11:e6:c7:18:56:36:63:ca:
         fe:af:25:62:30:50:29:55:fe:1b:1b:40:99:0f:bf:bf:ad:63:
         15:6d:05:d9:18:8f:b8:f8:93:aa:f5:d0:f4:69:19:ba:38:d6:
         1a:99:23:93:19:e2:0d:c0:0a:d8:13:99:28:21:d5:1d:19:b3:
         5d:aa:bb:fe:b3:1d:30:b0:c8:db:44:9e:61:a4:3e:0f:2f:be:
         39:26:a5:45:72:c4:07:6e:38:b4:c1:74:ae:1c:84:33:be:ba:
         92:79:a7:e0:3a:d1:f2:da:2c:c2:9c:f9:64:8f:35:69:46:90:
         da:0c:b2:a7:57:b8:c1:72:9d:f2:64:0e:1c:cd:28:e7:09:a8:
         26:c7:34:23:19:11:bd:0a:63:4e:a2:ca:0f:c9:17:d5:32:fb:
         2e:da:0a:3c:f8:32:82:67:0e:df:78:43:9f:8f:9a:b6:9e:b0:
         25:63:b5:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7ZFnJgTIN1pK/5ftfrjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMzQxNTU4ZGJhMGI2ZGI5NGM1NWNlMDZlMzA2ZmY2NTE5
ZDZlZjEwHhcNMjQwNTE3MTkwMDQ0WhcNMjQwNTE4MTkwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZjRjZTNlMzg1MmFjYjgyMDJmMDllZTI0YmNiNmQ1OGM4MWM0NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CFMjjuD4wVK01AST2njMP+Oeka4
ucDjKVGtn/0hBJx76aBiq7eWYcg0NqduNS1VREv64ulrv7puZLATfpZmEiwM/a/m
SyneVs9skpLTrCMxp9xgj8FzTSjrxIO4bTBpDfLG3nL5TwDsbH1TertXmI/P8xpQ
AQ4sjz9TiF9kXeYicPowvZJGe8v/KfJZ1Pauu2z2YYpe4eGrGQuAS0GdXqwT+yUI
SkgD5P71BvfuNZflaaZ61EyTkb6TQnk4n3wgRtIS9nOnwU97fxvmbTZ2Xs1Ibibs
sk1z3pjMNhAZ+CqPLOanlPZsEQS590vffp39E2DgYmH88naseJcMD/2G+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9M4+OFKsuCAvCe4kvLbVjIHETjMB8GA1UdIwQY
MBaAFEo0FVjboLbblMVc4G4wb/ZRnW7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYt
MGI2OTdhM2I3NjJhLzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYtMGI2OTdhM2I3NjJh
LzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvobMlmI
u7u0fmQHuwWBeLr3KQ4us7ivl42NqEYmRWY1QH5R7IWSRYmdADTOd7XblCH9Cae/
Pd4iP/rFpf1He8mO2wIsABnJi54Lv4+oVUJL4hHmxxhWNmPK/q8lYjBQKVX+GxtA
mQ+/v61jFW0F2RiPuPiTqvXQ9GkZujjWGpkjkxniDcAK2BOZKCHVHRmzXaq7/rMd
MLDI20SeYaQ+Dy++OSalRXLEB244tMF0rhyEM766knmn4DrR8toswpz5ZI81aUaQ
2gyyp1e4wXKd8mQOHM0o5wmoJsc0IxkRvQpjTqLKD8kX1TL7LtoKPPgygmcO33hD
n4+atp6wJWO1CA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:11 2024 by rpki-client on console-ams.rpki-client.org