Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
File:                     pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft (raw, json)
Hash identifier:          aJ/rh3nVfcVV0J98hObNTsz4A+v56ODe1ywGL0SF+qo=
Subject key identifier:   68:B9:24:25:A9:6C:FD:AD:FD:09:5B:01:82:B8:A4:B5:48:E3:8E:66
Authority key identifier: A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
Certificate issuer:       /CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Certificate serial:       018F866CE9549F8AC053AFDB4964F5E11C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
Manifest number:          0165
Signing time:             Fri 17 May 2024 12:00:35 +0000
Manifest this update:     Fri 17 May 2024 12:00:35 +0000
Manifest next update:     Sat 18 May 2024 12:00:35 +0000
Files and hashes:         1: b5UWF-EwFqQsdErBiXgdxhDsFKs.roa (hash: ReWWMj6iE1AoNaOokluB7W7FZdCrFDh+WU3eoi4nUvY=)
                          2: pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl (hash: uYGfsFGzwwfa3e7LpXTAGG5dBdWszXwY6Ny/0vBJJG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:e9:54:9f:8a:c0:53:af:db:49:64:f5:e1:1c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
        Validity
            Not Before: May 17 12:00:35 2024 GMT
            Not After : May 18 12:00:35 2024 GMT
        Subject: CN=68b92425a96cfdadfd095b0182b8a4b548e38e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:90:57:7f:da:99:70:77:6e:69:3e:b4:f9:
                    25:52:5f:30:92:1c:70:9b:be:f5:96:2b:c0:11:c2:
                    af:0b:65:f5:26:9b:d0:0f:51:99:93:b5:a3:bf:16:
                    43:3e:8d:f2:c2:26:34:7c:af:fd:09:1b:bc:07:8e:
                    10:51:25:3b:19:27:b7:5e:83:b7:38:d4:4c:95:7c:
                    37:cc:a8:93:05:f1:4d:e8:82:cf:f3:e9:e4:ff:2b:
                    04:65:8d:dc:85:22:19:a4:93:36:35:26:f3:15:df:
                    e3:93:f7:a7:8a:55:73:56:5b:d0:cb:ff:8a:60:e4:
                    d9:d5:8d:cd:3f:c8:e7:9a:37:05:f1:5f:da:f2:ae:
                    22:0d:38:5d:43:ec:87:63:eb:aa:97:c3:c9:55:f9:
                    e2:68:55:e6:af:85:e5:43:95:47:97:71:fb:e7:72:
                    6b:78:2f:07:2b:69:c8:8c:3e:4b:c3:e4:50:18:51:
                    b0:a1:1a:5b:0b:8d:de:66:fe:86:51:67:04:93:05:
                    15:25:cc:ab:00:2c:c3:47:7e:87:b3:c1:61:2c:5f:
                    01:4a:4b:fa:2e:5b:93:53:8b:2a:17:3f:c1:b3:35:
                    dc:cc:f2:3b:7f:88:da:ec:69:6e:ee:d1:36:cc:08:
                    92:51:fc:d0:90:b7:06:03:c1:12:45:16:69:0c:2a:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B9:24:25:A9:6C:FD:AD:FD:09:5B:01:82:B8:A4:B5:48:E3:8E:66
            X509v3 Authority Key Identifier:
                keyid:A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:61:f5:09:ea:a0:82:65:cd:31:40:de:37:aa:6f:0d:5b:
         9b:f2:64:84:9e:ff:a7:e3:c2:47:8f:b6:89:8b:93:7b:80:b3:
         46:86:1c:a5:98:13:81:16:6a:86:5a:78:10:7a:6a:62:20:81:
         58:98:e0:98:70:cd:8c:d1:58:66:eb:77:fc:bf:e0:a9:4a:1c:
         0f:3d:92:42:9a:79:38:29:73:b7:d0:dc:a9:f8:b1:c9:47:a4:
         08:be:3a:78:3b:1c:ff:f2:73:3c:57:32:20:38:92:2f:37:0b:
         0e:07:36:b4:09:33:6e:5e:98:42:c2:f1:de:5b:01:ea:54:28:
         4f:b5:1a:01:b3:51:45:97:5a:c4:e6:c6:e0:70:94:a7:01:c7:
         cb:a5:d8:97:ae:4a:b1:85:0b:e2:06:b2:10:50:4d:11:db:e1:
         a6:0c:99:c1:32:e9:80:c2:6d:bf:9a:e5:ba:8d:7a:e9:ef:7d:
         88:ac:03:af:fc:7b:4c:4f:01:e6:91:b8:c7:c1:a5:f9:5c:91:
         ff:07:eb:fb:3a:30:57:b5:c8:0a:8a:22:ec:72:f5:ad:6b:42:
         bc:eb:24:da:4f:a0:d2:74:a4:9b:88:4c:12:9e:57:07:93:e4:
         92:70:d7:6b:87:29:dd:ac:03:3b:f8:24:4d:7f:0f:37:b9:a9:
         9b:42:b0:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbOlUn4rAU6/bSWT14Rw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzY1ZDNmOGM0ZWVjYjQ2MTE0M2JkYTY3YjFhODVjMWQ3
YWI1N2EwHhcNMjQwNTE3MTIwMDM1WhcNMjQwNTE4MTIwMDM1WjAzMTEwLwYDVQQD
Eyg2OGI5MjQyNWE5NmNmZGFkZmQwOTViMDE4MmI4YTRiNTQ4ZTM4ZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSSQV3/amXB3bmk+tPklUl8wkhxw
m771livAEcKvC2X1JpvQD1GZk7WjvxZDPo3ywiY0fK/9CRu8B44QUSU7GSe3XoO3
ONRMlXw3zKiTBfFN6ILP8+nk/ysEZY3chSIZpJM2NSbzFd/jk/enilVzVlvQy/+K
YOTZ1Y3NP8jnmjcF8V/a8q4iDThdQ+yHY+uql8PJVfniaFXmr4XlQ5VHl3H753Jr
eC8HK2nIjD5Lw+RQGFGwoRpbC43eZv6GUWcEkwUVJcyrACzDR36Hs8FhLF8BSkv6
LluTU4sqFz/BszXczPI7f4ja7Glu7tE2zAiSUfzQkLcGA8ESRRZpDCp3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi5JCWpbP2t/QlbAYK4pLVI445mMB8GA1UdIwQY
MBaAFKXGXT+MTuy0YRQ72mexqFwderV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNaZFA0eE83TFJoRkR2YVo3R29YQjE2dFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZjY5MjktZWQwZi00ODJkLTliZjQt
ZmRkMDc1NjA2NWNlLzEvcGNaZFA0eE83TFJoRkR2YVo3R29YQjE2dFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zZjY5MjktZWQwZi00ODJkLTliZjQtZmRkMDc1NjA2NWNl
LzEvcGNaZFA0eE83TFJoRkR2YVo3R29YQjE2dFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6hh9Qnq
oIJlzTFA3jeqbw1bm/JkhJ7/p+PCR4+2iYuTe4CzRoYcpZgTgRZqhlp4EHpqYiCB
WJjgmHDNjNFYZut3/L/gqUocDz2SQpp5OClzt9DcqfixyUekCL46eDsc//JzPFcy
IDiSLzcLDgc2tAkzbl6YQsLx3lsB6lQoT7UaAbNRRZdaxObG4HCUpwHHy6XYl65K
sYUL4gayEFBNEdvhpgyZwTLpgMJtv5rluo166e99iKwDr/x7TE8B5pG4x8Gl+VyR
/wfr+zowV7XICooi7HL1rWtCvOsk2k+g0nSkm4hMEp5XB5PkknDXa4cp3awDO/gk
TX8PN7mpm0KwLw==
-----END CERTIFICATE-----
Generated at Fri May 17 19:13:44 2024 by rpki-client on console-fra.rpki-client.org