Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          yyzzo0BH34jz/IVvyca8wSvkqau5FphNANh8hmS75uQ=
Subject key identifier:   BB:A5:7B:3F:8E:44:2D:4F:30:DB:DC:79:89:0F:1D:BF:38:59:32:86
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       018F88C8B0BD3167F1B3CE3294B8B80D356E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          118D
Signing time:             Fri 17 May 2024 23:00:04 +0000
Manifest this update:     Fri 17 May 2024 23:00:04 +0000
Manifest next update:     Sat 18 May 2024 23:00:04 +0000
Files and hashes:         1: E-EyE74UGuFTFOCAg6Iq3uuDykg.roa (hash: ObmWxMPe7A5e1T7hl3Jeq41YKKrDu3w1pBn0Xn+M/Eo=)
                          2: E447xklzn3XSiBzvhzph4YMYKis.roa (hash: 76Taa8Yrit6lb7gxjuoCTkUHizs+MBlUjXiPCqx9T40=)
                          3: YcwI2fZlMwxUA69CQFBEmIR733E.roa (hash: et8GDR6ngYKl0AZO8Wq7BvgLSkJvYviEhnike/pXqBE=)
                          4: _V4EtpOY4VuFJtOHbfZaqbTRckA.roa (hash: O/Jy8ZrPqzyoLRaVVKXm5fm6BNuqIsf9/MfdWhjCUBk=)
                          5: p5BDiMtYrJOu9wOM1VuBPYsI8cE.roa (hash: yNEIHu3jMD0k0ISqlt/OHoWcfB99X6uVZ5+eiOVA1vU=)
                          6: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: d8o3eEhk1dLhoeofqGujrISx/PcHK+Sf8Mp6U/z/Eyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:b0:bd:31:67:f1:b3:ce:32:94:b8:b8:0d:35:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: May 17 23:00:04 2024 GMT
            Not After : May 18 23:00:04 2024 GMT
        Subject: CN=bba57b3f8e442d4f30dbdc79890f1dbf38593286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:9b:2d:21:8c:76:f3:25:21:0d:cd:ff:9d:
                    cf:62:f7:bb:7d:b6:31:da:8a:58:a4:54:47:44:7d:
                    ef:5b:cd:62:91:8a:26:5e:50:2f:34:28:0b:cc:70:
                    7b:ff:e0:bd:37:f6:fd:b3:40:41:f7:e2:e8:c8:52:
                    5a:e4:38:59:c9:1a:ac:53:a8:2b:28:87:a2:24:7e:
                    65:37:d3:b8:27:77:1f:26:ba:ff:d9:88:43:93:7a:
                    83:ef:8e:5f:9e:3e:75:fd:8e:f5:cf:bc:d6:d4:00:
                    0e:03:d0:75:01:9a:d1:04:29:af:e9:f8:f0:78:26:
                    8a:91:61:87:da:fd:b6:d7:d8:06:a9:be:ea:65:77:
                    ae:ba:8d:1b:2d:b8:4d:00:22:fb:de:b1:96:61:0d:
                    51:50:76:c3:96:50:d5:24:b9:39:25:b1:cd:51:a2:
                    68:af:fa:43:82:36:67:7d:b7:bc:59:58:19:af:7b:
                    09:c8:d2:c9:d7:55:ef:71:b8:73:8f:35:60:3f:0f:
                    bf:9b:d6:c2:13:d4:94:0d:a5:7c:98:74:16:42:ba:
                    62:90:ea:1d:e9:b3:a1:b5:6e:80:02:4f:5d:90:c6:
                    93:06:37:de:a8:7a:bf:4d:cf:4d:2d:8b:c7:2b:06:
                    c6:b3:4c:8f:73:c7:24:e1:62:d9:07:4d:6a:26:11:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A5:7B:3F:8E:44:2D:4F:30:DB:DC:79:89:0F:1D:BF:38:59:32:86
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:62:ad:d0:28:fb:07:c6:b4:6c:9b:99:1f:c5:0d:30:23:
         46:df:4e:3d:60:3a:c6:fa:38:42:9e:c0:2f:85:e4:dc:3b:f9:
         9c:75:fd:f3:fe:93:d7:80:63:52:b8:11:b6:39:2c:06:9e:9e:
         13:0a:8d:c2:5f:a3:d1:24:ef:58:8d:d2:dc:53:63:73:c8:e0:
         ed:09:13:09:04:45:66:70:51:92:69:61:bb:e9:a4:1c:35:98:
         cb:b1:40:dd:1c:04:8a:09:f1:b4:6b:8b:26:ed:c6:67:90:34:
         2c:53:e5:a7:84:a8:b9:a1:13:5d:36:d4:0e:b1:bb:7c:82:01:
         4c:ba:95:9e:11:93:35:f8:45:dc:c6:4c:0e:2c:9c:4d:55:79:
         e9:8d:bd:d4:30:c2:a8:9e:01:fc:0c:11:fd:53:58:a0:bd:d3:
         a7:62:c5:d3:82:c2:e1:07:ce:68:f2:d2:a7:f9:f9:43:a5:21:
         b3:9e:c6:92:69:02:7c:77:4f:1b:fa:05:bf:fc:fb:a7:1d:66:
         b0:51:08:e2:07:f6:61:4a:b8:25:6e:c7:71:d8:79:05:83:ba:
         d7:68:b9:a6:fc:9a:1a:06:e8:9f:b4:d3:1d:a4:e3:52:89:7b:
         68:4b:d6:a4:5d:ba:1e:54:91:d6:cb:6f:91:0e:b1:ec:7c:be:
         dd:4e:8e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IyLC9MWfxs84ylLi4DTVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjQwNTE3MjMwMDA0WhcNMjQwNTE4MjMwMDA0WjAzMTEwLwYDVQQD
EyhiYmE1N2IzZjhlNDQyZDRmMzBkYmRjNzk4OTBmMWRiZjM4NTkzMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbibLSGMdvMlIQ3N/53PYve7fbYx
2opYpFRHRH3vW81ikYomXlAvNCgLzHB7/+C9N/b9s0BB9+LoyFJa5DhZyRqsU6gr
KIeiJH5lN9O4J3cfJrr/2YhDk3qD745fnj51/Y71z7zW1AAOA9B1AZrRBCmv6fjw
eCaKkWGH2v2219gGqb7qZXeuuo0bLbhNACL73rGWYQ1RUHbDllDVJLk5JbHNUaJo
r/pDgjZnfbe8WVgZr3sJyNLJ11XvcbhzjzVgPw+/m9bCE9SUDaV8mHQWQrpikOod
6bOhtW6AAk9dkMaTBjfeqHq/Tc9NLYvHKwbGs0yPc8ck4WLZB01qJhH+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLulez+ORC1PMNvceYkPHb84WTKGMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcNirdAo
+wfGtGybmR/FDTAjRt9OPWA6xvo4Qp7AL4Xk3Dv5nHX98/6T14BjUrgRtjksBp6e
EwqNwl+j0STvWI3S3FNjc8jg7QkTCQRFZnBRkmlhu+mkHDWYy7FA3RwEignxtGuL
Ju3GZ5A0LFPlp4SouaETXTbUDrG7fIIBTLqVnhGTNfhF3MZMDiycTVV56Y291DDC
qJ4B/AwR/VNYoL3Tp2LF04LC4QfOaPLSp/n5Q6Uhs57GkmkCfHdPG/oFv/z7px1m
sFEI4gf2YUq4JW7Hcdh5BYO612i5pvyaGgbon7TTHaTjUol7aEvWpF26HlSR1stv
kQ6x7Hy+3U6O2A==
-----END CERTIFICATE-----
Generated at Sat May 18 00:32:34 2024 by rpki-client on console-fra.rpki-client.org