Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File:                     sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier:          lSUOpw3SyEHWdejlCILVAx2pZh+JNDyNWZCIaYQETjc=
Subject key identifier:   FC:E8:FA:FF:65:E4:8A:D0:D8:83:D1:98:47:B0:03:8A:F3:96:F3:FE
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer:       /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial:       018F87487B087B3796E48354529FC5279639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number:          03DB
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: 2Qo03-NjTQik2b4fZIReOcBWtJg.roa (hash: 5yh8C2Ej23fAaKybY047sssu30C2M1faFU6Jmg6Phpw=)
                          2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: SprX5awwD2TVgd67z5e06y+kNCQ1xYHMHVLCHDuwmFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7b:08:7b:37:96:e4:83:54:52:9f:c5:27:96:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=fce8faff65e48ad0d883d19847b0038af396f3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:32:90:d5:45:ec:09:d1:3a:8b:8e:9e:6b:
                    bc:b9:7f:8e:61:77:db:75:2b:20:08:a0:6f:3e:8c:
                    ef:56:30:38:fa:8f:9b:88:0d:df:7b:a2:b4:73:9d:
                    f0:64:a9:f2:ec:40:2a:78:61:41:ce:03:b8:e4:cf:
                    29:c7:88:2b:3f:e8:cf:89:90:e1:8f:9a:34:80:e4:
                    bf:01:41:0f:21:7a:98:0f:57:dd:91:63:c2:3e:a3:
                    eb:c1:6c:1c:e6:e4:bd:d3:74:63:59:4c:ee:40:0c:
                    95:2b:4f:a0:75:b9:36:9b:c6:d5:06:ff:d7:35:c8:
                    17:43:80:42:cc:98:11:d2:1f:83:62:66:fe:7e:e3:
                    08:8e:57:22:84:1d:9a:5a:c5:c9:51:67:53:f2:07:
                    7f:4f:d0:25:b7:d1:70:4e:fd:f1:fb:c7:46:4d:d3:
                    bb:bc:bd:7a:d3:2e:50:28:ea:9a:74:2a:25:3b:91:
                    f3:17:29:40:b5:16:15:bd:78:43:30:6e:85:53:3c:
                    18:ce:ba:d4:2f:52:e8:84:ff:17:05:66:a9:35:eb:
                    5a:99:88:2b:b3:04:5e:ab:8f:d6:af:c6:fe:37:99:
                    9e:4f:09:a0:f7:5d:f9:4c:07:7e:f6:c2:f6:4c:22:
                    77:d7:af:b6:a1:c6:5a:89:40:f8:bc:d9:d9:f5:83:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E8:FA:FF:65:E4:8A:D0:D8:83:D1:98:47:B0:03:8A:F3:96:F3:FE
            X509v3 Authority Key Identifier:
                keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:7c:c1:98:a9:b7:1f:ec:35:b8:2b:34:02:72:78:e9:03:
         8b:f7:81:93:c7:8e:55:8a:60:65:0b:c9:68:e9:2a:2a:2e:79:
         e5:32:67:33:35:dc:24:f9:fe:cd:20:60:f9:6b:cc:79:3e:ca:
         ea:6b:4e:38:f6:a8:3c:83:c2:c2:a0:7b:a0:02:d8:e4:91:1b:
         4c:bb:fe:30:2e:1a:d6:9b:97:4e:3c:48:f2:77:4f:d0:f5:e6:
         1a:de:be:35:0c:05:94:03:b2:b6:56:6b:50:25:6d:f8:30:a0:
         cf:4b:f7:fa:0f:09:73:e9:00:e6:4c:8b:52:65:df:e4:cf:ee:
         38:b0:b3:5b:35:21:32:a5:85:9e:09:22:7a:a0:da:2d:03:a6:
         76:dd:e4:66:87:f3:8f:a8:6e:61:e7:06:a9:02:97:d9:ed:38:
         37:a9:9c:22:7c:c9:4b:a2:0d:9a:ee:e5:58:6a:09:25:52:6e:
         f9:17:38:d5:77:48:af:c5:78:fd:52:33:4a:3b:49:45:66:d9:
         98:0c:fa:ef:98:b0:a0:cb:c9:15:10:9f:eb:59:2e:f0:32:9f:
         c4:6c:a5:ed:ac:9a:9b:b3:c9:28:30:df:92:8e:20:f0:d0:15:
         3f:18:35:85:b6:29:cd:b9:a0:ef:c9:08:31:46:6b:ab:43:9a:
         f3:67:9e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSHsIezeW5INUUp/FJ5Y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwODQ3MjUwYjNhNzcxMjdkZjdjM2M3YjhkZWY4YzlkOTE5
ZGM0YjkwHhcNMjQwNTE3MTYwMDI1WhcNMjQwNTE4MTYwMDI1WjAzMTEwLwYDVQQD
EyhmY2U4ZmFmZjY1ZTQ4YWQwZDg4M2QxOTg0N2IwMDM4YWYzOTZmM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nIykNVF7AnROouOnmu8uX+OYXfb
dSsgCKBvPozvVjA4+o+biA3fe6K0c53wZKny7EAqeGFBzgO45M8px4grP+jPiZDh
j5o0gOS/AUEPIXqYD1fdkWPCPqPrwWwc5uS903RjWUzuQAyVK0+gdbk2m8bVBv/X
NcgXQ4BCzJgR0h+DYmb+fuMIjlcihB2aWsXJUWdT8gd/T9Alt9FwTv3x+8dGTdO7
vL160y5QKOqadColO5HzFylAtRYVvXhDMG6FUzwYzrrUL1LohP8XBWapNetamYgr
swReq4/Wr8b+N5meTwmg9135TAd+9sL2TCJ316+2ocZaiUD4vNnZ9YMKsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzo+v9l5IrQ2IPRmEewA4rzlvP+MB8GA1UdIwQY
MBaAFLCEclCzp3En33w8e43vjJ2RncS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWIt
Y2EzNTQ2OTU1M2NmLzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xNzhmZmQtYTk5Yy00MzMzLThlOWItY2EzNTQ2OTU1M2Nm
LzEvc0lSeVVMT25jU2ZmZkR4N2plLU1uWkdkeExrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiql8wZip
tx/sNbgrNAJyeOkDi/eBk8eOVYpgZQvJaOkqKi555TJnMzXcJPn+zSBg+WvMeT7K
6mtOOPaoPIPCwqB7oALY5JEbTLv+MC4a1puXTjxI8ndP0PXmGt6+NQwFlAOytlZr
UCVt+DCgz0v3+g8Jc+kA5kyLUmXf5M/uOLCzWzUhMqWFngkieqDaLQOmdt3kZofz
j6huYecGqQKX2e04N6mcInzJS6INmu7lWGoJJVJu+Rc41XdIr8V4/VIzSjtJRWbZ
mAz675iwoMvJFRCf61ku8DKfxGyl7ayam7PJKDDfko4g8NAVPxg1hbYpzbmg78kI
MUZrq0Oa82eehA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:52:23 2024 by rpki-client on console-ams.rpki-client.org