Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File:                     bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier:          Jp/hkfC8NEyhXMx9W+ApZXuJUFS8JyP0Pu9O7dmcVg8=
Subject key identifier:   6F:E2:A8:15:23:25:B3:D7:64:D3:AF:04:D3:83:3D:86:2E:99:C9:BE
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer:       /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial:       018F88249EB5AD5C1D357D185AF6EC94C636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number:          0D4A
Signing time:             Fri 17 May 2024 20:00:52 +0000
Manifest this update:     Fri 17 May 2024 20:00:52 +0000
Manifest next update:     Sat 18 May 2024 20:00:52 +0000
Files and hashes:         1: CcoA3urMfj8YGqgYHWr2sNzjNL4.roa (hash: E+ItNO7mZ2NUwt6BfEefPDcvflGhM6TGPEHiEqmgAFA=)
                          2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: xMJz4KfqM4cKBBIVAszWJ2LXrgncpjy84S1Z0KQYlqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9e:b5:ad:5c:1d:35:7d:18:5a:f6:ec:94:c6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
        Validity
            Not Before: May 17 20:00:52 2024 GMT
            Not After : May 18 20:00:52 2024 GMT
        Subject: CN=6fe2a8152325b3d764d3af04d3833d862e99c9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:40:93:48:bb:1e:85:a6:9b:33:6c:e9:17:
                    58:c5:db:0a:71:c0:af:d4:61:ea:4b:c8:38:a1:9a:
                    7e:50:c4:79:38:9a:09:09:bd:18:f4:8d:bc:14:ea:
                    e7:70:bd:73:c0:a8:9a:5d:e4:a5:28:19:a9:32:da:
                    d0:38:e0:23:95:b5:ec:91:3a:bb:c8:70:28:9c:21:
                    34:84:e1:41:40:b3:c1:e3:19:af:1b:5c:26:7f:7a:
                    27:fb:a9:86:ce:0e:61:62:18:64:36:26:1d:64:1a:
                    ad:b8:ab:86:90:09:96:1f:ea:d4:47:af:e4:cb:01:
                    c6:40:28:4b:da:67:22:c2:22:d6:fa:d4:d4:e5:de:
                    64:4e:7b:3e:67:a0:39:a6:ec:4b:14:df:99:03:f9:
                    23:61:06:c0:2a:65:3f:f4:8b:ca:1f:2c:e3:6e:0b:
                    39:32:a2:6a:8a:1a:a3:82:d4:3f:8a:8c:a8:66:bf:
                    f9:ab:57:24:3b:0f:e9:0c:b3:67:85:27:30:cf:c2:
                    24:aa:22:be:8e:50:4d:1b:08:d9:ae:a5:e5:19:c4:
                    0e:ea:40:2a:dc:da:12:f4:ac:76:68:62:9b:f3:19:
                    6a:c3:96:f7:88:ee:b8:0c:6b:d4:69:9b:a9:71:ac:
                    89:fd:68:24:25:ed:ce:7f:4d:ed:2c:f4:61:67:e2:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:A8:15:23:25:B3:D7:64:D3:AF:04:D3:83:3D:86:2E:99:C9:BE
            X509v3 Authority Key Identifier:
                keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:14:a7:d6:ab:13:c6:9a:ec:6d:a0:38:a8:27:c6:40:c1:
         44:5b:17:5f:1c:51:75:57:f6:60:63:5e:37:9f:39:ca:83:55:
         f9:4d:9a:48:d4:ae:2f:75:ea:a7:5e:72:00:2d:67:2f:7e:8c:
         34:9a:85:2f:59:b5:7e:36:64:41:8b:15:7c:2e:33:dd:47:cc:
         c6:2d:6b:2b:f2:3d:41:5b:db:a1:4a:08:10:96:47:c9:04:70:
         8d:cc:74:c4:fa:d7:d9:95:14:6a:f5:8e:ea:af:38:f6:37:a9:
         4c:da:a3:61:aa:4d:5e:3b:64:3e:db:2e:90:d3:b7:ee:31:7d:
         79:00:a7:7d:c7:47:0b:08:e1:34:4e:31:f9:db:4d:0b:48:4b:
         5e:96:e9:ab:b9:5f:6e:1f:0a:2b:a7:3a:14:c8:b7:9c:6f:7d:
         cf:02:57:48:97:a5:5e:6b:58:c4:a5:7c:96:f7:e1:ad:bc:11:
         8b:e0:57:5e:89:a4:c3:1c:30:0b:0a:62:94:5f:c6:a3:42:47:
         8c:e1:bd:d6:b2:62:fb:b1:d3:de:e4:b9:5b:00:08:3e:93:4f:
         35:05:99:9c:24:7f:5b:70:3d:96:0e:96:a8:6a:a3:c7:b6:fd:
         6f:ab:92:1b:0e:f9:26:11:00:9e:da:da:23:52:1e:d6:16:c9:
         f1:ca:d6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJJ61rVwdNX0YWvbslMY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4
OTZhMDAwHhcNMjQwNTE3MjAwMDUyWhcNMjQwNTE4MjAwMDUyWjAzMTEwLwYDVQQD
Eyg2ZmUyYTgxNTIzMjViM2Q3NjRkM2FmMDRkMzgzM2Q4NjJlOTljOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArORAk0i7HoWmmzNs6RdYxdsKccCv
1GHqS8g4oZp+UMR5OJoJCb0Y9I28FOrncL1zwKiaXeSlKBmpMtrQOOAjlbXskTq7
yHAonCE0hOFBQLPB4xmvG1wmf3on+6mGzg5hYhhkNiYdZBqtuKuGkAmWH+rUR6/k
ywHGQChL2mciwiLW+tTU5d5kTns+Z6A5puxLFN+ZA/kjYQbAKmU/9IvKHyzjbgs5
MqJqihqjgtQ/ioyoZr/5q1ckOw/pDLNnhScwz8IkqiK+jlBNGwjZrqXlGcQO6kAq
3NoS9Kx2aGKb8xlqw5b3iO64DGvUaZupcayJ/WgkJe3Of03tLPRhZ+KmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/iqBUjJbPXZNOvBNODPYYumcm+MB8GA1UdIwQY
MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt
NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3
LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaIUp9ar
E8aa7G2gOKgnxkDBRFsXXxxRdVf2YGNeN585yoNV+U2aSNSuL3Xqp15yAC1nL36M
NJqFL1m1fjZkQYsVfC4z3UfMxi1rK/I9QVvboUoIEJZHyQRwjcx0xPrX2ZUUavWO
6q849jepTNqjYapNXjtkPtsukNO37jF9eQCnfcdHCwjhNE4x+dtNC0hLXpbpq7lf
bh8KK6c6FMi3nG99zwJXSJelXmtYxKV8lvfhrbwRi+BXXomkwxwwCwpilF/Go0JH
jOG91rJi+7HT3uS5WwAIPpNPNQWZnCR/W3A9lg6WqGqjx7b9b6uSGw75JhEAntra
I1Ie1hbJ8crWaw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:14:55 2024 by rpki-client on console-ams.rpki-client.org