Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          EzuQ/odVFBRc9jHdg4gTSuFn6JKNJqTXYf/k9tfoEfs=
Subject key identifier:   20:6E:E7:47:AF:07:9F:3E:72:1E:B0:3A:07:69:06:81:7C:B5:0C:C6
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       018EF6E01BC178ACEC38ABA2DC4CF5477005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          0BE5
Signing time:             Fri 19 Apr 2024 15:01:06 +0000
Manifest this update:     Fri 19 Apr 2024 15:01:06 +0000
Manifest next update:     Sat 20 Apr 2024 15:01:06 +0000
Files and hashes:         1: 0EA9_cLxlsu6S1x8XuL50gICec0.roa (hash: FKjsI7s++P60eLiuovKWUyjwaGmG14nD5vO9pt8uCn8=)
                          2: 0IUAMipbGs9YjLp8SrmuRL4OhCM.roa (hash: 2FKboteZPqmaJRPvAn+VcoJUIiR3Qxbh7arYhIli+dI=)
                          3: iY9OEKWlNNraFJZ66bOfv5h4SBY.roa (hash: qiiyPbORa8eM2x8m+DGXMF/H7kr++lov/llHrBlcwPI=)
                          4: pUU4kzlaIwfqnYhnXkj_rLwcJi0.roa (hash: mVHpFvDn7NMq2td+nlaiyp+kTnmnVyrftyOW6mFYzhI=)
                          5: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: T5BSSvEJ13P/LT5bR4TotiY6H2d4jl/mIvUhvDUpsmk=)
                          6: vMRtW8ji51W3Ju1t7wdDTSrxEMQ.roa (hash: s+XpPTzup3k+PtKmo1pl/zvHDVud4TsAaHVSyaZ+/u8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:e0:1b:c1:78:ac:ec:38:ab:a2:dc:4c:f5:47:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Apr 19 15:01:06 2024 GMT
            Not After : Apr 20 15:01:06 2024 GMT
        Subject: CN=206ee747af079f3e721eb03a076906817cb50cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:52:77:95:80:a8:be:56:2e:7c:5f:56:62:
                    e5:c1:39:3b:57:5c:b8:79:13:84:6c:e1:a4:b4:fe:
                    4b:3a:49:54:de:06:fd:e2:97:d7:90:d9:c9:90:d1:
                    fd:61:a6:a7:63:bd:e5:fb:e8:76:bf:74:05:5a:91:
                    88:4c:6b:a8:27:52:b4:c3:ca:ba:fd:f5:bc:3b:a3:
                    01:7c:ea:37:78:44:19:a9:66:31:78:69:7d:66:ef:
                    f6:6d:76:fe:a3:d6:e7:64:56:c6:e4:d5:04:9b:68:
                    62:56:98:53:da:05:7c:fc:bf:45:47:4e:f7:c7:6c:
                    59:d8:a9:81:c2:01:cc:e9:3e:94:25:1c:e7:9d:64:
                    09:67:5f:f9:2a:61:ea:f4:32:8a:e4:90:f9:57:b7:
                    43:1b:0f:f9:1b:da:15:22:fa:64:53:ce:ce:4d:cc:
                    10:54:7e:96:e6:72:0f:99:7b:8b:f0:5e:a1:dd:1d:
                    30:c6:48:eb:ca:e8:ee:6a:12:f9:8b:6f:69:d1:7e:
                    59:96:7c:e7:bc:50:b0:86:49:e5:80:e3:e6:75:07:
                    02:9d:73:58:f0:c2:d4:f0:99:e9:09:15:d3:1f:cd:
                    30:28:16:d4:2e:58:fe:10:0a:6d:85:61:19:c5:46:
                    4d:4d:6d:7c:9d:67:50:dc:2f:04:64:8e:cf:ec:77:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:E7:47:AF:07:9F:3E:72:1E:B0:3A:07:69:06:81:7C:B5:0C:C6
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:95:01:f4:ff:be:fa:d1:a6:7a:7e:71:ed:94:14:9a:70:4b:
         5e:cf:64:8d:f6:d8:47:ec:b2:cf:23:5f:97:73:36:e3:15:7e:
         43:f5:4f:9a:d9:f3:3a:85:32:53:d7:d7:6c:ea:fa:ec:75:1c:
         2d:10:e7:d5:b4:56:66:d2:7d:05:39:f4:1b:9c:93:1b:f8:f2:
         12:25:25:c2:47:c2:1b:02:a3:87:e1:f6:19:10:ae:a9:4b:d5:
         33:5a:23:31:ce:37:e3:d0:e4:e4:d2:3c:90:1f:39:24:e9:24:
         4f:bf:fe:e3:5c:93:d9:b9:2e:a5:b8:2f:3b:9f:50:1b:5f:a4:
         90:4c:83:56:01:b5:45:fb:9f:cd:08:1e:39:01:aa:7a:49:8e:
         0e:68:18:98:31:8e:9b:bf:c5:b5:e5:b1:fb:64:d3:d9:1b:d5:
         43:c8:d8:c0:43:27:4f:75:be:2b:c8:9e:48:cb:9c:c4:5a:d1:
         c5:bf:50:fe:48:8f:16:9d:d0:35:6a:3b:91:23:e4:f9:81:e1:
         5b:99:e1:f3:dc:cb:ad:d6:e4:85:21:08:5b:ed:f5:8d:c3:ff:
         c5:90:48:2d:a5:aa:37:d1:0d:99:22:6f:7c:5f:f6:6a:fb:c0:
         ff:6f:25:2f:a9:69:8a:a7:1a:8c:1a:76:55:29:42:91:21:c4:
         21:fc:57:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY724BvBeKzsOKui3Ez1R3AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjQwNDE5MTUwMTA2WhcNMjQwNDIwMTUwMTA2WjAzMTEwLwYDVQQD
EygyMDZlZTc0N2FmMDc5ZjNlNzIxZWIwM2EwNzY5MDY4MTdjYjUwY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofVSd5WAqL5WLnxfVmLlwTk7V1y4
eROEbOGktP5LOklU3gb94pfXkNnJkNH9YaanY73l++h2v3QFWpGITGuoJ1K0w8q6
/fW8O6MBfOo3eEQZqWYxeGl9Zu/2bXb+o9bnZFbG5NUEm2hiVphT2gV8/L9FR073
x2xZ2KmBwgHM6T6UJRznnWQJZ1/5KmHq9DKK5JD5V7dDGw/5G9oVIvpkU87OTcwQ
VH6W5nIPmXuL8F6h3R0wxkjryujuahL5i29p0X5ZlnznvFCwhknlgOPmdQcCnXNY
8MLU8JnpCRXTH80wKBbULlj+EApthWEZxUZNTW18nWdQ3C8EZI7P7HeBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBu50evB58+ch6wOgdpBoF8tQzGMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJUB9P++
+tGmen5x7ZQUmnBLXs9kjfbYR+yyzyNfl3M24xV+Q/VPmtnzOoUyU9fXbOr67HUc
LRDn1bRWZtJ9BTn0G5yTG/jyEiUlwkfCGwKjh+H2GRCuqUvVM1ojMc4349Dk5NI8
kB85JOkkT7/+41yT2bkupbgvO59QG1+kkEyDVgG1RfufzQgeOQGqekmODmgYmDGO
m7/FteWx+2TT2RvVQ8jYwEMnT3W+K8ieSMucxFrRxb9Q/kiPFp3QNWo7kSPk+YHh
W5nh89zLrdbkhSEIW+31jcP/xZBILaWqN9ENmSJvfF/2avvA/28lL6lpiqcajBp2
VSlCkSHEIfxXdA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 23:57:03 2024 by rpki-client on console-ams.rpki-client.org