Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File:                     vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier:          /1xoTe91deyudm7cEOw09u9/o9EZEyQoGub1AQDW5Dc=
Subject key identifier:   2A:F9:DA:5B:6A:12:86:53:97:39:70:B4:29:47:E9:4A:D3:4E:17:71
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer:       /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial:       018F8748362B3831DEC13A0AA44140032471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number:          1189
Signing time:             Fri 17 May 2024 16:00:07 +0000
Manifest this update:     Fri 17 May 2024 16:00:07 +0000
Manifest next update:     Sat 18 May 2024 16:00:07 +0000
Files and hashes:         1: FLIGeJNRS5GHGEcKenbyO7AbsvI.roa (hash: rEdOEk+Nw6b7BFTexTFXDaFLBkCwFx7zXhUM7HPY06Y=)
                          2: rJvdzUm0s66MyI-ExwlwiWCe80g.roa (hash: xdzO0Hsd3Y0/GwSvmKdmipU9/5G6Be+WdVAF+uXXXR0=)
                          3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: fGfJNpW1iPuZecFapxxO691UK6A5skvKii5xUyrE/tA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:36:2b:38:31:de:c1:3a:0a:a4:41:40:03:24:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
        Validity
            Not Before: May 17 16:00:07 2024 GMT
            Not After : May 18 16:00:07 2024 GMT
        Subject: CN=2af9da5b6a128653973970b42947e94ad34e1771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:a9:b3:29:12:cc:4a:d6:ee:65:98:2b:5f:
                    44:ee:f6:d7:cb:f7:a0:52:b9:28:37:5d:9d:67:ab:
                    9a:98:33:c5:2b:c2:4b:df:ee:fd:4a:7b:8e:be:c0:
                    af:16:21:02:7b:e5:34:6a:f4:a5:0e:f4:da:08:b3:
                    c7:94:12:b5:2c:62:f4:1d:6a:fb:ae:b4:de:f9:3a:
                    e5:6a:49:65:1f:1e:0e:3d:a4:20:e1:00:b6:3d:63:
                    de:3f:e1:ea:f7:72:72:6f:4b:09:1a:a0:80:83:21:
                    ed:cb:d4:96:a6:2a:0e:4b:63:70:7d:4b:a8:4d:5c:
                    01:22:71:40:65:2c:de:63:34:60:88:39:04:42:51:
                    1b:3a:d4:0f:01:27:a5:b2:f4:a9:f1:2c:bf:f3:05:
                    68:50:c0:b9:62:ba:69:d0:7b:b0:5f:a8:27:72:b7:
                    c7:0f:b4:94:da:3e:28:23:3a:14:e0:bc:cd:4d:2f:
                    ce:8a:71:1b:20:e6:ea:77:4e:80:43:2c:34:f7:e6:
                    08:3b:2a:1b:85:07:0f:18:0d:dd:2b:b4:fd:b5:a0:
                    67:75:85:48:d2:c3:81:ee:9a:56:4c:8f:cf:65:74:
                    d4:53:d6:45:e3:b6:4c:eb:dd:a5:f0:7d:ca:76:0f:
                    a1:19:22:21:a0:86:f9:9c:f1:6b:fc:c6:95:5f:c1:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:DA:5B:6A:12:86:53:97:39:70:B4:29:47:E9:4A:D3:4E:17:71
            X509v3 Authority Key Identifier:
                keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:3c:69:d5:4c:2d:f3:81:8c:46:1b:af:8d:1a:ca:25:6e:ad:
         61:6c:97:9f:ae:41:93:ad:10:76:d5:fd:54:ac:ad:f5:48:87:
         9a:39:75:20:fb:7f:35:49:db:da:65:52:ee:c6:7a:9b:c1:2b:
         58:36:a0:1b:04:d2:52:3c:ec:d5:11:fa:55:96:73:1a:d0:19:
         70:b4:3e:d3:e1:8c:44:d1:7f:2d:94:e9:5e:60:26:84:09:a8:
         9c:d7:94:9c:a1:73:f7:a4:4f:ec:67:95:26:25:b1:80:89:ba:
         cc:c8:6a:8d:1a:81:a2:c7:67:da:bf:8e:fe:bf:98:cd:38:94:
         af:89:35:0c:56:b1:6d:43:56:e7:37:0f:87:5e:a1:73:43:24:
         2e:22:f0:de:3d:2b:ab:e1:ec:d0:44:b2:b9:4a:06:08:90:a8:
         23:ea:70:db:0f:6b:f7:a7:56:8d:71:c5:25:1b:16:51:f7:60:
         25:0e:ab:c0:f6:10:05:e0:9c:bd:06:08:a8:db:7a:d5:b9:6b:
         6d:17:12:47:29:06:ee:64:07:35:ba:d1:26:97:9f:fd:29:2c:
         3c:30:2b:2f:17:cb:5c:5a:89:9b:07:76:08:6f:45:c9:2a:50:
         64:c2:68:5f:8c:12:fb:20:6a:39:86:31:25:f7:8f:31:5d:bb:
         04:7e:15:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSDYrODHewToKpEFAAyRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjQwNTE3MTYwMDA3WhcNMjQwNTE4MTYwMDA3WjAzMTEwLwYDVQQD
EygyYWY5ZGE1YjZhMTI4NjUzOTczOTcwYjQyOTQ3ZTk0YWQzNGUxNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaKpsykSzErW7mWYK19E7vbXy/eg
UrkoN12dZ6uamDPFK8JL3+79SnuOvsCvFiECe+U0avSlDvTaCLPHlBK1LGL0HWr7
rrTe+TrlakllHx4OPaQg4QC2PWPeP+Hq93Jyb0sJGqCAgyHty9SWpioOS2NwfUuo
TVwBInFAZSzeYzRgiDkEQlEbOtQPASelsvSp8Sy/8wVoUMC5Yrpp0HuwX6gncrfH
D7SU2j4oIzoU4LzNTS/OinEbIObqd06AQyw09+YIOyobhQcPGA3dK7T9taBndYVI
0sOB7ppWTI/PZXTUU9ZF47ZM692l8H3Kdg+hGSIhoIb5nPFr/MaVX8HqHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr52ltqEoZTlzlwtClH6UrTThdxMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTxp1Uwt
84GMRhuvjRrKJW6tYWyXn65Bk60QdtX9VKyt9UiHmjl1IPt/NUnb2mVS7sZ6m8Er
WDagGwTSUjzs1RH6VZZzGtAZcLQ+0+GMRNF/LZTpXmAmhAmonNeUnKFz96RP7GeV
JiWxgIm6zMhqjRqBosdn2r+O/r+YzTiUr4k1DFaxbUNW5zcPh16hc0MkLiLw3j0r
q+Hs0ESyuUoGCJCoI+pw2w9r96dWjXHFJRsWUfdgJQ6rwPYQBeCcvQYIqNt61blr
bRcSRykG7mQHNbrRJpef/SksPDArLxfLXFqJmwd2CG9FySpQZMJoX4wS+yBqOYYx
JfePMV27BH4VuA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:16:24 2024 by rpki-client on console-fra.rpki-client.org