Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          RUOo6TCfUdsM8cycGVT5A4zZIJpX/GwQwRnM2ud99/4=
Subject key identifier:   D6:A5:D9:0E:DF:AE:1A:A7:97:6C:24:B5:08:67:1D:C3:27:E9:85:D0
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       018F889222981AE7E95E8D8658040A0C6774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          04AB
Signing time:             Fri 17 May 2024 22:00:29 +0000
Manifest this update:     Fri 17 May 2024 22:00:29 +0000
Manifest next update:     Sat 18 May 2024 22:00:29 +0000
Files and hashes:         1: 5PGRPB9_gbxao4aJ26pjSjpxeFA.roa (hash: 1ClkvxMBKx8ucmWqOBr9hdbyCREMrET60Q4ldqTsJE4=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: 9+Wg694V/cmzDTvUs2gF6IWWKlPoXeZdszgga9XjrYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:22:98:1a:e7:e9:5e:8d:86:58:04:0a:0c:67:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: May 17 22:00:29 2024 GMT
            Not After : May 18 22:00:29 2024 GMT
        Subject: CN=d6a5d90edfae1aa7976c24b508671dc327e985d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:0a:71:2a:31:e3:7a:3f:c6:1d:72:48:12:
                    c8:86:a1:56:cf:6c:d6:e4:c0:dd:34:6a:80:c3:46:
                    79:da:20:e1:87:de:21:04:be:fb:23:27:4e:71:16:
                    a2:04:5e:88:b1:3f:63:84:19:f7:50:ee:9f:07:9b:
                    9b:ec:5b:19:ac:ff:84:b7:81:9e:25:85:fe:77:8a:
                    dc:67:ff:a3:40:19:b7:82:0a:ca:1a:b6:0b:59:8e:
                    38:bb:48:8d:e8:9c:30:07:ff:9b:b3:58:1b:75:ba:
                    0c:55:e3:a7:ef:b0:62:ac:be:e2:8a:07:91:31:52:
                    89:27:40:16:29:b3:44:f9:26:df:3f:09:ff:2d:ea:
                    ac:cb:44:06:e0:27:ee:63:c9:f0:e1:0a:18:86:30:
                    b3:ee:b1:ec:a6:90:42:d5:45:13:a2:1e:dc:c3:44:
                    44:c4:e9:00:aa:95:1e:9e:d3:35:33:24:62:dd:62:
                    bc:6a:8e:e4:42:b3:6d:bb:fe:c0:10:30:23:0b:e7:
                    94:af:ff:e4:1e:b9:2d:15:8b:9d:17:d1:77:fa:8c:
                    9e:76:60:5c:60:05:dc:5b:c0:f7:38:f3:1d:37:c0:
                    1d:fb:36:a5:89:a6:2e:c3:90:08:56:a4:9a:25:c3:
                    20:44:ce:08:7c:c3:c9:0f:b9:11:43:19:df:ab:81:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:D9:0E:DF:AE:1A:A7:97:6C:24:B5:08:67:1D:C3:27:E9:85:D0
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:74:64:c7:e7:d3:1e:28:6a:4b:83:ef:d5:6c:73:06:0d:
         a8:54:93:ec:7e:a5:b3:3a:14:a7:46:90:b1:01:d8:6e:56:86:
         bd:15:a7:bf:c9:6e:cb:b2:da:aa:a8:4e:25:9c:eb:4d:4c:a4:
         ed:d8:8a:38:52:8f:40:3c:41:57:40:cf:07:83:8b:22:bd:1d:
         0b:52:47:40:69:f1:8a:62:e2:59:f4:02:8c:ed:c7:a8:7e:a3:
         83:58:b3:57:f3:5b:e2:c7:b1:df:90:bc:69:ec:92:b6:2d:aa:
         9f:7f:6a:38:a2:a3:2f:37:bc:e1:b4:16:8b:fd:14:22:cc:d6:
         44:72:7e:7f:d6:6c:a1:70:cb:5f:6c:4a:34:fc:23:b0:56:40:
         a9:4d:9a:4f:57:2f:49:b4:c4:a4:ee:87:b1:d1:d1:e7:01:af:
         93:aa:b4:87:9f:e9:30:5a:80:91:8c:23:df:7e:67:25:97:89:
         be:8e:66:f8:08:88:b9:03:3e:ff:05:ed:c0:5c:be:92:40:4f:
         73:f2:c4:e5:fa:09:13:b5:d2:e2:51:6c:a1:18:36:12:90:e7:
         af:e0:ef:af:9e:19:a6:7e:73:a8:dc:35:fe:e7:e2:2f:92:9f:
         00:ad:c4:3a:83:3b:70:d7:cd:87:95:1c:20:88:17:d6:40:72:
         98:ff:c0:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkiKYGufpXo2GWAQKDGd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0
OTNiZTUwHhcNMjQwNTE3MjIwMDI5WhcNMjQwNTE4MjIwMDI5WjAzMTEwLwYDVQQD
EyhkNmE1ZDkwZWRmYWUxYWE3OTc2YzI0YjUwODY3MWRjMzI3ZTk4NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou0KcSox43o/xh1ySBLIhqFWz2zW
5MDdNGqAw0Z52iDhh94hBL77IydOcRaiBF6IsT9jhBn3UO6fB5ub7FsZrP+Et4Ge
JYX+d4rcZ/+jQBm3ggrKGrYLWY44u0iN6JwwB/+bs1gbdboMVeOn77BirL7iigeR
MVKJJ0AWKbNE+SbfPwn/Leqsy0QG4CfuY8nw4QoYhjCz7rHsppBC1UUToh7cw0RE
xOkAqpUentM1MyRi3WK8ao7kQrNtu/7AEDAjC+eUr//kHrktFYudF9F3+oyedmBc
YAXcW8D3OPMdN8Ad+zaliaYuw5AIVqSaJcMgRM4IfMPJD7kRQxnfq4GPBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNal2Q7frhqnl2wktQhnHcMn6YXQMB8GA1UdIwQY
MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt
MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3
LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/h0ZMfn
0x4oakuD79VscwYNqFST7H6lszoUp0aQsQHYblaGvRWnv8luy7LaqqhOJZzrTUyk
7diKOFKPQDxBV0DPB4OLIr0dC1JHQGnximLiWfQCjO3HqH6jg1izV/Nb4sex35C8
aeySti2qn39qOKKjLze84bQWi/0UIszWRHJ+f9ZsoXDLX2xKNPwjsFZAqU2aT1cv
SbTEpO6HsdHR5wGvk6q0h5/pMFqAkYwj335nJZeJvo5m+AiIuQM+/wXtwFy+kkBP
c/LE5foJE7XS4lFsoRg2EpDnr+Dvr54Zpn5zqNw1/ufiL5KfAK3EOoM7cNfNh5Uc
IIgX1kBymP/AkA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:39:46 2024 by rpki-client on console-ams.rpki-client.org