Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          eTsJQeLbnmnKeP22xOIF/dEof33t0T17/EK6wqq0eEY=
Subject key identifier:   A4:33:65:70:75:D5:FE:FA:4B:4E:9D:F2:DF:BF:A8:0A:0D:D0:B4:85
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       018F43B18460BADA3CE180F783E8073B558D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 13:00:58 +0000
Manifest this update:     Sat 04 May 2024 13:00:58 +0000
Manifest next update:     Sun 05 May 2024 13:00:58 +0000
Files and hashes:         1: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: 5BVNirRTFuj7g4P7uWz6Pk/t8imy3yf1F3tu0tM6rb8=)
                          2: GhDBeFsV0o6Q5aVQohlMSB4QT1g.roa (hash: UYV/suRHLLDsYPK9PyGH4BBnn3WpwoULemZ5uunPcns=)
                          3: T3OmX6fYRixijJVDFCXqiwRayg4.roa (hash: qR86wt86guqDozQ+i9IvQs4Js9DTPvG+6whxTcH5qcI=)
                          4: TSBVqN-q4gFL2xnBzcLoNSaEF14.roa (hash: aN3PElmz6uoj7dhdKoLePOiU/o2fDJBnIhp+cy+lO/M=)
                          5: d3EmMkHi3BHjSYAbw0SOpDVvF0Q.roa (hash: Z6wqQX1HkGABN23lXsqtSdSrxhePPN2WOsymZTeTm2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:84:60:ba:da:3c:e1:80:f7:83:e8:07:3b:55:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: May  4 13:00:58 2024 GMT
            Not After : May  5 13:00:58 2024 GMT
        Subject: CN=a433657075d5fefa4b4e9df2dfbfa80a0dd0b485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:5f:21:57:61:c7:bf:24:4c:9b:ab:c8:b2:
                    5d:bd:83:a0:f7:6b:ab:f5:c2:c9:8a:e4:c1:f9:5b:
                    4f:15:87:66:f6:e2:7a:b8:72:dc:65:7f:eb:57:f6:
                    49:8f:be:aa:f7:9a:2d:af:23:d2:6d:f3:ad:51:b7:
                    db:05:1e:e9:f8:eb:ae:5d:13:46:65:4c:67:c9:09:
                    ec:d9:77:95:7d:d9:e6:92:c8:d0:6a:d7:3c:bd:79:
                    f2:41:cc:e2:50:f1:d0:78:79:4b:9f:52:7a:4a:6a:
                    d8:33:9b:92:62:cf:68:24:de:d0:74:48:8a:b0:ee:
                    55:75:15:0b:b9:f9:76:26:8a:3a:9f:6e:e0:67:82:
                    0c:9a:ca:4f:70:5b:7a:14:c0:4d:3c:a4:de:3c:cb:
                    88:24:5d:90:82:84:67:c3:88:bc:32:61:7a:78:6e:
                    85:91:2a:31:3c:36:9b:8c:83:dd:b0:7c:c7:a4:b4:
                    22:95:bf:3f:2d:3b:cf:cb:a8:cf:88:3d:4c:d0:98:
                    b3:13:cd:b0:8b:19:ed:2c:81:76:f3:12:04:6d:90:
                    24:c7:a4:d4:67:8c:d1:fa:89:2a:4f:c7:74:80:7f:
                    08:31:4f:e8:30:63:0c:3b:e8:2c:fb:39:2c:18:e3:
                    7c:3c:e6:bd:7b:e6:95:0b:72:93:ce:00:8e:33:c6:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:65:70:75:D5:FE:FA:4B:4E:9D:F2:DF:BF:A8:0A:0D:D0:B4:85
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:0a:25:a0:73:b9:e8:91:da:88:48:e1:86:7e:4d:ea:2e:
         d1:46:83:a6:61:8c:b5:bd:40:52:e2:25:72:61:00:7a:c1:37:
         29:fa:17:b9:3b:20:e8:b2:5a:f5:91:eb:38:11:55:8d:d5:38:
         60:25:95:41:1f:ef:79:19:21:b5:8e:84:61:0b:a8:65:7d:60:
         35:f8:25:79:f5:33:c8:65:9f:ef:4a:1f:59:4b:5a:28:8f:76:
         0b:65:4c:42:9b:2b:2d:68:5e:01:11:34:f8:96:7c:2e:97:ec:
         3f:cd:e1:4d:8c:1f:c2:4c:9a:54:28:30:34:64:d8:4b:e7:32:
         6e:aa:89:7c:2f:e4:6e:92:1a:f3:01:5f:6e:33:e6:56:f8:f9:
         53:61:f1:24:94:b3:18:ed:c2:7a:be:6d:2b:50:3b:44:18:40:
         f4:8c:33:38:12:3b:4f:32:19:ec:21:82:19:ce:b8:74:30:68:
         63:b9:af:d6:a9:3b:2b:6d:55:2c:9e:c4:94:8c:32:ca:08:27:
         ff:36:f9:16:5c:72:30:3c:71:b0:fa:43:f5:fc:9a:b2:d3:bb:
         0d:78:44:57:66:6f:df:34:5a:36:5b:f0:b3:a4:2b:93:0f:36:
         fc:08:81:5f:af:53:b8:57:47:09:f3:11:f8:53:4b:56:d6:e6:
         06:3a:eb:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DsYRguto84YD3g+gHO1WNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWUyN2IyOWY2NWEyNGQ5Zjk0MjE1NzE1Y2QzNjcxODI1
YTllYWUwHhcNMjQwNTA0MTMwMDU4WhcNMjQwNTA1MTMwMDU4WjAzMTEwLwYDVQQD
EyhhNDMzNjU3MDc1ZDVmZWZhNGI0ZTlkZjJkZmJmYTgwYTBkZDBiNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPFfIVdhx78kTJuryLJdvYOg92ur
9cLJiuTB+VtPFYdm9uJ6uHLcZX/rV/ZJj76q95otryPSbfOtUbfbBR7p+OuuXRNG
ZUxnyQns2XeVfdnmksjQatc8vXnyQcziUPHQeHlLn1J6SmrYM5uSYs9oJN7QdEiK
sO5VdRULufl2Joo6n27gZ4IMmspPcFt6FMBNPKTePMuIJF2QgoRnw4i8MmF6eG6F
kSoxPDabjIPdsHzHpLQilb8/LTvPy6jPiD1M0JizE82wixntLIF28xIEbZAkx6TU
Z4zR+okqT8d0gH8IMU/oMGMMO+gs+zksGON8POa9e+aVC3KTzgCOM8Z0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQzZXB11f76S06d8t+/qAoN0LSFMB8GA1UdIwQY
MBaAFBkeJ7KfZaJNn5QhVxXNNnGCWp6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTct
YjhjNjY2ZTZkMzUxLzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTctYjhjNjY2ZTZkMzUx
LzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcIKJaBz
ueiR2ohI4YZ+Teou0UaDpmGMtb1AUuIlcmEAesE3KfoXuTsg6LJa9ZHrOBFVjdU4
YCWVQR/veRkhtY6EYQuoZX1gNfglefUzyGWf70ofWUtaKI92C2VMQpsrLWheARE0
+JZ8LpfsP83hTYwfwkyaVCgwNGTYS+cybqqJfC/kbpIa8wFfbjPmVvj5U2HxJJSz
GO3Cer5tK1A7RBhA9IwzOBI7TzIZ7CGCGc64dDBoY7mv1qk7K21VLJ7ElIwyyggn
/zb5FlxyMDxxsPpD9fyastO7DXhEV2Zv3zRaNlvws6Qrkw82/AiBX69TuFdHCfMR
+FNLVtbmBjrrdw==
-----END CERTIFICATE-----
Generated at Sat May 4 19:34:35 2024 by rpki-client on console-fra.rpki-client.org