Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          jxSurJbX2+VILqMdxfzaQ/w9Q8FpDvvBLA4zl0mZjSI=
Subject key identifier:   F6:6D:1F:46:71:67:88:C8:D6:B9:81:11:25:86:5A:19:DC:70:79:C9
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       018F874893B662319C6E801EDA4B9C62D233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          0A1D
Signing time:             Fri 17 May 2024 16:00:31 +0000
Manifest this update:     Fri 17 May 2024 16:00:31 +0000
Manifest next update:     Sat 18 May 2024 16:00:31 +0000
Files and hashes:         1: 3pfVgFLkg2TMIc7JovHte5RB3LQ.roa (hash: j4B7Ylwr/iwmSITFsOtorwc6XSZcp3QAqhv7YbCMN5c=)
                          2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: AcMcSTJsb6A+Ode71a0K7RaPF1s8bZM80fxSGjoKMjs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:93:b6:62:31:9c:6e:80:1e:da:4b:9c:62:d2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: May 17 16:00:31 2024 GMT
            Not After : May 18 16:00:31 2024 GMT
        Subject: CN=f66d1f46716788c8d6b9811125865a19dc7079c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:31:82:59:7f:5c:41:ed:1a:8d:d9:00:36:
                    17:85:3d:0c:66:c7:a6:dd:5d:6c:55:b8:93:e8:f8:
                    93:13:b5:fe:86:29:05:c3:cd:0b:23:9f:8b:ba:6e:
                    cb:9b:3c:43:72:b4:95:32:54:c9:75:52:dc:94:30:
                    91:73:7b:ab:0c:fd:b6:9c:48:6b:41:6b:68:b2:19:
                    00:62:3b:e4:2a:6f:33:2f:68:82:02:2f:58:a4:a0:
                    af:12:f9:b2:0b:7e:1a:33:58:8f:ac:7f:f9:3d:82:
                    2a:52:04:29:a1:a6:51:2e:70:e1:7c:1c:a6:c9:bf:
                    5d:1c:9d:3f:71:31:eb:2c:03:5f:4e:69:2d:35:ed:
                    d1:76:9a:e7:0c:5a:1a:c4:6f:bb:6c:fe:d3:ef:d2:
                    57:65:d2:ea:11:19:1b:50:fa:bd:98:b1:b0:96:24:
                    ab:43:62:54:6d:53:c9:a1:15:8d:5a:27:e1:03:f9:
                    75:ff:21:73:50:b3:7c:00:a5:3d:98:4c:17:a1:5a:
                    17:12:93:ca:4e:8b:e5:a9:69:ed:20:e8:1f:84:8d:
                    40:d6:04:00:3c:2f:3c:a7:a5:99:e2:5a:82:2b:c2:
                    82:6e:9f:57:6d:e1:fe:41:2a:2c:b5:4b:02:f8:d4:
                    9d:6b:d0:4e:c3:76:3e:0e:1f:dd:92:20:f6:74:39:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6D:1F:46:71:67:88:C8:D6:B9:81:11:25:86:5A:19:DC:70:79:C9
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bc:13:2f:1a:bb:5b:09:b1:42:df:8c:d1:c5:a1:2f:23:34:
         d0:f7:36:01:dc:13:90:d4:5e:f8:d6:2e:8c:2c:4d:55:13:a8:
         55:ac:69:b1:3f:c0:2c:0d:9c:b8:53:76:15:f9:e7:7d:a1:35:
         31:b8:95:c2:5a:02:82:94:c0:c3:ea:2e:60:4b:df:12:59:72:
         0f:91:61:44:5f:de:f4:6b:e7:0c:a0:cd:cd:07:56:81:af:ff:
         47:09:df:65:fc:90:22:54:83:23:f0:5e:6f:9b:03:c7:2a:00:
         6f:df:8e:c0:1c:ff:9c:50:09:a1:b6:a6:04:6a:7b:b6:c3:d2:
         a9:11:e7:8a:cd:9b:48:6e:22:eb:bd:7a:10:46:74:05:5d:41:
         34:43:23:15:42:0d:a8:c5:f8:d2:eb:af:fb:a1:36:0a:98:66:
         5c:fb:ef:d7:d1:eb:af:ad:db:d6:75:97:c7:25:3b:49:39:d2:
         6e:cb:77:ec:dd:e4:4a:aa:11:9e:d3:95:44:7a:6d:ca:42:5b:
         20:bf:94:9a:5c:45:e7:61:c8:a8:f5:79:2c:ef:b2:5f:e9:01:
         60:1e:21:67:ac:33:4b:cb:ef:a5:31:65:d6:9d:08:32:a6:52:
         8e:e6:ca:9e:75:c9:d1:b5:3f:13:6c:06:ac:51:02:3b:cf:a4:
         98:a9:aa:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSJO2YjGcboAe2kucYtIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj
NjczOTQwHhcNMjQwNTE3MTYwMDMxWhcNMjQwNTE4MTYwMDMxWjAzMTEwLwYDVQQD
EyhmNjZkMWY0NjcxNjc4OGM4ZDZiOTgxMTEyNTg2NWExOWRjNzA3OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAwxgll/XEHtGo3ZADYXhT0MZsem
3V1sVbiT6PiTE7X+hikFw80LI5+Lum7LmzxDcrSVMlTJdVLclDCRc3urDP22nEhr
QWtoshkAYjvkKm8zL2iCAi9YpKCvEvmyC34aM1iPrH/5PYIqUgQpoaZRLnDhfBym
yb9dHJ0/cTHrLANfTmktNe3RdprnDFoaxG+7bP7T79JXZdLqERkbUPq9mLGwliSr
Q2JUbVPJoRWNWifhA/l1/yFzULN8AKU9mEwXoVoXEpPKTovlqWntIOgfhI1A1gQA
PC88p6WZ4lqCK8KCbp9XbeH+QSostUsC+NSda9BOw3Y+Dh/dkiD2dDlVAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZtH0ZxZ4jI1rmBESWGWhnccHnJMB8GA1UdIwQY
MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt
MGRiMTA4NTBjNzk0LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0
LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLwTLxq7
WwmxQt+M0cWhLyM00Pc2AdwTkNRe+NYujCxNVROoVaxpsT/ALA2cuFN2FfnnfaE1
MbiVwloCgpTAw+ouYEvfEllyD5FhRF/e9GvnDKDNzQdWga//RwnfZfyQIlSDI/Be
b5sDxyoAb9+OwBz/nFAJobamBGp7tsPSqRHnis2bSG4i6716EEZ0BV1BNEMjFUIN
qMX40uuv+6E2CphmXPvv19Hrr63b1nWXxyU7STnSbst37N3kSqoRntOVRHptykJb
IL+UmlxF52HIqPV5LO+yX+kBYB4hZ6wzS8vvpTFl1p0IMqZSjubKnnXJ0bU/E2wG
rFECO8+kmKmqYw==
-----END CERTIFICATE-----
Generated at Fri May 17 19:20:18 2024 by rpki-client on console-fra.rpki-client.org