Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File:                     G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier:          3atNS7YwmtJJAVr24fw2LJ00FALIaSYe5lRb/scmr6Q=
Subject key identifier:   25:08:AC:65:2A:24:0D:05:7B:CD:EF:9F:89:F3:0A:95:11:30:81:57
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer:       /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial:       018F46B2D11953778E9DDCA82CD5D2D32A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number:          1000
Signing time:             Sun 05 May 2024 03:01:15 +0000
Manifest this update:     Sun 05 May 2024 03:01:15 +0000
Manifest next update:     Mon 06 May 2024 03:01:15 +0000
Files and hashes:         1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: 8091fK0w9fdS4048YyWjfWoB698uHWzDG8bbbFMKdl0=)
                          2: tjg7PCt2Pgr0_PKYaW6zT5Gp-pg.roa (hash: tVkbsej3U4A8ZBEo1JUb1d/BDQTNIGzWlM7vYNtqm4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:d1:19:53:77:8e:9d:dc:a8:2c:d5:d2:d3:2a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
        Validity
            Not Before: May  5 03:01:15 2024 GMT
            Not After : May  6 03:01:15 2024 GMT
        Subject: CN=2508ac652a240d057bcdef9f89f30a9511308157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:78:1b:82:a8:e8:29:a6:67:68:87:d9:44:
                    56:ae:3e:0f:f5:01:f7:69:22:cb:f7:d6:af:11:85:
                    aa:e6:72:cd:fc:47:f2:a0:ff:fe:95:cb:63:41:48:
                    08:a2:62:de:bf:8e:ac:04:dc:b1:ff:a9:3b:f7:a3:
                    7c:26:29:4b:5a:9e:73:1a:5f:02:43:36:b9:56:95:
                    3a:c0:69:b3:22:02:fe:65:87:6d:ea:1d:fd:f8:2c:
                    ef:d6:fd:46:ee:89:dd:3c:a3:d9:c6:9f:1a:de:fc:
                    48:59:3e:f2:e3:86:4a:94:f5:86:a0:f2:26:ac:56:
                    d2:93:21:fb:74:af:97:99:57:68:8d:95:0b:91:57:
                    bd:67:b4:57:04:03:9f:4c:b4:71:b6:59:3f:79:e0:
                    85:f8:92:fb:07:1c:d6:9d:7a:82:7a:11:5d:14:dd:
                    1c:e0:37:a8:f6:20:9b:ea:c5:33:5c:8b:72:a1:36:
                    01:76:21:a2:9d:24:87:fd:e8:0c:67:f4:57:5f:6e:
                    9a:4d:e8:67:3d:55:c5:40:25:83:1a:f5:f5:c9:2d:
                    77:bb:be:93:fd:e3:84:4b:76:f4:8c:b0:13:96:c5:
                    1b:f5:33:00:57:02:88:f6:61:88:cb:29:15:74:56:
                    4c:67:bb:66:bc:3f:cd:8e:30:50:50:65:06:e6:78:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:08:AC:65:2A:24:0D:05:7B:CD:EF:9F:89:F3:0A:95:11:30:81:57
            X509v3 Authority Key Identifier:
                keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:59:01:44:7c:e3:4f:95:84:97:af:39:f9:38:c6:a3:27:
         6f:67:c1:0c:1a:ba:0b:ea:73:03:54:f0:af:c1:07:2b:fb:3a:
         52:9b:ef:35:08:a5:53:66:ee:5b:57:9e:19:15:41:69:12:e1:
         12:c5:a7:54:7c:35:41:98:48:59:28:03:f2:6c:83:22:99:6e:
         b3:e6:5c:36:56:b2:f0:b8:68:fd:13:d5:e6:83:d1:5c:2f:e4:
         dc:50:ef:93:7c:5c:7f:6a:0b:22:16:7f:7a:75:59:ce:76:f5:
         ee:52:74:d6:fe:5c:b8:d3:92:42:7c:d1:46:58:4a:ac:91:b6:
         70:09:63:e9:e8:91:b0:18:5f:5e:4f:fa:b8:21:54:28:c4:a5:
         ac:ef:40:31:be:0a:e6:74:f6:ef:1e:d8:32:42:ad:c5:b0:5c:
         11:2c:c6:f9:ae:b9:95:64:57:44:0a:de:87:2b:45:91:12:e6:
         7e:b9:7d:1d:1c:03:3a:69:49:08:2f:88:e3:5f:ff:36:2f:89:
         c0:ba:78:66:ba:f8:cd:cb:23:6c:30:73:05:a5:8d:53:4a:ab:
         08:d8:aa:2e:ca:0a:7c:ce:d7:a6:82:49:d1:59:71:0e:ea:09:
         a0:e0:da:03:b9:76:b5:14:19:8f:9e:8e:dd:53:4c:a1:36:8f:
         3a:24:2f:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GstEZU3eOndyoLNXS0yqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0
YjJjZGYwHhcNMjQwNTA1MDMwMTE1WhcNMjQwNTA2MDMwMTE1WjAzMTEwLwYDVQQD
EygyNTA4YWM2NTJhMjQwZDA1N2JjZGVmOWY4OWYzMGE5NTExMzA4MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvit4G4Ko6CmmZ2iH2URWrj4P9QH3
aSLL99avEYWq5nLN/EfyoP/+lctjQUgIomLev46sBNyx/6k796N8JilLWp5zGl8C
Qza5VpU6wGmzIgL+ZYdt6h39+Czv1v1G7ondPKPZxp8a3vxIWT7y44ZKlPWGoPIm
rFbSkyH7dK+XmVdojZULkVe9Z7RXBAOfTLRxtlk/eeCF+JL7BxzWnXqCehFdFN0c
4Deo9iCb6sUzXItyoTYBdiGinSSH/egMZ/RXX26aTehnPVXFQCWDGvX1yS13u76T
/eOES3b0jLATlsUb9TMAVwKI9mGIyykVdFZMZ7tmvD/NjjBQUGUG5njeQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUIrGUqJA0Fe83vn4nzCpURMIFXMB8GA1UdIwQY
MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt
ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1
LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxtZAUR8
40+VhJevOfk4xqMnb2fBDBq6C+pzA1Twr8EHK/s6UpvvNQilU2buW1eeGRVBaRLh
EsWnVHw1QZhIWSgD8myDIplus+ZcNlay8Lho/RPV5oPRXC/k3FDvk3xcf2oLIhZ/
enVZznb17lJ01v5cuNOSQnzRRlhKrJG2cAlj6eiRsBhfXk/6uCFUKMSlrO9AMb4K
5nT27x7YMkKtxbBcESzG+a65lWRXRArehytFkRLmfrl9HRwDOmlJCC+I41//Ni+J
wLp4Zrr4zcsjbDBzBaWNU0qrCNiqLsoKfM7XpoJJ0VlxDuoJoODaA7l2tRQZj56O
3VNMoTaPOiQvXA==
-----END CERTIFICATE-----
Generated at Sun May 5 07:38:27 2024 by rpki-client on console-fra.rpki-client.org