Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          azDnAf/HG1x6cxNcTP6RbvQmIdhtbcaTZoCxcV858no=
Subject key identifier:   F1:BC:02:15:8B:CC:61:1E:DC:2B:EC:B9:43:0E:C6:ED:AD:E7:8F:95
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       018F86362A0284B31C1F2776AF7500DB3935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 11:00:47 +0000
Manifest this update:     Fri 17 May 2024 11:00:47 +0000
Manifest next update:     Sat 18 May 2024 11:00:47 +0000
Files and hashes:         1: 9eauA3df97NwCC5fhOP1_2AH-4c.roa (hash: q3qgChNUxj2AgSjAYWBwdTUjU5yOmc+Ood8C6is6khg=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: csPV30Xwv+U8uzPuHBNc0I6lhVU1QtseOcwIGKXxxLg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:2a:02:84:b3:1c:1f:27:76:af:75:00:db:39:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: May 17 11:00:47 2024 GMT
            Not After : May 18 11:00:47 2024 GMT
        Subject: CN=f1bc02158bcc611edc2becb9430ec6edade78f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:8f:9a:e0:c9:fd:86:61:5f:0e:e8:ad:37:
                    5a:67:02:ca:06:97:04:b2:e4:b4:c5:ab:89:3e:fb:
                    f0:9c:16:6d:5b:c5:1e:91:cc:31:21:80:f6:38:c3:
                    3e:a2:6b:e2:a4:15:a3:66:43:84:ff:3f:3c:e9:33:
                    d7:2c:19:e9:a2:a5:7a:85:f6:0d:6c:47:bd:10:10:
                    8c:d7:cf:d0:c5:57:42:9a:8a:d9:37:b3:18:3d:d7:
                    48:ac:8e:9a:96:15:29:68:79:0c:7f:3c:e6:67:1c:
                    cb:c6:05:04:67:d1:50:2b:cc:7a:18:30:9e:08:c4:
                    8c:90:2f:79:c4:3d:0f:2b:87:54:d4:90:8a:f7:44:
                    b5:bf:16:11:a6:e1:4b:de:f2:2b:29:9d:5c:5c:0c:
                    03:3c:92:92:3e:a8:6e:67:d0:6f:c0:93:db:13:25:
                    ce:7c:1a:20:22:a6:f9:a0:0b:65:73:7f:b4:a1:8a:
                    7d:3d:b2:67:85:86:20:8f:04:18:a9:f8:a3:57:07:
                    55:36:7f:4d:e8:16:b6:11:7c:1b:b0:07:1f:4e:b4:
                    15:b7:5a:ca:80:59:68:5c:28:4d:36:c9:9d:64:64:
                    60:01:0c:5f:8a:81:8c:0a:cf:9b:d5:ca:8f:c7:3d:
                    b8:07:ae:12:7b:6d:07:e1:93:fe:17:28:46:67:06:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BC:02:15:8B:CC:61:1E:DC:2B:EC:B9:43:0E:C6:ED:AD:E7:8F:95
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:40:65:54:a0:e1:04:33:c1:bb:21:7f:7c:f8:db:52:eb:
         fa:c8:8c:d7:0d:fd:5b:29:16:38:e1:81:4e:6e:b7:17:c6:a6:
         e3:79:aa:f1:1e:43:f3:78:af:26:16:3b:06:45:b2:59:2f:88:
         31:d3:4e:cf:a3:b9:c6:61:a6:58:e3:c3:79:2a:fb:0e:90:cd:
         0a:f8:e3:47:14:d0:df:e3:ab:c2:e0:5b:a2:2b:60:d9:20:b3:
         59:63:81:7b:27:7f:77:f3:43:23:01:55:64:4a:96:3f:b9:00:
         61:53:4e:62:4c:09:4d:9c:50:47:1f:e1:4d:1a:cf:0a:d0:8d:
         65:5f:c5:05:3a:bd:b1:2d:3b:64:39:b5:6a:87:2b:60:56:6e:
         9f:3a:8e:11:a2:43:02:b6:ee:1d:69:3e:1f:0a:e2:09:83:87:
         9f:48:eb:2a:30:0a:09:36:d5:98:e8:9e:31:0b:ed:e8:20:5d:
         08:86:93:59:69:dd:40:80:ef:bb:b6:37:13:46:d0:84:23:0b:
         d9:84:96:fc:c2:14:18:0a:23:3f:31:00:ed:93:61:cd:69:7d:
         7b:8b:dc:96:bc:18:2e:40:20:82:27:6f:90:31:57:77:05:73:
         b7:37:c9:34:b0:d5:52:cc:a5:5d:06:89:b5:0d:f3:c4:94:7e:
         2a:1f:b2:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNioChLMcHyd2r3UA2zk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy
OGY4MmIwHhcNMjQwNTE3MTEwMDQ3WhcNMjQwNTE4MTEwMDQ3WjAzMTEwLwYDVQQD
EyhmMWJjMDIxNThiY2M2MTFlZGMyYmVjYjk0MzBlYzZlZGFkZTc4Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKuPmuDJ/YZhXw7orTdaZwLKBpcE
suS0xauJPvvwnBZtW8UekcwxIYD2OMM+omvipBWjZkOE/z886TPXLBnpoqV6hfYN
bEe9EBCM18/QxVdCmorZN7MYPddIrI6alhUpaHkMfzzmZxzLxgUEZ9FQK8x6GDCe
CMSMkC95xD0PK4dU1JCK90S1vxYRpuFL3vIrKZ1cXAwDPJKSPqhuZ9BvwJPbEyXO
fBogIqb5oAtlc3+0oYp9PbJnhYYgjwQYqfijVwdVNn9N6Ba2EXwbsAcfTrQVt1rK
gFloXChNNsmdZGRgAQxfioGMCs+b1cqPxz24B64Se20H4ZP+FyhGZwZxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG8AhWLzGEe3CvsuUMOxu2t54+VMB8GA1UdIwQY
MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et
MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0
LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9FAZVSg
4QQzwbshf3z421Lr+siM1w39WykWOOGBTm63F8am43mq8R5D83ivJhY7BkWyWS+I
MdNOz6O5xmGmWOPDeSr7DpDNCvjjRxTQ3+OrwuBboitg2SCzWWOBeyd/d/NDIwFV
ZEqWP7kAYVNOYkwJTZxQRx/hTRrPCtCNZV/FBTq9sS07ZDm1aocrYFZunzqOEaJD
ArbuHWk+HwriCYOHn0jrKjAKCTbVmOieMQvt6CBdCIaTWWndQIDvu7Y3E0bQhCML
2YSW/MIUGAojPzEA7ZNhzWl9e4vclrwYLkAggidvkDFXdwVztzfJNLDVUsylXQaJ
tQ3zxJR+Kh+yCg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:58:19 2024 by rpki-client on console-ams.rpki-client.org