Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File:                     Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier:          9F6a9vMveyZCm9uVIA1RHEAUbwh3U5W16TGRbLdm7nQ=
Subject key identifier:   26:44:8F:EC:A3:76:14:0F:CB:6D:95:AB:57:12:83:90:8E:62:57:99
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer:       /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial:       01903EC210BDD32450BEF9B30B78B768AF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number:          1185
Signing time:             Sat 22 Jun 2024 07:03:43 +0000
Manifest this update:     Sat 22 Jun 2024 07:03:43 +0000
Manifest next update:     Sun 23 Jun 2024 07:03:43 +0000
Files and hashes:         1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: SU4kx7PprbkSSh8DRP7hF5+GmNC7SQxVxDobipVkDX4=)
                          2: UDMhFTPHZJjzilNy8ke2W_CBMJo.roa (hash: jv6EDoyvYQF5xzpAZz7VWRYKcynNooNktAdNb8K+7Mk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c2:10:bd:d3:24:50:be:f9:b3:0b:78:b7:68:af:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
        Validity
            Not Before: Jun 22 07:03:43 2024 GMT
            Not After : Jun 23 07:03:43 2024 GMT
        Subject: CN=26448feca376140fcb6d95ab571283908e625799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7e:f1:1a:56:63:8e:95:7b:e1:90:f4:a5:2a:
                    f2:b5:61:5c:9e:19:7b:09:ce:25:37:44:65:e2:0d:
                    d8:24:4e:5f:bb:bc:67:c9:b3:38:e8:c4:7e:fa:29:
                    5e:da:41:9a:64:4c:cc:94:7a:7d:71:39:99:7a:09:
                    19:d4:db:84:3b:52:34:d1:ea:5d:33:1d:93:29:a3:
                    30:a6:7a:46:3f:2c:de:d1:ae:99:93:00:f5:c8:0e:
                    27:b2:12:46:b8:23:f5:8c:7e:f9:db:9f:9a:1e:64:
                    01:e7:26:fb:7c:37:4a:49:09:35:0a:48:8f:37:49:
                    34:4c:5a:7a:a4:3d:b3:01:86:be:a3:12:0a:a7:41:
                    86:ee:e3:39:5b:54:6e:df:bd:3b:db:7e:67:01:e5:
                    80:c1:68:02:ba:76:d4:46:79:02:db:25:0f:38:55:
                    b8:10:09:ea:14:82:ca:c8:7b:7c:32:06:0a:97:e1:
                    2f:62:08:94:b9:8b:11:1b:1b:95:0b:52:93:68:bb:
                    8a:ba:1f:a1:3b:ca:ba:14:75:21:b0:0f:2f:75:b8:
                    e6:9f:d6:b7:08:97:de:09:42:51:ee:2c:c3:4a:0a:
                    46:e7:9b:b1:7f:f1:4c:e2:c9:51:70:4f:e9:a6:a5:
                    0b:69:63:cb:89:64:70:ed:e7:28:af:49:40:f1:f4:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:44:8F:EC:A3:76:14:0F:CB:6D:95:AB:57:12:83:90:8E:62:57:99
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:15:67:01:f7:1d:56:86:a1:88:36:d3:7b:33:7b:51:fa:
         76:ab:de:aa:8e:0b:55:fc:9c:7d:e2:53:80:20:fc:59:2f:a2:
         d4:db:a8:99:c5:5c:8e:13:f1:e4:f8:5e:85:74:de:54:32:66:
         11:a2:72:d2:ef:f9:31:af:8d:a9:3a:33:d3:90:1c:e7:78:c1:
         f0:2c:f0:a5:44:ec:e7:a1:b3:9e:88:aa:cd:cb:36:b7:a3:eb:
         3b:dc:e5:43:41:f7:21:78:c7:64:c5:1f:85:c1:02:c2:27:cb:
         f2:e0:67:85:a4:6c:ab:d9:ea:50:77:30:0b:ba:a0:13:66:e2:
         2e:49:ff:08:eb:b9:5a:b3:81:e6:e8:dd:c7:09:26:8f:d5:bb:
         1d:56:59:e2:7f:b8:96:46:82:10:ab:25:6b:87:5f:d6:09:92:
         de:6f:07:cd:fb:41:0e:f2:46:10:9a:00:24:8d:9b:3a:e6:bd:
         1b:04:f4:2f:72:65:9b:0f:a9:7d:9f:01:81:33:77:8b:83:48:
         7f:ba:b4:ad:20:71:7b:1a:64:60:ae:01:00:d2:45:29:11:4e:
         47:b3:85:52:3e:7f:bc:0d:8d:77:44:56:19:53:4e:59:92:06:
         79:9c:03:9d:04:96:47:7d:55:33:37:16:df:85:79:3e:f1:60:
         24:4f:3c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA+whC90yRQvvmzC3i3aK9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5
NjcyYjcwHhcNMjQwNjIyMDcwMzQzWhcNMjQwNjIzMDcwMzQzWjAzMTEwLwYDVQQD
EygyNjQ0OGZlY2EzNzYxNDBmY2I2ZDk1YWI1NzEyODM5MDhlNjI1Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin7xGlZjjpV74ZD0pSrytWFcnhl7
Cc4lN0Rl4g3YJE5fu7xnybM46MR++ile2kGaZEzMlHp9cTmZegkZ1NuEO1I00epd
Mx2TKaMwpnpGPyze0a6ZkwD1yA4nshJGuCP1jH7525+aHmQB5yb7fDdKSQk1CkiP
N0k0TFp6pD2zAYa+oxIKp0GG7uM5W1Ru3707235nAeWAwWgCunbURnkC2yUPOFW4
EAnqFILKyHt8MgYKl+EvYgiUuYsRGxuVC1KTaLuKuh+hO8q6FHUhsA8vdbjmn9a3
CJfeCUJR7izDSgpG55uxf/FM4slRcE/ppqULaWPLiWRw7ecor0lA8fRtXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZEj+yjdhQPy22Vq1cSg5COYleZMB8GA1UdIwQY
MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt
ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk
LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZskVZwH3
HVaGoYg203sze1H6dqveqo4LVfycfeJTgCD8WS+i1NuomcVcjhPx5PhehXTeVDJm
EaJy0u/5Ma+NqToz05Ac53jB8CzwpUTs56Gznoiqzcs2t6PrO9zlQ0H3IXjHZMUf
hcECwifL8uBnhaRsq9nqUHcwC7qgE2biLkn/COu5WrOB5ujdxwkmj9W7HVZZ4n+4
lkaCEKsla4df1gmS3m8HzftBDvJGEJoAJI2bOua9GwT0L3Jlmw+pfZ8BgTN3i4NI
f7q0rSBxexpkYK4BANJFKRFOR7OFUj5/vA2Nd0RWGVNOWZIGeZwDnQSWR31VMzcW
34V5PvFgJE88jg==
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:51:36 2024 by rpki-client on console-ams.rpki-client.org