Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File:                     1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier:          O+Ld7EOBqQHAAbUln6jTohj4t/hTFI17BOGWpoSAV3w=
Subject key identifier:   88:D7:97:F7:C8:3B:22:F1:14:42:20:61:50:07:69:64:E5:47:15:03
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer:       /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial:       01901F34B315B63AA3A82F9BD9F4CF26C116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number:          0966
Signing time:             Sun 16 Jun 2024 04:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:05 +0000
Files and hashes:         1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: hfg8d93iye9Y2c3YmSYCMSEbEfECiKr2mL7f4Jdf7MI=)
                          2: LiZKylfB_9lz4JVojj0zepUxYQw.roa (hash: ug2Y+chqy8b+LzbFJTXkRcJet30DxpYDG2xFDnLUd0w=)
                          3: M0li5ZO2VSVQdOqxfYUpYMzwP48.roa (hash: sJlzVcpVKqzFOz7t3gpNOngRXsb1sbSbZAu0XFGux70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:b3:15:b6:3a:a3:a8:2f:9b:d9:f4:cf:26:c1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
        Validity
            Not Before: Jun 16 04:01:05 2024 GMT
            Not After : Jun 17 04:01:05 2024 GMT
        Subject: CN=88d797f7c83b22f11442206150076964e5471503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:50:53:f4:4b:d1:0c:89:67:0b:ef:93:6f:
                    d9:7b:13:50:c2:0e:d7:09:10:bf:3a:51:64:80:0c:
                    2d:d5:5f:a9:c1:6c:b6:33:76:aa:76:8f:15:d7:ed:
                    7d:6c:90:50:b8:24:6d:2a:38:11:e3:28:df:21:9d:
                    cc:aa:57:3b:bd:cf:91:48:85:ac:2f:ab:a2:d6:45:
                    b6:d0:34:c8:2e:c7:6a:b8:af:70:6f:84:61:c9:4c:
                    46:b8:6f:40:57:5e:7c:53:9e:f5:9e:e6:d0:4f:27:
                    a4:5a:bd:b6:a9:a8:8a:58:b2:c4:46:38:50:28:e0:
                    4d:de:27:50:16:e1:79:f5:1d:e4:a1:03:48:24:87:
                    86:63:87:1c:85:d3:ce:e9:53:33:ea:19:d3:b3:d6:
                    2c:ee:d8:c5:7e:f8:97:c0:c8:e0:4b:93:93:3c:b6:
                    68:c7:3e:7d:5b:85:52:f7:9d:c2:b1:80:e5:ad:86:
                    90:2d:f4:91:4b:1b:b8:b0:ec:cf:24:32:eb:a3:3a:
                    69:24:ae:8e:c5:78:7d:50:9b:68:66:18:d4:60:11:
                    b6:30:4b:37:1a:a9:5d:9a:44:88:ce:f5:26:25:96:
                    2c:37:3c:57:75:3e:8c:03:7f:f9:8d:fc:e0:37:eb:
                    42:c2:e3:8f:4c:0d:de:0d:72:11:3b:0c:de:99:3d:
                    d4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D7:97:F7:C8:3B:22:F1:14:42:20:61:50:07:69:64:E5:47:15:03
            X509v3 Authority Key Identifier:
                keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:06:1a:dc:56:14:c8:4d:82:c5:74:c3:3a:dd:a0:36:20:2c:
         3d:19:dd:55:4f:79:65:87:2a:e0:98:ed:8b:77:da:a9:77:aa:
         12:b7:1a:59:4a:4e:96:32:87:74:10:2c:66:f2:a8:22:23:37:
         35:72:18:c8:d8:83:6f:44:02:03:65:86:d9:af:7f:d2:e3:a2:
         94:a8:49:04:94:d9:40:be:b8:dd:5b:1a:e4:d5:96:f9:43:f1:
         e9:23:26:53:c1:70:ea:20:94:d0:2d:86:87:5f:bb:59:f0:bd:
         a8:75:f2:54:c2:53:7d:62:bf:e0:a9:3d:5d:32:9f:b5:51:8c:
         d3:23:ce:b7:ef:a5:76:7d:37:e1:21:85:f6:66:ff:60:22:b7:
         73:d5:d8:f8:84:8c:76:06:41:30:fd:49:71:76:cc:ae:23:fe:
         95:cd:3c:3c:bd:d7:4e:07:fc:96:a1:cc:34:12:38:9e:a5:c9:
         81:1d:a3:e9:42:c9:91:c5:3a:fd:39:b6:6a:85:15:87:ef:73:
         d2:fe:b3:5c:e5:bf:5b:77:e7:d9:47:c0:99:b3:4b:7c:ee:0f:
         ab:e4:f6:f1:55:6f:68:e5:0b:fd:c9:56:22:c7:79:b3:17:24:
         65:bd:16:e1:d9:d6:09:81:df:7b:83:31:06:06:07:24:c8:5f:
         0c:42:4d:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZAfNLMVtjqjqC+b2fTPJsEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk
YTk3ZjAwHhcNMjQwNjE2MDQwMTA1WhcNMjQwNjE3MDQwMTA1WjAzMTEwLwYDVQQD
Eyg4OGQ3OTdmN2M4M2IyMmYxMTQ0MjIwNjE1MDA3Njk2NGU1NDcxNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B1QU/RL0QyJZwvvk2/ZexNQwg7X
CRC/OlFkgAwt1V+pwWy2M3aqdo8V1+19bJBQuCRtKjgR4yjfIZ3Mqlc7vc+RSIWs
L6ui1kW20DTILsdquK9wb4RhyUxGuG9AV158U571nubQTyekWr22qaiKWLLERjhQ
KOBN3idQFuF59R3koQNIJIeGY4cchdPO6VMz6hnTs9Ys7tjFfviXwMjgS5OTPLZo
xz59W4VS953CsYDlrYaQLfSRSxu4sOzPJDLrozppJK6OxXh9UJtoZhjUYBG2MEs3
GqldmkSIzvUmJZYsNzxXdT6MA3/5jfzgN+tCwuOPTA3eDXIROwzemT3UswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIjXl/fIOyLxFEIgYVAHaWTlRxUDMB8GA1UdIwQY
MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2
LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2
NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQYa
3FYUyE2CxXTDOt2gNiAsPRndVU95ZYcq4Jjti3faqXeqErcaWUpOljKHdBAsZvKo
IiM3NXIYyNiDb0QCA2WG2a9/0uOilKhJBJTZQL643Vsa5NWW+UPx6SMmU8Fw6iCU
0C2Gh1+7WfC9qHXyVMJTfWK/4Kk9XTKftVGM0yPOt++ldn034SGF9mb/YCK3c9XY
+ISMdgZBMP1JcXbMriP+lc08PL3XTgf8lqHMNBI4nqXJgR2j6ULJkcU6/Tm2aoUV
h+9z0v6zXOW/W3fn2UfAmbNLfO4Pq+T28VVvaOUL/clWIsd5sxckZb0W4dnWCYHf
e4MxBgYHJMhfDEJNzg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:46 2024 by rpki-client on console-fra.rpki-client.org