Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          P+4JDg5xqEpEC87TrXBOFyx7G59OECd1pFoP5A8uyU8=
Subject key identifier:   17:2C:77:D1:07:C4:DC:9E:A5:26:C9:EA:CD:52:56:88:99:20:5B:24
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       018F83A280ED52E39DEC11911F7DBEE44D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          1193
Signing time:             Thu 16 May 2024 23:00:15 +0000
Manifest this update:     Thu 16 May 2024 23:00:15 +0000
Manifest next update:     Fri 17 May 2024 23:00:15 +0000
Files and hashes:         1: 0ZG6b6TNVo5DhfNUl_T7x6pBRo8.roa (hash: V4n/9IlJu6H+rthurkAQAFBm8T2t5GYskf5Ngb0P8zw=)
                          2: Bcd64sXxsrhhoBGEsLgOed4DrGo.roa (hash: AHFj3hAMhkjs3fnWLa2ezZKFTiKwQR7g8qqlIskh2f4=)
                          3: KtuKlVVzb0vNX3-3d_LM1zzzkmg.roa (hash: Hii3JDmb4VYupPUAWgMNi2HcFSUGSLha0z2q/avJPkE=)
                          4: ZF95itVHinbQgH1ND9H3eLsRN2g.roa (hash: sPumUlir/eeeq4ztOX6Eq6H3kjXYrFdgR1LiNlvaMv8=)
                          5: cuXw-wdQy7ClKOiXtJsAUlqBFhQ.roa (hash: pRPAxhwSkPdf89m90G0Oz7e+/dRd8EhHZr9dR7uQdbk=)
                          6: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: mTWU+fpDpnjF728XXdIkNNeLiT85r1SATZ/G6gJ8s/M=)
                          7: l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa (hash: J+7DUYbCZAAmeT4Qc+mXxkaSdm1CHQ9oYUSUIcnP79o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:a2:80:ed:52:e3:9d:ec:11:91:1f:7d:be:e4:4d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: May 16 23:00:15 2024 GMT
            Not After : May 17 23:00:15 2024 GMT
        Subject: CN=172c77d107c4dc9ea526c9eacd52568899205b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:87:55:7f:02:15:21:43:76:cc:b9:2c:3b:
                    e2:4c:20:b9:72:65:c6:51:21:33:e4:a8:51:4c:cd:
                    8d:1b:3c:59:59:cf:64:7a:22:5a:17:83:7b:d9:cf:
                    86:9b:84:27:18:2e:fd:21:12:ba:77:f8:cb:17:e8:
                    2d:60:69:06:a3:6b:55:0a:a9:68:9b:80:9a:34:81:
                    1c:9b:57:8d:c9:57:dd:20:92:8f:ff:20:fc:e0:df:
                    4e:0a:16:5d:5a:f5:79:f7:63:eb:be:ad:f4:a0:3b:
                    db:4c:0a:67:03:48:69:2c:aa:c4:f1:6c:48:92:ba:
                    60:38:1a:37:29:91:f1:67:c0:36:3b:7f:5c:ef:1c:
                    95:f0:4d:af:2d:9c:46:7c:ee:ff:09:ef:43:9a:ca:
                    11:46:d1:e6:f7:bd:24:54:c4:16:30:1b:57:30:fa:
                    82:79:32:70:9c:2f:a6:05:84:65:a1:d7:de:32:fe:
                    dd:06:a5:df:1e:1c:59:9d:36:ce:80:25:ae:a0:3c:
                    d7:96:47:ea:c6:81:d7:c3:80:70:11:8c:47:72:8d:
                    f7:0d:fb:ac:47:1e:07:4c:4a:44:ed:24:1b:a1:66:
                    1b:29:13:33:b6:a4:13:57:36:2a:26:c0:18:b9:f9:
                    e2:d4:97:c5:ee:f1:bf:75:63:61:98:47:3b:df:10:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:77:D1:07:C4:DC:9E:A5:26:C9:EA:CD:52:56:88:99:20:5B:24
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:20:cf:7a:af:17:4a:f2:1f:92:ff:8d:73:85:2b:f9:cc:
         fd:14:63:a7:22:b7:5d:ae:37:1a:a3:de:48:0b:b8:7e:56:1e:
         97:6f:71:16:4a:fc:52:be:14:8b:22:bd:46:d2:a2:5b:5c:21:
         78:45:03:2c:5b:8c:74:7b:e9:93:7e:d0:2f:d3:2d:15:a1:18:
         c4:26:58:f3:14:3d:21:03:5f:e2:a7:c3:95:f8:36:2c:89:27:
         9d:a7:4c:8c:26:07:0b:b3:e1:34:a9:11:83:9e:4d:93:c1:fd:
         6f:73:6e:6c:64:3c:a3:0b:30:5c:21:a5:d9:31:1b:bf:35:f8:
         62:a8:48:c8:46:e5:da:16:1c:fa:6f:5d:11:b8:5b:a1:f6:64:
         66:0e:f2:7e:3d:25:46:09:db:92:f3:49:91:75:c7:0f:d5:5f:
         b1:ee:33:9c:f7:5b:91:60:18:92:2c:eb:ec:d7:ea:59:1f:1f:
         1e:39:c1:a7:29:e6:3b:1c:49:c8:7e:19:8f:80:71:a2:7a:21:
         c9:ba:70:bd:d3:aa:02:53:17:54:fb:97:95:6e:30:37:e9:ef:
         c7:ef:d5:95:e9:c7:61:9f:b6:5b:41:91:e3:f8:83:9a:b4:ed:
         01:e3:c0:15:81:94:67:95:26:ef:9c:fa:29:64:7e:d9:c8:72:
         8e:04:23:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DooDtUuOd7BGRH32+5E0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjQwNTE2MjMwMDE1WhcNMjQwNTE3MjMwMDE1WjAzMTEwLwYDVQQD
EygxNzJjNzdkMTA3YzRkYzllYTUyNmM5ZWFjZDUyNTY4ODk5MjA1YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3GHVX8CFSFDdsy5LDviTCC5cmXG
USEz5KhRTM2NGzxZWc9keiJaF4N72c+Gm4QnGC79IRK6d/jLF+gtYGkGo2tVCqlo
m4CaNIEcm1eNyVfdIJKP/yD84N9OChZdWvV592Prvq30oDvbTApnA0hpLKrE8WxI
krpgOBo3KZHxZ8A2O39c7xyV8E2vLZxGfO7/Ce9DmsoRRtHm970kVMQWMBtXMPqC
eTJwnC+mBYRlodfeMv7dBqXfHhxZnTbOgCWuoDzXlkfqxoHXw4BwEYxHco33Dfus
Rx4HTEpE7SQboWYbKRMztqQTVzYqJsAYufni1JfF7vG/dWNhmEc73xAZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcsd9EHxNyepSbJ6s1SVoiZIFskMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdggz3qv
F0ryH5L/jXOFK/nM/RRjpyK3Xa43GqPeSAu4flYel29xFkr8Ur4UiyK9RtKiW1wh
eEUDLFuMdHvpk37QL9MtFaEYxCZY8xQ9IQNf4qfDlfg2LIknnadMjCYHC7PhNKkR
g55Nk8H9b3NubGQ8owswXCGl2TEbvzX4YqhIyEbl2hYc+m9dEbhbofZkZg7yfj0l
RgnbkvNJkXXHD9Vfse4znPdbkWAYkizr7NfqWR8fHjnBpynmOxxJyH4Zj4Bxonoh
ybpwvdOqAlMXVPuXlW4wN+nvx+/VlenHYZ+2W0GR4/iDmrTtAePAFYGUZ5Um75z6
KWR+2chyjgQj0Q==
-----END CERTIFICATE-----
Generated at Thu May 16 23:49:43 2024 by rpki-client on console-fra.rpki-client.org