Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File:                     29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier:          QpDsv6YDGlKQdc0lgnkcmPICYWTsypptR6cDEDPRQhQ=
Subject key identifier:   BD:8A:F3:7A:A0:17:57:5A:9B:43:9E:54:69:CD:AB:F4:CB:5A:3A:0A
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer:       /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial:       018F478F674CB4FFFFC9B37DDFC9926776CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 07:02:11 +0000
Manifest this update:     Sun 05 May 2024 07:02:11 +0000
Manifest next update:     Mon 06 May 2024 07:02:11 +0000
Files and hashes:         1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: DY6WWWoUWfPUQ78hxlc4AX34n/n59LhJTniMbDFGHX8=)
                          2: BMus53ro2Bc3N9_AOJt_LOqhD8Y.roa (hash: 2XCGLeaWuRM7UUsbx1XxfT06guddg91b/l7j2qyQKFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:67:4c:b4:ff:ff:c9:b3:7d:df:c9:92:67:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
        Validity
            Not Before: May  5 07:02:11 2024 GMT
            Not After : May  6 07:02:11 2024 GMT
        Subject: CN=bd8af37aa017575a9b439e5469cdabf4cb5a3a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:8c:5d:29:c7:b7:71:91:4f:74:ab:fa:c0:
                    82:0a:58:c1:44:7f:d7:8d:94:74:7b:33:01:e5:74:
                    31:23:97:9c:e7:06:a5:38:c4:ed:3f:2e:36:0e:96:
                    f8:39:39:5a:69:3a:4e:1a:4b:75:50:0a:20:f0:25:
                    0a:56:12:41:9d:82:ee:15:9e:81:ba:a2:52:6a:a8:
                    9b:ce:41:d0:6e:53:86:d4:dd:17:ad:d2:a5:9d:ae:
                    60:93:3b:87:62:59:e9:7a:03:82:cb:64:26:dd:c5:
                    a6:5d:99:a6:b5:c3:a5:58:f6:7e:5d:54:ec:2c:76:
                    b1:a2:a0:2b:13:e0:bd:52:2f:14:e5:f4:1a:7d:58:
                    a7:73:15:08:de:3e:fe:58:c4:bf:96:b3:38:ee:d0:
                    27:dc:dd:4a:c7:f3:f9:bf:50:47:79:50:85:80:f3:
                    af:6d:01:5e:15:1b:d3:8f:0e:bf:22:7e:17:14:44:
                    e1:08:9d:4b:07:42:e2:3d:3e:da:a1:36:24:3d:df:
                    7f:9b:12:cb:0e:05:82:ef:a4:92:55:18:62:0a:68:
                    6b:7d:d2:53:b1:fd:dc:4c:a2:59:86:ac:c7:58:50:
                    c8:6e:54:85:27:0a:09:e3:bd:f9:be:04:75:74:93:
                    bf:ef:28:b4:93:5d:32:a0:04:f1:ab:73:4b:6d:29:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8A:F3:7A:A0:17:57:5A:9B:43:9E:54:69:CD:AB:F4:CB:5A:3A:0A
            X509v3 Authority Key Identifier:
                keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:91:17:43:f1:1d:e9:8c:8c:60:7e:2b:8c:aa:14:bf:0d:
         dd:0d:52:4d:42:50:8e:10:81:44:20:b8:b1:cc:18:88:4a:3a:
         2c:cb:23:fc:60:5f:8f:c9:57:f1:1e:a3:19:34:e7:0f:a9:98:
         45:c4:e9:f4:06:5f:ba:7a:13:50:66:4c:16:c0:74:b2:35:cc:
         a1:34:40:f8:ff:3f:ba:de:ab:0f:e7:b4:da:02:4b:9e:bf:ab:
         12:4b:0d:3f:86:2c:ae:a4:65:46:8c:b5:ae:e7:c3:88:49:75:
         6e:4f:78:a3:da:cb:55:37:99:40:5d:24:3f:ad:ee:e0:51:eb:
         4f:5e:ac:47:17:d4:40:f7:db:1f:75:06:64:30:17:a3:57:01:
         70:77:40:7a:4c:59:91:60:b2:98:9b:74:b3:e0:39:5e:2a:11:
         d4:49:30:69:5d:a8:ef:9c:cf:18:f8:74:32:db:b9:e4:49:c4:
         5b:ab:5b:e8:43:68:7c:e4:83:3d:39:6c:f4:0e:a1:55:5d:85:
         d8:87:1f:06:5a:f2:46:b4:d5:83:d5:76:00:45:57:b8:e9:42:
         37:3a:19:f8:ab:2e:0a:bb:8a:db:ba:59:17:c3:55:a9:44:e0:
         90:43:b8:1e:52:0d:65:5d:f6:e3:17:74:80:19:32:df:c1:dc:
         58:0b:40:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Hj2dMtP//ybN938mSZ3bKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk
ZjQ0ZTQwHhcNMjQwNTA1MDcwMjExWhcNMjQwNTA2MDcwMjExWjAzMTEwLwYDVQQD
EyhiZDhhZjM3YWEwMTc1NzVhOWI0MzllNTQ2OWNkYWJmNGNiNWEzYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7qMXSnHt3GRT3Sr+sCCCljBRH/X
jZR0ezMB5XQxI5ec5walOMTtPy42Dpb4OTlaaTpOGkt1UAog8CUKVhJBnYLuFZ6B
uqJSaqibzkHQblOG1N0XrdKlna5gkzuHYlnpegOCy2Qm3cWmXZmmtcOlWPZ+XVTs
LHaxoqArE+C9Ui8U5fQafVincxUI3j7+WMS/lrM47tAn3N1Kx/P5v1BHeVCFgPOv
bQFeFRvTjw6/In4XFEThCJ1LB0LiPT7aoTYkPd9/mxLLDgWC76SSVRhiCmhrfdJT
sf3cTKJZhqzHWFDIblSFJwoJ4735vgR1dJO/7yi0k10yoATxq3NLbSnWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2K83qgF1dam0OeVGnNq/TLWjoKMB8GA1UdIwQY
MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt
N2QwYWM1MjgxNWE2LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2
LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0yRF0Px
HemMjGB+K4yqFL8N3Q1STUJQjhCBRCC4scwYiEo6LMsj/GBfj8lX8R6jGTTnD6mY
RcTp9AZfunoTUGZMFsB0sjXMoTRA+P8/ut6rD+e02gJLnr+rEksNP4YsrqRlRoy1
rufDiEl1bk94o9rLVTeZQF0kP63u4FHrT16sRxfUQPfbH3UGZDAXo1cBcHdAekxZ
kWCymJt0s+A5XioR1EkwaV2o75zPGPh0Mtu55EnEW6tb6ENofOSDPTls9A6hVV2F
2IcfBlryRrTVg9V2AEVXuOlCNzoZ+KsuCruK27pZF8NVqUTgkEO4HlINZV324xd0
gBky38HcWAtAfw==
-----END CERTIFICATE-----
Generated at Sun May 5 09:51:56 2024 by rpki-client on console-fra.rpki-client.org