Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File:                     zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier:          A0TEdXMfBGDbq1KabR6MFXmKRLMJtYyThGv7skvjgqo=
Subject key identifier:   A5:78:AE:13:C9:A4:FF:A5:D8:67:D5:59:7C:D6:47:29:C6:E5:BA:1F
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer:       /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial:       018F8937CACDEB25545805CD961F3A4E8B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:01:25 +0000
Manifest this update:     Sat 18 May 2024 01:01:25 +0000
Manifest next update:     Sun 19 May 2024 01:01:25 +0000
Files and hashes:         1: kIloyVyJI__sMWlF1-qfi9ifaBY.roa (hash: SJO82AXsG4IHlQc9s0T6wOlLg7hE3qLvHWqPgGoSzN0=)
                          2: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: aOJwMl026e8XCl5lep1Z2b1m0peO9CwX6TrWyggAkrQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:ca:cd:eb:25:54:58:05:cd:96:1f:3a:4e:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
        Validity
            Not Before: May 18 01:01:25 2024 GMT
            Not After : May 19 01:01:25 2024 GMT
        Subject: CN=a578ae13c9a4ffa5d867d5597cd64729c6e5ba1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:ea:72:c5:45:58:f9:55:70:f0:4b:80:20:
                    74:e1:fc:07:f1:ab:3f:3a:9b:5e:6c:ba:83:9e:cb:
                    41:9d:13:b2:51:57:5a:c8:ef:aa:ba:af:7f:fa:58:
                    1a:84:dd:14:f1:12:08:c0:39:0c:ab:3f:7e:8e:8c:
                    84:4a:e0:09:84:15:5d:38:e9:f5:52:c7:71:69:5f:
                    52:34:a6:db:cf:60:81:76:b6:86:4b:92:08:56:5d:
                    64:e1:79:98:8a:4d:af:3f:65:93:a3:49:68:8e:e5:
                    34:24:02:19:dd:9d:74:7b:40:3b:fd:8e:07:6e:bd:
                    09:75:e7:23:64:b1:b9:b0:eb:a6:34:b8:84:93:cf:
                    10:0a:64:43:b3:1b:17:f4:12:ef:71:de:f1:2d:0a:
                    e7:e2:2f:bd:dd:11:20:a8:d9:fd:45:22:5f:ea:76:
                    0d:b9:84:11:bd:6a:e4:20:ec:4a:c6:ae:a0:ac:33:
                    6a:c3:58:4e:08:3a:c6:0b:00:23:2d:8b:8e:6a:5a:
                    20:33:89:9f:35:e6:0b:94:e5:22:b8:be:76:6d:77:
                    a6:32:c0:83:71:4f:25:e5:bf:3c:9a:12:9a:ff:2c:
                    2b:75:38:79:43:45:96:26:d7:fe:62:7c:2d:86:2f:
                    f5:fa:8e:7a:63:49:f6:38:a6:6a:7b:1c:4b:e6:26:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:AE:13:C9:A4:FF:A5:D8:67:D5:59:7C:D6:47:29:C6:E5:BA:1F
            X509v3 Authority Key Identifier:
                keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:e1:91:17:2a:93:78:18:30:8c:fb:b9:fa:6a:f6:e8:e7:
         aa:21:5e:c5:57:ba:51:f7:e8:d4:a8:a6:49:b4:a3:fe:c3:f6:
         c9:41:8b:57:59:a6:79:a3:a7:02:31:30:9c:7c:8a:fa:db:a3:
         75:be:f9:bf:4e:dd:da:fe:b6:ce:8b:95:a9:18:12:a5:a4:0b:
         a4:d5:25:ae:c8:f0:0b:d7:14:31:0b:7b:c7:44:d3:55:d5:85:
         08:76:7e:bf:4d:6c:8f:e1:bb:64:f8:46:72:43:70:af:94:c4:
         06:93:a8:cc:53:f0:e7:c3:20:31:d5:eb:c3:f2:d5:39:f7:10:
         da:a5:b7:fa:dd:21:6e:1e:5f:95:7e:74:5c:38:3d:cb:10:d6:
         19:86:ff:a4:af:dd:43:e5:74:f9:b4:96:01:c3:54:e3:90:a3:
         53:24:2e:e7:46:cf:81:61:2f:e2:66:f3:43:31:17:87:a6:3c:
         2a:00:30:96:08:3b:48:df:68:d5:62:4e:ca:45:16:89:b3:d9:
         97:2c:16:e0:f2:86:01:3f:3f:e8:46:b5:3d:e2:e2:f2:15:e8:
         34:9f:cc:fe:06:98:c7:3f:a3:db:bc:1e:1c:d4:16:73:52:5f:
         19:56:e6:8c:59:2b:9f:3f:39:8b:92:c2:54:d4:c7:5c:d2:aa:
         40:5c:5b:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN8rN6yVUWAXNlh86TouBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1
NzA1NDAwHhcNMjQwNTE4MDEwMTI1WhcNMjQwNTE5MDEwMTI1WjAzMTEwLwYDVQQD
EyhhNTc4YWUxM2M5YTRmZmE1ZDg2N2Q1NTk3Y2Q2NDcyOWM2ZTViYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCLqcsVFWPlVcPBLgCB04fwH8as/
OptebLqDnstBnROyUVdayO+quq9/+lgahN0U8RIIwDkMqz9+joyESuAJhBVdOOn1
UsdxaV9SNKbbz2CBdraGS5IIVl1k4XmYik2vP2WTo0lojuU0JAIZ3Z10e0A7/Y4H
br0JdecjZLG5sOumNLiEk88QCmRDsxsX9BLvcd7xLQrn4i+93REgqNn9RSJf6nYN
uYQRvWrkIOxKxq6grDNqw1hOCDrGCwAjLYuOalogM4mfNeYLlOUiuL52bXemMsCD
cU8l5b88mhKa/ywrdTh5Q0WWJtf+Ynwthi/1+o56Y0n2OKZqexxL5iaAUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV4rhPJpP+l2GfVWXzWRynG5bofMB8GA1UdIwQY
MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt
NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2
LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtjhkRcq
k3gYMIz7ufpq9ujnqiFexVe6Uffo1KimSbSj/sP2yUGLV1mmeaOnAjEwnHyK+tuj
db75v07d2v62zouVqRgSpaQLpNUlrsjwC9cUMQt7x0TTVdWFCHZ+v01sj+G7ZPhG
ckNwr5TEBpOozFPw58MgMdXrw/LVOfcQ2qW3+t0hbh5flX50XDg9yxDWGYb/pK/d
Q+V0+bSWAcNU45CjUyQu50bPgWEv4mbzQzEXh6Y8KgAwlgg7SN9o1WJOykUWibPZ
lywW4PKGAT8/6Ea1PeLi8hXoNJ/M/gaYxz+j27weHNQWc1JfGVbmjFkrnz85i5LC
VNTHXNKqQFxbvA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:01:48 2024 by rpki-client on console-ams.rpki-client.org