Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File:                     lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier:          u6kjm5HqP1eOxYriVIGMTHqCJEArplzrADIVoWC2Sjk=
Subject key identifier:   18:01:EC:14:85:B0:0E:3D:7B:15:B0:6B:45:B6:47:2A:1B:6F:E0:FE
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer:       /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial:       018F86A36C805FB7686C43C1A321696B728C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number:          1018
Signing time:             Fri 17 May 2024 13:00:07 +0000
Manifest this update:     Fri 17 May 2024 13:00:07 +0000
Manifest next update:     Sat 18 May 2024 13:00:07 +0000
Files and hashes:         1: 2QFh7xwl033VRXjnczMI3BRPhn0.roa (hash: uV/w8lqm1nwYC8lPQ0/DmdlMJwCH5drC7YZ1ElOwjQ4=)
                          2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: L7qNMaGxQ7zkrB2z+qwzclvjvSa0GAca6BFkVShcYZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:6c:80:5f:b7:68:6c:43:c1:a3:21:69:6b:72:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
        Validity
            Not Before: May 17 13:00:07 2024 GMT
            Not After : May 18 13:00:07 2024 GMT
        Subject: CN=1801ec1485b00e3d7b15b06b45b6472a1b6fe0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:1c:b9:b5:9d:42:ac:7f:c6:10:97:52:04:
                    06:e5:79:27:f7:0c:a8:e8:14:52:12:ba:ce:04:26:
                    d2:11:b9:6c:93:c3:3b:28:5b:75:16:04:89:15:1e:
                    18:e3:c8:36:eb:4f:5b:ac:0b:f0:82:a4:28:7a:1a:
                    93:59:1f:f6:bf:6c:41:69:7e:64:bb:7b:ec:09:f5:
                    6f:d7:ac:a3:42:f8:7a:1d:e9:ee:39:3f:31:2c:6c:
                    fc:f4:97:30:45:58:a2:f5:a3:4f:0b:e6:b0:24:57:
                    ce:12:38:2b:c7:2f:3e:70:03:11:3a:4d:05:8c:ae:
                    9a:48:2b:cf:77:1f:f1:2b:9a:9a:20:24:a0:17:55:
                    ef:c6:af:7c:4a:47:ea:a6:de:86:ac:20:f9:e0:0e:
                    50:e3:46:92:44:31:dc:52:48:25:c5:dc:14:dc:aa:
                    e1:db:c0:f2:bb:78:82:c7:da:0b:3d:10:5f:90:a2:
                    9e:fe:7a:f1:7f:69:59:bf:5c:0e:e0:f7:a1:25:41:
                    c6:94:59:0a:1f:81:ff:c8:6a:d1:ad:e0:33:bb:10:
                    a2:d1:78:a4:15:29:a1:17:0b:20:c1:92:84:50:f2:
                    70:09:c3:1b:6f:71:03:e6:aa:2b:3f:6d:52:f5:ff:
                    a9:7b:c1:77:e5:cb:1e:24:78:fa:bc:14:77:7e:b6:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:01:EC:14:85:B0:0E:3D:7B:15:B0:6B:45:B6:47:2A:1B:6F:E0:FE
            X509v3 Authority Key Identifier:
                keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4f:6c:b7:1f:51:f9:8a:c0:e0:99:e7:da:f0:eb:34:5c:c5:
         76:03:c6:f6:41:be:3c:83:9b:b9:33:2c:fc:b0:c0:80:34:90:
         6a:b5:60:4e:3f:3d:fc:8a:0f:13:5c:36:46:66:8f:f8:07:fd:
         b9:a5:22:ea:5f:4b:8e:31:0c:6f:ce:67:23:83:6b:b3:c9:28:
         ca:7f:f5:b0:fd:89:3b:1f:b5:0f:19:d5:24:ea:cb:78:d5:81:
         52:56:02:ff:31:95:de:4f:88:fe:bd:01:69:8d:ce:1f:79:67:
         26:65:6c:33:05:5b:6f:a2:11:54:7c:2a:75:39:10:67:ab:f3:
         2e:5d:cc:2c:bd:96:d6:6c:b3:01:f3:cf:e0:63:03:6f:22:2a:
         26:12:df:8f:97:0d:06:e4:e6:cf:b0:44:74:85:17:07:25:01:
         ff:e5:8a:04:68:6f:3e:5d:44:dc:ac:37:61:90:bb:08:86:65:
         55:64:93:85:fd:1f:1c:f4:a0:a0:88:14:fd:7c:58:07:c6:17:
         c1:7e:7a:a8:24:d0:3c:82:7a:88:39:b9:c0:eb:8a:31:ff:2f:
         e0:84:0b:6f:85:7c:d9:48:40:5b:16:9f:94:15:34:b7:78:21:
         65:cb:87:5f:01:5f:4f:8b:12:c1:c2:d8:29:ba:b6:bf:02:6b:
         ed:d0:67:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go2yAX7dobEPBoyFpa3KMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjQwNTE3MTMwMDA3WhcNMjQwNTE4MTMwMDA3WjAzMTEwLwYDVQQD
EygxODAxZWMxNDg1YjAwZTNkN2IxNWIwNmI0NWI2NDcyYTFiNmZlMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPIcubWdQqx/xhCXUgQG5Xkn9wyo
6BRSErrOBCbSEblsk8M7KFt1FgSJFR4Y48g2609brAvwgqQoehqTWR/2v2xBaX5k
u3vsCfVv16yjQvh6HenuOT8xLGz89JcwRVii9aNPC+awJFfOEjgrxy8+cAMROk0F
jK6aSCvPdx/xK5qaICSgF1Xvxq98Skfqpt6GrCD54A5Q40aSRDHcUkglxdwU3Krh
28Dyu3iCx9oLPRBfkKKe/nrxf2lZv1wO4PehJUHGlFkKH4H/yGrRreAzuxCi0Xik
FSmhFwsgwZKEUPJwCcMbb3ED5qorP21S9f+pe8F35cseJHj6vBR3frYHGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgB7BSFsA49exWwa0W2Ryobb+D+MB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU9stx9R
+YrA4Jnn2vDrNFzFdgPG9kG+PIObuTMs/LDAgDSQarVgTj89/IoPE1w2RmaP+Af9
uaUi6l9LjjEMb85nI4Nrs8koyn/1sP2JOx+1DxnVJOrLeNWBUlYC/zGV3k+I/r0B
aY3OH3lnJmVsMwVbb6IRVHwqdTkQZ6vzLl3MLL2W1myzAfPP4GMDbyIqJhLfj5cN
BuTmz7BEdIUXByUB/+WKBGhvPl1E3Kw3YZC7CIZlVWSThf0fHPSgoIgU/XxYB8YX
wX56qCTQPIJ6iDm5wOuKMf8v4IQLb4V82UhAWxaflBU0t3ghZcuHXwFfT4sSwcLY
Kbq2vwJr7dBnrg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:17:31 2024 by rpki-client on console-fra.rpki-client.org