Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File:                     LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier:          FPecVPKWPLZf+KD3d89VV365oA0t+tRvas8ZHbXl4FY=
Subject key identifier:   14:D9:7C:0F:40:3B:52:CF:B5:14:2B:E4:C8:CB:68:70:20:D5:C0:97
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer:       /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial:       018F874AB578CCB95A7FA5B8782607C9D5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: Ij4M9xYVvsJFP01PdbYxhlRP1tEgifGuE6iVMlzSCyE=)
                          2: LqrwprDsg_dO9yiCDt5oNI_fyr4.roa (hash: jvQzEwbwKn/B1IDnHBF94n1GYnMq3LApiWF9kZfUi/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b5:78:cc:b9:5a:7f:a5:b8:78:26:07:c9:d5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=14d97c0f403b52cfb5142be4c8cb687020d5c097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:53:52:fa:6b:b6:6b:df:c9:d0:77:d4:2a:
                    25:0d:5d:2f:af:aa:23:bc:33:4b:c5:33:5d:09:f1:
                    78:cf:19:ee:59:df:11:55:a3:24:d0:10:d2:36:dd:
                    d1:24:73:21:ac:83:33:11:0c:d3:f8:29:c0:ec:96:
                    0e:cd:62:eb:fe:97:22:a0:6d:09:85:cd:99:75:65:
                    52:f2:7b:4a:81:cd:99:b7:8e:82:94:07:b0:e5:93:
                    9c:0a:49:23:31:a7:45:63:42:d3:1e:61:ab:b9:1d:
                    83:0f:d0:0b:ea:bc:25:6c:cf:70:62:0b:bf:7a:f7:
                    23:9c:6a:dd:a5:35:c4:3f:29:07:9a:d6:b1:5c:c4:
                    65:9d:d6:a9:c1:d7:6e:61:52:e5:22:10:6e:c0:27:
                    22:20:cc:87:2a:4c:7f:49:ae:e8:7c:bb:16:83:df:
                    52:97:c5:39:47:a9:72:ae:90:93:42:99:63:19:ad:
                    af:f6:1a:2d:d1:12:0a:dc:05:91:58:6e:a0:2c:c6:
                    76:ff:2b:f2:f9:f3:52:39:50:e6:2f:03:6d:90:66:
                    92:c1:66:89:cf:ce:a5:93:5c:2b:d9:96:ab:86:2c:
                    36:dd:78:70:9b:45:91:fc:03:5a:ee:a4:57:04:b6:
                    34:f5:b5:cd:12:c3:99:f3:a4:02:3b:e1:f8:93:a3:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:7C:0F:40:3B:52:CF:B5:14:2B:E4:C8:CB:68:70:20:D5:C0:97
            X509v3 Authority Key Identifier:
                keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:fb:9d:18:25:6f:05:bd:3d:aa:fc:2c:2c:e6:23:07:a1:
         48:cc:96:cc:17:ae:22:96:a6:6e:a8:c4:e0:f0:89:c0:ae:0c:
         df:b9:06:8a:ed:8d:8d:8c:a6:c4:39:05:00:56:d6:62:20:86:
         e9:94:13:dd:da:3b:41:54:29:03:27:f7:b7:8d:79:50:7d:52:
         53:e4:43:1c:dc:66:1f:aa:df:58:b9:42:94:6c:ef:af:dd:52:
         a4:4c:6b:b9:97:45:d8:5f:69:91:e0:69:9b:ce:ea:2c:d4:6b:
         a4:57:d6:66:7e:48:db:77:b2:a5:8d:9f:04:8a:a9:f9:34:39:
         24:88:17:c8:de:c4:cd:c7:57:27:11:29:a8:02:a4:b9:31:68:
         8a:c5:31:ad:5b:b6:9a:80:ef:40:58:bd:70:c7:97:dd:26:5f:
         81:6e:05:d5:0c:a8:41:43:c9:1b:ac:7a:60:11:df:7a:42:7e:
         f4:03:57:a1:e0:7d:37:ad:2c:1a:53:6c:75:ff:92:7d:55:75:
         e6:42:20:bf:4c:5e:ab:1f:9c:a6:01:76:d8:ce:ed:c4:bb:23:
         e3:9b:2c:26:73:0a:91:8f:25:c1:08:1c:1f:6c:71:2f:27:98:
         f8:ec:ea:28:4b:4a:b8:d2:7f:2f:20:c7:f4:c5:e4:05:b0:42:
         58:cc:34:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSrV4zLlaf6W4eCYHydXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj
NTlkNDQwHhcNMjQwNTE3MTYwMjUxWhcNMjQwNTE4MTYwMjUxWjAzMTEwLwYDVQQD
EygxNGQ5N2MwZjQwM2I1MmNmYjUxNDJiZTRjOGNiNjg3MDIwZDVjMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLBTUvprtmvfydB31ColDV0vr6oj
vDNLxTNdCfF4zxnuWd8RVaMk0BDSNt3RJHMhrIMzEQzT+CnA7JYOzWLr/pcioG0J
hc2ZdWVS8ntKgc2Zt46ClAew5ZOcCkkjMadFY0LTHmGruR2DD9AL6rwlbM9wYgu/
evcjnGrdpTXEPykHmtaxXMRlndapwdduYVLlIhBuwCciIMyHKkx/Sa7ofLsWg99S
l8U5R6lyrpCTQpljGa2v9hot0RIK3AWRWG6gLMZ2/yvy+fNSOVDmLwNtkGaSwWaJ
z86lk1wr2Zarhiw23Xhwm0WR/ANa7qRXBLY09bXNEsOZ86QCO+H4k6MptQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTZfA9AO1LPtRQr5MjLaHAg1cCXMB8GA1UdIwQY
MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt
M2ZjMzk0ODc4MDdjLzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj
LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCH7nRgl
bwW9Par8LCzmIwehSMyWzBeuIpambqjE4PCJwK4M37kGiu2NjYymxDkFAFbWYiCG
6ZQT3do7QVQpAyf3t415UH1SU+RDHNxmH6rfWLlClGzvr91SpExruZdF2F9pkeBp
m87qLNRrpFfWZn5I23eypY2fBIqp+TQ5JIgXyN7EzcdXJxEpqAKkuTFoisUxrVu2
moDvQFi9cMeX3SZfgW4F1QyoQUPJG6x6YBHfekJ+9ANXoeB9N60sGlNsdf+SfVV1
5kIgv0xeqx+cpgF22M7txLsj45ssJnMKkY8lwQgcH2xxLyeY+OzqKEtKuNJ/LyDH
9MXkBbBCWMw0GA==
-----END CERTIFICATE-----
Generated at Fri May 17 17:53:04 2024 by rpki-client on console-ams.rpki-client.org