Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File:                     KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier:          ILIoILzphhh19fAiHQKOKuhMsxA5+TrTDPAVY1StuyA=
Subject key identifier:   22:4E:81:5A:F8:7C:B5:6C:49:7A:DD:94:96:07:68:83:2E:3D:21:48
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer:       /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial:       018F59CBE8F82C331EFAD09606A5CD3667CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number:          1163
Signing time:             Wed 08 May 2024 20:01:26 +0000
Manifest this update:     Wed 08 May 2024 20:01:26 +0000
Manifest next update:     Thu 09 May 2024 20:01:26 +0000
Files and hashes:         1: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: G2CqJCMjqdC/huLMoh01+1/lnDCBom33AFPoF5inwEA=)
                          2: NZSCJFpiosH3csusIkPf1di-mzE.roa (hash: iVkv/iavOx0LLFmyv4HdrjuVXGbWutPywFDsiMaUc18=)
                          3: Yb1Mm1dbtsE6KMd8ho2BKzF_ZkI.roa (hash: 0KnEPX2NVuzbaL8UDarokZDEqR5ZqbadkCml1cpmLUM=)
                          4: dWXks-iVKQhZGtBRvhsz0JSVGd0.roa (hash: QQKloMOLky2UspNBUl1TMFLpudrPajaV7ImRSs6cw18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:cb:e8:f8:2c:33:1e:fa:d0:96:06:a5:cd:36:67:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: May  8 20:01:26 2024 GMT
            Not After : May  9 20:01:26 2024 GMT
        Subject: CN=224e815af87cb56c497add94960768832e3d2148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:3a:82:af:78:87:68:70:a2:6e:04:b3:f6:
                    0c:78:61:58:05:42:50:9e:20:cc:b2:b2:68:91:41:
                    f4:a1:d0:5d:ed:27:25:e8:e5:e0:3e:68:11:d0:f7:
                    89:82:6e:f3:bf:e0:f6:1c:7a:f4:80:c0:50:98:aa:
                    08:35:a9:f1:de:da:c8:4d:d3:29:f5:29:6a:de:33:
                    ce:f3:68:e4:85:14:1d:bd:d2:73:93:cd:bc:83:1b:
                    0e:39:ad:d4:71:fc:94:52:ca:37:16:de:01:f0:10:
                    f9:1c:69:c5:c9:d0:4b:e1:30:e3:21:e7:c0:89:2d:
                    dc:5c:8b:61:83:82:ef:f4:bc:c0:2f:f2:64:e0:22:
                    10:bc:9e:0b:fc:ef:cc:cd:f8:42:61:ff:d8:a9:37:
                    e6:4f:31:b6:4d:4e:5f:de:d7:66:4f:df:39:50:1b:
                    e5:da:9e:d1:f2:77:b0:67:72:4f:d3:64:68:85:e8:
                    5f:82:ab:96:fd:49:69:24:5d:9b:f3:ef:1c:0b:c9:
                    5a:87:53:57:20:ef:fb:e6:c5:35:a0:2f:7c:4f:0b:
                    1f:c6:07:0a:61:1f:67:fb:18:e4:d8:4b:0a:f9:4b:
                    22:3b:0c:9f:db:da:0a:83:eb:37:ef:34:37:bb:9d:
                    cd:45:bc:5c:06:6b:f0:fd:2c:c0:9e:b5:ee:08:50:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:81:5A:F8:7C:B5:6C:49:7A:DD:94:96:07:68:83:2E:3D:21:48
            X509v3 Authority Key Identifier:
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:98:e2:bf:75:d8:c8:d7:e3:c1:20:e7:8b:92:73:94:92:
         26:0e:92:d5:7b:98:30:a5:a3:02:24:b3:50:72:f4:bd:c6:15:
         f2:1e:59:8a:7b:4e:5d:55:df:b6:01:6c:92:2d:09:da:a6:bb:
         43:b9:1d:6b:a2:cf:74:5a:80:e4:9d:dd:61:e4:b0:47:07:c8:
         d6:16:d5:96:c0:f2:9a:ab:25:33:b8:97:2c:b3:16:17:22:8c:
         9e:d7:ba:47:89:5b:4f:71:71:88:10:bc:cb:6a:05:02:05:2a:
         e6:2c:97:06:fe:36:e4:08:a4:0c:ec:69:ca:40:11:58:f1:18:
         5e:f4:16:76:24:1e:dd:78:9b:64:89:98:01:40:15:f8:5c:6f:
         a2:bf:3c:73:38:56:da:37:63:40:d9:d1:d6:d6:2f:5c:a9:52:
         ad:5b:cc:c5:1e:6b:68:aa:33:a9:af:7e:a7:d1:53:84:82:43:
         51:4e:a4:ee:29:3e:44:39:f7:5c:a0:e6:ec:20:3d:4f:7f:6c:
         02:ef:18:ab:93:88:b0:5a:c2:ab:1e:68:aa:cf:24:9a:ba:bb:
         c2:e2:32:22:86:d5:93:d9:a1:27:1a:c2:e8:5e:e3:13:76:e4:
         fb:21:47:52:d6:21:5d:ee:8f:77:6b:12:ec:41:70:73:1d:27:
         10:3f:b4:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Zy+j4LDMe+tCWBqXNNmfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMGNjNDYzMDFjOGIxZmQ0NjM5MjkzMDE4ZmJhNTM2NTNh
MjY1YjIwHhcNMjQwNTA4MjAwMTI2WhcNMjQwNTA5MjAwMTI2WjAzMTEwLwYDVQQD
EygyMjRlODE1YWY4N2NiNTZjNDk3YWRkOTQ5NjA3Njg4MzJlM2QyMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiE6gq94h2hwom4Es/YMeGFYBUJQ
niDMsrJokUH0odBd7Scl6OXgPmgR0PeJgm7zv+D2HHr0gMBQmKoINanx3trITdMp
9Slq3jPO82jkhRQdvdJzk828gxsOOa3UcfyUUso3Ft4B8BD5HGnFydBL4TDjIefA
iS3cXIthg4Lv9LzAL/Jk4CIQvJ4L/O/MzfhCYf/YqTfmTzG2TU5f3tdmT985UBvl
2p7R8newZ3JP02RohehfgquW/UlpJF2b8+8cC8lah1NXIO/75sU1oC98TwsfxgcK
YR9n+xjk2EsK+UsiOwyf29oKg+s37zQ3u53NRbxcBmvw/SzAnrXuCFBaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJOgVr4fLVsSXrdlJYHaIMuPSFIMB8GA1UdIwQY
MBaAFCoMxGMByLH9RjkpMBj7pTZTomWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzIt
MmJiNTU5N2EyNDM1LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzItMmJiNTU5N2EyNDM1
LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3eY4r91
2MjX48Eg54uSc5SSJg6S1XuYMKWjAiSzUHL0vcYV8h5ZintOXVXftgFski0J2qa7
Q7kda6LPdFqA5J3dYeSwRwfI1hbVlsDymqslM7iXLLMWFyKMnte6R4lbT3FxiBC8
y2oFAgUq5iyXBv425AikDOxpykARWPEYXvQWdiQe3XibZImYAUAV+Fxvor88czhW
2jdjQNnR1tYvXKlSrVvMxR5raKozqa9+p9FThIJDUU6k7ik+RDn3XKDm7CA9T39s
Au8Yq5OIsFrCqx5oqs8kmrq7wuIyIobVk9mhJxrC6F7jE3bk+yFHUtYhXe6Pd2sS
7EFwcx0nED+0GQ==
-----END CERTIFICATE-----
Generated at Wed May 8 22:52:10 2024 by rpki-client on console-ams.rpki-client.org