Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          Ol4xkLB+JrwUG1pY0KRc6VySMPOiO7R0j/7z18hQfq8=
Subject key identifier:   9E:B4:3C:59:F5:EE:80:62:C7:98:BF:21:D4:B5:7A:98:27:EB:9E:EE
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       018F87B6A4B1368822EB58D8AB20E0634C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:44 +0000
Manifest this update:     Fri 17 May 2024 18:00:44 +0000
Manifest next update:     Sat 18 May 2024 18:00:44 +0000
Files and hashes:         1: 1-2wi3eAdAgV2HdbOuqsXnFmpc7Q.roa (hash: vYDBw5OZVflt4DFmKQKl6NMfi67TRtxvgvVvi+dTA1Q=)
                          2: 9bzfDXSE2VCQU1Qu_AkNADSKS6k.roa (hash: +DC0ju+z6/p8bUJNpAd+K6MZu7wvibTiHnumppRrf9w=)
                          3: JNkH4PfespyzF77Q2WBKCCUajV0.roa (hash: sJFEluEdThuvfhPLb/qQHWxrYTrnyeXGsEGg7cNFFqo=)
                          4: L0JyOOvymbxgbWlaEf2fWxHIRMk.roa (hash: 11n2v63K7pR3fURYaC8lqlou9ayPhZL1RVP4NQEugVE=)
                          5: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: 8aD7dU8s+G+YlfhRggwU8bmHkW3XHJM06kGa8pbfTVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a4:b1:36:88:22:eb:58:d8:ab:20:e0:63:4c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: May 17 18:00:44 2024 GMT
            Not After : May 18 18:00:44 2024 GMT
        Subject: CN=9eb43c59f5ee8062c798bf21d4b57a9827eb9eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:44:f6:08:fc:ca:65:41:80:cc:85:1a:8d:
                    c0:cc:fb:22:9a:15:71:d7:a1:ee:3a:ce:91:a6:10:
                    6a:a8:96:68:b2:79:c7:5a:84:58:15:7e:8a:95:d0:
                    36:7b:9d:8d:5d:3a:7d:83:db:23:93:e6:b4:9c:0e:
                    76:a4:d6:f7:d0:90:10:a0:0c:f6:74:6a:ff:f7:44:
                    d0:fd:66:ab:28:80:95:ed:19:76:5c:e6:28:4c:61:
                    9b:c8:88:fa:d6:9b:70:ce:57:c0:b1:d7:09:1d:06:
                    63:17:e5:5b:ef:b7:1b:08:1f:97:74:2c:34:cb:c1:
                    8a:9e:34:fc:9c:98:ab:85:66:9a:f0:d1:5c:70:bc:
                    bb:79:77:cb:15:a0:67:e1:dc:7e:c6:8f:3e:59:75:
                    95:a2:54:d7:a9:f3:e9:4f:a5:a9:42:db:41:15:6c:
                    55:3e:d5:e6:5f:a4:13:65:0a:88:04:a2:fd:5c:db:
                    17:bf:bf:59:49:1e:61:b5:79:af:36:97:15:13:ca:
                    3a:bf:bc:a8:3e:b8:52:ee:e0:e9:26:b1:59:26:a9:
                    0a:d9:16:55:c7:60:9b:94:c2:4a:63:e9:a8:da:0b:
                    6b:37:bd:65:6b:e9:bc:a5:cf:8a:88:61:8e:01:1a:
                    36:8b:f3:a7:87:10:4e:1b:8e:f8:ea:08:12:c0:b8:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:3C:59:F5:EE:80:62:C7:98:BF:21:D4:B5:7A:98:27:EB:9E:EE
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:95:5b:f5:64:9c:a3:c7:a3:82:90:5e:35:18:5a:7e:05:
         14:0f:1c:32:a7:a8:de:3b:6e:c6:4f:97:17:3c:d8:97:0b:61:
         e2:3c:cd:4f:66:38:17:c3:a3:ca:50:0b:45:62:5f:d7:25:48:
         69:0e:b9:f7:ff:14:ea:91:71:08:85:80:bc:e5:57:eb:bb:ac:
         6c:8f:43:9a:9c:57:89:07:c5:3a:e6:5b:61:37:a3:58:8a:2f:
         2d:e2:72:81:af:4c:7b:a3:40:c4:ab:8a:01:11:fa:21:0a:3d:
         05:40:93:6f:8f:15:64:35:1f:2e:15:89:86:ec:0f:d6:28:59:
         91:b5:35:62:27:36:07:7c:e3:7d:30:87:9b:55:85:19:ac:4a:
         24:02:d8:70:00:0e:b1:6f:86:50:b4:7c:fb:f6:34:fb:42:d8:
         0d:ef:88:ec:b0:9d:2e:58:6b:80:ba:a3:d1:27:52:a2:af:37:
         67:68:8b:f3:d1:da:1f:0e:02:a2:aa:b5:0f:cb:d8:c2:aa:42:
         c0:21:2c:47:96:11:3d:62:7d:9f:f4:75:85:87:fb:bc:21:06:
         ab:03:19:b7:a2:bc:28:b0:f2:c1:35:58:b0:72:2d:cd:e1:fd:
         a8:30:38:25:b7:79:4d:9a:63:9e:8a:4f:ce:54:de:9d:f8:65:
         59:00:da:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtqSxNogi61jYqyDgY0yBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZjQ3Yzk4NDQwZjEwMzgyNWM4ZWE1MDc0Mjk4YjE4Y2Mx
MTNlMjAwHhcNMjQwNTE3MTgwMDQ0WhcNMjQwNTE4MTgwMDQ0WjAzMTEwLwYDVQQD
Eyg5ZWI0M2M1OWY1ZWU4MDYyYzc5OGJmMjFkNGI1N2E5ODI3ZWI5ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohNE9gj8ymVBgMyFGo3AzPsimhVx
16HuOs6RphBqqJZosnnHWoRYFX6KldA2e52NXTp9g9sjk+a0nA52pNb30JAQoAz2
dGr/90TQ/WarKICV7Rl2XOYoTGGbyIj61ptwzlfAsdcJHQZjF+Vb77cbCB+XdCw0
y8GKnjT8nJirhWaa8NFccLy7eXfLFaBn4dx+xo8+WXWVolTXqfPpT6WpQttBFWxV
PtXmX6QTZQqIBKL9XNsXv79ZSR5htXmvNpcVE8o6v7yoPrhS7uDpJrFZJqkK2RZV
x2CblMJKY+mo2gtrN71la+m8pc+KiGGOARo2i/OnhxBOG4746ggSwLj8lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ60PFn17oBix5i/IdS1epgn657uMB8GA1UdIwQY
MBaAFGT0fJhEDxA4JcjqUHQpixjMET4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYt
Mzg0NDc4NTVkNjY5LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYtMzg0NDc4NTVkNjY5
LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJguVW/Vk
nKPHo4KQXjUYWn4FFA8cMqeo3jtuxk+XFzzYlwth4jzNT2Y4F8OjylALRWJf1yVI
aQ659/8U6pFxCIWAvOVX67usbI9DmpxXiQfFOuZbYTejWIovLeJyga9Me6NAxKuK
ARH6IQo9BUCTb48VZDUfLhWJhuwP1ihZkbU1Yic2B3zjfTCHm1WFGaxKJALYcAAO
sW+GULR8+/Y0+0LYDe+I7LCdLlhrgLqj0SdSoq83Z2iL89HaHw4Coqq1D8vYwqpC
wCEsR5YRPWJ9n/R1hYf7vCEGqwMZt6K8KLDywTVYsHItzeH9qDA4Jbd5TZpjnopP
zlTenfhlWQDa0w==
-----END CERTIFICATE-----
Generated at Fri May 17 23:43:44 2024 by rpki-client on console-ams.rpki-client.org