Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File:                     tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier:          EGW6sSYKvdNVhpzpvsdPB3BAD1U7ISbzSh8igE0eYzQ=
Subject key identifier:   BF:B4:CA:CE:F9:10:7F:FC:BF:70:21:F0:3E:69:B7:19:0B:14:57:3A
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer:       /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial:       018F8936E87EA1F914D26501193870760015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:00:27 +0000
Manifest this update:     Sat 18 May 2024 01:00:27 +0000
Manifest next update:     Sun 19 May 2024 01:00:27 +0000
Files and hashes:         1: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: WSEUQZDUYUtgNYzMioC7Jbnz2C0UphxqDdAusB4xR4c=)
                          2: uXKX8Ee-p1dJMU2bMTjTBR9OKtA.roa (hash: CB3+mQfjGV2/HLdCIKe6KPHvFa9X57G9JHqSmjZOMos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:e8:7e:a1:f9:14:d2:65:01:19:38:70:76:00:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : May 19 01:00:27 2024 GMT
        Subject: CN=bfb4cacef9107ffcbf7021f03e69b7190b14573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:8b:4f:92:8a:1b:8b:ce:a9:35:83:e3:7e:
                    4e:79:77:05:f8:55:e2:ae:2c:c0:1c:8d:eb:ff:97:
                    58:a2:4e:3d:a7:23:95:3a:76:5c:66:0f:97:99:87:
                    4a:5d:ee:5f:02:2a:0a:be:c6:d2:6b:2f:95:8e:51:
                    c5:99:c6:4a:ca:b1:87:77:0f:8e:52:ca:8d:ee:84:
                    a6:0c:a5:5b:c7:6c:9a:3d:41:44:83:7c:cc:03:9a:
                    ba:e2:02:58:6a:0f:f8:39:90:da:f5:45:23:db:5a:
                    0a:c8:6d:f5:53:52:fa:3b:c4:ac:16:58:8f:4c:eb:
                    c6:63:93:66:f9:4d:05:61:82:3d:9e:cc:b6:71:36:
                    e6:1b:44:ac:b8:a2:19:d1:0a:79:01:58:e9:e7:22:
                    91:3d:4b:12:de:db:ec:2d:de:87:ab:77:db:ef:a4:
                    70:17:36:9f:f5:91:3a:ff:ab:de:92:e9:c6:71:27:
                    ae:ae:5f:4a:c4:1f:65:e0:9d:3c:53:af:f6:38:28:
                    73:5e:5e:99:19:63:33:96:99:ef:a5:86:56:e8:9c:
                    b8:15:00:52:1c:3a:b2:8a:27:c0:7a:24:ee:7d:4c:
                    8b:6a:4d:8a:5d:c0:a5:2c:d1:f0:9b:77:92:79:9c:
                    6a:26:b5:8f:8b:80:79:e5:89:d7:13:f3:e2:fe:31:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:CA:CE:F9:10:7F:FC:BF:70:21:F0:3E:69:B7:19:0B:14:57:3A
            X509v3 Authority Key Identifier:
                keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:68:af:b4:15:3c:81:de:b8:72:84:b4:95:22:11:89:18:dc:
         0c:f1:b0:df:b6:7c:bf:0a:96:92:ac:6b:38:19:44:bc:48:16:
         bc:f4:71:02:89:8b:79:a0:8f:de:57:66:59:7c:df:c1:76:52:
         03:91:0e:12:24:89:96:12:e5:29:43:e5:a0:0f:72:d2:32:92:
         b1:70:5f:74:e6:ff:b6:50:2e:71:82:c4:f1:f1:5d:04:23:db:
         18:5d:15:8b:c4:ce:a1:f2:34:07:a9:2d:12:b6:6b:b8:88:69:
         57:9a:0d:e5:a8:e7:9c:37:1a:f4:f0:78:5e:42:14:10:50:14:
         b3:c4:e2:87:0e:12:c6:69:ee:48:09:79:d9:24:71:a4:7a:cd:
         c5:9e:f2:b4:56:58:d8:53:5e:67:e5:79:fe:1f:25:4c:b8:a7:
         29:e8:ae:31:de:2b:7d:49:86:49:17:23:51:f7:70:4c:d9:43:
         4c:b1:06:f0:1f:6c:26:cd:00:d3:a9:a5:05:5b:60:ec:62:81:
         05:25:cb:bb:be:95:02:db:b4:6b:bf:40:62:d1:f8:77:b1:f4:
         33:ee:fc:5d:2d:1e:c9:0b:a4:b2:91:2c:d7:be:f8:6e:6e:b4:
         be:83:77:56:fa:a7:7d:6e:ce:91:a8:ba:ec:66:3a:36:0f:f6:
         f1:de:16:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNuh+ofkU0mUBGThwdgAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzA0MzljNzk1NTUxMTAyZDZmMWU0Y2ViNmQxYzUyZmJj
NWVhM2YwHhcNMjQwNTE4MDEwMDI3WhcNMjQwNTE5MDEwMDI3WjAzMTEwLwYDVQQD
EyhiZmI0Y2FjZWY5MTA3ZmZjYmY3MDIxZjAzZTY5YjcxOTBiMTQ1NzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lqLT5KKG4vOqTWD435OeXcF+FXi
rizAHI3r/5dYok49pyOVOnZcZg+XmYdKXe5fAioKvsbSay+VjlHFmcZKyrGHdw+O
UsqN7oSmDKVbx2yaPUFEg3zMA5q64gJYag/4OZDa9UUj21oKyG31U1L6O8SsFliP
TOvGY5Nm+U0FYYI9nsy2cTbmG0SsuKIZ0Qp5AVjp5yKRPUsS3tvsLd6Hq3fb76Rw
Fzaf9ZE6/6vekunGcSeurl9KxB9l4J08U6/2OChzXl6ZGWMzlpnvpYZW6Jy4FQBS
HDqyiifAeiTufUyLak2KXcClLNHwm3eSeZxqJrWPi4B55YnXE/Pi/jFqSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+0ys75EH/8v3Ah8D5ptxkLFFc6MB8GA1UdIwQY
MBaAFLTAQ5x5VVEQLW8eTOttHFL7xeo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjct
ZThlZGU1YTJmODc1LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjctZThlZGU1YTJmODc1
LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmivtBU8
gd64coS0lSIRiRjcDPGw37Z8vwqWkqxrOBlEvEgWvPRxAomLeaCP3ldmWXzfwXZS
A5EOEiSJlhLlKUPloA9y0jKSsXBfdOb/tlAucYLE8fFdBCPbGF0Vi8TOofI0B6kt
ErZruIhpV5oN5ajnnDca9PB4XkIUEFAUs8Tihw4SxmnuSAl52SRxpHrNxZ7ytFZY
2FNeZ+V5/h8lTLinKeiuMd4rfUmGSRcjUfdwTNlDTLEG8B9sJs0A06mlBVtg7GKB
BSXLu76VAtu0a79AYtH4d7H0M+78XS0eyQukspEs1774bm60voN3VvqnfW7Okai6
7GY6Ng/28d4Wew==
-----END CERTIFICATE-----
Generated at Sat May 18 02:05:26 2024 by rpki-client on console-ams.rpki-client.org