Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File:                     ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier:          hUos3yF4yT7lPFMbF5hTvc1SIwwANEYmIkjZz2coOSc=
Subject key identifier:   29:7C:70:22:41:20:4F:59:CA:C7:99:8F:D3:6F:A7:97:C1:3D:CB:D7
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer:       /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial:       018F7C8E63C09D572677B0C6A7111045E3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number:          1179
Signing time:             Wed 15 May 2024 14:00:57 +0000
Manifest this update:     Wed 15 May 2024 14:00:57 +0000
Manifest next update:     Thu 16 May 2024 14:00:57 +0000
Files and hashes:         1: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: KZCf10ddYKiUJugxarho4kJSEpfmqFSeVPsp7zgOAhI=)
                          2: eUdy7KWpufFzxsXNRQs3ciPIDnQ.roa (hash: mjXry/l0S1KWpNK5SlXku9zYS1c0IEG1+CP+Sh5Y0Y0=)
                          3: wbLK2otOAOyzqZHvZaDlxU_limI.roa (hash: jZG2FIe8Cqc3kMm6MvmUaKFRAVrURERRn8nYL8Ih564=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:8e:63:c0:9d:57:26:77:b0:c6:a7:11:10:45:e3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
        Validity
            Not Before: May 15 14:00:57 2024 GMT
            Not After : May 16 14:00:57 2024 GMT
        Subject: CN=297c702241204f59cac7998fd36fa797c13dcbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:21:c4:ae:0b:8e:e7:9c:15:a9:cd:47:06:
                    0c:39:a0:85:b0:2a:9a:93:06:c7:47:24:9b:0a:dc:
                    19:fe:99:8e:b1:e0:7c:b7:41:27:04:da:e6:99:97:
                    c7:b5:79:63:23:c4:e3:30:f8:6a:8a:09:dc:dc:87:
                    fe:50:ae:0b:b4:f4:00:26:ba:76:2d:b9:67:2e:20:
                    fa:0b:5c:2b:76:ca:7b:a7:8e:36:3e:61:ea:66:89:
                    74:d9:47:a6:78:2f:19:15:88:f8:5f:08:13:e4:07:
                    27:38:97:0e:7b:9b:86:a6:30:93:b5:0e:27:e6:f3:
                    70:4e:4e:e1:de:6e:f8:ce:8c:a3:ea:dc:f5:a7:77:
                    91:95:99:1e:d8:e9:d9:83:c3:44:b2:cf:fc:ca:02:
                    6d:71:e7:7a:73:42:89:95:8c:e4:5b:20:d0:4b:aa:
                    a3:96:e4:b4:a4:94:a7:26:0f:c5:01:0f:01:9a:fd:
                    0d:46:c7:eb:40:3e:1e:98:cf:47:75:23:1f:c1:4a:
                    39:5e:b7:6b:ed:94:6f:96:d3:85:3d:b4:e2:7c:81:
                    08:e2:53:3c:20:d7:af:8b:91:f5:cd:bd:9d:64:ad:
                    fa:be:77:93:71:cd:c2:5a:30:22:4c:7d:10:33:44:
                    c9:f4:b8:29:7d:d5:7d:61:e1:ba:13:9b:3b:51:7b:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:70:22:41:20:4F:59:CA:C7:99:8F:D3:6F:A7:97:C1:3D:CB:D7
            X509v3 Authority Key Identifier:
                keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a8:9a:7e:65:da:dd:6b:cc:2d:39:b9:ef:62:0b:75:5a:fa:
         d7:45:30:c2:25:2b:7d:7d:5a:9c:f0:e9:c9:f4:23:27:d1:c6:
         ab:ba:a3:7b:23:35:8b:e6:e0:8b:71:f6:70:ba:bd:fa:7e:9a:
         22:b2:39:80:cb:35:fa:76:39:1d:2b:06:af:c1:d7:44:5c:41:
         45:bb:49:9c:82:3c:44:4e:06:43:51:57:76:60:7c:22:80:db:
         6e:19:8d:2b:d0:ed:9d:7e:d6:35:52:14:c2:d3:9f:5e:58:9c:
         52:fe:72:f2:b6:f2:56:60:3b:4e:75:72:5e:f3:c5:11:3a:d3:
         48:be:d0:06:da:e3:27:50:fe:96:ec:d9:5c:30:ca:3f:70:b0:
         80:18:da:84:09:67:7d:b8:95:7d:fa:75:b6:cc:ed:9c:8d:0a:
         24:c5:fa:ab:4a:d5:0b:af:ed:ea:bf:f5:d4:82:29:fb:c9:88:
         cd:ac:56:4b:c0:4d:9d:7b:7b:44:17:6f:e7:58:88:cd:e7:b7:
         22:de:e6:98:de:0c:90:78:92:5a:04:69:fb:c4:78:ec:3e:49:
         92:2d:8b:7e:38:33:90:96:a3:35:af:13:fb:49:b3:c3:3d:e7:
         3d:cc:ba:03:98:0d:6b:7b:7c:3c:30:17:a1:ef:09:39:73:19:
         73:c0:91:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY98jmPAnVcmd7DGpxEQRePJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjQwNTE1MTQwMDU3WhcNMjQwNTE2MTQwMDU3WjAzMTEwLwYDVQQD
EygyOTdjNzAyMjQxMjA0ZjU5Y2FjNzk5OGZkMzZmYTc5N2MxM2RjYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSIhxK4LjuecFanNRwYMOaCFsCqa
kwbHRySbCtwZ/pmOseB8t0EnBNrmmZfHtXljI8TjMPhqignc3If+UK4LtPQAJrp2
LblnLiD6C1wrdsp7p442PmHqZol02UemeC8ZFYj4XwgT5AcnOJcOe5uGpjCTtQ4n
5vNwTk7h3m74zoyj6tz1p3eRlZke2OnZg8NEss/8ygJtced6c0KJlYzkWyDQS6qj
luS0pJSnJg/FAQ8Bmv0NRsfrQD4emM9HdSMfwUo5Xrdr7ZRvltOFPbTifIEI4lM8
INevi5H1zb2dZK36vneTcc3CWjAiTH0QM0TJ9LgpfdV9YeG6E5s7UXsl9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl8cCJBIE9ZyseZj9Nvp5fBPcvXMB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKiafmXa
3WvMLTm572ILdVr610UwwiUrfX1anPDpyfQjJ9HGq7qjeyM1i+bgi3H2cLq9+n6a
IrI5gMs1+nY5HSsGr8HXRFxBRbtJnII8RE4GQ1FXdmB8IoDbbhmNK9DtnX7WNVIU
wtOfXlicUv5y8rbyVmA7TnVyXvPFETrTSL7QBtrjJ1D+luzZXDDKP3CwgBjahAln
fbiVffp1tsztnI0KJMX6q0rVC6/t6r/11IIp+8mIzaxWS8BNnXt7RBdv51iIzee3
It7mmN4MkHiSWgRp+8R47D5Jki2LfjgzkJajNa8T+0mzwz3nPcy6A5gNa3t8PDAX
oe8JOXMZc8CREQ==
-----END CERTIFICATE-----
Generated at Wed May 15 17:59:29 2024 by rpki-client on console-fra.rpki-client.org