Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File:                     _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier:          XQcQs1LSIMcW/99DmMN0a1YPS3suhLlYEh2Gl7TCce4=
Subject key identifier:   9E:3A:6A:03:B5:8C:F1:92:80:83:ED:BE:22:23:F8:D7:B8:F2:EA:B4
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer:       /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial:       018F87B6A14DC4C8C6F9869D04B4DDD6B16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number:          0153
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: i8HIQrggRxO/YC7Bjs5/BMAWJidRwsvJo7BMZNwp924=)
                          2: dGBoyQtHg5U6B0fmteqFr3Gbupc.roa (hash: 07QU+G6o36qvdMYihMRHQXcW8FKT0wIU9hm+NQQyxto=)
                          3: zdotN8UaFsg0JdPp66-1xPhYolc.roa (hash: O6nxqqFLsCBKIyewwOFECDVIP8KAi5i3Tm6ybU6L61w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a1:4d:c4:c8:c6:f9:86:9d:04:b4:dd:d6:b1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=9e3a6a03b58cf1928083edbe2223f8d7b8f2eab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:bd:da:3a:4b:cc:f4:1c:03:fc:be:ae:21:
                    f3:dd:a6:c8:27:f4:ac:d4:88:7e:fb:cc:ab:01:05:
                    32:92:5b:59:12:a2:60:13:e8:69:a9:1a:3d:07:67:
                    e5:f1:67:de:4e:b5:f4:58:9a:a2:ff:15:1a:87:bd:
                    01:01:78:21:50:65:68:c3:c9:61:b3:3f:21:58:3f:
                    68:87:c3:c7:bc:e7:e9:f3:f8:16:f3:69:ac:f4:49:
                    9e:ba:3d:92:9a:da:30:8f:fd:d9:ca:53:37:82:aa:
                    e2:8e:d1:99:7d:52:14:bf:93:76:2a:3c:96:8c:6d:
                    f4:04:e7:8f:11:0f:9e:54:df:3e:e4:7e:39:77:e0:
                    ec:22:6d:89:60:ed:dc:4e:ed:38:7e:89:95:6b:a6:
                    63:06:35:12:d4:ca:17:77:5d:cf:2b:e0:01:e5:69:
                    84:8e:e8:3f:d2:dd:b2:8b:26:13:5a:f7:b3:52:02:
                    83:61:5f:37:9e:ca:b1:b7:ce:c1:a9:c8:b5:93:29:
                    75:05:63:b0:1e:40:41:44:a0:0c:45:91:c8:82:bb:
                    72:70:54:c5:3d:06:bf:56:84:59:1f:02:3b:90:2d:
                    5d:3b:a2:c5:9f:c1:3a:bb:66:6c:5c:fb:07:99:aa:
                    ca:b3:4c:46:a8:d5:cc:f2:19:4f:31:8b:a9:46:83:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3A:6A:03:B5:8C:F1:92:80:83:ED:BE:22:23:F8:D7:B8:F2:EA:B4
            X509v3 Authority Key Identifier:
                keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:2a:05:ae:ae:48:25:43:a0:8b:a1:81:e8:f0:ab:17:da:
         1e:a0:f0:0d:96:c3:c6:09:5a:57:0d:2b:31:59:a7:cd:5f:69:
         cd:af:34:28:04:6a:e7:16:e4:65:66:ba:38:45:4e:4c:f3:c7:
         32:53:3d:72:7d:0b:27:de:8c:dc:1d:6a:86:89:e8:bb:44:ec:
         22:44:87:55:4a:de:30:5c:9f:91:cd:5e:a9:14:67:fc:02:b5:
         26:c0:08:c5:3f:71:ac:e0:8d:7c:79:96:d4:71:e1:38:dc:42:
         56:80:db:4e:35:4e:38:51:00:4b:00:f5:34:76:cc:63:f9:a4:
         50:ee:9c:a0:83:a4:e6:55:51:ed:15:53:d0:4c:49:21:ad:df:
         e5:9e:43:02:34:1d:40:7a:0e:62:9e:29:81:91:f9:0e:c3:89:
         82:78:79:44:96:bb:a4:a2:56:e1:8e:53:88:59:59:f9:c5:b5:
         87:83:16:11:a5:a1:e3:f9:3e:37:e2:d2:4d:94:69:c1:66:78:
         53:ff:f8:9b:08:c1:a0:a0:cc:29:ea:01:7f:52:cc:e5:58:6a:
         fb:57:e1:46:35:34:0a:d1:79:ec:77:84:61:48:d7:a3:11:c4:
         69:24:78:25:33:a2:18:7e:9b:a4:bd:1c:53:af:bf:33:fe:2f:
         23:f2:d8:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtqFNxMjG+YadBLTd1rFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNGQxY2JhYTkwMGM5ZGFiZDJhMWY3NjgxOThhMWU1NWJj
ZmI1MGYwHhcNMjQwNTE3MTgwMDQzWhcNMjQwNTE4MTgwMDQzWjAzMTEwLwYDVQQD
Eyg5ZTNhNmEwM2I1OGNmMTkyODA4M2VkYmUyMjIzZjhkN2I4ZjJlYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0q92jpLzPQcA/y+riHz3abIJ/Ss
1Ih++8yrAQUykltZEqJgE+hpqRo9B2fl8WfeTrX0WJqi/xUah70BAXghUGVow8lh
sz8hWD9oh8PHvOfp8/gW82ms9Emeuj2Smtowj/3ZylM3gqrijtGZfVIUv5N2KjyW
jG30BOePEQ+eVN8+5H45d+DsIm2JYO3cTu04fomVa6ZjBjUS1MoXd13PK+AB5WmE
jug/0t2yiyYTWvezUgKDYV83nsqxt87Bqci1kyl1BWOwHkBBRKAMRZHIgrtycFTF
PQa/VoRZHwI7kC1dO6LFn8E6u2ZsXPsHmarKs0xGqNXM8hlPMYupRoNO1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ46agO1jPGSgIPtviIj+Ne48uq0MB8GA1UdIwQY
MBaAFP1NHLqpAMnavSofdoGYoeVbz7UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OTAzY2EtZmI2Ny00ZWU3LWEyM2Et
ZGI3NjkwZTQ1NzY1LzEvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84OTAzY2EtZmI2Ny00ZWU3LWEyM2EtZGI3NjkwZTQ1NzY1
LzEvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozgqBa6u
SCVDoIuhgejwqxfaHqDwDZbDxglaVw0rMVmnzV9pza80KARq5xbkZWa6OEVOTPPH
MlM9cn0LJ96M3B1qhonou0TsIkSHVUreMFyfkc1eqRRn/AK1JsAIxT9xrOCNfHmW
1HHhONxCVoDbTjVOOFEASwD1NHbMY/mkUO6coIOk5lVR7RVT0ExJIa3f5Z5DAjQd
QHoOYp4pgZH5DsOJgnh5RJa7pKJW4Y5TiFlZ+cW1h4MWEaWh4/k+N+LSTZRpwWZ4
U//4mwjBoKDMKeoBf1LM5Vhq+1fhRjU0CtF57HeEYUjXoxHEaSR4JTOiGH6bpL0c
U6+/M/4vI/LYAw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:06:55 2024 by rpki-client on console-ams.rpki-client.org