Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
File:                     IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft (raw, json)
Hash identifier:          +HnNqvumX+CcIxEZtQzGlIyN90XpwvrUoj5uPc2dOoo=
Subject key identifier:   A7:A1:8D:48:5A:C8:D1:6C:F8:89:FC:45:02:3F:99:38:61:20:2F:34
Authority key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Certificate issuer:       /CN=21409e170842785e5e787c3ac27a8844bab76c11
Certificate serial:       018F3A0ACB747BB10C36C2E4A2E85B01BD54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:02:16 +0000
Manifest this update:     Thu 02 May 2024 16:02:16 +0000
Manifest next update:     Fri 03 May 2024 16:02:16 +0000
Files and hashes:         1: 18olfNomhFNIPfGSHcOYuQw1--M.roa (hash: HFndyP63ntrqQ6R+DdnSkdEVuCznkXxs/t6eW6PvlhI=)
                          2: IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl (hash: /7NGwH/88dXIN4ZL0wWH+ca2K3Hp/bE9iyTa6g9Rd5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:cb:74:7b:b1:0c:36:c2:e4:a2:e8:5b:01:bd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21409e170842785e5e787c3ac27a8844bab76c11
        Validity
            Not Before: May  2 16:02:16 2024 GMT
            Not After : May  3 16:02:16 2024 GMT
        Subject: CN=a7a18d485ac8d16cf889fc45023f993861202f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:3a:47:7a:f7:8f:5a:91:96:1c:51:4b:bc:
                    92:08:45:2d:7d:5e:95:4b:f1:3e:24:95:e8:ed:dc:
                    dc:d4:bb:4f:7d:b0:96:a4:cf:3f:d8:3a:ea:ce:e2:
                    50:7e:b1:9f:48:60:48:20:58:31:99:c4:61:35:61:
                    c7:e2:2f:57:33:8e:dc:f3:b9:2d:45:b9:3f:04:e4:
                    26:06:7f:d1:ec:53:10:74:45:b3:da:8f:7e:9a:5f:
                    13:e4:9e:29:7c:15:e6:4c:2f:b3:6b:f8:f4:86:cf:
                    26:f6:7a:2e:ad:ef:eb:c0:1e:72:e5:97:2f:62:99:
                    7a:82:d1:f4:60:35:ff:b5:38:8b:04:f0:ea:1c:a8:
                    21:37:07:42:23:4d:8e:33:e4:ec:7e:fa:d4:88:a7:
                    8d:18:29:88:50:a2:e9:f4:26:c7:7a:e6:74:ad:ce:
                    67:7e:c4:d5:14:b6:73:2b:5a:b1:b2:87:6e:5a:cf:
                    b9:43:e6:e3:ec:c5:1b:c2:75:15:a7:34:b1:53:ee:
                    89:1c:26:4e:13:47:1c:61:6b:45:4b:b1:7a:68:38:
                    b9:86:b8:bf:e5:7f:cf:bc:51:7f:63:ad:6f:5e:1a:
                    9f:5a:3c:6c:c9:25:ce:30:66:21:94:e1:b6:9f:e9:
                    2f:91:61:4a:3b:7a:2a:bf:44:38:f8:cf:92:bc:20:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:8D:48:5A:C8:D1:6C:F8:89:FC:45:02:3F:99:38:61:20:2F:34
            X509v3 Authority Key Identifier:
                keyid:21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:2e:3f:9a:3c:fc:a4:04:ef:35:99:f0:02:4f:ac:cb:13:
         37:81:55:ed:45:dc:e5:ce:1f:ce:c5:b2:af:fe:cd:f5:65:81:
         e0:b6:05:bb:26:4f:a3:82:16:3c:d5:4d:7a:01:d2:ee:f1:8c:
         8c:4d:e8:8a:22:26:03:12:f0:d6:4e:52:f7:22:73:8c:47:87:
         4a:b2:9f:bc:7a:0a:a9:49:30:f6:ed:91:2a:0b:e4:f7:9f:8d:
         c6:08:64:ab:79:62:f8:36:39:97:d7:d0:e7:65:64:e5:ed:20:
         00:0c:b0:67:14:06:a5:b0:0d:e8:33:04:31:05:95:13:85:27:
         df:d2:1d:f2:35:13:94:c0:1e:43:03:33:bb:19:94:2b:84:78:
         36:c6:f2:44:60:6b:42:13:9f:f7:87:ef:91:a5:e6:71:e1:e8:
         91:2c:76:99:48:7b:92:97:00:17:b5:77:40:51:15:29:5a:77:
         f9:d3:40:33:b4:fe:56:8e:ea:57:7e:2d:6b:ba:8f:29:49:de:
         4d:7f:89:fb:cb:a7:36:0f:ff:44:39:79:c9:22:e6:7c:23:b2:
         26:6b:a4:96:3f:1f:aa:a5:4d:67:d0:7a:fc:da:c1:db:da:ef:
         fe:4f:a0:ed:4d:97:a9:3e:05:ef:aa:9c:ee:53:e7:4c:a2:a9:
         d8:16:cc:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86Cst0e7EMNsLkouhbAb1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDA5ZTE3MDg0Mjc4NWU1ZTc4N2MzYWMyN2E4ODQ0YmFi
NzZjMTEwHhcNMjQwNTAyMTYwMjE2WhcNMjQwNTAzMTYwMjE2WjAzMTEwLwYDVQQD
EyhhN2ExOGQ0ODVhYzhkMTZjZjg4OWZjNDUwMjNmOTkzODYxMjAyZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj86R3r3j1qRlhxRS7ySCEUtfV6V
S/E+JJXo7dzc1LtPfbCWpM8/2DrqzuJQfrGfSGBIIFgxmcRhNWHH4i9XM47c87kt
Rbk/BOQmBn/R7FMQdEWz2o9+ml8T5J4pfBXmTC+za/j0hs8m9noure/rwB5y5Zcv
Ypl6gtH0YDX/tTiLBPDqHKghNwdCI02OM+TsfvrUiKeNGCmIUKLp9CbHeuZ0rc5n
fsTVFLZzK1qxsoduWs+5Q+bj7MUbwnUVpzSxU+6JHCZOE0ccYWtFS7F6aDi5hri/
5X/PvFF/Y61vXhqfWjxsySXOMGYhlOG2n+kvkWFKO3oqv0Q4+M+SvCDdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKehjUhayNFs+In8RQI/mThhIC80MB8GA1UdIwQY
MBaAFCFAnhcIQnheXnh8OsJ6iES6t2wRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVDZUZ3aENlRjVlZUh3NnducUlSTHEzYkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82YWI4ZWUtZThmNy00Zjg5LTk4ZDct
MGUxMzZiZTliZjM2LzEvSVVDZUZ3aENlRjVlZUh3NnducUlSTHEzYkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82YWI4ZWUtZThmNy00Zjg5LTk4ZDctMGUxMzZiZTliZjM2
LzEvSVVDZUZ3aENlRjVlZUh3NnducUlSTHEzYkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ0uP5o8
/KQE7zWZ8AJPrMsTN4FV7UXc5c4fzsWyr/7N9WWB4LYFuyZPo4IWPNVNegHS7vGM
jE3oiiImAxLw1k5S9yJzjEeHSrKfvHoKqUkw9u2RKgvk95+Nxghkq3li+DY5l9fQ
52Vk5e0gAAywZxQGpbAN6DMEMQWVE4Un39Id8jUTlMAeQwMzuxmUK4R4NsbyRGBr
QhOf94fvkaXmceHokSx2mUh7kpcAF7V3QFEVKVp3+dNAM7T+Vo7qV34ta7qPKUne
TX+J+8unNg//RDl5ySLmfCOyJmuklj8fqqVNZ9B6/NrB29rv/k+g7U2XqT4F76qc
7lPnTKKp2BbMpA==
-----END CERTIFICATE-----
Generated at Thu May 2 17:41:51 2024 by rpki-client on console-ams.rpki-client.org