Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File:                     nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier:          wGpIisJb0Iz7M3CBJEsTJ+t1e2Du6psAcsiggKVNshA=
Subject key identifier:   3A:C1:3A:C6:4C:83:5D:CC:C5:72:51:28:DD:5D:7E:E8:EC:BF:BD:61
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer:       /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial:       018F87ED0002FC301E47CFF308872D257EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: P_DGsUmCIi_ttro3foDTVwXIr_4.roa (hash: exgaIOxI5hCnV8/d/14DlkMmJQBs/cfviGj5sk1AOGk=)
                          2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: dc9ZEIUYTvbdEFIJ4ejkmlYKWwgwdmE2ycNRstCPuBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:00:02:fc:30:1e:47:cf:f3:08:87:2d:25:7e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=3ac13ac64c835dccc5725128dd5d7ee8ecbfbd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:e4:fb:61:d6:70:77:64:45:92:81:57:15:
                    7c:8f:43:da:f6:42:20:76:09:5d:b0:da:0a:b0:a6:
                    4d:0f:b8:1c:5a:45:2e:0f:00:6f:fd:34:89:b6:e2:
                    7a:e9:46:f7:6e:79:bf:61:6d:bf:f5:60:a1:29:e9:
                    44:fe:79:5f:b0:f0:09:db:71:eb:58:70:c9:f1:4b:
                    fd:f2:52:6d:f9:f3:56:80:cb:24:59:ec:e3:ed:44:
                    20:b1:f0:9e:4f:1e:4b:08:cd:82:e9:13:83:3a:94:
                    88:56:2f:1a:89:11:72:c7:23:bb:d2:8a:d3:e9:af:
                    92:24:84:12:3d:7c:d1:09:35:1f:e3:4f:90:db:24:
                    77:00:94:35:cb:69:cb:fb:e0:f6:8a:70:50:a2:45:
                    b3:57:b9:5e:7a:e2:cd:df:7e:8d:0a:cc:ed:98:87:
                    ae:7e:54:73:fd:56:ff:28:9e:c7:c1:a3:80:29:30:
                    56:18:02:3d:8e:f5:87:55:3e:bd:ec:af:8a:25:c4:
                    6b:08:d3:8a:24:30:2f:38:c6:f1:20:cf:53:65:c9:
                    0c:39:f1:fb:13:4e:bd:41:11:cb:67:b6:e8:25:f3:
                    7a:7a:48:18:b8:6b:27:27:eb:02:8a:33:99:1b:c2:
                    7c:38:75:7f:ac:2e:f5:a0:c9:5a:d3:d0:dd:b3:5e:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C1:3A:C6:4C:83:5D:CC:C5:72:51:28:DD:5D:7E:E8:EC:BF:BD:61
            X509v3 Authority Key Identifier:
                keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f4:54:22:e0:df:ae:5b:95:e4:b7:67:01:c3:2c:b3:00:2b:
         ab:26:59:ae:2c:92:03:a0:23:b9:7d:ec:91:b6:c9:df:71:9f:
         c5:9a:43:0c:00:6f:8e:13:61:10:74:48:d1:ba:1b:2a:86:57:
         97:60:f6:f4:f6:24:76:c5:d4:07:f2:f9:26:06:48:03:71:6b:
         c7:36:74:07:e8:1b:af:ae:e5:ad:da:39:0e:7e:1a:fc:73:1f:
         f8:66:09:a0:c2:cb:36:cd:ca:f6:0c:ed:a0:25:5e:61:d8:27:
         b6:f5:26:8b:b8:af:8e:5f:b8:05:ee:53:a7:ac:35:77:d1:93:
         19:aa:38:9c:05:2a:bb:e1:70:da:b9:a1:67:d9:11:50:58:97:
         9b:ed:52:54:a1:fc:90:05:0c:27:8c:3a:48:e5:36:73:3d:24:
         53:2f:e6:b7:98:32:f4:39:d1:f0:72:3e:57:2f:1e:d9:f4:a0:
         7a:09:8b:15:d1:03:7a:9a:77:77:fd:4a:03:5e:0a:e1:b0:ed:
         47:d4:72:38:25:17:12:2a:e6:21:ab:9b:63:ce:3c:87:80:a7:
         23:03:66:d6:be:fb:01:30:97:24:ee:5a:95:37:e8:66:bc:83:
         64:f4:97:3e:4c:83:03:76:e8:c3:74:3f:c7:a7:76:5a:81:9b:
         ce:1c:f0:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7QAC/DAeR8/zCIctJX76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw
NzA5NGMwHhcNMjQwNTE3MTkwMDA3WhcNMjQwNTE4MTkwMDA3WjAzMTEwLwYDVQQD
EygzYWMxM2FjNjRjODM1ZGNjYzU3MjUxMjhkZDVkN2VlOGVjYmZiZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sbk+2HWcHdkRZKBVxV8j0Pa9kIg
dgldsNoKsKZND7gcWkUuDwBv/TSJtuJ66Ub3bnm/YW2/9WChKelE/nlfsPAJ23Hr
WHDJ8Uv98lJt+fNWgMskWezj7UQgsfCeTx5LCM2C6RODOpSIVi8aiRFyxyO70orT
6a+SJIQSPXzRCTUf40+Q2yR3AJQ1y2nL++D2inBQokWzV7leeuLN336NCsztmIeu
flRz/Vb/KJ7HwaOAKTBWGAI9jvWHVT697K+KJcRrCNOKJDAvOMbxIM9TZckMOfH7
E069QRHLZ7boJfN6ekgYuGsnJ+sCijOZG8J8OHV/rC71oMla09Dds14xAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrBOsZMg13MxXJRKN1dfujsv71hMB8GA1UdIwQY
MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt
Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw
LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/RUIuDf
rluV5LdnAcMsswArqyZZriySA6AjuX3skbbJ33GfxZpDDABvjhNhEHRI0bobKoZX
l2D29PYkdsXUB/L5JgZIA3FrxzZ0B+gbr67lrdo5Dn4a/HMf+GYJoMLLNs3K9gzt
oCVeYdgntvUmi7ivjl+4Be5Tp6w1d9GTGao4nAUqu+Fw2rmhZ9kRUFiXm+1SVKH8
kAUMJ4w6SOU2cz0kUy/mt5gy9DnR8HI+Vy8e2fSgegmLFdEDepp3d/1KA14K4bDt
R9RyOCUXEirmIaubY848h4CnIwNm1r77ATCXJO5alTfoZryDZPSXPkyDA3bow3Q/
x6d2WoGbzhzwjA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:01 2024 by rpki-client on console-ams.rpki-client.org