Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File:                     XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier:          LRAzX1gfd8SwoZEILLxIiM996OENW7kDySVmkhdK/9I=
Subject key identifier:   29:2C:7B:15:3F:C6:62:FD:71:01:E7:D7:09:11:36:8B:8B:D4:98:32
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer:       /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial:       018F87B665D7D3CBB22F5A34D9A79EEDD618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: E8PGgVAvoeXlBStb766fh9328ic.roa (hash: BALNFKsIlbMeHuf6nFJYJd/w9tx1+ycIiIhf7mh+fVo=)
                          2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: ag1PFgUJRmXJ0UMsJyQcbhre24I1pl9dj5HiMkh3dq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:65:d7:d3:cb:b2:2f:5a:34:d9:a7:9e:ed:d6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=292c7b153fc662fd7101e7d70911368b8bd49832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:77:57:be:a8:b8:25:f7:1a:74:94:2e:cf:
                    15:7a:17:06:05:8e:30:60:b9:a4:30:55:c3:24:d7:
                    ca:ae:62:7d:92:94:8f:be:b6:f7:98:44:24:2d:61:
                    e6:9b:5f:24:bf:33:85:93:a9:23:0c:b8:d8:3c:67:
                    8a:f0:09:bf:f4:e0:ae:74:dc:d2:7a:f0:96:55:28:
                    f0:d6:be:72:16:39:fd:17:b4:14:50:00:b1:4a:87:
                    c1:c9:12:60:a6:1b:e5:7c:18:b1:f1:f9:85:fb:e1:
                    75:b3:cb:72:d1:a2:e8:e2:06:d7:c4:fd:72:ba:3b:
                    e1:3a:6f:36:e0:cf:b8:1f:22:2d:ff:a6:89:88:b0:
                    33:00:85:40:5a:7b:ac:72:61:8e:fb:ba:c5:a6:df:
                    e9:11:0d:69:7b:05:31:a9:de:9e:6b:3f:9f:9e:85:
                    dd:ba:3e:91:ba:a2:b4:89:39:e7:40:4d:1e:70:06:
                    59:af:f9:5c:b1:e8:96:d3:c9:39:ab:29:d3:4d:b4:
                    e3:4b:39:b2:6b:07:25:74:c0:f2:8f:e1:49:8c:23:
                    5b:47:d1:e7:92:6c:ca:df:43:06:a3:9b:a1:ae:08:
                    c8:c0:f5:84:b9:ac:af:10:83:a9:e0:94:e2:0b:14:
                    4e:af:40:aa:42:6d:b6:af:a8:fe:88:15:12:4e:d4:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2C:7B:15:3F:C6:62:FD:71:01:E7:D7:09:11:36:8B:8B:D4:98:32
            X509v3 Authority Key Identifier:
                keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7d:73:fe:c4:65:7b:b3:12:20:84:0d:12:12:cf:96:00:97:
         31:d7:31:fa:c7:8a:bd:d6:e7:0d:96:0e:9c:95:d1:a6:74:09:
         1a:12:83:fc:92:5a:57:7a:4d:26:07:63:a2:8e:4b:c8:7b:0e:
         8c:91:8b:a8:b9:ff:fc:45:00:35:6a:a6:0c:2e:a0:87:26:50:
         90:3e:9b:a4:e7:0a:56:a0:04:6b:f7:b3:d3:1a:92:50:a4:36:
         d7:b9:24:ed:c0:f7:24:17:cb:de:0f:5f:88:99:b3:8d:15:1d:
         19:60:ca:24:88:e9:3b:15:98:75:ee:e5:c8:1d:95:8f:a4:fb:
         87:60:d3:98:b7:15:36:f0:a6:05:6a:b0:b9:cf:1f:a6:a8:40:
         66:05:81:bd:30:63:ea:b1:61:da:4e:df:f4:6d:22:46:e0:28:
         4e:f1:80:99:e3:68:37:41:6c:8b:05:f5:ae:42:d7:1d:36:47:
         66:f1:61:dc:14:22:9b:14:cc:02:2a:64:88:b4:b7:ee:7c:8b:
         54:49:aa:7a:ae:50:db:75:46:93:62:4e:83:55:b4:75:32:2a:
         67:02:13:ec:f5:d6:4b:85:d9:0a:19:73:da:35:9c:1f:b9:c4:
         ce:e5:e6:af:25:f9:bf:5b:b9:e2:79:4d:2c:7f:73:60:55:55:
         f8:17:56:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtmXX08uyL1o02aee7dYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm
MmFhY2IwHhcNMjQwNTE3MTgwMDI4WhcNMjQwNTE4MTgwMDI4WjAzMTEwLwYDVQQD
EygyOTJjN2IxNTNmYzY2MmZkNzEwMWU3ZDcwOTExMzY4YjhiZDQ5ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+h3V76ouCX3GnSULs8VehcGBY4w
YLmkMFXDJNfKrmJ9kpSPvrb3mEQkLWHmm18kvzOFk6kjDLjYPGeK8Am/9OCudNzS
evCWVSjw1r5yFjn9F7QUUACxSofByRJgphvlfBix8fmF++F1s8ty0aLo4gbXxP1y
ujvhOm824M+4HyIt/6aJiLAzAIVAWnuscmGO+7rFpt/pEQ1pewUxqd6eaz+fnoXd
uj6RuqK0iTnnQE0ecAZZr/lcseiW08k5qynTTbTjSzmyawcldMDyj+FJjCNbR9Hn
kmzK30MGo5uhrgjIwPWEuayvEIOp4JTiCxROr0CqQm22r6j+iBUSTtSPfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCksexU/xmL9cQHn1wkRNouL1JgyMB8GA1UdIwQY
MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt
NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh
LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn1z/sRl
e7MSIIQNEhLPlgCXMdcx+seKvdbnDZYOnJXRpnQJGhKD/JJaV3pNJgdjoo5LyHsO
jJGLqLn//EUANWqmDC6ghyZQkD6bpOcKVqAEa/ez0xqSUKQ217kk7cD3JBfL3g9f
iJmzjRUdGWDKJIjpOxWYde7lyB2Vj6T7h2DTmLcVNvCmBWqwuc8fpqhAZgWBvTBj
6rFh2k7f9G0iRuAoTvGAmeNoN0FsiwX1rkLXHTZHZvFh3BQimxTMAipkiLS37nyL
VEmqeq5Q23VGk2JOg1W0dTIqZwIT7PXWS4XZChlz2jWcH7nEzuXmryX5v1u54nlN
LH9zYFVV+BdWzQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:43 2024 by rpki-client on console-fra.rpki-client.org