Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File:                     Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier:          BdBAC1lODX7b6CwMzXk8wpy666ErF4cqZtjLVHr0ao8=
Subject key identifier:   C1:D8:6B:95:B7:B3:41:3D:1B:E2:93:40:DA:7C:08:21:8F:94:82:67
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer:       /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial:       018F40B0CED2062BBD88C17557A0B1FEF46D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number:          0F53
Signing time:             Fri 03 May 2024 23:01:20 +0000
Manifest this update:     Fri 03 May 2024 23:01:20 +0000
Manifest next update:     Sat 04 May 2024 23:01:20 +0000
Files and hashes:         1: 1-CEbVX9q9sr88-GTGkAnbgtjZMw.roa (hash: G7ontNIpfpUHiCConAhzk/4rwjkx0Aez1nVKE4Ldm/o=)
                          2: 2v4TNX068Xo83QPqOIa37s-1pLs.roa (hash: jXFhED4CLLpO4cI/Q+DRgaIzaN8GzJzoTo3ybXLe9yE=)
                          3: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: gfKCJ5MC5ixsYGSWdtVnVxoc98R4Y+m+kvqYcUu/+vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b0:ce:d2:06:2b:bd:88:c1:75:57:a0:b1:fe:f4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
        Validity
            Not Before: May  3 23:01:20 2024 GMT
            Not After : May  4 23:01:20 2024 GMT
        Subject: CN=c1d86b95b7b3413d1be29340da7c08218f948267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:2f:6f:8b:f3:b5:cc:79:c1:41:8b:d0:fd:
                    f0:0c:53:f9:e5:79:02:bd:1d:09:5a:05:0c:66:80:
                    f3:e9:bc:54:5f:01:2a:cb:c7:32:cc:a9:4a:0a:b7:
                    81:3d:33:be:c0:3e:66:39:d1:9f:50:72:46:09:50:
                    78:da:79:d6:eb:be:99:52:dc:5a:c9:86:a6:c3:f2:
                    1e:6d:fb:0e:25:f0:78:a2:78:1f:57:f1:20:ca:b7:
                    47:00:5a:f6:2d:60:17:50:eb:ca:c3:70:74:85:ed:
                    95:94:2a:eb:8e:4d:d0:30:05:eb:10:fc:f1:c6:fe:
                    07:58:f2:53:6e:3f:1b:54:88:8a:63:9d:95:e4:2f:
                    08:2f:49:cf:d6:61:07:8b:15:b8:ce:62:7b:9a:c5:
                    5f:3e:65:b6:de:69:c1:f0:03:6b:de:31:f4:c8:fe:
                    78:92:8d:17:a7:db:f1:f6:ca:61:2d:9b:18:83:ef:
                    56:dc:4d:19:de:c4:6e:1b:89:61:2e:4b:60:a6:61:
                    39:b3:71:ba:6b:f0:d4:90:86:8b:0f:6b:6d:d9:5c:
                    d3:5f:d1:df:cc:88:fe:a1:2e:6b:cf:e8:88:8f:ad:
                    f0:7d:fb:de:fb:df:c1:60:1b:24:74:6f:49:ef:1e:
                    95:d4:23:fe:c6:32:43:68:72:81:87:49:25:fd:6e:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D8:6B:95:B7:B3:41:3D:1B:E2:93:40:DA:7C:08:21:8F:94:82:67
            X509v3 Authority Key Identifier:
                keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:61:f6:89:26:ca:a2:e4:85:64:a6:e2:c6:d5:6f:0d:fe:
         06:05:63:f5:a3:da:35:cd:11:17:0a:a8:83:7c:de:7b:23:5b:
         90:6b:0b:53:14:c6:2d:a8:49:db:ed:dc:e9:17:28:ca:fe:fd:
         25:28:33:fd:04:88:8c:93:28:f2:3c:9f:15:00:15:a9:d2:9f:
         90:f1:13:6e:41:4f:4f:b6:14:42:a9:e9:cf:7c:80:b3:e1:5b:
         ca:85:df:6d:62:80:f5:fc:b5:7d:d7:2b:bd:74:e3:9f:01:97:
         a8:c0:bb:2c:03:b5:3c:86:e5:e9:1d:9f:45:7b:06:04:69:8e:
         eb:40:ab:5e:24:94:63:c8:0d:cf:e8:55:8a:0c:3a:9a:6c:09:
         84:7c:15:2b:33:69:e6:8e:1d:a9:06:4b:cd:8e:29:25:52:0f:
         7c:dc:a2:7d:2f:9d:a4:78:dc:f5:ec:f4:e0:32:44:7f:d1:e3:
         aa:fc:56:9a:c3:ac:bf:80:d5:78:9d:e6:d8:67:aa:45:72:1c:
         ac:b7:f5:2a:5b:30:2c:6a:84:6f:ed:27:94:3c:f6:d4:8f:e9:
         6e:dd:1e:f8:08:63:61:dc:96:8c:31:04:e1:e4:34:12:f7:f0:
         01:a7:b4:96:f4:46:c7:b4:ed:82:ee:51:15:a8:1e:e2:09:7d:
         f9:16:f6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9AsM7SBiu9iMF1V6Cx/vRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx
Y2IwZTIwHhcNMjQwNTAzMjMwMTIwWhcNMjQwNTA0MjMwMTIwWjAzMTEwLwYDVQQD
EyhjMWQ4NmI5NWI3YjM0MTNkMWJlMjkzNDBkYTdjMDgyMThmOTQ4MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsvb4vztcx5wUGL0P3wDFP55XkC
vR0JWgUMZoDz6bxUXwEqy8cyzKlKCreBPTO+wD5mOdGfUHJGCVB42nnW676ZUtxa
yYamw/IebfsOJfB4ongfV/EgyrdHAFr2LWAXUOvKw3B0he2VlCrrjk3QMAXrEPzx
xv4HWPJTbj8bVIiKY52V5C8IL0nP1mEHixW4zmJ7msVfPmW23mnB8ANr3jH0yP54
ko0Xp9vx9sphLZsYg+9W3E0Z3sRuG4lhLktgpmE5s3G6a/DUkIaLD2tt2VzTX9Hf
zIj+oS5rz+iIj63wffve+9/BYBskdG9J7x6V1CP+xjJDaHKBh0kl/W4ydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHYa5W3s0E9G+KTQNp8CCGPlIJnMB8GA1UdIwQY
MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut
NzYwM2U1ZGQ1NzA3LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3
LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehph9okm
yqLkhWSm4sbVbw3+BgVj9aPaNc0RFwqog3zeeyNbkGsLUxTGLahJ2+3c6Rcoyv79
JSgz/QSIjJMo8jyfFQAVqdKfkPETbkFPT7YUQqnpz3yAs+FbyoXfbWKA9fy1fdcr
vXTjnwGXqMC7LAO1PIbl6R2fRXsGBGmO60CrXiSUY8gNz+hVigw6mmwJhHwVKzNp
5o4dqQZLzY4pJVIPfNyifS+dpHjc9ez04DJEf9HjqvxWmsOsv4DVeJ3m2GeqRXIc
rLf1KlswLGqEb+0nlDz21I/pbt0e+AhjYdyWjDEE4eQ0EvfwAae0lvRGx7Ttgu5R
Fage4gl9+Rb2eQ==
-----END CERTIFICATE-----
Generated at Sat May 4 00:02:44 2024 by rpki-client on console-ams.rpki-client.org