Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
File:                     nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft (raw, json)
Hash identifier:          vVBBD4zcjF6AYanTceuwWgwxXBVWc7jraAhY+0Ux61U=
Subject key identifier:   52:59:AA:A4:05:AB:63:8C:0F:42:7F:77:36:CF:2A:53:25:6E:C4:DC
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Certificate issuer:       /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial:       018F8824410361E0607CEBA09B65745EAFD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
Manifest number:          05B6
Signing time:             Fri 17 May 2024 20:00:28 +0000
Manifest this update:     Fri 17 May 2024 20:00:28 +0000
Manifest next update:     Sat 18 May 2024 20:00:28 +0000
Files and hashes:         1: 1VHog9gXNkPkGxGH7YI0lbzEmfY.roa (hash: zw8agcYN8xE5N75PKEziy6EbiC7wpemt9KffXT8K+KM=)
                          2: nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl (hash: E8rNSv4ihvd/6eZXRAaekQA8VupDGmabBAFBJkiWVZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:41:03:61:e0:60:7c:eb:a0:9b:65:74:5e:af:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
        Validity
            Not Before: May 17 20:00:28 2024 GMT
            Not After : May 18 20:00:28 2024 GMT
        Subject: CN=5259aaa405ab638c0f427f7736cf2a53256ec4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:13:bf:ed:0d:1c:5b:dd:a5:1a:65:84:70:
                    a5:51:95:bb:8a:7e:6e:fa:bf:ed:7c:78:b6:9e:f2:
                    00:21:bd:4e:39:55:83:dc:3c:58:1f:63:fb:97:4d:
                    77:45:be:4a:55:38:12:96:dd:4c:cf:ca:82:af:d3:
                    b0:0c:81:56:5b:15:ec:65:7b:d5:17:c3:f9:a0:f6:
                    e5:bb:e5:99:de:f7:7b:e3:09:00:4f:41:c1:9c:55:
                    33:e9:f3:97:b1:9c:0c:4a:92:21:57:94:a3:87:75:
                    43:53:61:ca:ba:1a:cc:87:a4:07:8d:ac:d1:d0:3d:
                    de:f7:9d:11:d5:6d:1d:21:9c:e2:b9:97:6d:8f:2e:
                    73:31:ed:11:c2:7f:86:44:56:f7:06:f1:f7:52:9f:
                    55:c1:27:90:71:ec:c7:3a:53:43:79:95:13:08:f0:
                    b0:6f:c3:e7:ed:ee:8a:5d:b8:32:d0:14:38:bd:d5:
                    81:c8:ed:fc:f7:82:73:00:9c:15:6d:11:f0:bb:5c:
                    68:c9:ca:c7:52:b5:50:cf:96:2f:bb:bc:bd:08:ae:
                    58:96:19:a5:a3:43:18:74:52:77:06:a0:0d:3d:db:
                    ec:19:c0:80:c5:f9:81:9b:ea:e9:65:1d:92:7a:79:
                    d1:a8:8c:53:f7:41:3f:a4:41:10:d0:f8:b4:08:36:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:AA:A4:05:AB:63:8C:0F:42:7F:77:36:CF:2A:53:25:6E:C4:DC
            X509v3 Authority Key Identifier:
                keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:1e:46:e8:ec:b0:7a:9a:c0:00:3e:f4:2c:49:14:91:36:
         01:14:30:bc:ad:bd:72:b2:53:f7:60:08:a7:97:71:56:db:81:
         fa:c3:ed:44:fa:3e:d1:ac:94:53:6d:a4:4d:80:4c:d3:a5:c0:
         76:58:43:31:b2:f6:d3:6a:97:2f:88:0c:36:2c:19:05:11:d6:
         dc:3b:88:a7:b4:70:d8:b9:fc:cf:3a:5b:f7:64:96:76:74:c1:
         f7:ab:e7:3a:a3:03:5f:be:c4:91:6d:76:4d:b7:bc:70:bc:53:
         28:01:39:61:92:e3:1a:9c:ad:36:7b:81:ca:7d:b1:38:13:92:
         0a:2b:d4:13:b2:ef:ef:43:fd:d6:4d:a8:ac:8e:66:65:a0:79:
         09:5a:8c:49:8b:20:62:a7:0c:23:2c:04:f1:d4:eb:a2:f5:49:
         34:72:09:b2:ad:74:b0:15:9d:d1:f3:ac:7d:ae:0c:43:fa:6c:
         e6:20:e8:bf:e9:c2:97:1f:c0:12:2b:47:d6:ac:37:c0:69:32:
         b5:24:44:2e:d8:7f:98:38:86:4f:5e:b8:34:95:b6:0f:bf:b2:
         ef:19:b1:92:23:42:c0:7b:f8:ea:6a:25:55:a3:e6:82:ae:69:
         9f:73:26:3d:7e:61:5d:bc:a4:96:06:30:9a:57:14:fb:24:e0:
         de:be:e2:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJEEDYeBgfOugm2V0Xq/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYWY5YTBkNzhhNjgxMWNkMTY4NmRlYjExNzc4OGFmODY2
YzgwOTEwHhcNMjQwNTE3MjAwMDI4WhcNMjQwNTE4MjAwMDI4WjAzMTEwLwYDVQQD
Eyg1MjU5YWFhNDA1YWI2MzhjMGY0MjdmNzczNmNmMmE1MzI1NmVjNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dkTv+0NHFvdpRplhHClUZW7in5u
+r/tfHi2nvIAIb1OOVWD3DxYH2P7l013Rb5KVTgSlt1Mz8qCr9OwDIFWWxXsZXvV
F8P5oPblu+WZ3vd74wkAT0HBnFUz6fOXsZwMSpIhV5Sjh3VDU2HKuhrMh6QHjazR
0D3e950R1W0dIZziuZdtjy5zMe0Rwn+GRFb3BvH3Up9VwSeQcezHOlNDeZUTCPCw
b8Pn7e6KXbgy0BQ4vdWByO3894JzAJwVbRHwu1xoycrHUrVQz5Yvu7y9CK5Ylhml
o0MYdFJ3BqANPdvsGcCAxfmBm+rpZR2SennRqIxT90E/pEEQ0Pi0CDYQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJZqqQFq2OMD0J/dzbPKlMlbsTcMB8GA1UdIwQY
MBaAFJyvmg14poEc0Wht6xF3iK+GbICRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OTU5YzItZWUwYi00MmJkLWI0MmQt
YmY3ZmRjMjliZTZkLzEvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82OTU5YzItZWUwYi00MmJkLWI0MmQtYmY3ZmRjMjliZTZk
LzEvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLseRujs
sHqawAA+9CxJFJE2ARQwvK29crJT92AIp5dxVtuB+sPtRPo+0ayUU22kTYBM06XA
dlhDMbL202qXL4gMNiwZBRHW3DuIp7Rw2Ln8zzpb92SWdnTB96vnOqMDX77EkW12
Tbe8cLxTKAE5YZLjGpytNnuByn2xOBOSCivUE7Lv70P91k2orI5mZaB5CVqMSYsg
YqcMIywE8dTrovVJNHIJsq10sBWd0fOsfa4MQ/ps5iDov+nClx/AEitH1qw3wGky
tSRELth/mDiGT164NJW2D7+y7xmxkiNCwHv46molVaPmgq5pn3MmPX5hXbyklgYw
mlcU+yTg3r7iCw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:56 2024 by rpki-client on console-ams.rpki-client.org