Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File:                     1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier:          X8S3o6H+TFCaV7HeB8G3hs4zdbSRm9UHVJvtSMHi8NY=
Subject key identifier:   19:19:6C:79:69:AB:FE:4E:04:2F:ED:5B:B3:86:8B:8A:4C:83:67:51
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer:       /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial:       018F448DDDECA98F948C85B08430DC47A276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number:          1159
Signing time:             Sat 04 May 2024 17:01:38 +0000
Manifest this update:     Sat 04 May 2024 17:01:38 +0000
Manifest next update:     Sun 05 May 2024 17:01:38 +0000
Files and hashes:         1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: /OQHj4bUPJX1MABEu7T8G3R1LPIFqcJmEKYpjlXBK9o=)
                          2: MKyRgkSi8lwzkhS39EP-Xji4B_M.roa (hash: RNB4n+igi3MGFGnxeqGyBhLriDyLRXgRwYRheRXKSPw=)
                          3: iZZ4ouetDhEfftvUxbTFsd6oE3M.roa (hash: pHf+NSt9Rio/bTiOgtwP2/90zlCcYZDC5NfU3KVNepA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8d:dd:ec:a9:8f:94:8c:85:b0:84:30:dc:47:a2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
        Validity
            Not Before: May  4 17:01:38 2024 GMT
            Not After : May  5 17:01:38 2024 GMT
        Subject: CN=19196c7969abfe4e042fed5bb3868b8a4c836751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:b8:73:4b:4b:de:81:08:18:50:d7:52:d3:
                    1b:3a:33:f1:56:12:ad:44:74:e5:3e:af:c0:67:94:
                    24:2f:91:e4:9e:1e:82:e0:8e:fa:31:27:b9:d4:89:
                    fd:95:d8:34:4e:8a:28:2e:e1:a2:e5:b3:39:b0:c6:
                    24:66:e0:7c:69:55:45:85:35:15:9b:14:c4:44:63:
                    8a:2d:c1:67:26:37:80:2a:d0:aa:3b:a0:ba:d1:0d:
                    57:f7:0a:f5:b9:d1:b2:45:bc:41:25:c9:84:85:1b:
                    a9:ed:65:c0:ca:dc:3c:73:42:fc:76:0a:0e:12:7b:
                    cc:98:aa:84:1c:d3:6c:08:ed:5b:c9:15:5d:38:f6:
                    51:de:20:90:94:dc:ab:b1:f7:c8:1e:79:4c:f3:e9:
                    f4:f7:eb:4c:90:1a:94:e3:46:9e:f5:26:bc:a8:f5:
                    ea:92:d6:ab:4d:2d:f0:c4:8c:b9:f5:88:14:2f:08:
                    14:23:1c:15:95:95:63:75:25:e1:59:15:3a:91:fa:
                    f5:0a:17:f8:31:84:9f:16:57:38:05:93:d3:04:a6:
                    4f:56:2d:a1:33:ec:88:1e:7b:65:cc:37:92:40:0e:
                    d5:49:31:72:f8:30:93:8b:72:19:b6:9a:10:51:0f:
                    69:a5:59:36:09:9f:88:21:e8:3d:d7:11:0d:73:17:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:19:6C:79:69:AB:FE:4E:04:2F:ED:5B:B3:86:8B:8A:4C:83:67:51
            X509v3 Authority Key Identifier:
                keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1c:59:1b:26:39:20:b7:3e:1f:81:61:53:92:87:7e:63:10:
         a9:4c:a9:50:c7:d2:c3:07:18:4a:eb:76:4b:a3:ab:60:69:1a:
         80:b3:2b:3c:c5:67:39:98:95:56:d2:1c:36:f8:3a:df:54:84:
         6b:70:94:dd:c7:d7:8a:36:3b:8b:b4:0c:0c:48:90:68:af:9c:
         2f:e2:81:b9:f4:c3:9f:09:bb:91:eb:d4:5d:73:0c:d6:1e:7a:
         01:2d:eb:2d:14:c8:93:32:dd:06:70:11:78:76:2c:b4:df:49:
         e7:df:1a:4c:01:3b:b6:50:b1:59:5b:19:2c:93:bf:b7:8f:de:
         7c:2a:49:24:66:03:21:73:96:0f:b8:a5:5f:8c:5e:cf:2f:28:
         d4:8a:15:6f:99:c9:9c:15:28:ad:b4:c5:33:37:9e:77:81:bd:
         d0:c6:9a:7a:24:ef:2e:c2:43:22:56:b9:b1:a3:75:8f:69:ae:
         71:57:5c:de:43:e9:09:9f:09:64:ae:c3:f7:44:77:96:ee:d7:
         8c:11:7f:86:c5:d7:69:68:29:80:3c:15:4c:10:b7:93:51:68:
         c7:b9:40:7a:9b:a9:c0:73:24:e8:72:2c:4d:c8:d9:98:2a:3e:
         f2:c4:c9:9a:d1:dc:4a:f7:1b:f4:6e:27:91:82:1e:81:3d:9c:
         66:36:2b:20
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9Ejd3sqY+UjIWwhDDcR6J2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk
YTExMjYwHhcNMjQwNTA0MTcwMTM4WhcNMjQwNTA1MTcwMTM4WjAzMTEwLwYDVQQD
EygxOTE5NmM3OTY5YWJmZTRlMDQyZmVkNWJiMzg2OGI4YTRjODM2NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/C4c0tL3oEIGFDXUtMbOjPxVhKt
RHTlPq/AZ5QkL5Hknh6C4I76MSe51In9ldg0ToooLuGi5bM5sMYkZuB8aVVFhTUV
mxTERGOKLcFnJjeAKtCqO6C60Q1X9wr1udGyRbxBJcmEhRup7WXAytw8c0L8dgoO
EnvMmKqEHNNsCO1byRVdOPZR3iCQlNyrsffIHnlM8+n09+tMkBqU40ae9Sa8qPXq
ktarTS3wxIy59YgULwgUIxwVlZVjdSXhWRU6kfr1Chf4MYSfFlc4BZPTBKZPVi2h
M+yIHntlzDeSQA7VSTFy+DCTi3IZtpoQUQ9ppVk2CZ+IIeg91xENcxf59wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBkZbHlpq/5OBC/tW7OGi4pMg2dRMB8GA1UdIwQY
MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw
LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4
OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRxZ
GyY5ILc+H4FhU5KHfmMQqUypUMfSwwcYSut2S6OrYGkagLMrPMVnOZiVVtIcNvg6
31SEa3CU3cfXijY7i7QMDEiQaK+cL+KBufTDnwm7kevUXXMM1h56AS3rLRTIkzLd
BnAReHYstN9J598aTAE7tlCxWVsZLJO/t4/efCpJJGYDIXOWD7ilX4xezy8o1IoV
b5nJnBUorbTFMzeed4G90MaaeiTvLsJDIla5saN1j2mucVdc3kPpCZ8JZK7D90R3
lu7XjBF/hsXXaWgpgDwVTBC3k1Fox7lAepupwHMk6HIsTcjZmCo+8sTJmtHcSvcb
9G4nkYIegT2cZjYrIA==
-----END CERTIFICATE-----
Generated at Sat May 4 18:16:32 2024 by rpki-client on console-fra.rpki-client.org