Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File:                     18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier:          t3pvEMxgdf1ZIg0luAJCBTmB+uFKFfsRZYH1+k64yBM=
Subject key identifier:   C6:FE:6A:D6:3F:D4:0A:0A:90:E3:B7:D3:EC:CD:50:96:30:C8:36:77
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       018F44C4590265DCCF74A0E690742B4BA6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 18:01:09 +0000
Manifest this update:     Sat 04 May 2024 18:01:09 +0000
Manifest next update:     Sun 05 May 2024 18:01:09 +0000
Files and hashes:         1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: l6SGaPS96rEjV6nMhh29ii6NVqYo9eOfKx+OyEjzVM4=)
                          2: WeCuuLYbQemzPs_gi2YYG9pM7y0.roa (hash: G+403kCaALeTKy4XROyLswaTHs+nqkeL5HhllT/sEHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:59:02:65:dc:cf:74:a0:e6:90:74:2b:4b:a6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: May  4 18:01:09 2024 GMT
            Not After : May  5 18:01:09 2024 GMT
        Subject: CN=c6fe6ad63fd40a0a90e3b7d3eccd509630c83677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:af:39:72:fc:cc:02:d5:85:db:62:be:f0:
                    c1:ea:7f:4f:cc:cc:54:42:99:98:9e:3a:44:cb:1c:
                    99:5e:ec:37:93:38:ed:18:70:7c:e4:2e:79:6c:58:
                    fc:ff:c7:ae:76:1c:f1:a6:cf:00:31:9c:14:17:cf:
                    4d:53:9a:93:c5:f8:83:ec:00:0b:30:7c:5a:06:92:
                    79:c0:88:ee:8b:df:2d:aa:aa:25:4c:43:2f:67:c8:
                    cd:30:14:12:33:52:e4:f0:f3:79:2a:e4:ee:38:3d:
                    db:e2:18:dc:44:bc:2f:0e:83:67:cf:fd:b5:cb:25:
                    98:fb:26:29:6c:06:da:ad:a0:d6:bf:08:29:40:c1:
                    aa:62:04:bb:43:ed:51:83:c0:68:6d:db:78:44:04:
                    05:a4:a8:e8:70:48:2d:cd:43:37:1b:a5:ba:69:7b:
                    01:fd:df:86:33:88:e0:f8:ed:4d:6c:b6:95:06:bc:
                    10:6b:8f:e3:ef:d4:53:aa:0f:75:43:28:cf:f5:6c:
                    3b:3e:80:d4:45:e7:29:41:36:fe:17:89:ee:03:1c:
                    21:ee:45:ea:8a:e2:bf:6c:b8:bc:3f:48:42:89:65:
                    e7:7d:40:cc:9f:74:be:4c:b8:84:90:b2:6a:02:0a:
                    3e:40:46:36:7d:b7:a1:82:55:b6:39:43:01:a7:ad:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FE:6A:D6:3F:D4:0A:0A:90:E3:B7:D3:EC:CD:50:96:30:C8:36:77
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:98:6e:31:82:66:e1:a0:8d:75:7e:4a:3c:7f:08:89:30:
         e1:f2:9d:67:bb:b0:fc:de:89:56:2b:0a:f9:b3:01:a2:57:a7:
         93:d0:e9:de:79:20:88:df:03:61:9b:2a:8b:5d:d0:5f:09:50:
         a0:79:b8:dd:92:c4:85:68:ae:6e:7e:ff:71:2a:60:f0:d1:83:
         cc:db:6d:1f:55:a7:ab:82:a8:18:4a:16:61:ad:04:a6:24:a1:
         ee:f1:dc:87:d5:71:0e:9f:7d:8d:7d:a8:99:9e:96:88:2d:f6:
         0f:84:a5:87:88:96:37:06:17:eb:8c:71:e3:04:29:8f:21:cc:
         80:f3:32:d5:82:8a:4e:e8:14:c5:b8:d1:12:ef:ff:9e:d3:1d:
         91:cc:91:ab:bb:79:1a:cf:8a:fd:15:84:4d:29:4b:fb:a8:6a:
         cf:e2:1b:ff:62:63:b4:0a:df:97:da:e8:78:94:69:30:a0:a9:
         e4:0e:e3:67:1d:4d:23:f5:82:9d:2a:37:b2:fd:7c:10:5f:a6:
         d2:1b:67:66:a0:9d:7e:da:4f:3b:17:80:d9:bf:cd:10:ea:76:
         78:4c:b0:1a:55:77:d3:59:8a:6c:22:7a:e7:8c:4d:0e:85:43:
         24:23:b9:5e:de:53:44:8e:b4:a9:3c:c4:25:16:94:5d:10:a1:
         b0:8f:1b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ExFkCZdzPdKDmkHQrS6bYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3
M2JjNDgwHhcNMjQwNTA0MTgwMTA5WhcNMjQwNTA1MTgwMTA5WjAzMTEwLwYDVQQD
EyhjNmZlNmFkNjNmZDQwYTBhOTBlM2I3ZDNlY2NkNTA5NjMwYzgzNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp2vOXL8zALVhdtivvDB6n9PzMxU
QpmYnjpEyxyZXuw3kzjtGHB85C55bFj8/8eudhzxps8AMZwUF89NU5qTxfiD7AAL
MHxaBpJ5wIjui98tqqolTEMvZ8jNMBQSM1Lk8PN5KuTuOD3b4hjcRLwvDoNnz/21
yyWY+yYpbAbaraDWvwgpQMGqYgS7Q+1Rg8Bobdt4RAQFpKjocEgtzUM3G6W6aXsB
/d+GM4jg+O1NbLaVBrwQa4/j79RTqg91QyjP9Ww7PoDURecpQTb+F4nuAxwh7kXq
iuK/bLi8P0hCiWXnfUDMn3S+TLiEkLJqAgo+QEY2fbehglW2OUMBp61/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb+atY/1AoKkOO30+zNUJYwyDZ3MB8GA1UdIwQY
MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt
MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0
LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgyYbjGC
ZuGgjXV+Sjx/CIkw4fKdZ7uw/N6JVisK+bMBolenk9Dp3nkgiN8DYZsqi13QXwlQ
oHm43ZLEhWiubn7/cSpg8NGDzNttH1Wnq4KoGEoWYa0EpiSh7vHch9VxDp99jX2o
mZ6WiC32D4Slh4iWNwYX64xx4wQpjyHMgPMy1YKKTugUxbjREu//ntMdkcyRq7t5
Gs+K/RWETSlL+6hqz+Ib/2JjtArfl9roeJRpMKCp5A7jZx1NI/WCnSo3sv18EF+m
0htnZqCdftpPOxeA2b/NEOp2eEywGlV301mKbCJ654xNDoVDJCO5Xt5TRI60qTzE
JRaUXRChsI8bWg==
-----END CERTIFICATE-----
Generated at Sat May 4 22:20:09 2024 by rpki-client on console-ams.rpki-client.org