Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File:                     q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier:          eJTRcHqvVUW+/hd2AA+0fCDTb/oNJyjdrVe5JMBGe9g=
Subject key identifier:   10:79:A7:CB:79:0A:B0:35:B2:BB:D9:0B:CD:8D:8D:69:3C:F3:60:A9
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer:       /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial:       018F87B6D407F09ACADF63FA79FFB8DA19D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:57 +0000
Manifest this update:     Fri 17 May 2024 18:00:57 +0000
Manifest next update:     Sat 18 May 2024 18:00:57 +0000
Files and hashes:         1: eZOpPpmf2U6UT76ZxC16aAn7UbQ.roa (hash: 9piTehD5X97It+H48SVt1nRRNymuyJa93SOOlsU4UDE=)
                          2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: MlPxBVBRbk9S8fp5COB1WMLoNZPixJjlL97PbpxFGoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:d4:07:f0:9a:ca:df:63:fa:79:ff:b8:da:19:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
        Validity
            Not Before: May 17 18:00:57 2024 GMT
            Not After : May 18 18:00:57 2024 GMT
        Subject: CN=1079a7cb790ab035b2bbd90bcd8d8d693cf360a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:20:0d:1b:ee:fe:53:46:60:bb:c0:e4:60:
                    64:4d:27:e7:b6:fb:5e:b7:2d:ad:91:05:1d:6d:cd:
                    72:29:76:26:fb:94:4e:11:83:ac:36:34:8f:35:0f:
                    bb:a4:2f:72:f6:1d:74:2c:ca:4e:5c:ec:84:3a:56:
                    55:ec:27:76:51:b8:7e:4c:8e:9a:f5:b2:fd:0f:be:
                    27:ab:a6:60:6f:da:50:89:d9:18:18:2f:4e:f7:cb:
                    4a:78:b7:c2:de:d7:2c:8f:b5:8f:47:15:2f:e1:ab:
                    2d:a2:93:01:c6:ef:41:05:1d:5e:55:e7:33:28:af:
                    37:3c:41:04:64:78:4d:33:60:ef:09:65:68:62:f9:
                    b7:20:e5:16:a2:ed:13:16:7b:c8:94:33:fd:d1:b4:
                    33:e2:fb:60:aa:7a:fa:ec:05:be:75:38:45:47:28:
                    0a:72:42:15:d6:43:6d:9f:52:da:05:c8:38:c4:39:
                    30:3b:19:d9:66:9c:b8:35:33:4d:4f:e1:cc:8f:37:
                    63:75:c6:2b:97:39:ba:50:2c:d9:58:e0:49:de:f1:
                    f6:1f:e0:ad:29:b8:07:20:80:b1:38:4f:10:dc:9d:
                    1a:59:ef:55:b0:b6:6a:2c:7d:38:dc:d3:4b:a9:9b:
                    16:c8:fa:17:e7:1b:65:d7:24:f9:92:21:19:f7:da:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:A7:CB:79:0A:B0:35:B2:BB:D9:0B:CD:8D:8D:69:3C:F3:60:A9
            X509v3 Authority Key Identifier:
                keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:ee:68:94:a0:d1:c2:7c:65:c4:b5:f7:10:b4:79:20:8c:
         e4:4d:fc:a5:80:45:f9:29:50:c8:87:ef:d6:13:af:e9:5c:ea:
         23:fc:24:7e:7f:be:12:8c:cb:54:01:a1:0d:15:e6:fe:39:e9:
         6a:9b:99:6a:b7:73:76:d8:02:df:2b:37:c5:69:73:b2:3b:49:
         51:a0:1f:98:f7:1e:ff:2a:76:68:66:1d:7e:db:74:8b:8d:07:
         77:d2:bd:5b:c9:e2:49:c9:e3:3b:37:f1:30:6b:95:94:cc:c6:
         2f:3f:87:f2:5f:63:5e:0b:f4:17:67:a5:ff:8d:f9:83:25:1a:
         a3:8b:f3:e4:24:fe:bd:5d:65:f4:d1:85:2e:5c:df:99:ba:bb:
         0f:df:70:e2:92:39:74:67:9d:b5:8d:2d:d4:45:a3:4a:a8:98:
         b1:54:23:c2:0f:b0:a0:d1:03:d6:09:34:1b:7c:b7:fa:d1:57:
         24:14:49:cf:de:f1:de:89:92:93:21:6f:ec:d8:c5:1a:2e:8e:
         6c:f4:32:80:f8:70:51:a6:11:ac:7d:17:95:99:a9:98:b6:fe:
         26:5a:07:9f:46:64:19:af:82:29:25:a9:e3:f1:56:c9:50:fc:
         48:98:12:4b:c7:d8:ab:dd:f6:05:ec:f9:60:71:bb:31:55:f7:
         b5:14:7a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HttQH8JrK32P6ef+42hnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGYwNDliNmQxNzYwMmJmN2I0OGQxMDRkMDhkYWYwMTQz
MWRiYzIwHhcNMjQwNTE3MTgwMDU3WhcNMjQwNTE4MTgwMDU3WjAzMTEwLwYDVQQD
EygxMDc5YTdjYjc5MGFiMDM1YjJiYmQ5MGJjZDhkOGQ2OTNjZjM2MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiMgDRvu/lNGYLvA5GBkTSfntvte
ty2tkQUdbc1yKXYm+5ROEYOsNjSPNQ+7pC9y9h10LMpOXOyEOlZV7Cd2Ubh+TI6a
9bL9D74nq6Zgb9pQidkYGC9O98tKeLfC3tcsj7WPRxUv4astopMBxu9BBR1eVecz
KK83PEEEZHhNM2DvCWVoYvm3IOUWou0TFnvIlDP90bQz4vtgqnr67AW+dThFRygK
ckIV1kNtn1LaBcg4xDkwOxnZZpy4NTNNT+HMjzdjdcYrlzm6UCzZWOBJ3vH2H+Ct
KbgHIICxOE8Q3J0aWe9VsLZqLH043NNLqZsWyPoX5xtl1yT5kiEZ99qFvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB5p8t5CrA1srvZC82NjWk882CpMB8GA1UdIwQY
MBaAFKtPBJttF2Ar97SNEE0I2vAUMdvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA4RW0yMFhZQ3YzdEkwUVRRamE4QlF4MjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NGQ0OWItYjBiOC00ZjBmLWExODgt
OTRhMTk2OGJjYWRiLzEvcTA4RW0yMFhZQ3YzdEkwUVRRamE4QlF4MjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85NGQ0OWItYjBiOC00ZjBmLWExODgtOTRhMTk2OGJjYWRi
LzEvcTA4RW0yMFhZQ3YzdEkwUVRRamE4QlF4MjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ7uaJSg
0cJ8ZcS19xC0eSCM5E38pYBF+SlQyIfv1hOv6VzqI/wkfn++EozLVAGhDRXm/jnp
apuZardzdtgC3ys3xWlzsjtJUaAfmPce/yp2aGYdftt0i40Hd9K9W8niScnjOzfx
MGuVlMzGLz+H8l9jXgv0F2el/435gyUao4vz5CT+vV1l9NGFLlzfmbq7D99w4pI5
dGedtY0t1EWjSqiYsVQjwg+woNED1gk0G3y3+tFXJBRJz97x3omSkyFv7NjFGi6O
bPQygPhwUaYRrH0XlZmpmLb+JloHn0ZkGa+CKSWp4/FWyVD8SJgSS8fYq932Bez5
YHG7MVX3tRR6hA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:44:13 2024 by rpki-client on console-fra.rpki-client.org