Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          tzIuCXyaKaAswUly/5d9pcURDd8mea8dIYulRBSt+7w=
Subject key identifier:   AF:9E:20:FE:91:E5:41:1C:6C:79:74:8C:89:52:23:9D:6A:B8:93:7D
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       0191F9D9BD53240B0252E63B805D37305AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          0149
Signing time:             Mon 16 Sep 2024 08:01:22 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:22 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:22 +0000
Files and hashes:         1: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: gVZzvu+uz9NFhVzyBTKLFsicLbMtVIFfbHF5mgnjBSk=)
                          2: kKaiiklxSLDqp0rZWbmYYGUYrGs.roa (hash: rQs3Z63nD7QHQaTYuIEAVSYHHNBsNg87Aw1zVk4K3ZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:bd:53:24:0b:02:52:e6:3b:80:5d:37:30:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Sep 16 08:01:22 2024 GMT
            Not After : Sep 17 08:01:22 2024 GMT
        Subject: CN=af9e20fe91e5411c6c79748c8952239d6ab8937d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:5b:91:cd:ee:39:60:d3:ec:97:44:f3:54:
                    13:6b:d6:97:c8:86:88:86:f0:b5:cb:65:13:81:c4:
                    25:b5:95:8c:67:5e:c7:2c:9f:a0:1f:17:ec:53:6c:
                    b1:5c:80:9f:d2:b7:50:77:ab:87:7c:60:cd:16:75:
                    54:16:a7:b1:79:78:58:bd:82:06:7d:5e:00:54:50:
                    4b:37:fd:d6:2f:b7:e4:a5:15:2e:56:c1:1e:9d:19:
                    b6:63:c2:30:fc:c7:23:f7:db:a1:c8:e5:8e:0d:a4:
                    9a:0d:9f:9c:5e:1f:62:83:f7:b9:5f:64:d4:ec:4f:
                    b7:bc:67:9e:8b:e4:0e:bf:ce:bd:07:32:f1:d6:e2:
                    c3:cf:12:de:a5:7f:5c:98:1f:5a:88:b0:de:b0:0e:
                    96:6c:ef:be:5d:52:76:91:78:87:56:7d:38:54:a7:
                    e6:8b:0b:80:e8:19:3f:8e:d7:a6:cc:36:fa:0e:f5:
                    b1:95:98:42:3c:3e:ba:ab:62:ac:8a:2d:1d:f2:55:
                    79:a5:c9:07:89:d8:a9:3b:ba:3e:e5:5e:c2:36:a4:
                    d0:e9:87:51:4c:c5:c0:8f:bf:ab:43:e9:68:46:64:
                    e2:09:2c:19:df:ef:78:b5:09:d8:ed:dd:35:d8:5a:
                    ec:bc:b3:bd:e1:01:da:46:d6:3d:9c:c9:49:7f:31:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9E:20:FE:91:E5:41:1C:6C:79:74:8C:89:52:23:9D:6A:B8:93:7D
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:dd:f4:26:29:bc:2f:1f:f5:7a:f7:85:a7:fb:05:f8:f4:
         72:45:7d:28:6e:3a:73:1c:52:1e:29:95:b5:dc:1f:a6:33:12:
         48:eb:d9:05:6d:38:4c:da:2e:48:99:29:5a:d3:5a:81:5b:84:
         37:f9:a9:7f:9d:6e:7e:b8:dd:40:f3:ea:b6:3a:fe:d3:e1:a3:
         c8:6c:a7:df:83:09:59:c1:92:f2:a4:e4:e9:fd:14:5e:ed:ca:
         e8:43:44:cd:ad:b6:10:32:60:1a:c9:74:0b:4c:d7:48:b2:02:
         56:0e:dc:a2:23:24:86:d4:08:77:81:c7:91:3b:89:e5:9c:a2:
         8e:88:b5:7a:bb:dd:ee:5d:98:bf:a5:aa:b4:c8:bc:d1:86:05:
         be:9e:e4:1e:50:a3:76:c1:4c:61:16:af:4b:77:3d:6d:68:35:
         8d:f3:75:b6:c2:d6:a2:ae:eb:81:fe:72:34:0c:26:aa:cc:37:
         45:19:ad:d7:3b:1f:f5:57:8d:a6:75:6c:2b:0a:bd:af:b3:59:
         40:70:5f:60:25:4d:76:ff:2b:62:1d:75:3e:6a:90:42:f5:fa:
         39:d4:9a:10:b8:c8:99:0c:37:6e:61:bf:71:89:46:00:65:23:
         d7:d1:e7:99:ce:4b:de:6b:53:89:19:c3:fd:53:c3:0c:fc:5f:
         66:f3:16:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH52b1TJAsCUuY7gF03MFqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm
ODQ5MzYwHhcNMjQwOTE2MDgwMTIyWhcNMjQwOTE3MDgwMTIyWjAzMTEwLwYDVQQD
EyhhZjllMjBmZTkxZTU0MTFjNmM3OTc0OGM4OTUyMjM5ZDZhYjg5MzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQdbkc3uOWDT7JdE81QTa9aXyIaI
hvC1y2UTgcQltZWMZ17HLJ+gHxfsU2yxXICf0rdQd6uHfGDNFnVUFqexeXhYvYIG
fV4AVFBLN/3WL7fkpRUuVsEenRm2Y8Iw/Mcj99uhyOWODaSaDZ+cXh9ig/e5X2TU
7E+3vGeei+QOv869BzLx1uLDzxLepX9cmB9aiLDesA6WbO++XVJ2kXiHVn04VKfm
iwuA6Bk/jtemzDb6DvWxlZhCPD66q2Ksii0d8lV5pckHidipO7o+5V7CNqTQ6YdR
TMXAj7+rQ+loRmTiCSwZ3+94tQnY7d012FrsvLO94QHaRtY9nMlJfzECIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+eIP6R5UEcbHl0jIlSI51quJN9MB8GA1UdIwQY
MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt
ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl
LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn7d9CYp
vC8f9Xr3haf7Bfj0ckV9KG46cxxSHimVtdwfpjMSSOvZBW04TNouSJkpWtNagVuE
N/mpf51ufrjdQPPqtjr+0+GjyGyn34MJWcGS8qTk6f0UXu3K6ENEza22EDJgGsl0
C0zXSLICVg7coiMkhtQId4HHkTuJ5Zyijoi1ervd7l2Yv6WqtMi80YYFvp7kHlCj
dsFMYRavS3c9bWg1jfN1tsLWoq7rgf5yNAwmqsw3RRmt1zsf9VeNpnVsKwq9r7NZ
QHBfYCVNdv8rYh11PmqQQvX6OdSaELjImQw3bmG/cYlGAGUj19Hnmc5L3mtTiRnD
/VPDDPxfZvMWEQ==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:30 2024 by rpki-client on console-fra.rpki-client.org