Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          yJ5Oi/ND9sH3r8U7nL/wgdsIF1ONeDj+QqHc/5q6bKU=
Subject key identifier:   18:0D:D9:28:0F:6F:5B:6A:B1:E4:A0:01:2C:FE:61:D1:22:DE:C3:DC
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       018F1EC8E3590F6B2EE27C56C2C4D2E15F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          1140
Signing time:             Sat 27 Apr 2024 09:00:32 +0000
Manifest this update:     Sat 27 Apr 2024 09:00:32 +0000
Manifest next update:     Sun 28 Apr 2024 09:00:32 +0000
Files and hashes:         1: 999r0NWrPfvR3_rZH1SqP_hOOfU.roa (hash: v1n10El5aCqGaEq9W1kjPgP/b/caVobxI/OHO6kE1zI=)
                          2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 5dbpVnxFTOIfYsd6mxVrY0Oa1u+uEC9SXLOcxRHWqYs=)
                          3: Z4j1DLQanFUmbIvnmG3K9H6cQ8I.roa (hash: HtEqRzOi35BsTdQW6U6mqsrN2fZfG+M+ArMg7578XcY=)
                          4: hYz65H9ML5bXE1g4s4GPXZM09v0.roa (hash: 8hlYReX8GKCSzrIuxQGlwy6xTB2tEAPrh2am9BcJ1tM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:c8:e3:59:0f:6b:2e:e2:7c:56:c2:c4:d2:e1:5f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Apr 27 09:00:32 2024 GMT
            Not After : Apr 28 09:00:32 2024 GMT
        Subject: CN=180dd9280f6f5b6ab1e4a0012cfe61d122dec3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:18:62:55:84:c6:d1:5a:56:8e:7f:a7:33:
                    b0:bf:a5:3c:fd:b4:52:3c:2d:a1:bc:f3:7d:c1:03:
                    58:cb:f6:3d:4d:e1:25:c1:15:db:31:3d:e0:06:3e:
                    48:13:29:85:37:50:68:c4:78:87:b2:a3:57:cf:bb:
                    b9:64:e2:cd:b2:f5:e7:f0:a0:aa:13:0c:0b:c2:88:
                    41:dd:09:36:2f:b5:e7:44:2d:5a:86:e7:65:e8:b7:
                    3d:a4:79:25:75:3e:fd:02:0e:de:2c:25:99:72:e8:
                    52:4a:40:5e:61:13:b3:c9:6e:57:ce:d1:9c:42:49:
                    b8:eb:12:0f:31:94:69:f1:ac:6a:c8:c6:95:ca:2b:
                    5a:5a:8f:b2:46:a3:ea:a5:e9:34:82:f1:e0:59:c4:
                    6c:14:12:bd:fb:39:fc:b5:4c:67:a6:0d:41:ba:53:
                    e4:cc:d0:9e:be:a8:78:60:48:56:70:ce:34:e1:83:
                    7a:d2:fa:71:b0:a0:13:2e:50:65:0b:4f:14:a9:dc:
                    fb:7a:79:08:d5:2a:b8:68:5c:01:9d:cf:d3:81:8f:
                    e2:ff:70:eb:a0:34:13:df:9e:a8:f0:c0:63:2a:cd:
                    1a:af:6d:a4:9a:28:3f:58:08:d4:04:e7:a8:94:00:
                    eb:f9:9c:75:15:4f:14:b2:ec:1c:4b:89:fd:d6:8a:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:D9:28:0F:6F:5B:6A:B1:E4:A0:01:2C:FE:61:D1:22:DE:C3:DC
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:2a:6d:91:d0:89:55:34:fa:a8:8e:5f:34:d1:32:7f:f9:fb:
         01:72:04:e6:5a:bb:6e:f1:dc:00:56:20:0b:ab:6a:2e:1a:4c:
         6b:8a:7a:0d:33:40:c0:6f:64:1d:77:8a:07:23:6d:19:24:89:
         71:51:13:99:01:0e:5b:02:32:49:5a:e9:db:08:95:5b:0b:31:
         98:21:ab:73:b4:be:2c:84:2e:2d:f6:80:4f:64:b6:30:b9:ee:
         99:b1:2b:80:28:fe:4b:4d:78:a7:9e:e3:06:4a:9f:09:15:e3:
         43:ce:28:38:70:7a:b6:57:89:b1:4b:00:4f:6f:8e:dd:52:2b:
         e6:50:11:d5:02:0b:f5:7a:65:8c:1b:f8:36:93:64:6d:84:21:
         ee:20:27:ba:c0:6c:6c:f4:62:cd:4d:b6:c2:7f:b0:68:f0:f1:
         ed:93:5c:68:14:a0:51:5b:d1:94:ee:6d:b5:b4:1b:44:c9:b3:
         e9:44:ba:a0:ba:d2:7e:2c:63:d2:8e:bf:3f:67:40:0e:d3:c9:
         a0:64:a4:48:66:25:01:3f:18:31:cb:2f:78:c2:48:82:27:46:
         25:d7:ae:3f:a3:a5:f6:32:77:6e:10:74:5a:7d:d7:c7:66:16:
         73:ea:0f:c3:fb:52:68:7e:c2:51:e3:1d:a1:a4:84:64:03:4c:
         56:58:e5:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8eyONZD2su4nxWwsTS4V+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk
M2UzNWUwHhcNMjQwNDI3MDkwMDMyWhcNMjQwNDI4MDkwMDMyWjAzMTEwLwYDVQQD
EygxODBkZDkyODBmNmY1YjZhYjFlNGEwMDEyY2ZlNjFkMTIyZGVjM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscEYYlWExtFaVo5/pzOwv6U8/bRS
PC2hvPN9wQNYy/Y9TeElwRXbMT3gBj5IEymFN1BoxHiHsqNXz7u5ZOLNsvXn8KCq
EwwLwohB3Qk2L7XnRC1ahudl6Lc9pHkldT79Ag7eLCWZcuhSSkBeYROzyW5XztGc
Qkm46xIPMZRp8axqyMaVyitaWo+yRqPqpek0gvHgWcRsFBK9+zn8tUxnpg1BulPk
zNCevqh4YEhWcM404YN60vpxsKATLlBlC08Uqdz7enkI1Sq4aFwBnc/TgY/i/3Dr
oDQT356o8MBjKs0ar22kmig/WAjUBOeolADr+Zx1FU8UsuwcS4n91op2XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgN2SgPb1tqseSgASz+YdEi3sPcMB8GA1UdIwQY
MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt
ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4
LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyptkdCJ
VTT6qI5fNNEyf/n7AXIE5lq7bvHcAFYgC6tqLhpMa4p6DTNAwG9kHXeKByNtGSSJ
cVETmQEOWwIySVrp2wiVWwsxmCGrc7S+LIQuLfaAT2S2MLnumbErgCj+S014p57j
BkqfCRXjQ84oOHB6tleJsUsAT2+O3VIr5lAR1QIL9XpljBv4NpNkbYQh7iAnusBs
bPRizU22wn+waPDx7ZNcaBSgUVvRlO5ttbQbRMmz6US6oLrSfixj0o6/P2dADtPJ
oGSkSGYlAT8YMcsveMJIgidGJdeuP6Ol9jJ3bhB0Wn3Xx2YWc+oPw/tSaH7CUeMd
oaSEZANMVljlVw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 18:10:12 2024 by rpki-client on console-ams.rpki-client.org