Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
File:                     ksccIHipHnbA5abTAJaHLJIsnNw.mft (raw, json)
Hash identifier:          H7+ZPAHv9HYEIBfioizLDQ2GmT8VZVRhICbw2unHTQE=
Subject key identifier:   F9:EB:9B:E1:51:C2:FF:97:D5:D9:05:C2:53:BE:7E:31:13:B2:4C:24
Authority key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Certificate issuer:       /CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Certificate serial:       018F885AD697E8CC3286EF2CE836CD1DDA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 21:00:05 +0000
Manifest this update:     Fri 17 May 2024 21:00:05 +0000
Manifest next update:     Sat 18 May 2024 21:00:05 +0000
Files and hashes:         1: L6k5F-1W4EDImOZGY55GSn-FyG0.roa (hash: kNgjh1Qem2EOpGhM3wCxmgidnzmk+TlCS6QEko1MZHo=)
                          2: Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa (hash: P4s6GLevOrx2CJ0bVX/4CvCtHDVfb2x8hCs8zG8YwEg=)
                          3: ksccIHipHnbA5abTAJaHLJIsnNw.crl (hash: Fn9ngV3yVzWmQeHXSzRZtq/kSkWOFlLcNTqQJpnpqho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:d6:97:e8:cc:32:86:ef:2c:e8:36:cd:1d:da:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
        Validity
            Not Before: May 17 21:00:05 2024 GMT
            Not After : May 18 21:00:05 2024 GMT
        Subject: CN=f9eb9be151c2ff97d5d905c253be7e3113b24c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:3a:92:a0:75:0d:28:24:64:d1:24:be:ec:
                    5a:81:b0:0f:d8:e6:03:7e:71:83:98:6f:20:9b:cb:
                    e4:46:e7:17:b0:93:e9:46:80:c2:f9:ff:0f:18:05:
                    ac:fd:d3:55:46:76:26:04:09:4e:d4:82:82:2b:41:
                    55:67:0f:93:3b:a8:61:59:ab:02:29:37:f6:58:f1:
                    bc:9b:8e:4c:cb:73:e2:a0:7b:45:4b:b4:75:67:08:
                    10:1a:4f:ba:3f:9d:35:76:cb:0e:71:a5:3a:07:cd:
                    1d:18:d3:50:51:aa:f3:2f:db:6d:c8:a6:67:1a:ff:
                    65:d2:56:81:f9:e4:5b:07:e3:39:53:44:5b:5a:1d:
                    d7:37:0f:e8:0d:e8:8d:da:19:cb:b6:1c:14:ef:91:
                    85:2b:5f:ba:aa:45:72:64:95:a7:d5:39:8e:be:8f:
                    c4:3b:f8:93:76:70:24:d3:e9:33:d1:ee:f8:f7:d0:
                    25:ee:de:0a:99:9f:15:f6:9e:ba:71:e1:b3:d8:bf:
                    96:df:df:ee:9b:e6:43:85:b2:ad:76:2e:8b:6e:65:
                    36:64:74:d2:e3:17:bd:36:7c:bc:99:e6:b1:7d:45:
                    6c:b5:44:05:8f:ff:b4:b5:21:9e:d1:04:5a:d4:ef:
                    59:8b:1e:4b:ff:4e:0f:82:57:82:fb:8f:f2:32:48:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:9B:E1:51:C2:FF:97:D5:D9:05:C2:53:BE:7E:31:13:B2:4C:24
            X509v3 Authority Key Identifier:
                keyid:92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:ea:18:14:bb:40:f5:e4:9b:a5:2b:51:04:c6:66:a1:09:
         92:5a:89:8a:ac:fb:26:a8:40:ec:e6:f9:9f:a3:84:9c:80:60:
         93:e1:6c:8e:45:05:ae:e0:10:ae:78:65:77:84:da:f1:f9:1a:
         7c:97:c3:98:63:0b:45:69:50:0f:4f:f3:19:94:74:49:cb:20:
         6c:39:09:b7:d4:23:50:6a:4e:ff:59:fd:37:bb:27:fb:ea:88:
         a4:ab:dc:7c:ac:f4:cc:ce:5f:3a:6e:e3:92:7e:62:25:f9:b1:
         2d:65:ff:aa:08:09:04:9d:d8:9d:76:03:8c:aa:18:d9:30:fd:
         11:2f:ac:88:17:2d:23:63:f8:f2:c6:16:b9:fe:6c:a8:fa:c3:
         cd:18:99:6b:85:58:4a:cc:19:50:f9:90:73:33:54:18:4b:10:
         9d:b3:1b:c1:68:a1:f9:56:62:9c:d1:21:10:1a:50:a0:77:3e:
         69:49:a4:cc:ae:99:7d:3a:a0:02:ff:2e:62:7c:c5:15:3d:35:
         c7:0b:b2:f7:be:9b:30:b0:f9:7a:59:30:14:dc:20:0d:96:36:
         db:7c:9d:de:61:b0:d3:e1:6d:71:a9:db:c9:44:c5:5c:da:7e:
         bd:f8:1f:4c:f4:2d:6c:23:42:88:1c:85:4b:ee:9d:c1:1d:c5:
         80:42:41:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWtaX6Mwyhu8s6DbNHdolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzcxYzIwNzhhOTFlNzZjMGU1YTZkMzAwOTY4NzJjOTIy
YzljZGMwHhcNMjQwNTE3MjEwMDA1WhcNMjQwNTE4MjEwMDA1WjAzMTEwLwYDVQQD
EyhmOWViOWJlMTUxYzJmZjk3ZDVkOTA1YzI1M2JlN2UzMTEzYjI0YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFk6kqB1DSgkZNEkvuxagbAP2OYD
fnGDmG8gm8vkRucXsJPpRoDC+f8PGAWs/dNVRnYmBAlO1IKCK0FVZw+TO6hhWasC
KTf2WPG8m45My3PioHtFS7R1ZwgQGk+6P501dssOcaU6B80dGNNQUarzL9ttyKZn
Gv9l0laB+eRbB+M5U0RbWh3XNw/oDeiN2hnLthwU75GFK1+6qkVyZJWn1TmOvo/E
O/iTdnAk0+kz0e7499Al7t4KmZ8V9p66ceGz2L+W39/um+ZDhbKtdi6LbmU2ZHTS
4xe9Nny8meaxfUVstUQFj/+0tSGe0QRa1O9Zix5L/04PgleC+4/yMkireQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnrm+FRwv+X1dkFwlO+fjETskwkMB8GA1UdIwQY
MBaAFJLHHCB4qR52wOWm0wCWhyySLJzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NjY0lIaXBIbmJBNWFiVEFKYUhMSklzbk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jMTcyMzctYTEzNC00YjExLWFiMTIt
OWZiNmI2MGJkNjlhLzEva3NjY0lIaXBIbmJBNWFiVEFKYUhMSklzbk53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jMTcyMzctYTEzNC00YjExLWFiMTItOWZiNmI2MGJkNjlh
LzEva3NjY0lIaXBIbmJBNWFiVEFKYUhMSklzbk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQjqGBS7
QPXkm6UrUQTGZqEJklqJiqz7JqhA7Ob5n6OEnIBgk+FsjkUFruAQrnhld4Ta8fka
fJfDmGMLRWlQD0/zGZR0ScsgbDkJt9QjUGpO/1n9N7sn++qIpKvcfKz0zM5fOm7j
kn5iJfmxLWX/qggJBJ3YnXYDjKoY2TD9ES+siBctI2P48sYWuf5sqPrDzRiZa4VY
SswZUPmQczNUGEsQnbMbwWih+VZinNEhEBpQoHc+aUmkzK6ZfTqgAv8uYnzFFT01
xwuy976bMLD5elkwFNwgDZY223yd3mGw0+FtcanbyUTFXNp+vfgfTPQtbCNCiByF
S+6dwR3FgEJByg==
-----END CERTIFICATE-----
Generated at Fri May 17 22:05:05 2024 by rpki-client on console-ams.rpki-client.org