Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File:                     p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier:          q8UXS/Modx1tI7YXi0Fwp8GUFHLlZEtUqLw1508/I2A=
Subject key identifier:   2F:E8:44:98:A2:D2:D2:8F:E6:E2:8E:17:A0:D7:04:10:C9:64:E9:A6
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer:       /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial:       018F86A3A6DA96659B11059D721C45F55F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 13:00:22 +0000
Manifest this update:     Fri 17 May 2024 13:00:22 +0000
Manifest next update:     Sat 18 May 2024 13:00:22 +0000
Files and hashes:         1: EXLK004LpHUebQns5i83b_nNjPk.roa (hash: lpoh/xDbyxYVCQHHRF1J1CBTdGPiAKOsCqGz2ddVfyk=)
                          2: iG-5dn3xo2ruG4NOQ7lmzi11KMs.roa (hash: IruncjsRzgmXVEhV7hlyE7sArwwtVpYM8lMSiFw3dso=)
                          3: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: RlnE8MQxdRR5rn573Zw4bIFfR1JIiyO3fWjEFS2H7WU=)
                          4: tspMs3Skyd5To9l0aCd1_JXur8Y.roa (hash: se0t7cnwEJItd7J7l5c5eI3OL8lt39nmJeo5NSvaOTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a6:da:96:65:9b:11:05:9d:72:1c:45:f5:5f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
        Validity
            Not Before: May 17 13:00:22 2024 GMT
            Not After : May 18 13:00:22 2024 GMT
        Subject: CN=2fe84498a2d2d28fe6e28e17a0d70410c964e9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:8b:03:32:d3:69:9b:ae:a6:57:d4:5d:c2:
                    3f:f7:cd:61:bf:23:4a:38:40:97:40:d7:86:2f:d7:
                    56:23:fd:12:f3:9e:42:6f:42:9e:6a:6c:33:4f:e5:
                    41:86:28:7c:55:c3:a8:f7:c2:75:94:d2:fc:17:4d:
                    70:6b:8c:fe:1c:5a:a2:bb:11:7a:6f:5e:c1:d5:bd:
                    a2:ec:b0:a9:2d:b4:17:9a:b3:28:47:d9:59:7f:aa:
                    9d:24:74:d2:19:4e:e4:25:0c:66:0f:7f:50:03:9b:
                    5e:81:a3:7e:ea:13:ae:23:34:f5:06:95:e3:7f:2e:
                    65:ea:8b:b3:cd:38:8c:4a:d8:53:82:32:5e:de:76:
                    ca:ed:27:fa:3f:29:5d:ae:06:66:75:8e:4e:6d:d3:
                    79:47:0c:ab:41:94:77:77:86:a9:85:a6:1d:c7:92:
                    f0:52:2c:84:11:2f:4e:36:8e:ca:5b:ca:e6:b9:52:
                    6f:a1:7a:5f:97:b2:76:c5:f6:00:25:8e:09:09:02:
                    4b:40:6e:ce:ab:74:18:db:dc:15:d1:8c:13:65:27:
                    68:6e:c5:e5:38:37:1c:55:93:2c:72:fc:79:f0:b6:
                    54:cf:2e:6d:8d:91:4c:44:6c:2e:e9:20:69:66:0d:
                    28:01:f0:fa:d2:58:bc:7e:04:65:37:fc:49:32:54:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:44:98:A2:D2:D2:8F:E6:E2:8E:17:A0:D7:04:10:C9:64:E9:A6
            X509v3 Authority Key Identifier:
                keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:1b:66:e9:7d:4f:1e:97:20:f2:ef:67:71:8e:d9:18:84:
         75:da:fc:58:0d:56:ae:f0:bb:9b:34:b4:1a:66:5c:10:60:41:
         f9:b5:2c:59:cf:0b:b5:09:3c:c9:a9:da:84:7a:04:39:2e:58:
         c2:28:09:ee:cb:c7:ed:ce:76:29:b1:c6:f9:ee:50:4b:38:cf:
         16:d3:2d:6a:fd:8f:15:48:2f:01:24:a6:d9:cf:52:80:ab:39:
         bb:e7:52:dc:62:8a:c8:06:4d:a7:25:f5:b0:3d:26:fd:7e:14:
         1e:ec:19:84:b8:08:6f:b5:55:fb:6a:ba:cb:6a:a1:5c:da:cd:
         bf:1a:38:ff:05:83:bf:89:52:70:fc:36:f5:83:18:38:a5:e0:
         7d:24:d0:e7:52:3b:7f:1e:ab:bc:53:9e:93:0c:1a:64:24:f2:
         ca:ab:99:f0:93:ab:f6:56:d1:cf:6d:02:39:ce:46:d7:ff:b0:
         a6:92:19:ea:d7:c3:8f:05:91:6a:d2:7c:27:ec:72:c4:aa:76:
         25:7e:0d:b3:5d:75:ed:3f:1a:43:9c:22:85:b1:9e:08:e1:3e:
         2f:0a:09:ab:eb:09:e2:c8:42:34:2b:5a:f9:92:9c:fc:21:d8:
         83:09:7b:a3:f0:30:d0:fa:5e:d5:ce:ef:72:25:3e:50:70:a5:
         a5:f0:16:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go6balmWbEQWdchxF9V8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0
YjUyNDgwHhcNMjQwNTE3MTMwMDIyWhcNMjQwNTE4MTMwMDIyWjAzMTEwLwYDVQQD
EygyZmU4NDQ5OGEyZDJkMjhmZTZlMjhlMTdhMGQ3MDQxMGM5NjRlOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOSLAzLTaZuuplfUXcI/981hvyNK
OECXQNeGL9dWI/0S855Cb0KeamwzT+VBhih8VcOo98J1lNL8F01wa4z+HFqiuxF6
b17B1b2i7LCpLbQXmrMoR9lZf6qdJHTSGU7kJQxmD39QA5tegaN+6hOuIzT1BpXj
fy5l6ouzzTiMSthTgjJe3nbK7Sf6PyldrgZmdY5ObdN5RwyrQZR3d4aphaYdx5Lw
UiyEES9ONo7KW8rmuVJvoXpfl7J2xfYAJY4JCQJLQG7Oq3QY29wV0YwTZSdobsXl
ODccVZMscvx58LZUzy5tjZFMRGwu6SBpZg0oAfD60li8fgRlN/xJMlQO9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/oRJii0tKP5uKOF6DXBBDJZOmmMB8GA1UdIwQY
MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et
N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5
LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGMbZul9
Tx6XIPLvZ3GO2RiEddr8WA1WrvC7mzS0GmZcEGBB+bUsWc8LtQk8yanahHoEOS5Y
wigJ7svH7c52KbHG+e5QSzjPFtMtav2PFUgvASSm2c9SgKs5u+dS3GKKyAZNpyX1
sD0m/X4UHuwZhLgIb7VV+2q6y2qhXNrNvxo4/wWDv4lScPw29YMYOKXgfSTQ51I7
fx6rvFOekwwaZCTyyquZ8JOr9lbRz20COc5G1/+wppIZ6tfDjwWRatJ8J+xyxKp2
JX4Ns1117T8aQ5wihbGeCOE+LwoJq+sJ4shCNCta+ZKc/CHYgwl7o/Aw0Ppe1c7v
ciU+UHClpfAWZA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:04:04 2024 by rpki-client on console-ams.rpki-client.org