Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File:                     Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier:          TRHf6j+DEwKf1hV2aBAv1Yl1PtEqzgp3d0XP3r4kFsA=
Subject key identifier:   66:58:AD:D2:7E:F3:13:0E:6F:CF:94:91:A0:44:42:D8:FA:F9:11:B4
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer:       /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial:       018F8892299A8CC2B7CE5AA9CEECBEEBD023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 22:00:31 +0000
Manifest this update:     Fri 17 May 2024 22:00:31 +0000
Manifest next update:     Sat 18 May 2024 22:00:31 +0000
Files and hashes:         1: HlSNMNuyvI9bBM_cc0t7SytnZ90.roa (hash: RTvtDi1bTIBhBOm7YRP0PIxrb8YELHiFhV3TNRuLarg=)
                          2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: H4HmFcXQjKyTeausaI9zcB/SdpF5XNmUhRbXEE8gnMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:29:9a:8c:c2:b7:ce:5a:a9:ce:ec:be:eb:d0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
        Validity
            Not Before: May 17 22:00:31 2024 GMT
            Not After : May 18 22:00:31 2024 GMT
        Subject: CN=6658add27ef3130e6fcf9491a04442d8faf911b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:d2:bb:79:08:b1:d3:ec:6f:5a:6e:4c:a2:
                    27:57:c7:bb:7f:d8:08:f5:78:fc:53:70:36:d2:c9:
                    ba:95:6f:49:64:b3:7a:2b:43:41:79:7d:f3:99:a6:
                    06:4d:00:88:cb:9e:e6:df:99:0c:e7:a7:b5:69:15:
                    c0:97:8d:cf:a1:3d:b0:3a:29:49:52:f0:97:e3:53:
                    77:f2:5c:07:0b:45:ba:a4:04:41:da:e1:5e:d2:87:
                    c0:29:8f:11:ab:31:6b:3a:6a:c8:35:64:1f:e5:cd:
                    2a:21:7c:e4:07:bb:f8:95:47:a1:6f:4f:f3:06:6a:
                    44:b8:02:8b:65:52:0c:55:8d:2c:f3:e0:45:48:90:
                    a2:07:d0:f5:1a:b1:0a:eb:8b:b2:85:7d:91:27:7f:
                    70:48:6d:29:ac:e9:a1:ac:c8:45:20:67:f1:27:a5:
                    93:20:55:56:d7:e9:d5:9c:9c:fb:d1:18:de:01:56:
                    ae:02:84:37:13:5e:4e:24:31:30:bf:70:b1:35:f1:
                    0b:4b:3b:15:66:b2:37:79:2f:5d:5f:8c:11:16:d4:
                    7c:fd:5f:40:c0:8c:fc:4d:92:f9:5b:d7:3d:21:19:
                    b0:95:d1:f5:19:87:4e:7f:ef:45:ae:d0:fb:c9:5f:
                    77:97:ec:ca:c7:43:fb:24:9d:23:94:39:e7:a1:ae:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:AD:D2:7E:F3:13:0E:6F:CF:94:91:A0:44:42:D8:FA:F9:11:B4
            X509v3 Authority Key Identifier:
                keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:21:df:e0:6f:69:4a:19:6d:29:ad:bd:6b:c4:ff:a5:89:b2:
         c4:cc:c6:ab:c0:a2:a3:f8:6e:e3:c8:58:bd:4c:91:89:dc:b7:
         8d:92:54:a5:44:99:f6:fe:3c:74:e3:0e:e1:10:7f:79:5e:34:
         97:b0:b9:00:7e:d0:41:44:0c:ec:d9:eb:a9:ae:ee:c3:72:fe:
         a7:0f:28:cf:2e:15:df:b7:22:01:8c:e2:ea:b5:29:a9:5e:b1:
         7a:16:f3:93:2e:7f:5f:71:3d:45:d4:e5:4a:30:45:f3:b4:85:
         5c:f9:7a:41:cc:0c:fd:e9:58:0e:4c:06:24:ab:4d:6e:71:a8:
         83:62:88:b6:c2:0d:b2:61:5b:e4:0e:35:8b:c1:dd:5a:3f:58:
         45:2c:bd:09:5b:bb:8b:bf:b7:22:e1:d6:11:e3:68:1f:14:16:
         90:86:6a:94:c9:cb:00:06:3f:f6:96:be:ad:d8:e8:d8:64:21:
         3a:97:77:04:ce:c9:37:d1:cc:37:bc:57:be:aa:ef:89:95:27:
         57:dd:78:8e:c3:3f:f7:b2:20:54:6c:31:f5:50:b8:e2:8b:f3:
         c2:93:be:57:66:f1:8b:f7:17:46:b8:a6:12:7d:5f:ca:fa:f4:
         1b:11:47:e9:52:32:50:4d:85:a6:70:a8:a7:26:db:c3:a7:ec:
         2a:24:ff:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkimajMK3zlqpzuy+69AjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh
Y2I0NGQwHhcNMjQwNTE3MjIwMDMxWhcNMjQwNTE4MjIwMDMxWjAzMTEwLwYDVQQD
Eyg2NjU4YWRkMjdlZjMxMzBlNmZjZjk0OTFhMDQ0NDJkOGZhZjkxMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvITSu3kIsdPsb1puTKInV8e7f9gI
9Xj8U3A20sm6lW9JZLN6K0NBeX3zmaYGTQCIy57m35kM56e1aRXAl43PoT2wOilJ
UvCX41N38lwHC0W6pARB2uFe0ofAKY8RqzFrOmrINWQf5c0qIXzkB7v4lUehb0/z
BmpEuAKLZVIMVY0s8+BFSJCiB9D1GrEK64uyhX2RJ39wSG0prOmhrMhFIGfxJ6WT
IFVW1+nVnJz70RjeAVauAoQ3E15OJDEwv3CxNfELSzsVZrI3eS9dX4wRFtR8/V9A
wIz8TZL5W9c9IRmwldH1GYdOf+9FrtD7yV93l+zKx0P7JJ0jlDnnoa73CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZYrdJ+8xMOb8+UkaBEQtj6+RG0MB8GA1UdIwQY
MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt
MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj
LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiHf4G9p
ShltKa29a8T/pYmyxMzGq8Cio/hu48hYvUyRidy3jZJUpUSZ9v48dOMO4RB/eV40
l7C5AH7QQUQM7Nnrqa7uw3L+pw8ozy4V37ciAYzi6rUpqV6xehbzky5/X3E9RdTl
SjBF87SFXPl6QcwM/elYDkwGJKtNbnGog2KItsINsmFb5A41i8HdWj9YRSy9CVu7
i7+3IuHWEeNoHxQWkIZqlMnLAAY/9pa+rdjo2GQhOpd3BM7JN9HMN7xXvqrviZUn
V914jsM/97IgVGwx9VC44ovzwpO+V2bxi/cXRrimEn1fyvr0GxFH6VIyUE2FpnCo
pybbw6fsKiT/rg==
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:55 2024 by rpki-client on console-fra.rpki-client.org