Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File:                     NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier:          0GTUhbSsfq1NmEJirkwLR3NQTBwqLsctfO0dEVlpG/M=
Subject key identifier:   AB:30:28:02:1D:79:9C:E9:36:DA:72:DF:3C:EB:EC:56:AE:6F:7F:5E
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer:       /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial:       018F8748D7FF6E737A60282A7CB41D8E276B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:48 +0000
Manifest this update:     Fri 17 May 2024 16:00:48 +0000
Manifest next update:     Sat 18 May 2024 16:00:48 +0000
Files and hashes:         1: EljBY25fzRaukO_GAd3ezV3sn2Q.roa (hash: 9rTSTTg9jfkHCRG+ceKr9nRXkZwPPts4igHALHj3+Jc=)
                          2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: Q9SN2LxksKX7tXhR9jCH8MkMp1JJr6mY8/KOhSk8Fn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d7:ff:6e:73:7a:60:28:2a:7c:b4:1d:8e:27:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
        Validity
            Not Before: May 17 16:00:48 2024 GMT
            Not After : May 18 16:00:48 2024 GMT
        Subject: CN=ab3028021d799ce936da72df3cebec56ae6f7f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:73:2a:8c:00:62:23:a9:17:4a:da:1c:8f:
                    ae:db:dd:c5:92:05:ec:8d:91:75:6e:f4:2f:9c:18:
                    29:37:de:ba:32:8c:fe:e4:4b:05:e3:ec:40:c7:4e:
                    55:f3:70:b7:9d:18:a2:a0:24:e4:51:67:03:30:2b:
                    f8:1e:52:42:3e:9b:40:f1:1a:c0:35:a2:71:d6:7e:
                    f7:de:5b:1f:93:f7:f5:c2:62:75:37:ba:32:f8:5a:
                    09:c1:b0:d1:88:88:88:34:48:e2:83:fb:f2:03:19:
                    ea:39:05:35:a0:1b:7f:f3:39:7b:6b:b3:54:cf:26:
                    ed:a2:c7:95:3e:81:98:ad:17:0c:67:84:23:70:67:
                    38:9b:c4:1b:b4:c2:ca:93:68:c1:eb:cb:86:c2:02:
                    b9:51:43:a8:77:f7:88:9a:80:92:c2:d3:8f:3d:d6:
                    2f:3d:61:f5:29:81:30:f2:99:36:8d:97:99:30:12:
                    d4:7f:73:23:8a:93:d1:bc:12:92:e9:58:79:2c:b9:
                    87:68:79:4b:9c:18:78:8f:4a:62:87:fb:fc:b2:d3:
                    a5:28:3e:87:bb:71:73:65:bf:aa:fe:0c:3e:b7:dd:
                    46:99:33:78:db:7c:a1:5b:bb:b2:60:4c:c6:e3:3c:
                    f8:54:8e:51:cb:08:00:9c:c7:7e:3c:5b:c0:6b:0f:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:28:02:1D:79:9C:E9:36:DA:72:DF:3C:EB:EC:56:AE:6F:7F:5E
            X509v3 Authority Key Identifier:
                keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:50:1e:0b:a3:2f:45:d8:79:ad:1a:bd:bd:34:62:8c:89:82:
         36:c2:be:d3:df:e6:69:59:e1:4a:58:a9:f0:39:ca:94:05:68:
         0d:68:dd:6b:f1:a2:c2:1e:73:f5:77:0d:a8:0d:c4:f5:6f:6f:
         7e:26:20:70:5e:ed:71:b7:b5:52:80:0f:20:e8:5c:55:8a:f0:
         40:a6:d4:5c:e6:25:95:90:81:a4:cd:09:06:de:25:83:15:9c:
         27:b6:c3:7b:07:13:e6:2b:e7:1b:2f:de:cd:3b:07:ce:74:c3:
         7f:df:ec:e4:9b:89:ad:5a:55:83:cc:70:ba:66:c5:69:08:8a:
         21:86:3a:ed:79:60:5d:16:83:aa:c1:76:02:67:30:ee:86:c7:
         b7:7f:0e:07:e5:fe:4d:15:91:1f:bf:dd:eb:e8:6b:5b:3b:9f:
         31:de:c4:be:59:13:d0:01:4b:2f:af:13:c4:ae:84:a5:a0:23:
         d9:3b:e7:3f:6a:5e:12:57:89:5a:3b:02:77:91:6e:3b:79:ea:
         09:a4:59:d5:b3:af:a7:f3:94:ff:37:1a:63:e5:2a:d8:03:ab:
         60:ae:ce:e8:49:60:7e:db:1f:ec:2b:a9:f4:6e:8c:8d:0c:dc:
         fd:3a:c6:66:1b:2f:8e:39:0d:2e:c5:f4:6f:01:3e:2f:5a:14:
         24:e1:e0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSNf/bnN6YCgqfLQdjidrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2
Nzg1ZWIwHhcNMjQwNTE3MTYwMDQ4WhcNMjQwNTE4MTYwMDQ4WjAzMTEwLwYDVQQD
EyhhYjMwMjgwMjFkNzk5Y2U5MzZkYTcyZGYzY2ViZWM1NmFlNmY3ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXFzKowAYiOpF0raHI+u293FkgXs
jZF1bvQvnBgpN966Moz+5EsF4+xAx05V83C3nRiioCTkUWcDMCv4HlJCPptA8RrA
NaJx1n733lsfk/f1wmJ1N7oy+FoJwbDRiIiINEjig/vyAxnqOQU1oBt/8zl7a7NU
zybtoseVPoGYrRcMZ4QjcGc4m8QbtMLKk2jB68uGwgK5UUOod/eImoCSwtOPPdYv
PWH1KYEw8pk2jZeZMBLUf3MjipPRvBKS6Vh5LLmHaHlLnBh4j0pih/v8stOlKD6H
u3FzZb+q/gw+t91GmTN423yhW7uyYEzG4zz4VI5RywgAnMd+PFvAaw8ksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKswKAIdeZzpNtpy3zzr7Faub39eMB8GA1UdIwQY
MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct
NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0
LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1AeC6Mv
Rdh5rRq9vTRijImCNsK+09/maVnhSlip8DnKlAVoDWjda/Giwh5z9XcNqA3E9W9v
fiYgcF7tcbe1UoAPIOhcVYrwQKbUXOYllZCBpM0JBt4lgxWcJ7bDewcT5ivnGy/e
zTsHznTDf9/s5JuJrVpVg8xwumbFaQiKIYY67XlgXRaDqsF2Amcw7obHt38OB+X+
TRWRH7/d6+hrWzufMd7EvlkT0AFLL68TxK6EpaAj2TvnP2peEleJWjsCd5FuO3nq
CaRZ1bOvp/OU/zcaY+Uq2AOrYK7O6Elgftsf7Cup9G6MjQzc/TrGZhsvjjkNLsX0
bwE+L1oUJOHg1A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:04:47 2024 by rpki-client on console-ams.rpki-client.org