Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File:                     lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier:          93otm0nONyVhuVOlp4kqZNTyyjbxJsukZlJV338hBVs=
Subject key identifier:   88:C6:9A:EE:2E:AE:D0:84:4D:40:42:48:B9:33:6B:BC:8E:03:4C:A3
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer:       /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial:       018F87B6B2040F296A7A9D036E3148F4260E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: 1Zcsy1tupXNKNd4A1qri2j36_fo.roa (hash: x2VniuTUVur72wgqJaBLNLUfRN1fSgUIVHnlKj1aZrM=)
                          2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: vjG9o7iPNvP02ripEuANL0mMUjbrT9f3PhNdjars6wM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b2:04:0f:29:6a:7a:9d:03:6e:31:48:f4:26:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=88c69aee2eaed0844d404248b9336bbc8e034ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:5e:1a:52:15:d5:a9:c0:d1:7a:a3:60:cb:
                    79:2f:6c:e0:5e:43:78:c4:1b:7b:25:f0:cf:07:0e:
                    02:39:33:a7:3f:0d:6e:70:52:6d:ea:a3:df:d6:73:
                    fa:ff:c1:75:a8:7f:85:32:ec:d6:dd:4b:91:17:a6:
                    53:2d:07:ec:65:ec:da:18:0a:7e:9e:95:31:a8:b2:
                    73:57:41:72:46:c1:5a:53:be:29:b1:01:d4:28:c4:
                    6b:a6:51:77:2a:d2:75:c7:d7:aa:51:ce:9c:33:b0:
                    c6:20:2b:7a:60:50:6e:b9:61:c2:e1:18:e5:de:0c:
                    8e:6c:81:f8:f5:ba:f5:ed:17:60:68:2f:b5:bc:61:
                    84:18:20:7d:41:b0:a9:cf:f2:8b:5a:44:c0:e2:b3:
                    12:05:30:e0:d5:16:b2:8d:42:35:88:c2:2b:43:76:
                    c4:d6:7b:a9:0c:80:cb:7c:e3:48:92:50:8d:ec:f7:
                    d8:a0:3d:ae:01:c4:ff:35:4e:c9:5e:f3:32:2c:63:
                    57:54:b8:1c:f9:40:f2:5b:4a:1c:12:ff:1c:d3:7d:
                    85:5d:bf:4d:94:c0:08:45:ed:e7:15:e0:81:d9:87:
                    82:91:94:46:c4:d3:ed:c3:ef:63:c5:ba:be:78:99:
                    24:51:d6:fa:f8:9a:c3:89:fd:41:aa:ac:ad:b6:0f:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C6:9A:EE:2E:AE:D0:84:4D:40:42:48:B9:33:6B:BC:8E:03:4C:A3
            X509v3 Authority Key Identifier:
                keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:04:23:33:8d:71:8e:cc:86:75:34:0b:bf:92:fa:6e:e0:93:
         53:cd:81:08:cd:7a:92:a1:8c:71:d8:79:79:95:7b:5f:39:ef:
         66:5f:43:3a:a5:23:ba:be:ff:ef:36:59:dd:be:ef:36:a2:13:
         ed:44:3f:55:28:ec:4f:5b:7d:bb:d7:2d:7d:5a:22:7b:0c:ce:
         5f:a2:1c:23:6e:37:72:a2:8b:c7:7f:b8:8f:0f:e9:02:fb:89:
         fe:56:26:e3:1f:2a:9c:bf:0c:23:c7:65:ab:4c:19:4b:7b:d6:
         ec:dd:f2:88:58:02:3e:95:0a:0b:35:4c:2b:ec:8a:bb:67:59:
         3c:13:cd:15:6e:77:80:e4:ac:4c:cc:bd:95:58:5e:93:e7:80:
         7e:76:92:3b:05:4b:1d:b2:fc:1e:2e:31:3a:e3:f0:56:5c:41:
         f5:8a:12:b1:dd:3f:ad:00:76:a6:f9:da:b0:65:ab:a0:34:7f:
         0d:a7:d3:d0:80:b9:f4:45:4e:01:90:d6:62:c1:73:6f:62:15:
         94:0f:fc:ed:b9:e9:d7:92:d6:53:65:9b:95:c0:1a:7c:77:77:
         5e:af:40:81:3b:53:fe:88:ff:4c:ba:ff:ec:24:95:56:49:11:
         6a:d3:0e:7e:0a:d7:25:b5:f4:1c:ad:63:f2:3a:8c:bb:7f:c6:
         8c:b0:4f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtrIEDylqep0DbjFI9CYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjQwNTE3MTgwMDQ4WhcNMjQwNTE4MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg4OGM2OWFlZTJlYWVkMDg0NGQ0MDQyNDhiOTMzNmJiYzhlMDM0Y2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+5eGlIV1anA0XqjYMt5L2zgXkN4
xBt7JfDPBw4COTOnPw1ucFJt6qPf1nP6/8F1qH+FMuzW3UuRF6ZTLQfsZezaGAp+
npUxqLJzV0FyRsFaU74psQHUKMRrplF3KtJ1x9eqUc6cM7DGICt6YFBuuWHC4Rjl
3gyObIH49br17RdgaC+1vGGEGCB9QbCpz/KLWkTA4rMSBTDg1RayjUI1iMIrQ3bE
1nupDIDLfONIklCN7PfYoD2uAcT/NU7JXvMyLGNXVLgc+UDyW0ocEv8c032FXb9N
lMAIRe3nFeCB2YeCkZRGxNPtw+9jxbq+eJkkUdb6+JrDif1Bqqyttg/1SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjGmu4urtCETUBCSLkza7yOA0yjMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgQjM41x
jsyGdTQLv5L6buCTU82BCM16kqGMcdh5eZV7XznvZl9DOqUjur7/7zZZ3b7vNqIT
7UQ/VSjsT1t9u9ctfVoiewzOX6IcI243cqKLx3+4jw/pAvuJ/lYm4x8qnL8MI8dl
q0wZS3vW7N3yiFgCPpUKCzVMK+yKu2dZPBPNFW53gOSsTMy9lVhek+eAfnaSOwVL
HbL8Hi4xOuPwVlxB9YoSsd0/rQB2pvnasGWroDR/DafT0IC59EVOAZDWYsFzb2IV
lA/87bnp15LWU2WblcAafHd3Xq9AgTtT/oj/TLr/7CSVVkkRatMOfgrXJbX0HK1j
8jqMu3/GjLBPuQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:48:44 2024 by rpki-client on console-fra.rpki-client.org