Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File:                     Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier:          FcJHEvNH8Qy93wBJJ49CSaxtlvTuJNhU7J1kLmV17Tk=
Subject key identifier:   B1:95:1D:D8:40:4A:E2:FC:FE:DA:B5:AF:8A:EE:86:04:56:39:99:13
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer:       /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial:       018F85FEE79E470C85B0A113C3DEFC932716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 10:00:26 +0000
Manifest this update:     Fri 17 May 2024 10:00:26 +0000
Manifest next update:     Sat 18 May 2024 10:00:26 +0000
Files and hashes:         1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: fQuz2z0h5UsI1S0XE7sdukIOXJBabGIhf2DBUpbWbEw=)
                          2: eolOD82romDYKf-u5K2mBsrtM6A.roa (hash: lLrmPPWKuIZu39XjZBEUEnSJsPHEyn/SShOI0bCltRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:fe:e7:9e:47:0c:85:b0:a1:13:c3:de:fc:93:27:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
        Validity
            Not Before: May 17 10:00:26 2024 GMT
            Not After : May 18 10:00:26 2024 GMT
        Subject: CN=b1951dd8404ae2fcfedab5af8aee860456399913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:ee:66:58:82:4e:23:fc:9c:1b:89:8b:e0:
                    b1:66:e4:66:f3:5a:47:26:d9:62:d6:3f:04:14:2c:
                    03:3f:0f:e8:36:f6:3f:df:e8:55:7f:6c:02:f4:e7:
                    eb:77:5f:8f:2c:c7:d9:dc:6c:e2:dd:82:00:c0:b9:
                    d0:12:ee:3b:b4:3c:15:16:eb:39:f8:77:de:6c:b1:
                    22:1e:e1:99:e7:a7:e0:ae:ae:2a:68:88:6c:fa:33:
                    41:94:31:50:51:a9:71:df:af:25:65:c5:ec:b0:fb:
                    4b:82:00:53:86:77:cf:bf:28:a2:4f:12:f8:a8:dd:
                    d0:bf:4f:fe:14:c0:3c:fc:ee:f2:dc:25:7d:7d:29:
                    92:ec:15:ba:9d:15:3f:fd:9f:18:f0:f5:8e:b8:36:
                    53:3f:f4:52:c1:20:3f:ec:a1:7c:97:a4:f1:49:f8:
                    fd:93:10:ed:a7:1b:a7:6b:5b:f1:27:59:63:79:11:
                    b0:e4:18:4d:15:ab:e8:36:e6:13:41:1f:a5:81:52:
                    43:d0:b5:44:de:75:db:da:4e:ec:5e:38:49:84:40:
                    80:76:c1:1a:ba:32:2a:31:0f:16:06:2d:72:db:41:
                    ba:19:14:7e:a2:04:09:7b:46:60:76:59:f5:8b:bf:
                    4a:7a:93:a9:2d:ec:8f:95:06:27:22:b1:fb:aa:c0:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:95:1D:D8:40:4A:E2:FC:FE:DA:B5:AF:8A:EE:86:04:56:39:99:13
            X509v3 Authority Key Identifier:
                keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:be:ed:52:de:a6:e7:c6:1f:83:33:29:26:e4:5e:47:16:ed:
         db:fc:c2:04:c6:02:06:25:89:fd:49:48:c7:1d:3e:76:4b:a5:
         75:09:05:80:b6:ff:c7:06:23:c6:ca:1d:7c:2b:97:f7:37:4b:
         06:8c:09:33:3d:c6:52:31:79:89:22:00:3d:1a:35:86:50:63:
         9c:ff:93:91:1b:ff:a0:96:a9:ca:27:45:17:ff:59:4b:b0:13:
         a7:c3:99:6d:45:40:1a:bb:31:b8:3d:3a:47:61:41:ac:84:cc:
         ea:66:05:f0:14:60:ab:d6:0b:64:c6:af:31:2e:a2:f3:48:f8:
         d3:e6:e2:e2:e5:a6:24:3d:b0:95:4d:e1:ca:80:34:3b:36:2e:
         41:94:4c:31:27:78:0a:b5:72:d3:c9:05:04:e3:de:3b:bc:2a:
         bb:ff:24:99:f4:eb:63:3a:99:a7:c9:9c:34:5d:bf:dc:b1:59:
         b6:41:fa:51:00:50:6a:e6:6d:c4:e5:b3:7d:bc:1c:8e:d0:dd:
         f6:13:d8:46:81:8a:12:56:e8:cb:5c:16:45:80:13:63:45:ac:
         fc:24:cf:d4:27:17:e1:ba:7d:10:46:85:b8:a9:3b:88:4c:e3:
         cc:8b:84:c4:5b:b4:27:eb:28:4b:7d:2e:9e:c9:25:52:18:7b:
         24:4c:5b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+F/ueeRwyFsKETw978kycWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx
NzhjZGIwHhcNMjQwNTE3MTAwMDI2WhcNMjQwNTE4MTAwMDI2WjAzMTEwLwYDVQQD
EyhiMTk1MWRkODQwNGFlMmZjZmVkYWI1YWY4YWVlODYwNDU2Mzk5OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZHuZliCTiP8nBuJi+CxZuRm81pH
Jtli1j8EFCwDPw/oNvY/3+hVf2wC9Ofrd1+PLMfZ3Gzi3YIAwLnQEu47tDwVFus5
+HfebLEiHuGZ56fgrq4qaIhs+jNBlDFQUalx368lZcXssPtLggBThnfPvyiiTxL4
qN3Qv0/+FMA8/O7y3CV9fSmS7BW6nRU//Z8Y8PWOuDZTP/RSwSA/7KF8l6TxSfj9
kxDtpxuna1vxJ1ljeRGw5BhNFavoNuYTQR+lgVJD0LVE3nXb2k7sXjhJhECAdsEa
ujIqMQ8WBi1y20G6GRR+ogQJe0Zgdln1i79KepOpLeyPlQYnIrH7qsB7FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGVHdhASuL8/tq1r4ruhgRWOZkTMB8GA1UdIwQY
MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt
YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy
LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANb7tUt6m
58YfgzMpJuReRxbt2/zCBMYCBiWJ/UlIxx0+dkuldQkFgLb/xwYjxsodfCuX9zdL
BowJMz3GUjF5iSIAPRo1hlBjnP+TkRv/oJapyidFF/9ZS7ATp8OZbUVAGrsxuD06
R2FBrITM6mYF8BRgq9YLZMavMS6i80j40+bi4uWmJD2wlU3hyoA0OzYuQZRMMSd4
CrVy08kFBOPeO7wqu/8kmfTrYzqZp8mcNF2/3LFZtkH6UQBQauZtxOWzfbwcjtDd
9hPYRoGKElboy1wWRYATY0Ws/CTP1CcX4bp9EEaFuKk7iEzjzIuExFu0J+soS30u
nsklUhh7JExb/A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:31:15 2024 by rpki-client on console-fra.rpki-client.org