Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          cZYSbYzuUnMnL7LfkE0aul0GO//Hh5aaJM/XzD0XmeU=
Subject key identifier:   A9:8E:19:BF:EC:B3:FB:65:A2:A7:22:39:FB:01:6B:77:C4:E4:8D:68
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       018F847E6FE3B4CEC8AFAFF0EC011696B65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 03:00:29 +0000
Manifest this update:     Fri 17 May 2024 03:00:29 +0000
Manifest next update:     Sat 18 May 2024 03:00:29 +0000
Files and hashes:         1: 3CPpP1_XU7y2325EguJDTajCoL8.roa (hash: UAN36mhMg9KE+6NnklbmfkbKftroTSnagoR99wpA5Ow=)
                          2: JdgAe1IsbORN7hiyLhyTFGx9-88.roa (hash: gCFdn8d+cfgY8ktOUVgfLa4lzGfUbF9Q0zWuZRBuqf0=)
                          3: SJw9gv91K8NgMkdjIC_fQj8uIvc.roa (hash: uffK9n8U9oXFE42pZj1JpBLiC9Z7woUSmQ6v+Ta7OHM=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: X0XNvCcSClzFmW6CBpITWd9scnP+AxAlWMvadVdbqts=)
                          5: x-FVmCvgSuWq-6dQrKgxH0DYPTw.roa (hash: 85UsWjUS/ArYMQXIbGnd6m1N664LHYJbmqTamqrgSIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:6f:e3:b4:ce:c8:af:af:f0:ec:01:16:96:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: May 17 03:00:29 2024 GMT
            Not After : May 18 03:00:29 2024 GMT
        Subject: CN=a98e19bfecb3fb65a2a72239fb016b77c4e48d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:f7:11:a8:ce:76:41:e2:e7:d5:c7:27:1a:
                    29:21:8b:19:be:65:2a:47:6a:af:3b:35:27:ff:aa:
                    e0:9f:2e:2e:a9:68:e1:e1:75:f7:a2:fb:bd:98:d7:
                    8b:77:24:9c:43:00:ae:1f:3e:8f:15:91:29:4c:c9:
                    80:8a:20:5e:1f:16:60:72:ff:d0:1c:97:dd:fe:ec:
                    3b:10:4a:8f:47:e4:7b:21:ab:0d:86:5e:f1:62:85:
                    d3:39:59:48:f2:55:a7:1f:10:7d:99:08:fa:5e:3a:
                    81:a7:c7:f1:b0:dd:c2:a4:e3:d3:2e:41:ed:de:94:
                    65:bd:66:99:e9:89:17:86:1a:19:0c:f9:01:87:73:
                    27:1d:f9:1e:68:65:41:9d:14:61:5e:d4:f7:13:ca:
                    36:d5:8e:29:56:93:18:8e:48:4f:5d:26:67:4b:a7:
                    c0:a2:92:d3:74:e3:cb:6f:fc:5e:02:95:8b:03:79:
                    d6:07:ea:91:f4:fc:a1:33:b2:b7:f4:76:2d:42:92:
                    fc:3d:67:a5:ef:a1:3d:77:b4:7f:ca:09:41:19:27:
                    6c:7b:41:4b:d3:b6:ac:e6:84:79:b0:db:64:23:92:
                    af:f4:da:1d:2b:aa:2b:5d:a4:f9:72:ad:30:89:0a:
                    7f:de:0a:29:ee:05:07:19:5f:7b:48:77:9a:cc:d3:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:19:BF:EC:B3:FB:65:A2:A7:22:39:FB:01:6B:77:C4:E4:8D:68
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:47:82:02:31:20:70:59:0a:22:21:57:96:8a:a8:21:7c:
         ff:45:f6:f6:c7:55:14:7f:d4:7f:cd:52:5a:39:a2:b5:9c:a2:
         eb:c1:ee:d3:1b:3a:7b:d1:e0:35:1d:3e:90:24:6c:5d:7b:c1:
         0a:f4:6c:04:9a:9f:a7:d3:f6:e8:31:7a:38:d1:0c:8e:21:33:
         49:9f:6b:3a:cb:81:8d:17:f7:b0:11:71:b2:84:12:aa:94:10:
         fb:f2:08:80:dd:ac:97:2e:3b:0a:47:4b:58:d8:43:35:5e:0c:
         c5:f5:23:20:50:11:9e:af:90:12:db:7a:bf:b8:48:69:3d:41:
         50:1c:e9:57:39:b0:f4:4c:4d:16:6f:d6:fc:a3:97:e1:f7:e5:
         cf:2e:73:1a:62:1e:a1:09:f7:46:36:24:d0:3e:82:42:ea:ed:
         04:99:4c:fd:a6:1c:a9:c8:3d:a9:c1:2d:99:c2:de:3a:fa:dd:
         93:70:60:6f:76:2a:74:17:6e:a5:02:24:a4:9c:6b:e5:77:b0:
         eb:1d:38:04:45:60:11:95:32:ca:02:34:91:ea:40:dd:65:a9:
         f4:ff:f1:d1:6c:e2:51:31:ce:a3:eb:e1:0d:84:47:f7:2c:38:
         b6:f3:a9:1e:2b:b7:a5:b7:37:29:4b:b3:f0:f4:a6:35:d5:02:
         a1:bd:74:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Efm/jtM7Ir6/w7AEWlrZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2
N2VkMDIwHhcNMjQwNTE3MDMwMDI5WhcNMjQwNTE4MDMwMDI5WjAzMTEwLwYDVQQD
EyhhOThlMTliZmVjYjNmYjY1YTJhNzIyMzlmYjAxNmI3N2M0ZTQ4ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrX3EajOdkHi59XHJxopIYsZvmUq
R2qvOzUn/6rgny4uqWjh4XX3ovu9mNeLdyScQwCuHz6PFZEpTMmAiiBeHxZgcv/Q
HJfd/uw7EEqPR+R7IasNhl7xYoXTOVlI8lWnHxB9mQj6XjqBp8fxsN3CpOPTLkHt
3pRlvWaZ6YkXhhoZDPkBh3MnHfkeaGVBnRRhXtT3E8o21Y4pVpMYjkhPXSZnS6fA
opLTdOPLb/xeApWLA3nWB+qR9PyhM7K39HYtQpL8PWel76E9d7R/yglBGSdse0FL
07as5oR5sNtkI5Kv9NodK6orXaT5cq0wiQp/3gop7gUHGV97SHeazNPkFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmOGb/ss/tloqciOfsBa3fE5I1oMB8GA1UdIwQY
MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfBHggIx
IHBZCiIhV5aKqCF8/0X29sdVFH/Uf81SWjmitZyi68Hu0xs6e9HgNR0+kCRsXXvB
CvRsBJqfp9P26DF6ONEMjiEzSZ9rOsuBjRf3sBFxsoQSqpQQ+/IIgN2sly47CkdL
WNhDNV4MxfUjIFARnq+QEtt6v7hIaT1BUBzpVzmw9ExNFm/W/KOX4fflzy5zGmIe
oQn3RjYk0D6CQurtBJlM/aYcqcg9qcEtmcLeOvrdk3Bgb3YqdBdupQIkpJxr5Xew
6x04BEVgEZUyygI0kepA3WWp9P/x0WziUTHOo+vhDYRH9yw4tvOpHiu3pbc3KUuz
8PSmNdUCob10Kg==
-----END CERTIFICATE-----
Generated at Fri May 17 09:11:13 2024 by rpki-client on console-ams.rpki-client.org