Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File:                     q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier:          hlEcSJ90vDLMOv+Oa10WlzWDGIsY4jpxsVEmxFsLVzc=
Subject key identifier:   E8:95:71:03:46:75:13:59:31:EB:E4:FB:9D:9A:29:10:F3:81:DE:92
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer:       /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial:       018F86A40B04BC50D2C5785E8A2CC7977561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 13:00:48 +0000
Manifest this update:     Fri 17 May 2024 13:00:48 +0000
Manifest next update:     Sat 18 May 2024 13:00:48 +0000
Files and hashes:         1: G9XwpvfigcviptnekcZgfEN3mOU.roa (hash: aGlRyapzKDKmTyV8YytMCllzUPjDtFqFEoye9ULEZZI=)
                          2: GKv_Wxa_7PqU5lwMvDdNNKZV104.roa (hash: u6l2uflYdCxy57TNNCMPDTv0sTlowBmd+QQJNEKp1DI=)
                          3: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: RQl3KZ3CeyGi5MMxp+Fx0Pyv9gNAeQCQZMXHGo+s1I0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:0b:04:bc:50:d2:c5:78:5e:8a:2c:c7:97:75:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
        Validity
            Not Before: May 17 13:00:48 2024 GMT
            Not After : May 18 13:00:48 2024 GMT
        Subject: CN=e89571034675135931ebe4fb9d9a2910f381de92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3b:d5:22:93:67:8b:2b:12:21:ce:ab:de:c5:
                    88:d4:7b:e3:8e:65:cd:5f:20:de:39:7a:82:e4:3f:
                    c7:e7:f8:22:42:f6:9d:bc:6e:4e:cf:c2:68:0e:81:
                    61:22:9b:ec:de:6f:1a:42:74:7a:49:62:01:97:39:
                    f6:04:71:a1:41:80:58:d7:e1:aa:d7:66:90:9d:e4:
                    69:c6:c2:e2:0d:b3:a0:7e:34:dd:34:56:2e:26:b9:
                    f5:0c:fc:ef:a9:9b:e4:32:a1:d9:58:38:d1:ff:e3:
                    b4:a0:b7:f7:fa:57:9b:67:8b:e1:81:89:6d:7a:d3:
                    10:c9:fb:38:1d:4d:86:0f:60:fe:b1:6f:d4:01:e7:
                    76:bc:29:61:b4:f6:c3:8d:7f:47:a2:06:94:40:ec:
                    1c:3d:9a:6b:a8:57:23:ca:01:11:52:bc:f8:57:b0:
                    92:24:d3:81:61:f9:d2:b2:f1:1c:4a:51:dd:9e:37:
                    6e:31:18:bb:22:74:31:56:ad:36:17:79:f0:20:48:
                    89:8e:93:a9:da:85:86:86:82:e4:27:61:e1:cf:e1:
                    88:9a:6c:78:04:a7:86:1d:7e:a2:91:ff:8d:7b:de:
                    f1:78:af:65:88:6f:f6:99:5b:07:61:b1:29:4a:a3:
                    4e:88:37:0f:b5:28:db:de:c2:0c:a1:b6:76:71:42:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:71:03:46:75:13:59:31:EB:E4:FB:9D:9A:29:10:F3:81:DE:92
            X509v3 Authority Key Identifier:
                keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:2c:6e:e6:1c:c6:78:44:b1:0b:e1:4c:22:8a:e2:28:c4:
         a5:4f:92:00:fc:76:0f:ef:1a:80:56:55:9f:bf:2f:e2:de:a1:
         41:60:6f:e1:c3:4c:fd:9f:53:a8:e7:7a:93:8e:ac:42:20:0b:
         7c:45:b6:05:74:3c:f9:c1:18:0e:93:a3:b4:61:3a:9c:70:bf:
         af:e1:b0:c1:c2:43:94:7c:14:77:78:79:e3:ad:a6:c9:0c:ee:
         86:35:e3:13:17:29:91:85:5e:a1:93:92:c3:19:ff:28:b2:28:
         1a:e3:74:8c:63:fa:ac:cc:c3:ea:14:da:45:75:bd:14:41:b4:
         be:ed:33:ad:1b:80:61:c7:2f:5d:6c:16:68:57:33:70:69:7a:
         49:b0:80:22:e6:c2:3b:2a:8d:dd:5b:a1:1a:04:21:6a:aa:20:
         e4:08:ca:5d:3e:5e:0e:20:dd:c9:e8:1d:c1:50:b5:35:eb:0b:
         50:41:1d:de:a5:54:3e:bd:de:10:3e:dd:7f:ac:2f:f7:82:e2:
         9a:0e:04:0f:12:94:1c:ad:39:d0:9e:b3:f2:9c:41:c6:01:55:
         90:41:2f:23:e1:6a:be:65:0d:b8:e5:40:7d:63:88:6d:78:93:
         72:7a:18:5d:3a:62:99:38:d3:22:8d:26:43:1f:08:9a:cf:94:
         bb:e9:bd:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GpAsEvFDSxXheiizHl3VhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4
MzZmMWEwHhcNMjQwNTE3MTMwMDQ4WhcNMjQwNTE4MTMwMDQ4WjAzMTEwLwYDVQQD
EyhlODk1NzEwMzQ2NzUxMzU5MzFlYmU0ZmI5ZDlhMjkxMGYzODFkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DvVIpNniysSIc6r3sWI1HvjjmXN
XyDeOXqC5D/H5/giQvadvG5Oz8JoDoFhIpvs3m8aQnR6SWIBlzn2BHGhQYBY1+Gq
12aQneRpxsLiDbOgfjTdNFYuJrn1DPzvqZvkMqHZWDjR/+O0oLf3+lebZ4vhgYlt
etMQyfs4HU2GD2D+sW/UAed2vClhtPbDjX9HogaUQOwcPZprqFcjygERUrz4V7CS
JNOBYfnSsvEcSlHdnjduMRi7InQxVq02F3nwIEiJjpOp2oWGhoLkJ2Hhz+GImmx4
BKeGHX6ikf+Ne97xeK9liG/2mVsHYbEpSqNOiDcPtSjb3sIMobZ2cUKixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiVcQNGdRNZMevk+52aKRDzgd6SMB8GA1UdIwQY
MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt
MjNhYzc1ODA0OGVjLzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj
LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU0sbuYc
xnhEsQvhTCKK4ijEpU+SAPx2D+8agFZVn78v4t6hQWBv4cNM/Z9TqOd6k46sQiAL
fEW2BXQ8+cEYDpOjtGE6nHC/r+GwwcJDlHwUd3h5462myQzuhjXjExcpkYVeoZOS
wxn/KLIoGuN0jGP6rMzD6hTaRXW9FEG0vu0zrRuAYccvXWwWaFczcGl6SbCAIubC
OyqN3VuhGgQhaqog5AjKXT5eDiDdyegdwVC1NesLUEEd3qVUPr3eED7df6wv94Li
mg4EDxKUHK050J6z8pxBxgFVkEEvI+FqvmUNuOVAfWOIbXiTcnoYXTpimTjTIo0m
Qx8Ims+Uu+m9Vw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:32:40 2024 by rpki-client on console-fra.rpki-client.org