Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File:                     KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier:          y6JvFZFy4gDX4ftiko57NASO9suW3iSvHZYv1Q0kyz4=
Subject key identifier:   20:93:0A:6A:9C:64:B4:86:F7:A4:12:56:64:6A:99:05:FC:8D:51:F5
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer:       /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial:       018F8823F67C3A2CF548A2473E88376CBCC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: fKpHP1yHnCcdLqq/M2LD0/kR7puIdqlSc3vFBPDECaU=)
                          2: TyEVQPjtLZdwqpcf_Lb2kSy5yf8.roa (hash: XzEcSdxZaRqLkcPwz8tPAyxID3EkrfCJQXCPFgAywzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f6:7c:3a:2c:f5:48:a2:47:3e:88:37:6c:bc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=20930a6a9c64b486f7a41256646a9905fc8d51f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:19:8a:63:f8:5d:65:bf:ee:f6:4b:da:63:
                    b1:6f:b3:1e:b4:da:7d:af:49:e8:ea:2f:c8:fc:e7:
                    53:66:4e:72:cf:e8:18:6f:7e:25:34:d4:b0:5c:7e:
                    58:24:67:cd:ce:76:71:ec:f3:11:63:8e:92:cf:75:
                    4f:7f:97:df:1f:06:20:50:0f:46:c4:be:28:c5:57:
                    d1:0d:b2:23:90:ec:3a:d4:b6:09:ce:6b:4a:2b:2d:
                    96:ce:e2:33:20:0e:7c:18:6a:2b:e6:80:05:56:33:
                    35:af:ea:09:bd:31:a9:50:84:00:22:07:54:83:cf:
                    46:a2:67:27:dd:1d:92:ef:2c:62:9d:04:0e:a1:ad:
                    54:07:61:54:16:05:ee:8d:be:eb:ee:be:73:c4:48:
                    32:90:ef:03:a0:a5:a4:be:82:bc:6e:5c:e0:e5:12:
                    48:09:fa:17:c8:4d:36:f8:00:90:1c:e4:f1:c7:24:
                    e2:75:67:c6:98:cc:30:19:91:b3:a1:ce:b9:d7:59:
                    96:9b:94:d3:b3:fc:7a:ec:f2:fa:1d:5d:d8:06:19:
                    74:eb:ce:fd:2e:78:4d:33:2d:61:26:f3:6f:2d:09:
                    e7:19:3c:3b:10:c4:55:a2:30:6c:7f:e0:8a:c1:88:
                    42:2b:d8:55:ed:a1:6f:1b:ae:5e:0f:f2:2d:c1:11:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:0A:6A:9C:64:B4:86:F7:A4:12:56:64:6A:99:05:FC:8D:51:F5
            X509v3 Authority Key Identifier:
                keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6b:6c:99:3f:2e:b1:a5:4e:05:ec:7e:13:7c:74:2b:d7:ac:
         6c:4a:cc:1c:21:61:fa:53:5e:84:73:cf:c4:8f:26:c3:07:cb:
         f2:3a:27:69:6f:99:c3:1d:54:58:37:34:e1:ea:9f:c8:dd:ba:
         29:dc:84:1a:65:94:73:e6:79:1c:c2:81:e7:75:0f:d5:14:b5:
         95:51:c0:ba:63:80:07:79:5e:6d:d6:74:17:9c:40:50:96:6e:
         e9:4e:db:0e:5f:8c:3c:29:ed:f1:f6:89:f4:21:bc:b8:c2:42:
         60:35:98:ce:2b:3d:b6:7e:6b:e0:ff:b4:57:3d:e5:2d:11:b0:
         d3:e3:d4:85:ab:0f:ec:c9:a1:5a:cc:05:e3:80:50:1d:f2:cd:
         b0:cd:a9:c5:67:6e:ec:f5:47:e4:67:5b:57:eb:a0:30:ec:ce:
         16:11:f2:f3:96:35:ac:9f:0e:88:23:05:d2:f9:d5:07:f0:69:
         c6:90:f8:15:4d:72:d2:a6:89:93:3f:d4:57:4b:08:9c:35:44:
         94:da:74:df:fb:67:c8:84:c4:8a:a8:76:b9:76:e7:62:8f:e4:
         fa:d0:c9:9c:20:25:48:fb:d5:67:00:f9:0f:92:e7:77:3a:ec:
         eb:9b:7a:87:4e:60:91:21:e9:47:b6:b1:49:43:11:88:06:86:
         cf:96:dc:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II/Z8Oiz1SKJHPog3bLzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2
ZmUzZDUwHhcNMjQwNTE3MjAwMDA4WhcNMjQwNTE4MjAwMDA4WjAzMTEwLwYDVQQD
EygyMDkzMGE2YTljNjRiNDg2ZjdhNDEyNTY2NDZhOTkwNWZjOGQ1MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A8ZimP4XWW/7vZL2mOxb7MetNp9
r0no6i/I/OdTZk5yz+gYb34lNNSwXH5YJGfNznZx7PMRY46Sz3VPf5ffHwYgUA9G
xL4oxVfRDbIjkOw61LYJzmtKKy2WzuIzIA58GGor5oAFVjM1r+oJvTGpUIQAIgdU
g89Gomcn3R2S7yxinQQOoa1UB2FUFgXujb7r7r5zxEgykO8DoKWkvoK8blzg5RJI
CfoXyE02+ACQHOTxxyTidWfGmMwwGZGzoc6511mWm5TTs/x67PL6HV3YBhl06879
LnhNMy1hJvNvLQnnGTw7EMRVojBsf+CKwYhCK9hV7aFvG65eD/ItwREpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCTCmqcZLSG96QSVmRqmQX8jVH1MB8GA1UdIwQY
MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt
OGY1OWEzOTEwYmRkLzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk
LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2tsmT8u
saVOBex+E3x0K9esbErMHCFh+lNehHPPxI8mwwfL8jonaW+Zwx1UWDc04eqfyN26
KdyEGmWUc+Z5HMKB53UP1RS1lVHAumOAB3lebdZ0F5xAUJZu6U7bDl+MPCnt8faJ
9CG8uMJCYDWYzis9tn5r4P+0Vz3lLRGw0+PUhasP7MmhWswF44BQHfLNsM2pxWdu
7PVH5GdbV+ugMOzOFhHy85Y1rJ8OiCMF0vnVB/BpxpD4FU1y0qaJkz/UV0sInDVE
lNp03/tnyITEiqh2uXbnYo/k+tDJnCAlSPvVZwD5D5Lndzrs65t6h05gkSHpR7ax
SUMRiAaGz5bcMQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:12:32 2024 by rpki-client on console-ams.rpki-client.org