Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          6Rc7USQV+8sfn12ucqxFkahWzb25PofkaWa217MoybM=
Subject key identifier:   EE:AF:DA:D6:C7:3C:CB:7C:3C:7D:A1:8B:9C:96:96:08:A4:59:9C:00
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       018F874897C756A8677F2A9E32B26A990664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:32 +0000
Manifest this update:     Fri 17 May 2024 16:00:32 +0000
Manifest next update:     Sat 18 May 2024 16:00:32 +0000
Files and hashes:         1: eQRdF5ywX9n6Sg4oxuQx3ZTVP2M.roa (hash: N2vyV0tC5VrdNjdK2i5g/3hsPnd4s7k02Wnch18D8vk=)
                          2: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: VdEeFUHlKIdf+mIv0of2WiE4BPXQoCLeeBMULItRm3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:97:c7:56:a8:67:7f:2a:9e:32:b2:6a:99:06:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: May 17 16:00:32 2024 GMT
            Not After : May 18 16:00:32 2024 GMT
        Subject: CN=eeafdad6c73ccb7c3c7da18b9c969608a4599c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:5f:84:21:50:5e:21:35:b4:eb:30:1b:2a:
                    3d:20:b0:43:3e:07:d3:a8:17:9e:5a:67:48:e3:9c:
                    21:91:8c:28:ef:72:68:0a:3d:9c:20:c5:05:75:47:
                    b5:bb:c5:e4:dc:d5:f7:43:df:c9:2a:fa:b3:e8:6c:
                    e4:a0:36:28:8b:32:4d:3a:c5:1b:e8:af:b9:e8:54:
                    0c:be:a6:55:26:76:84:28:ae:48:af:01:ea:31:3e:
                    8c:fa:ec:e9:4d:86:68:30:12:c4:a8:79:fe:f4:00:
                    ab:f3:9a:37:f3:a7:b6:93:4a:fc:42:46:fd:38:1c:
                    3a:e0:73:c1:ae:57:f4:d8:27:1c:80:ab:c2:28:0e:
                    f6:44:2d:d7:2e:b5:cc:ce:dc:56:d1:06:bb:28:d2:
                    23:99:4e:3a:23:2f:72:2d:ea:41:01:71:7c:c8:9b:
                    94:4d:98:e0:8b:25:d4:52:0a:02:67:71:ea:8d:e0:
                    5e:a9:13:bd:a8:81:ea:5f:aa:67:88:a9:d2:77:c8:
                    a5:5e:62:c5:f2:ee:09:d6:78:44:e8:e0:03:70:18:
                    17:f5:8b:3c:ce:9c:b9:59:8d:3a:24:ea:b0:71:db:
                    bf:0a:0c:f3:54:e4:70:9b:e5:3a:d7:0e:8c:d6:85:
                    7e:e3:37:b1:d7:2e:3c:8b:9c:0f:e7:56:3c:8d:f8:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AF:DA:D6:C7:3C:CB:7C:3C:7D:A1:8B:9C:96:96:08:A4:59:9C:00
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:df:c0:ca:02:34:87:51:70:9f:b7:9d:ab:4c:c4:85:23:
         34:2b:1f:01:5b:5b:e3:52:18:39:14:d4:c4:f2:e4:7a:e6:f0:
         fc:32:4c:50:b9:83:08:3d:c6:09:bd:ce:b8:d9:32:32:40:3b:
         40:75:b0:4f:50:55:79:22:06:f2:79:ac:7a:d3:60:d8:52:e7:
         23:31:ca:98:99:d8:53:83:7f:90:7e:e5:ab:1d:35:94:dc:e4:
         39:fc:4b:68:ea:1d:ac:39:48:6d:ef:fc:74:b4:7a:5d:f3:29:
         1f:35:f9:41:f7:1e:ae:33:d7:55:61:31:56:cb:cf:53:31:fd:
         15:ca:42:c6:17:0c:13:60:20:c7:eb:31:5d:59:83:24:28:f9:
         92:88:19:f3:66:06:6f:63:75:17:d2:92:92:f2:3c:4d:a5:04:
         0b:4b:b7:7f:cb:2f:64:4c:9e:1a:12:50:58:4a:a7:8e:94:35:
         71:c4:91:e1:49:49:d4:90:b1:cb:15:4a:33:44:2e:55:74:ac:
         e0:db:4b:b9:15:48:ee:91:a3:6b:50:3d:33:35:95:b4:63:8c:
         81:19:96:94:0b:8a:fc:83:94:c3:a8:a0:c5:56:b8:9e:7c:c0:
         dc:65:bd:a4:74:1e:50:f5:c8:d9:72:ca:8b:f1:04:43:05:c2:
         69:84:0f:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSJfHVqhnfyqeMrJqmQZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OTc3YTdhN2QyYjEzNWQ1YTczNzkxY2E3Y2YzZDlhZGE1
ODhmNmIwHhcNMjQwNTE3MTYwMDMyWhcNMjQwNTE4MTYwMDMyWjAzMTEwLwYDVQQD
EyhlZWFmZGFkNmM3M2NjYjdjM2M3ZGExOGI5Yzk2OTYwOGE0NTk5YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMdfhCFQXiE1tOswGyo9ILBDPgfT
qBeeWmdI45whkYwo73JoCj2cIMUFdUe1u8Xk3NX3Q9/JKvqz6GzkoDYoizJNOsUb
6K+56FQMvqZVJnaEKK5IrwHqMT6M+uzpTYZoMBLEqHn+9ACr85o386e2k0r8Qkb9
OBw64HPBrlf02CccgKvCKA72RC3XLrXMztxW0Qa7KNIjmU46Iy9yLepBAXF8yJuU
TZjgiyXUUgoCZ3HqjeBeqRO9qIHqX6pniKnSd8ilXmLF8u4J1nhE6OADcBgX9Ys8
zpy5WY06JOqwcdu/CgzzVORwm+U61w6M1oV+4zex1y48i5wP51Y8jfhYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6v2tbHPMt8PH2hi5yWlgikWZwAMB8GA1UdIwQY
MBaAFMeXenp9KxNdWnN5HKfPPZraWI9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NjY4YjYtMzA3My00YzdiLWExNWQt
NGE5Y2NlNjBiZGI4LzEveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NjY4YjYtMzA3My00YzdiLWExNWQtNGE5Y2NlNjBiZGI4
LzEveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOD/fwMoC
NIdRcJ+3natMxIUjNCsfAVtb41IYORTUxPLkeubw/DJMULmDCD3GCb3OuNkyMkA7
QHWwT1BVeSIG8nmsetNg2FLnIzHKmJnYU4N/kH7lqx01lNzkOfxLaOodrDlIbe/8
dLR6XfMpHzX5QfcerjPXVWExVsvPUzH9FcpCxhcME2Agx+sxXVmDJCj5kogZ82YG
b2N1F9KSkvI8TaUEC0u3f8svZEyeGhJQWEqnjpQ1ccSR4UlJ1JCxyxVKM0QuVXSs
4NtLuRVI7pGja1A9MzWVtGOMgRmWlAuK/IOUw6igxVa4nnzA3GW9pHQeUPXI2XLK
i/EEQwXCaYQPxQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:33:05 2024 by rpki-client on console-fra.rpki-client.org