Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          sUACzcfJYQswEw27qmPqUWty85mOWwZEhRttHJcz6jw=
Subject key identifier:   10:DE:F9:2A:E3:71:36:F6:AB:F7:65:2A:69:27:A5:C4:1F:59:CF:A2
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       018F85C835FEDD22C32268E738FD755F767A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 09:00:41 +0000
Manifest this update:     Fri 17 May 2024 09:00:41 +0000
Manifest next update:     Sat 18 May 2024 09:00:41 +0000
Files and hashes:         1: _UouLM5RCHVFqEODs_RaX2vsZ-M.roa (hash: MAyDBaIrHdBxJs+dCG0Wn4LDM7AwPiyISiqgrb8xntA=)
                          2: ldB8yXA8TriSKJgqXvz2negS9W4.roa (hash: O/ypqBx/0qnbV97AfVXIeOa/lJRKxvDKdWnzsRGLbhI=)
                          3: tHKBbTaapOYAzaopCFn3Z8XktW8.roa (hash: fox619NsYfGFhxzjR4NKw6P0KFbfoi3cWHLfJ7gOgZg=)
                          4: xnVTzzBF7lu7SYil2Nb7oZbD2R8.roa (hash: BqpOoAjqooVbYLbh33nBgspbfQN3ZLt5cJhi0n1waQk=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: x78a4OBbXd4j0tlfzM+mHnTG/FDFxWVaSGKH7wraRfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c8:35:fe:dd:22:c3:22:68:e7:38:fd:75:5f:76:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: May 17 09:00:41 2024 GMT
            Not After : May 18 09:00:41 2024 GMT
        Subject: CN=10def92ae37136f6abf7652a6927a5c41f59cfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:64:df:af:28:72:22:8a:fd:50:56:8a:0e:
                    52:a1:76:10:e8:0a:42:3d:d1:a7:14:cc:ba:ff:25:
                    31:76:de:69:a0:a6:1f:ee:fa:5c:b1:b9:b1:92:8a:
                    77:11:ef:c2:c3:92:14:81:4b:6a:7d:61:4d:ff:a7:
                    d8:2f:0a:3c:9d:b6:cf:2d:89:bb:87:dd:6f:3a:44:
                    6b:97:25:0b:86:90:d9:98:36:a8:ed:ad:d4:db:66:
                    f6:19:db:30:a7:87:dd:87:f1:60:fe:dc:28:0c:75:
                    8c:e5:13:7a:90:44:fe:22:0d:91:e0:9e:91:58:75:
                    4a:91:3b:65:a0:09:9a:24:82:15:4f:90:c9:de:92:
                    a4:4e:48:9b:fd:bb:bb:5a:4e:7f:4f:c2:50:ea:48:
                    e0:a6:1c:d3:6e:22:d3:60:27:63:ab:da:27:b4:2f:
                    8a:a4:d8:29:e9:ee:76:75:d7:31:52:36:52:75:d6:
                    b2:b5:26:ae:57:b0:0e:ae:14:be:4b:c6:3e:a5:3d:
                    92:e6:77:5d:c6:c4:10:c5:de:01:9c:c9:79:c7:5a:
                    01:77:b1:af:16:20:ad:34:05:1d:88:d0:da:08:4e:
                    bb:1a:47:d9:8d:20:90:e7:db:a2:dc:f3:5d:e1:fe:
                    e9:4f:14:b9:99:9e:79:dd:64:31:a1:b1:5f:21:75:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:F9:2A:E3:71:36:F6:AB:F7:65:2A:69:27:A5:C4:1F:59:CF:A2
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:0e:25:9e:ee:5b:c6:21:f2:fc:03:c8:92:79:51:28:ea:
         90:fb:be:92:a4:92:03:c3:5c:db:f0:17:e1:36:48:4e:ae:25:
         35:13:e0:9f:34:0d:61:8a:e8:9c:da:71:80:a1:89:84:c9:89:
         0d:96:65:9e:60:36:82:ce:d8:91:29:b0:95:ef:68:97:0f:a4:
         a7:e5:be:ff:c2:bd:17:51:40:5e:06:52:98:41:d6:5b:50:94:
         8b:d3:17:57:7c:c8:08:44:37:2b:4e:cd:7a:5d:f5:51:2c:3d:
         8f:a1:e4:dc:e5:74:10:ca:5f:4b:95:b1:c8:5c:a5:f4:50:0e:
         e4:e4:31:41:02:6c:73:bc:d8:da:53:5b:8d:9a:f5:20:15:e6:
         70:47:07:f4:c6:ed:13:08:2a:20:82:63:be:d5:05:c5:18:b6:
         ac:b8:f6:d2:76:c4:64:b5:21:25:42:0e:9d:85:22:ce:ff:d4:
         f0:50:4d:08:65:8c:1a:95:7a:02:10:a9:cb:05:26:09:d0:be:
         5d:ac:cb:23:72:0f:32:9e:19:0b:fc:0e:16:c3:e9:cc:46:1d:
         ff:b1:97:1d:2e:fe:51:7a:67:e6:3c:96:05:3f:86:1b:b1:23:
         9b:1d:10:a5:4b:bb:e4:36:33:aa:28:e7:c3:df:34:7a:f0:14:
         f7:f1:db:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FyDX+3SLDImjnOP11X3Z6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4
YzJkM2IwHhcNMjQwNTE3MDkwMDQxWhcNMjQwNTE4MDkwMDQxWjAzMTEwLwYDVQQD
EygxMGRlZjkyYWUzNzEzNmY2YWJmNzY1MmE2OTI3YTVjNDFmNTljZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy9k368ociKK/VBWig5SoXYQ6ApC
PdGnFMy6/yUxdt5poKYf7vpcsbmxkop3Ee/Cw5IUgUtqfWFN/6fYLwo8nbbPLYm7
h91vOkRrlyULhpDZmDao7a3U22b2Gdswp4fdh/Fg/twoDHWM5RN6kET+Ig2R4J6R
WHVKkTtloAmaJIIVT5DJ3pKkTkib/bu7Wk5/T8JQ6kjgphzTbiLTYCdjq9ontC+K
pNgp6e52ddcxUjZSddaytSauV7AOrhS+S8Y+pT2S5nddxsQQxd4BnMl5x1oBd7Gv
FiCtNAUdiNDaCE67GkfZjSCQ59ui3PNd4f7pTxS5mZ553WQxobFfIXWGnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDe+SrjcTb2q/dlKmknpcQfWc+iMB8GA1UdIwQY
MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPgOJZ7u
W8Yh8vwDyJJ5USjqkPu+kqSSA8Nc2/AX4TZITq4lNRPgnzQNYYronNpxgKGJhMmJ
DZZlnmA2gs7YkSmwle9olw+kp+W+/8K9F1FAXgZSmEHWW1CUi9MXV3zICEQ3K07N
el31USw9j6Hk3OV0EMpfS5WxyFyl9FAO5OQxQQJsc7zY2lNbjZr1IBXmcEcH9Mbt
EwgqIIJjvtUFxRi2rLj20nbEZLUhJUIOnYUizv/U8FBNCGWMGpV6AhCpywUmCdC+
XazLI3IPMp4ZC/wOFsPpzEYd/7GXHS7+UXpn5jyWBT+GG7Ejmx0QpUu75DYzqijn
w980evAU9/Hbnw==
-----END CERTIFICATE-----
Generated at Fri May 17 15:56:20 2024 by rpki-client on console-ams.rpki-client.org