Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File:                     _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier:          IWdJJeH/6JwVlIdPvCh7FGV2ytR9S+eS3wOXQ4rRsf8=
Subject key identifier:   5B:F4:CD:92:2A:70:50:18:B7:35:47:2B:53:22:D2:F4:F1:A7:1F:44
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer:       /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial:       018F893841256D13C61EE0D121AFCD775ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:01:56 +0000
Manifest this update:     Sat 18 May 2024 01:01:56 +0000
Manifest next update:     Sun 19 May 2024 01:01:56 +0000
Files and hashes:         1: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: NPazs0XU26ZGjYWUxT+k9FNYCFH+CMCMQ0XcZK2Hmzs=)
                          2: zXcuCycx-WZ0bPeumJj_lncnjws.roa (hash: fovlQ7/5b0YseluTr1RfjbLxRH9IGpLNQny4U3WpyCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:41:25:6d:13:c6:1e:e0:d1:21:af:cd:77:5a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
        Validity
            Not Before: May 18 01:01:56 2024 GMT
            Not After : May 19 01:01:56 2024 GMT
        Subject: CN=5bf4cd922a705018b735472b5322d2f4f1a71f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:63:df:5c:5f:95:75:b1:61:f7:d0:cf:17:
                    23:e2:5f:8f:f6:47:33:d9:72:3f:9c:f5:82:33:cb:
                    76:66:6d:7f:7f:f0:39:7c:84:ce:21:f3:34:4d:7d:
                    30:e1:40:7d:57:df:60:fe:28:f1:93:91:57:d6:d6:
                    90:bf:5f:cb:1e:50:c4:95:c1:4d:df:9f:95:68:ec:
                    bc:24:9e:f7:e0:fe:06:c3:3c:9b:eb:4d:b4:ad:4c:
                    54:7c:3d:9d:04:66:eb:98:cd:f2:df:14:49:b4:a2:
                    67:3e:40:cd:f7:38:e3:cb:40:0a:e1:d0:15:72:f6:
                    76:bb:03:00:f5:85:95:06:02:01:a1:cd:0c:36:a8:
                    e8:7f:70:5e:97:6b:77:40:be:14:ed:27:40:b6:25:
                    ae:24:0b:47:ba:61:55:3d:03:d1:62:6f:74:20:ef:
                    48:d8:dd:81:0c:b8:b3:a6:b4:ae:c0:25:74:56:08:
                    c5:3d:2d:bd:fc:b1:78:25:a9:95:9e:82:7a:73:d0:
                    d5:09:f1:55:fa:5c:a2:7f:94:1e:6c:52:df:a0:3a:
                    7a:aa:39:c7:9e:95:f5:8f:d1:98:dc:0c:e2:99:35:
                    2a:88:e2:c0:85:f9:03:c9:74:c0:94:e3:92:79:1c:
                    aa:3c:24:2e:f4:42:7b:fe:d9:79:80:a3:dd:79:f7:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:CD:92:2A:70:50:18:B7:35:47:2B:53:22:D2:F4:F1:A7:1F:44
            X509v3 Authority Key Identifier:
                keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:38:a6:31:21:6c:46:6b:55:df:c6:45:4b:6f:29:26:37:ea:
         fa:41:4c:19:2e:c7:40:d0:b1:b3:27:ea:00:1e:91:5b:3d:3e:
         40:32:c8:c9:ff:9f:cd:8d:cb:0d:cf:b3:e2:52:f2:e7:c4:26:
         ee:a8:a1:8a:70:dd:bd:d3:d6:c6:e0:07:18:e9:df:48:5c:88:
         3d:b4:84:47:85:c7:b8:58:4f:93:a2:0d:74:0f:31:81:d6:35:
         53:1e:64:c9:44:35:72:d4:90:8d:0c:9b:61:43:82:c0:03:05:
         70:b4:72:35:f3:41:94:41:14:df:ad:67:76:37:00:e8:60:cb:
         0e:3b:dd:3a:cb:f9:d2:07:ed:d0:8f:7f:20:29:0f:97:b4:e2:
         61:97:34:a5:e0:c7:1d:e1:ff:e1:af:bf:89:e3:68:4f:22:7f:
         24:60:a6:28:59:3f:9c:74:17:e7:33:11:fd:94:04:c8:77:dd:
         fc:d8:d8:19:08:6b:59:e2:4c:d0:4a:1c:e1:09:d2:4c:cd:0c:
         c4:24:73:95:13:9e:ec:31:9d:c9:aa:37:53:9f:a4:e4:5b:e5:
         72:0f:b4:c1:1b:0b:ea:aa:58:9f:cc:67:04:d9:66:eb:b0:91:
         5a:76:5b:c1:cc:33:e6:ac:e4:79:c5:3f:9b:0f:b0:81:48:cd:
         01:62:4a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JOEElbRPGHuDRIa/Nd1rKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjQwNTE4MDEwMTU2WhcNMjQwNTE5MDEwMTU2WjAzMTEwLwYDVQQD
Eyg1YmY0Y2Q5MjJhNzA1MDE4YjczNTQ3MmI1MzIyZDJmNGYxYTcxZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNRj31xflXWxYffQzxcj4l+P9kcz
2XI/nPWCM8t2Zm1/f/A5fITOIfM0TX0w4UB9V99g/ijxk5FX1taQv1/LHlDElcFN
35+VaOy8JJ734P4Gwzyb6020rUxUfD2dBGbrmM3y3xRJtKJnPkDN9zjjy0AK4dAV
cvZ2uwMA9YWVBgIBoc0MNqjof3Bel2t3QL4U7SdAtiWuJAtHumFVPQPRYm90IO9I
2N2BDLizprSuwCV0VgjFPS29/LF4JamVnoJ6c9DVCfFV+lyif5QebFLfoDp6qjnH
npX1j9GY3AzimTUqiOLAhfkDyXTAlOOSeRyqPCQu9EJ7/tl5gKPdefe0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv0zZIqcFAYtzVHK1Mi0vTxpx9EMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDimMSFs
RmtV38ZFS28pJjfq+kFMGS7HQNCxsyfqAB6RWz0+QDLIyf+fzY3LDc+z4lLy58Qm
7qihinDdvdPWxuAHGOnfSFyIPbSER4XHuFhPk6INdA8xgdY1Ux5kyUQ1ctSQjQyb
YUOCwAMFcLRyNfNBlEEU361ndjcA6GDLDjvdOsv50gft0I9/ICkPl7TiYZc0peDH
HeH/4a+/ieNoTyJ/JGCmKFk/nHQX5zMR/ZQEyHfd/NjYGQhrWeJM0Eoc4QnSTM0M
xCRzlROe7DGdyao3U5+k5Fvlcg+0wRsL6qpYn8xnBNlm67CRWnZbwcwz5qzkecU/
mw+wgUjNAWJKpg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:17:44 2024 by rpki-client on console-ams.rpki-client.org