Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File:                     pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier:          p7bo14NUBbr9iG6CTAvgmB2HhKW7uWSPL6IWwsrOZrY=
Subject key identifier:   33:62:5D:49:FE:8B:A0:73:24:D3:90:BB:F3:1A:E6:32:05:D0:40:44
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer:       /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial:       018F893731A930CD7B9A2A8462AA620BF9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number:          1178
Signing time:             Sat 18 May 2024 01:00:46 +0000
Manifest this update:     Sat 18 May 2024 01:00:46 +0000
Manifest next update:     Sun 19 May 2024 01:00:46 +0000
Files and hashes:         1: 52o7v0lh9w6_bEloO6DPuJd4SKg.roa (hash: /hgQr7tXO1CguT9E2I4U4xfpsTR4F8hiP0hbo9qid0Y=)
                          2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: GoWDIyOuFZU9sIngWy8AMJBasnPgfPCuiWB0LqYhrD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:31:a9:30:cd:7b:9a:2a:84:62:aa:62:0b:f9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
        Validity
            Not Before: May 18 01:00:46 2024 GMT
            Not After : May 19 01:00:46 2024 GMT
        Subject: CN=33625d49fe8ba07324d390bbf31ae63205d04044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:99:f2:6d:7b:46:c6:17:85:5c:4f:78:1d:
                    b6:f5:a6:ee:3b:91:4f:1e:ac:45:c5:d1:6d:ce:1b:
                    7f:e7:26:3c:6d:27:31:34:42:51:c5:f3:66:17:bd:
                    e8:e7:7c:f5:65:c0:57:59:51:b8:50:77:4c:f6:34:
                    ef:d5:87:7b:aa:68:d0:9a:c9:8f:ef:e5:55:d3:bf:
                    f6:44:c5:85:cd:a3:e4:2e:d0:c4:82:11:b1:8d:e9:
                    e9:f3:13:96:64:bf:fa:e8:b9:c6:8b:9f:56:08:9b:
                    65:d8:68:9d:ce:10:44:e8:94:11:e0:c4:91:f6:12:
                    0b:86:3a:6e:a0:c9:a3:3a:e8:9e:90:17:a9:50:d6:
                    47:36:ea:1b:8a:30:9b:ff:76:a2:cc:7f:0f:b5:d2:
                    b7:71:c7:e4:86:ff:14:97:cc:89:0c:7b:80:d0:d5:
                    ac:31:cd:78:09:25:42:fa:e2:be:a3:8c:c5:51:6f:
                    26:15:00:89:31:9f:77:87:b0:45:7d:1c:32:2d:4f:
                    c6:40:ab:0e:00:c9:bb:a4:44:86:29:d5:50:57:eb:
                    33:ac:22:5b:b1:6a:4f:1e:83:62:81:73:b5:26:4a:
                    4a:d2:a0:bb:48:41:4d:7f:63:4f:f3:a5:e0:20:27:
                    de:5f:ad:ad:21:aa:49:9d:0f:90:ae:ef:15:80:b9:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:5D:49:FE:8B:A0:73:24:D3:90:BB:F3:1A:E6:32:05:D0:40:44
            X509v3 Authority Key Identifier:
                keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:f5:53:ac:78:b6:c2:7a:1d:45:dd:bf:7e:0a:df:28:7c:
         92:3e:d0:ef:dc:cc:fd:73:20:ae:98:ea:00:57:5a:4d:18:b6:
         88:66:42:b3:9f:f5:40:f7:27:c2:19:36:d2:bf:e7:2b:4d:db:
         eb:9c:98:8a:33:f5:ba:b8:2e:c0:fa:90:8e:aa:be:7f:14:45:
         0b:83:b1:34:1c:8a:de:d5:01:29:93:3f:ee:80:7d:13:2d:50:
         cc:24:d7:78:4f:d0:55:41:26:2a:64:4a:63:b5:58:91:82:ae:
         dd:db:54:ae:c2:be:d4:23:da:a6:9d:06:07:a1:6d:54:c0:97:
         58:e8:db:bf:ce:74:44:e2:28:2a:b7:f2:d4:a9:88:bc:9c:c2:
         06:88:02:55:c6:8b:71:d4:f1:01:01:a6:cb:b0:ca:06:da:cb:
         9d:96:5f:b6:1f:00:19:c0:87:95:ea:83:68:55:d3:00:9c:04:
         54:dd:c4:6c:8b:d3:c9:18:67:f7:bc:19:a4:57:54:d7:ef:aa:
         dd:f3:c5:c8:4b:8b:27:bb:4b:03:f3:bf:47:06:7e:c0:d7:87:
         cb:c4:85:c9:ea:c7:bb:ec:17:1a:b1:c4:e1:c0:9b:8c:88:b9:
         44:5e:42:58:0f:25:0d:a1:61:91:29:07:61:4e:7a:44:f7:ca:
         78:1d:ba:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNzGpMM17miqEYqpiC/n4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5
MzhiYjEwHhcNMjQwNTE4MDEwMDQ2WhcNMjQwNTE5MDEwMDQ2WjAzMTEwLwYDVQQD
EygzMzYyNWQ0OWZlOGJhMDczMjRkMzkwYmJmMzFhZTYzMjA1ZDA0MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDOZ8m17RsYXhVxPeB229abuO5FP
HqxFxdFtzht/5yY8bScxNEJRxfNmF73o53z1ZcBXWVG4UHdM9jTv1Yd7qmjQmsmP
7+VV07/2RMWFzaPkLtDEghGxjenp8xOWZL/66LnGi59WCJtl2GidzhBE6JQR4MSR
9hILhjpuoMmjOuiekBepUNZHNuobijCb/3aizH8PtdK3ccfkhv8Ul8yJDHuA0NWs
Mc14CSVC+uK+o4zFUW8mFQCJMZ93h7BFfRwyLU/GQKsOAMm7pESGKdVQV+szrCJb
sWpPHoNigXO1JkpK0qC7SEFNf2NP86XgICfeX62tIapJnQ+Qru8VgLn0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNiXUn+i6BzJNOQu/Ma5jIF0EBEMB8GA1UdIwQY
MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt
YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi
LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZP1U6x4
tsJ6HUXdv34K3yh8kj7Q79zM/XMgrpjqAFdaTRi2iGZCs5/1QPcnwhk20r/nK03b
65yYijP1urguwPqQjqq+fxRFC4OxNByK3tUBKZM/7oB9Ey1QzCTXeE/QVUEmKmRK
Y7VYkYKu3dtUrsK+1CPapp0GB6FtVMCXWOjbv850ROIoKrfy1KmIvJzCBogCVcaL
cdTxAQGmy7DKBtrLnZZfth8AGcCHleqDaFXTAJwEVN3EbIvTyRhn97wZpFdU1++q
3fPFyEuLJ7tLA/O/RwZ+wNeHy8SFyerHu+wXGrHE4cCbjIi5RF5CWA8lDaFhkSkH
YU56RPfKeB26EQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:17:58 2024 by rpki-client on console-ams.rpki-client.org