Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File:                     U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier:          6Ld7JkgbWmEUDVWQmvrbwaIJeE/Q9bOA0NsthuEoW5k=
Subject key identifier:   15:C5:62:1C:39:A6:AF:5E:A2:5A:9E:87:06:B4:8C:EC:2A:43:A4:65
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer:       /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial:       018F882420D7FE44DB787BAB290BB2BFC3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:20 +0000
Manifest this update:     Fri 17 May 2024 20:00:20 +0000
Manifest next update:     Sat 18 May 2024 20:00:20 +0000
Files and hashes:         1: ADOxB9Gim1uDJXbZwYcxLGFJZ_g.roa (hash: JXqzQjJ6IxxwVm9urG07jOEUwT52gCcGLVN7BoFOIM0=)
                          2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: hd8kK/ZRn8fUUFZP82XFr8G2lXx2z5FP8/pHYoUn7GY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:20:d7:fe:44:db:78:7b:ab:29:0b:b2:bf:c3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Validity
            Not Before: May 17 20:00:20 2024 GMT
            Not After : May 18 20:00:20 2024 GMT
        Subject: CN=15c5621c39a6af5ea25a9e8706b48cec2a43a465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:45:00:a4:ba:94:fe:e9:23:eb:ef:d2:28:
                    a9:5c:73:6c:85:51:54:a2:23:36:b3:5f:50:63:83:
                    a7:a6:d6:7b:03:13:6e:9b:97:02:dc:53:04:09:16:
                    a0:88:69:04:96:d3:aa:e7:0d:2b:44:b4:2d:67:a1:
                    87:88:af:34:8b:1f:fc:40:11:a7:7a:7b:87:af:22:
                    e6:2b:5f:83:52:54:a0:55:77:6f:45:c5:9a:c1:b5:
                    22:94:a2:a9:18:0b:e2:c7:8c:5c:bf:b9:38:4f:ae:
                    a9:83:7a:08:94:1c:b6:f9:44:a9:ab:35:fd:e2:72:
                    98:51:94:f5:d8:74:89:3a:02:38:49:03:0b:a4:09:
                    ff:f0:87:84:53:89:49:06:29:98:f4:85:2d:2a:e4:
                    54:de:25:0e:5f:b8:14:9a:af:25:be:73:13:a2:0c:
                    f1:c8:6a:44:ce:2c:3b:8c:2b:43:78:0d:a0:0d:fb:
                    8f:2b:d0:be:af:80:bc:f1:b6:2d:fe:5c:e1:02:b6:
                    d9:74:d2:a2:a8:ba:37:6e:90:db:76:2e:3a:2a:67:
                    00:18:2b:0b:83:75:52:6d:15:5b:a8:d8:51:4d:7e:
                    66:d2:a3:0b:52:f1:50:3c:c8:a5:4b:f5:49:86:de:
                    3a:74:57:fb:bf:db:79:e5:1e:bf:36:0a:3d:16:02:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:62:1C:39:A6:AF:5E:A2:5A:9E:87:06:B4:8C:EC:2A:43:A4:65
            X509v3 Authority Key Identifier:
                keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:c2:a4:df:ab:84:7f:89:68:3d:1b:09:51:ed:37:a8:88:
         41:31:54:94:51:9e:4a:af:d4:f6:69:37:19:33:42:5c:3c:d6:
         50:b7:c7:78:bf:17:a1:68:34:96:ca:6c:d1:2a:6a:8e:78:fd:
         8e:f9:28:15:26:46:90:e8:37:e3:44:f9:68:c4:6a:4b:01:8d:
         c2:0a:a8:95:3d:87:0e:1a:68:73:63:1f:84:ae:f5:b2:e1:44:
         54:5d:6a:fc:5d:5c:fb:ea:1e:bf:65:b3:bc:9e:2e:bd:78:ca:
         f4:d8:3b:34:ab:e0:a5:28:18:29:62:35:91:f1:1b:7e:48:db:
         43:09:8e:d3:26:66:b9:e7:35:d5:64:75:b2:70:b8:3b:f0:31:
         d7:33:62:0c:8b:c6:a5:7e:7c:ad:b6:5a:42:85:b5:eb:28:d3:
         e2:10:a6:1e:d9:9b:9e:5b:14:59:fc:04:e5:8b:13:8e:dc:fd:
         95:67:82:64:89:03:a8:7e:e1:ab:04:01:ff:0a:86:79:b4:6f:
         99:95:3d:20:f8:cd:76:a8:57:c9:f3:a4:3d:dd:0e:2e:f0:cf:
         1b:12:fa:f2:62:d3:f4:ca:8f:6b:8a:8c:73:df:de:d1:c0:64:
         2b:ef:e3:4b:46:3f:f4:fd:d1:7d:57:a2:4e:48:77:b5:23:90:
         48:0e:ca:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJCDX/kTbeHurKQuyv8PmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzc3MzEyZTBkMmNlYzg0NWEwNDYxMzg0NWY4YTFiZTI2
M2MzOTkwHhcNMjQwNTE3MjAwMDIwWhcNMjQwNTE4MjAwMDIwWjAzMTEwLwYDVQQD
EygxNWM1NjIxYzM5YTZhZjVlYTI1YTllODcwNmI0OGNlYzJhNDNhNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuudFAKS6lP7pI+vv0iipXHNshVFU
oiM2s19QY4OnptZ7AxNum5cC3FMECRagiGkEltOq5w0rRLQtZ6GHiK80ix/8QBGn
enuHryLmK1+DUlSgVXdvRcWawbUilKKpGAvix4xcv7k4T66pg3oIlBy2+USpqzX9
4nKYUZT12HSJOgI4SQMLpAn/8IeEU4lJBimY9IUtKuRU3iUOX7gUmq8lvnMTogzx
yGpEziw7jCtDeA2gDfuPK9C+r4C88bYt/lzhArbZdNKiqLo3bpDbdi46KmcAGCsL
g3VSbRVbqNhRTX5m0qMLUvFQPMilS/VJht46dFf7v9t55R6/Ngo9FgLnlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXFYhw5pq9eolqehwa0jOwqQ6RlMB8GA1UdIwQY
MBaAFFPHcxLg0s7IRaBGE4RfihviY8OZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjct
YzliZjU1ZDlkMWJhLzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjctYzliZjU1ZDlkMWJh
LzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8jCpN+r
hH+JaD0bCVHtN6iIQTFUlFGeSq/U9mk3GTNCXDzWULfHeL8XoWg0lsps0Spqjnj9
jvkoFSZGkOg340T5aMRqSwGNwgqolT2HDhpoc2MfhK71suFEVF1q/F1c++oev2Wz
vJ4uvXjK9Ng7NKvgpSgYKWI1kfEbfkjbQwmO0yZmuec11WR1snC4O/Ax1zNiDIvG
pX58rbZaQoW16yjT4hCmHtmbnlsUWfwE5YsTjtz9lWeCZIkDqH7hqwQB/wqGebRv
mZU9IPjNdqhXyfOkPd0OLvDPGxL68mLT9MqPa4qMc9/e0cBkK+/jS0Y/9P3RfVei
Tkh3tSOQSA7KDg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:00:54 2024 by rpki-client on console-fra.rpki-client.org