Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File:                     2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier:          uevCrTpXcPYlBJ1weib4MxGYWipEbZWTVd1XiMbrwVc=
Subject key identifier:   1C:CE:8F:6E:6B:FD:9C:13:CA:BC:C9:7D:60:F6:F1:1D:76:BE:5F:FB
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer:       /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial:       018F4B6C6B753E23395898EBB75263215244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 01:02:27 +0000
Manifest this update:     Mon 06 May 2024 01:02:27 +0000
Manifest next update:     Tue 07 May 2024 01:02:27 +0000
Files and hashes:         1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: Aq4xkeEMkDGhikBOOPKtfkLSIAbolCYR7zdQ2zyEOQs=)
                          2: JaIluHb9Ol2H67Ys_nrWjj3A9ig.roa (hash: LP+bDdFCcwv92ikvTs/m9H7GE/XhiIk1lICpND9OEV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:6b:75:3e:23:39:58:98:eb:b7:52:63:21:52:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
        Validity
            Not Before: May  6 01:02:27 2024 GMT
            Not After : May  7 01:02:27 2024 GMT
        Subject: CN=1cce8f6e6bfd9c13cabcc97d60f6f11d76be5ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:35:f5:15:e1:50:70:78:cd:b8:ab:68:72:
                    2b:01:5b:13:fd:64:27:ce:5d:94:0e:02:1b:1b:2c:
                    1c:f6:57:89:6f:ed:7a:db:a3:c3:c5:7f:9a:7d:7a:
                    b7:ef:3d:8f:bf:0e:cc:8e:83:e5:b4:06:61:37:1c:
                    a0:87:c5:20:d2:7f:e2:2f:57:88:89:f9:e5:28:06:
                    8a:68:90:f8:cb:5a:f8:04:3d:f4:54:3c:45:0a:43:
                    9f:65:e2:cc:47:cd:ba:fe:a2:d2:b8:c0:07:61:d9:
                    de:e3:e4:67:9e:0b:6c:cc:f1:63:86:ad:17:b0:1e:
                    b6:55:fa:87:9b:09:54:82:fe:ac:17:8b:00:31:1c:
                    64:61:1b:ff:5d:59:33:ab:62:38:83:3e:9b:32:65:
                    df:f8:05:a7:10:ba:5f:49:5a:ab:18:6c:0e:b7:80:
                    64:64:a9:3d:ff:c3:80:f0:03:c5:43:b2:3c:27:04:
                    05:f5:b0:01:04:e5:3b:9e:31:a8:95:13:94:b5:bd:
                    f5:15:2f:02:08:f0:81:35:ca:84:a3:af:54:77:72:
                    d0:09:c1:ea:c8:50:33:44:4c:71:2f:37:b4:5b:4c:
                    55:a3:e9:60:19:a9:de:93:04:4b:81:53:bc:22:21:
                    27:93:0b:38:09:da:1b:b3:65:72:e1:f5:8d:ba:72:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:8F:6E:6B:FD:9C:13:CA:BC:C9:7D:60:F6:F1:1D:76:BE:5F:FB
            X509v3 Authority Key Identifier:
                keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:04:3b:9f:03:3d:9f:1d:9a:d5:f8:49:03:90:c1:5b:66:c0:
         ee:34:7d:bf:f0:e0:fa:bc:01:1d:60:f1:4c:db:9c:ca:dc:9d:
         bd:71:6e:da:ab:37:28:ca:46:bb:e0:c8:c5:8c:05:42:83:49:
         8d:38:9e:b4:b3:e1:47:5e:27:58:b1:58:dd:e1:7a:ac:69:c9:
         25:de:70:d9:03:5c:af:c2:f5:e3:0f:97:b0:7c:93:11:56:fe:
         52:28:b4:cd:20:8e:cb:7f:60:0b:2a:64:9e:ff:73:19:1e:d1:
         cf:24:84:fe:3b:16:6a:f2:d6:62:45:b9:00:0e:53:09:1e:25:
         e1:e8:01:7e:5e:03:aa:cf:b9:5a:93:19:95:23:ad:2d:5b:ea:
         14:81:8d:0e:bc:dd:44:c5:e8:a7:f5:f7:8f:14:e7:88:a7:d5:
         42:8c:c8:08:01:c2:a0:fe:bd:90:32:f9:13:c7:11:41:e3:c4:
         dc:2f:28:66:27:a1:72:21:15:16:a0:fa:46:db:64:05:c1:2c:
         59:44:3a:a7:e0:00:be:6f:73:74:62:1a:55:40:e7:24:b4:fd:
         56:1e:20:76:b7:c4:b5:d4:15:75:03:b5:a8:31:8c:8b:b0:91:
         f5:2e:e3:98:01:e8:a9:f6:60:0d:90:ca:c9:ef:f4:b8:48:09:
         9c:2f:bb:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9LbGt1PiM5WJjrt1JjIVJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2
ZjIxMzgwHhcNMjQwNTA2MDEwMjI3WhcNMjQwNTA3MDEwMjI3WjAzMTEwLwYDVQQD
EygxY2NlOGY2ZTZiZmQ5YzEzY2FiY2M5N2Q2MGY2ZjExZDc2YmU1ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMA19RXhUHB4zbiraHIrAVsT/WQn
zl2UDgIbGywc9leJb+1626PDxX+afXq37z2Pvw7MjoPltAZhNxygh8Ug0n/iL1eI
ifnlKAaKaJD4y1r4BD30VDxFCkOfZeLMR826/qLSuMAHYdne4+RnngtszPFjhq0X
sB62VfqHmwlUgv6sF4sAMRxkYRv/XVkzq2I4gz6bMmXf+AWnELpfSVqrGGwOt4Bk
ZKk9/8OA8APFQ7I8JwQF9bABBOU7njGolROUtb31FS8CCPCBNcqEo69Ud3LQCcHq
yFAzRExxLze0W0xVo+lgGanekwRLgVO8IiEnkws4Cdobs2Vy4fWNunLNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzOj25r/ZwTyrzJfWD28R12vl/7MB8GA1UdIwQY
MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt
MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2
LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwQ7nwM9
nx2a1fhJA5DBW2bA7jR9v/Dg+rwBHWDxTNucytydvXFu2qs3KMpGu+DIxYwFQoNJ
jTietLPhR14nWLFY3eF6rGnJJd5w2QNcr8L14w+XsHyTEVb+Uii0zSCOy39gCypk
nv9zGR7RzySE/jsWavLWYkW5AA5TCR4l4egBfl4Dqs+5WpMZlSOtLVvqFIGNDrzd
RMXop/X3jxTniKfVQozICAHCoP69kDL5E8cRQePE3C8oZiehciEVFqD6RttkBcEs
WUQ6p+AAvm9zdGIaVUDnJLT9Vh4gdrfEtdQVdQO1qDGMi7CR9S7jmAHoqfZgDZDK
ye/0uEgJnC+7MA==
-----END CERTIFICATE-----
Generated at Mon May 6 04:19:30 2024 by rpki-client on console-fra.rpki-client.org