Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File:                     k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier:          M2YqfhdnoxUe+sD4ozm5QLGwVj+9z/EHGCBzBg/qUr0=
Subject key identifier:   05:49:93:A6:74:D0:DF:33:3C:E3:0A:2E:C0:14:FC:64:E6:13:13:EB
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer:       /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial:       018F874A43CF9A50BAFAF26429840985A7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number:          88
Signing time:             Fri 17 May 2024 16:02:22 +0000
Manifest this update:     Fri 17 May 2024 16:02:22 +0000
Manifest next update:     Sat 18 May 2024 16:02:22 +0000
Files and hashes:         1: Y0tXZzS3tiiQuox59ybDNmhxLdI.roa (hash: mAQAyr9yB4+a4jklErZU7KVn6ybjyWwueAQ1XLHns0o=)
                          2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: gvMiMTwkqGMpryM1aaa1knhjOJYUYv1tmHcawws7S5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:43:cf:9a:50:ba:fa:f2:64:29:84:09:85:a7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
        Validity
            Not Before: May 17 16:02:22 2024 GMT
            Not After : May 18 16:02:22 2024 GMT
        Subject: CN=054993a674d0df333ce30a2ec014fc64e61313eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:47:a5:96:bd:d2:10:11:50:fb:5c:10:6e:
                    6c:e7:a9:12:2d:d3:94:9e:29:00:96:b5:92:4b:28:
                    ff:a7:90:69:08:87:24:79:15:d9:6c:ce:46:6b:0a:
                    bc:85:cb:3b:18:cf:39:72:d2:70:d8:46:26:86:00:
                    4b:f8:47:6d:cf:45:ab:7f:ad:bb:7e:db:77:88:11:
                    bd:88:3e:d7:6e:b9:39:21:74:09:d1:fd:9a:08:44:
                    23:aa:7a:70:45:6f:db:81:38:ec:31:1f:12:09:27:
                    c0:16:8f:db:61:57:dd:b2:0d:28:3c:60:6e:7d:b5:
                    56:1d:c3:d6:98:e8:ec:a3:8a:2e:b5:d0:dd:d8:2d:
                    07:24:d4:9a:49:51:7a:2e:99:05:b3:78:0f:53:35:
                    7f:50:0e:7b:f7:ee:c3:8e:da:68:33:28:42:69:c4:
                    28:21:4c:c5:b7:e4:03:b9:57:e8:af:57:3a:15:aa:
                    44:eb:f5:63:74:02:8f:50:d1:24:60:0f:20:22:88:
                    1c:4b:5a:83:7d:06:16:44:b2:e6:51:b8:69:87:6e:
                    a7:c1:28:50:7f:1b:98:7a:28:fa:f2:b1:ae:7d:22:
                    66:0a:20:f2:90:c7:59:d7:22:18:83:16:4f:b1:ad:
                    e3:0c:77:56:53:9b:bc:d1:c5:c7:7e:65:c3:75:f3:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:93:A6:74:D0:DF:33:3C:E3:0A:2E:C0:14:FC:64:E6:13:13:EB
            X509v3 Authority Key Identifier:
                keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:c9:07:9f:8c:02:6a:38:df:08:24:5e:c7:da:e3:8f:88:
         14:07:7b:17:ff:7e:c1:a0:5f:f2:b9:71:6f:32:5e:b4:29:26:
         d7:e3:cb:5b:ca:32:d1:ab:47:cd:9d:a8:52:cf:cf:0e:cb:4e:
         7e:60:c0:32:5e:80:94:6b:2b:02:bb:77:c5:13:d6:94:d6:37:
         d2:eb:72:57:c1:e2:35:b9:7b:e4:24:23:89:78:93:25:d1:89:
         29:94:96:3f:7c:c4:22:66:f2:b9:16:f3:2b:5c:8b:fd:7f:f3:
         a3:6f:d3:84:75:cc:21:e2:35:b1:20:94:50:4d:85:7d:cc:65:
         69:d2:e3:0a:6e:f1:da:2a:cd:16:6b:74:bb:1b:d4:33:c9:1e:
         b2:23:4c:74:b3:8a:c3:2b:ef:2d:b7:4a:14:9d:ba:e3:07:5c:
         0c:5f:7e:ad:10:14:c5:4a:13:15:07:90:0c:76:f4:41:c5:5c:
         88:3f:8d:d4:f5:21:ff:78:a5:13:30:7b:6e:bb:9c:2f:8a:1e:
         ce:12:22:68:9b:10:38:d9:10:7c:75:77:84:b1:dc:a8:d3:a7:
         5d:31:5d:9d:cb:d3:da:e8:6e:2c:8f:8b:cb:20:f0:f8:0d:f0:
         87:b3:dd:f5:e4:87:a5:26:4e:25:90:a2:59:be:f1:32:63:ac:
         c3:71:d5:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSkPPmlC6+vJkKYQJhae4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTAxMDc3ZGI4MGQ1MmIxNmQ0OWY4NjNhNjFlYTQxYTEy
NGJjNTkwHhcNMjQwNTE3MTYwMjIyWhcNMjQwNTE4MTYwMjIyWjAzMTEwLwYDVQQD
EygwNTQ5OTNhNjc0ZDBkZjMzM2NlMzBhMmVjMDE0ZmM2NGU2MTMxM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt55HpZa90hARUPtcEG5s56kSLdOU
nikAlrWSSyj/p5BpCIckeRXZbM5Gawq8hcs7GM85ctJw2EYmhgBL+Edtz0Wrf627
ftt3iBG9iD7Xbrk5IXQJ0f2aCEQjqnpwRW/bgTjsMR8SCSfAFo/bYVfdsg0oPGBu
fbVWHcPWmOjso4outdDd2C0HJNSaSVF6LpkFs3gPUzV/UA579+7DjtpoMyhCacQo
IUzFt+QDuVfor1c6FapE6/VjdAKPUNEkYA8gIogcS1qDfQYWRLLmUbhph26nwShQ
fxuYeij68rGufSJmCiDykMdZ1yIYgxZPsa3jDHdWU5u80cXHfmXDdfNX2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVJk6Z00N8zPOMKLsAU/GTmExPrMB8GA1UdIwQY
MBaAFJNQEHfbgNUrFtSfhjph6kGhJLxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUt
NzlkMWEyN2NkOTkzLzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUtNzlkMWEyN2NkOTkz
LzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0LJB5+M
Amo43wgkXsfa44+IFAd7F/9+waBf8rlxbzJetCkm1+PLW8oy0atHzZ2oUs/PDstO
fmDAMl6AlGsrArt3xRPWlNY30utyV8HiNbl75CQjiXiTJdGJKZSWP3zEImbyuRbz
K1yL/X/zo2/ThHXMIeI1sSCUUE2FfcxladLjCm7x2irNFmt0uxvUM8kesiNMdLOK
wyvvLbdKFJ264wdcDF9+rRAUxUoTFQeQDHb0QcVciD+N1PUh/3ilEzB7brucL4oe
zhIiaJsQONkQfHV3hLHcqNOnXTFdncvT2uhuLI+LyyDw+A3wh7Pd9eSHpSZOJZCi
Wb7xMmOsw3HVVw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:12:45 2024 by rpki-client on console-ams.rpki-client.org