Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
File:                     tIKj5Qem8UAPb74uFI-hZERH5s0.mft (raw, json)
Hash identifier:          diFxKg1J6YKlhhvz8EyacYWcYe7pqUGGPbjwCWvpSEY=
Subject key identifier:   8A:5C:2C:F6:F3:46:46:21:06:44:18:F4:63:96:75:C0:02:6F:9F:09
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Certificate issuer:       /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial:       018F866CDA3B0618775497C2B8CF4A998287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
Manifest number:          0991
Signing time:             Fri 17 May 2024 12:00:31 +0000
Manifest this update:     Fri 17 May 2024 12:00:31 +0000
Manifest next update:     Sat 18 May 2024 12:00:31 +0000
Files and hashes:         1: nY2Pn7EHuoOsfBfA1PtLbksmxSc.roa (hash: 8rPur4HG0BL8LTZSFTVLSk+9/yciJUJqrRdocJIDscg=)
                          2: tIKj5Qem8UAPb74uFI-hZERH5s0.crl (hash: 59rZkmNmXgb1NOFKfwTYn2XCxT073/izSjb7s07TtZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:da:3b:06:18:77:54:97:c2:b8:cf:4a:99:82:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
        Validity
            Not Before: May 17 12:00:31 2024 GMT
            Not After : May 18 12:00:31 2024 GMT
        Subject: CN=8a5c2cf6f3464621064418f4639675c0026f9f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:9b:ee:71:71:42:9e:0a:8a:3a:35:da:45:
                    dd:ab:11:90:d9:6f:a4:78:af:45:29:fb:05:9f:df:
                    1f:a5:0c:ff:ed:0c:ed:90:93:89:57:7e:a1:75:c7:
                    46:e5:39:ca:ba:45:6a:6e:8e:2d:1c:f9:71:38:65:
                    8f:2b:3c:6b:5f:bc:fb:45:6f:b8:85:1a:98:ad:c9:
                    0c:ce:13:15:ff:e1:e6:13:a4:4d:92:7c:92:0c:ba:
                    32:21:4c:52:80:b5:82:7a:fc:d0:08:ca:03:36:42:
                    8d:26:b0:68:5e:15:c9:f1:0f:4b:5f:50:56:3b:65:
                    30:48:4f:07:4e:b6:7a:a1:da:da:70:a7:00:f5:84:
                    96:13:42:4b:5c:79:32:d3:f8:e0:4c:7d:0d:17:39:
                    4a:fa:6b:46:9a:a8:6f:70:d6:ee:ee:9b:b6:6e:86:
                    24:85:5a:a0:47:f3:45:1a:c4:3d:d2:29:0f:d8:67:
                    a5:92:bb:5a:e6:9c:ae:e7:b8:75:b6:88:28:c1:97:
                    b3:76:f4:81:7d:4e:10:3e:75:13:2e:97:88:2b:5a:
                    05:6e:6a:93:bc:5d:21:f2:07:96:69:8f:7c:c6:50:
                    d6:35:80:97:aa:0b:f9:f9:70:7e:6f:83:e0:d8:3f:
                    2a:9d:e2:5d:8d:7e:4a:88:e5:24:60:37:6e:8b:c0:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5C:2C:F6:F3:46:46:21:06:44:18:F4:63:96:75:C0:02:6F:9F:09
            X509v3 Authority Key Identifier:
                keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ee:19:7c:92:07:10:fb:7b:80:ff:8a:15:06:d1:1b:9b:10:
         66:c4:81:e7:e7:17:14:37:49:9c:d0:61:a7:67:57:59:4d:42:
         b2:0c:c2:ec:54:0e:39:de:f2:65:97:68:19:2a:10:47:2b:ac:
         c1:87:4c:d6:6c:48:56:7b:3f:50:08:15:c1:4e:bd:cc:16:db:
         fe:9e:db:d2:26:37:fd:01:d6:3d:e7:74:c8:c9:9a:18:15:fa:
         12:54:5a:60:96:3d:6b:42:a6:65:25:6d:c8:d6:3d:e0:59:53:
         8a:23:59:d6:6f:82:61:90:db:6b:b4:ba:56:a8:84:b3:3d:8e:
         4c:c2:c7:b5:c9:d0:47:f9:c1:a0:0d:7a:46:1b:bf:4a:f8:ae:
         51:76:58:22:47:45:e1:d0:3b:80:53:84:34:e8:29:6e:42:b7:
         61:61:fc:d0:93:c8:c0:86:13:fd:62:e0:5b:22:91:0f:1b:94:
         e9:6c:63:a5:d4:a1:07:a1:be:9d:8b:d8:b9:b7:c2:a2:99:be:
         2a:d1:03:df:49:06:40:20:9c:d9:8c:7b:90:22:bb:e9:b3:f1:
         6a:5b:de:7f:ca:11:97:e3:f2:83:0f:f0:7e:f8:90:79:e5:da:
         94:14:8a:33:38:6a:0a:02:16:0d:69:93:e1:c1:57:fc:a1:f4:
         f3:46:b2:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbNo7Bhh3VJfCuM9KmYKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODJhM2U1MDdhNmYxNDAwZjZmYmUyZTE0OGZhMTY0NDQ0
N2U2Y2QwHhcNMjQwNTE3MTIwMDMxWhcNMjQwNTE4MTIwMDMxWjAzMTEwLwYDVQQD
Eyg4YTVjMmNmNmYzNDY0NjIxMDY0NDE4ZjQ2Mzk2NzVjMDAyNmY5ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lGb7nFxQp4Kijo12kXdqxGQ2W+k
eK9FKfsFn98fpQz/7QztkJOJV36hdcdG5TnKukVqbo4tHPlxOGWPKzxrX7z7RW+4
hRqYrckMzhMV/+HmE6RNknySDLoyIUxSgLWCevzQCMoDNkKNJrBoXhXJ8Q9LX1BW
O2UwSE8HTrZ6odracKcA9YSWE0JLXHky0/jgTH0NFzlK+mtGmqhvcNbu7pu2boYk
hVqgR/NFGsQ90ikP2Gelkrta5pyu57h1togowZezdvSBfU4QPnUTLpeIK1oFbmqT
vF0h8geWaY98xlDWNYCXqgv5+XB+b4Pg2D8qneJdjX5KiOUkYDdui8B45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpcLPbzRkYhBkQY9GOWdcACb58JMB8GA1UdIwQY
MBaAFLSCo+UHpvFAD2++LhSPoWRER+bNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElLajVRZW04VUFQYjc0dUZJLWhaRVJINXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOGNlNmMtNzEzMi00NDdkLThmMGUt
NzU2Mjc0ZTQ0N2VhLzEvdElLajVRZW04VUFQYjc0dUZJLWhaRVJINXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xOGNlNmMtNzEzMi00NDdkLThmMGUtNzU2Mjc0ZTQ0N2Vh
LzEvdElLajVRZW04VUFQYjc0dUZJLWhaRVJINXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde4ZfJIH
EPt7gP+KFQbRG5sQZsSB5+cXFDdJnNBhp2dXWU1CsgzC7FQOOd7yZZdoGSoQRyus
wYdM1mxIVns/UAgVwU69zBbb/p7b0iY3/QHWPed0yMmaGBX6ElRaYJY9a0KmZSVt
yNY94FlTiiNZ1m+CYZDba7S6VqiEsz2OTMLHtcnQR/nBoA16Rhu/SviuUXZYIkdF
4dA7gFOENOgpbkK3YWH80JPIwIYT/WLgWyKRDxuU6WxjpdShB6G+nYvYubfCopm+
KtED30kGQCCc2Yx7kCK76bPxalvef8oRl+Pygw/wfviQeeXalBSKMzhqCgIWDWmT
4cFX/KH080aynQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:13:27 2024 by rpki-client on console-ams.rpki-client.org