Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File:                     q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier:          /46wKwAV8nRKP98212iyvNCNQqd4bdeLRqTUxQa2A8U=
Subject key identifier:   A2:C2:E7:FE:A5:7C:42:17:5F:6A:35:11:F6:FB:D8:B2:32:17:FC:67
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer:       /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial:       018F88249399EE8C8AC9517E0A2E48B47E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:49 +0000
Manifest this update:     Fri 17 May 2024 20:00:49 +0000
Manifest next update:     Sat 18 May 2024 20:00:49 +0000
Files and hashes:         1: T5N2mMfVc1lkhPvs2S6zR7QOjRE.roa (hash: jbQhSi1vsp8hi0XFp/sPTE7NjyVGxI5HucKFhBUw6GY=)
                          2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: FyUSELdkKG+VlAdNmlk0q/ARCanLuMRLSS+Eyxj0LNk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:93:99:ee:8c:8a:c9:51:7e:0a:2e:48:b4:7e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
        Validity
            Not Before: May 17 20:00:49 2024 GMT
            Not After : May 18 20:00:49 2024 GMT
        Subject: CN=a2c2e7fea57c42175f6a3511f6fbd8b23217fc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:b6:ca:d5:2b:2f:2b:a3:9c:e5:dc:63:86:
                    4b:86:01:ba:7d:46:b9:9f:ff:61:54:57:10:71:2f:
                    2b:e0:9c:fc:bd:3b:93:c2:0d:58:52:0d:ba:aa:9a:
                    64:7a:58:1b:8e:de:e6:70:73:f8:ed:1a:23:ca:ec:
                    ca:e7:b2:f6:14:8e:f1:58:6a:6b:78:f4:2f:5b:85:
                    85:0b:10:52:42:9b:d8:f4:d9:6f:57:f4:b8:8c:3c:
                    90:f7:18:78:00:0e:13:ca:62:a0:bd:21:da:8c:a9:
                    67:3d:42:1a:57:c7:71:20:e5:a9:90:3c:22:d2:6d:
                    31:d5:aa:fe:0c:12:c8:0e:0e:d5:7c:0a:5b:f5:28:
                    db:5b:d1:aa:36:26:7f:4d:1c:ad:cc:80:85:d4:cb:
                    af:ee:bb:2d:ef:ed:6b:e1:ed:11:7e:b6:21:1f:b2:
                    88:c4:88:29:d9:4d:e0:89:4a:29:3c:43:2d:4e:b0:
                    0b:21:8f:85:d0:ba:1a:a2:bb:62:41:71:f8:e6:73:
                    19:40:6a:19:3f:db:a1:e1:5f:71:30:25:04:76:a3:
                    37:6c:3b:12:4d:4c:fd:4b:7b:10:62:29:c7:4d:c3:
                    dd:0f:21:91:76:cb:12:96:be:aa:6d:80:4c:c0:74:
                    55:fb:75:f8:7f:88:c1:06:de:6c:01:d1:dd:59:f2:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C2:E7:FE:A5:7C:42:17:5F:6A:35:11:F6:FB:D8:B2:32:17:FC:67
            X509v3 Authority Key Identifier:
                keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:5b:15:c3:24:e2:b9:df:00:2f:3e:43:5e:ce:17:03:ab:
         c1:a7:40:d5:be:1a:69:62:e5:4b:83:d2:9a:0d:19:60:9c:e8:
         2e:8c:c4:c6:03:fb:d9:91:7b:ed:c7:ab:a3:ba:0f:2f:10:74:
         aa:6c:d6:aa:8c:f2:db:fe:0e:de:df:32:2a:02:26:e0:dd:7e:
         ad:fe:a9:ae:e1:f6:0f:d9:0d:d8:56:3e:bf:ee:bd:c6:71:32:
         85:53:b8:ed:c1:9a:1f:ad:2c:3d:d0:db:12:2e:19:94:23:91:
         f8:a0:3d:f8:92:6b:79:38:a9:52:9d:18:85:88:60:fc:0c:c8:
         8c:9d:9f:59:6a:77:52:c0:07:1a:dd:f1:94:a7:74:d7:94:39:
         5e:12:10:f4:66:ed:36:16:a3:46:6e:d6:aa:25:33:e4:be:dc:
         00:a7:67:ed:24:8b:d7:85:7b:95:8f:2b:7f:a8:7d:fb:77:46:
         6a:1f:ad:5e:a0:71:4f:d5:43:82:3b:f2:a3:1c:57:21:cf:69:
         33:62:33:61:95:6d:54:57:94:87:29:80:56:13:46:37:2a:19:
         b8:ed:99:89:a8:3f:8e:d3:1a:b3:17:9a:20:fb:ac:4f:2d:fc:
         bd:36:8e:06:d3:49:d2:21:a9:69:6c:e9:42:30:2c:c5:05:50:
         2d:ae:4d:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJJOZ7oyKyVF+Ci5ItH6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODc3MzQzNjhkODgzMTVmMTFiMzI5Mzg2Y2M1ZWYyYmI4
NzU4NTgwHhcNMjQwNTE3MjAwMDQ5WhcNMjQwNTE4MjAwMDQ5WjAzMTEwLwYDVQQD
EyhhMmMyZTdmZWE1N2M0MjE3NWY2YTM1MTFmNmZiZDhiMjMyMTdmYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdO2ytUrLyujnOXcY4ZLhgG6fUa5
n/9hVFcQcS8r4Jz8vTuTwg1YUg26qppkelgbjt7mcHP47RojyuzK57L2FI7xWGpr
ePQvW4WFCxBSQpvY9NlvV/S4jDyQ9xh4AA4TymKgvSHajKlnPUIaV8dxIOWpkDwi
0m0x1ar+DBLIDg7VfApb9SjbW9GqNiZ/TRytzICF1Muv7rst7+1r4e0RfrYhH7KI
xIgp2U3giUopPEMtTrALIY+F0LoaortiQXH45nMZQGoZP9uh4V9xMCUEdqM3bDsS
TUz9S3sQYinHTcPdDyGRdssSlr6qbYBMwHRV+3X4f4jBBt5sAdHdWfLVUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLC5/6lfEIXX2o1Efb72LIyF/xnMB8GA1UdIwQY
MBaAFKuHc0No2IMV8Rsyk4bMXvK7h1hYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUt
MTg1ODVlZDk0YTk4LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUtMTg1ODVlZDk0YTk4
LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHpbFcMk
4rnfAC8+Q17OFwOrwadA1b4aaWLlS4PSmg0ZYJzoLozExgP72ZF77cero7oPLxB0
qmzWqozy2/4O3t8yKgIm4N1+rf6pruH2D9kN2FY+v+69xnEyhVO47cGaH60sPdDb
Ei4ZlCOR+KA9+JJreTipUp0YhYhg/AzIjJ2fWWp3UsAHGt3xlKd015Q5XhIQ9Gbt
NhajRm7WqiUz5L7cAKdn7SSL14V7lY8rf6h9+3dGah+tXqBxT9VDgjvyoxxXIc9p
M2IzYZVtVFeUhymAVhNGNyoZuO2Ziag/jtMasxeaIPusTy38vTaOBtNJ0iGpaWzp
QjAsxQVQLa5Njg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:56:12 2024 by rpki-client on console-fra.rpki-client.org