Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File:                     hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier:          qdlt4kJ/WnlvWxVmjK70K/iVoT7JSmWNF6UKtZ2Fgco=
Subject key identifier:   8F:EB:21:0E:57:C9:B9:15:CE:07:51:8E:86:28:DB:6B:E0:EF:4C:A1
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer:       /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial:       018F874860E7200D624B3C1F6EBE124FD671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:18 +0000
Manifest this update:     Fri 17 May 2024 16:00:18 +0000
Manifest next update:     Sat 18 May 2024 16:00:18 +0000
Files and hashes:         1: TwbY52tXZGMuhzvPzKzzllfMhAo.roa (hash: iKx4qyKX65bGbuSEE/Iff0Hu4DuFp5pA2owoKHRGwv8=)
                          2: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: 2WwetiJpQbRBS7s9FSWZ/rpnsEcVayU9pbxhNLXh+M8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:60:e7:20:0d:62:4b:3c:1f:6e:be:12:4f:d6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
        Validity
            Not Before: May 17 16:00:18 2024 GMT
            Not After : May 18 16:00:18 2024 GMT
        Subject: CN=8feb210e57c9b915ce07518e8628db6be0ef4ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:3a:69:b6:53:6e:69:53:67:4d:c1:2b:ab:
                    98:1b:0b:12:3f:a2:de:9a:c1:1f:a1:2d:3e:b7:f3:
                    00:c9:58:4b:74:b5:40:25:ba:55:6d:81:0b:de:ff:
                    ee:aa:8a:e7:7c:c2:0a:0f:de:56:12:7a:05:5e:85:
                    ba:04:99:ba:48:51:99:e1:c2:34:9f:88:bc:16:9e:
                    4f:09:0a:07:83:03:0c:26:50:de:64:5b:c6:b2:55:
                    9b:28:24:42:1b:93:c5:b5:06:70:a3:6a:1c:f0:70:
                    0f:c2:af:bd:42:95:58:2b:ba:55:97:1e:79:85:06:
                    4e:22:a2:b3:67:c1:e4:fe:de:1a:e8:d3:ec:47:75:
                    03:13:5c:36:6f:de:dd:c9:47:3a:b1:9c:12:e6:fd:
                    d7:37:09:6e:0c:da:ca:9b:58:d0:54:dc:f7:79:51:
                    64:34:97:e8:6c:e3:e5:d7:8c:1f:04:69:33:e3:8d:
                    2b:bf:b9:44:6e:a0:38:9c:1f:42:ec:df:8d:15:34:
                    2a:08:75:db:e8:56:6a:cf:07:62:d6:b6:2b:41:7d:
                    4d:9c:32:09:3a:02:bb:6f:7e:41:ea:1e:42:60:37:
                    cc:e1:d4:43:82:4d:2c:74:7b:70:c2:46:89:d2:1a:
                    4a:6b:f0:1e:15:26:27:cf:3a:30:3f:fa:7d:b2:5b:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:21:0E:57:C9:B9:15:CE:07:51:8E:86:28:DB:6B:E0:EF:4C:A1
            X509v3 Authority Key Identifier:
                keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:54:8f:a1:e6:17:69:ca:6a:be:fe:b5:03:ef:5a:11:1e:
         96:a8:d0:a3:6d:23:90:8d:78:9d:50:2e:30:13:98:fd:25:45:
         60:30:ab:e4:72:3e:2c:71:89:2e:d6:ab:62:3a:62:21:7b:db:
         3a:b9:b7:cf:4a:59:61:e4:29:7d:29:b9:70:b6:a3:93:92:74:
         7c:fe:f5:15:e7:31:00:b1:ca:ee:9a:0e:93:7a:1e:7c:78:f8:
         8e:d2:ae:b3:05:78:21:ed:91:e6:df:69:87:95:0c:39:de:eb:
         78:b1:8c:56:b2:39:c0:aa:fc:1c:3b:7a:22:40:29:fa:18:fe:
         41:72:63:aa:ba:9e:c5:a8:20:bc:80:c9:37:6e:e0:a6:05:c9:
         1e:c4:46:e5:0f:97:97:90:0e:16:15:56:cc:37:9a:55:cf:98:
         36:c2:58:b1:df:0d:b6:86:8d:63:c7:f0:9a:8a:0e:db:16:fc:
         e6:0a:72:95:59:e7:9a:74:ea:8b:6c:49:05:9e:50:63:50:d8:
         2f:54:ea:b1:98:3a:27:8b:80:78:9a:a3:8e:dd:8a:06:70:b3:
         a5:f2:a2:87:36:0a:1d:21:e6:61:6b:41:6b:3d:0b:89:23:d5:
         80:a0:e2:04:45:48:26:dd:97:0a:d1:f7:a6:4c:c2:8f:ae:ce:
         b5:97:ce:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSGDnIA1iSzwfbr4ST9ZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWFjZTA2NmE0NGVkMmY5NWZlNmJjMmQwYTdkYTQxMjc2
M2JmMmEwHhcNMjQwNTE3MTYwMDE4WhcNMjQwNTE4MTYwMDE4WjAzMTEwLwYDVQQD
Eyg4ZmViMjEwZTU3YzliOTE1Y2UwNzUxOGU4NjI4ZGI2YmUwZWY0Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1k6abZTbmlTZ03BK6uYGwsSP6Le
msEfoS0+t/MAyVhLdLVAJbpVbYEL3v/uqornfMIKD95WEnoFXoW6BJm6SFGZ4cI0
n4i8Fp5PCQoHgwMMJlDeZFvGslWbKCRCG5PFtQZwo2oc8HAPwq+9QpVYK7pVlx55
hQZOIqKzZ8Hk/t4a6NPsR3UDE1w2b97dyUc6sZwS5v3XNwluDNrKm1jQVNz3eVFk
NJfobOPl14wfBGkz440rv7lEbqA4nB9C7N+NFTQqCHXb6FZqzwdi1rYrQX1NnDIJ
OgK7b35B6h5CYDfM4dRDgk0sdHtwwkaJ0hpKa/AeFSYnzzowP/p9sluOBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/rIQ5XybkVzgdRjoYo22vg70yhMB8GA1UdIwQY
MBaAFISazgZqRO0vlf5rwtCn2kEnY78qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTIt
ZjdjNDY1N2I3YjhkLzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTItZjdjNDY1N2I3Yjhk
LzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrBUj6Hm
F2nKar7+tQPvWhEelqjQo20jkI14nVAuMBOY/SVFYDCr5HI+LHGJLtarYjpiIXvb
Orm3z0pZYeQpfSm5cLajk5J0fP71FecxALHK7poOk3oefHj4jtKuswV4Ie2R5t9p
h5UMOd7reLGMVrI5wKr8HDt6IkAp+hj+QXJjqrqexaggvIDJN27gpgXJHsRG5Q+X
l5AOFhVWzDeaVc+YNsJYsd8NtoaNY8fwmooO2xb85gpylVnnmnTqi2xJBZ5QY1DY
L1TqsZg6J4uAeJqjjt2KBnCzpfKihzYKHSHmYWtBaz0LiSPVgKDiBEVIJt2XCtH3
pkzCj67OtZfOSg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:15:09 2024 by rpki-client on console-ams.rpki-client.org