Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File:                     zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier:          ZXMRQyczUP5ZN7KCsKfH58wUqHRFb5T7lkfcWUtdDLc=
Subject key identifier:   C4:FE:AC:FD:A9:E0:CC:18:AA:6C:5F:EF:11:B3:AC:56:54:48:36:56
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer:       /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial:       018F874A1BF0AC9B8808CA8CB0BC55626CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:11 +0000
Manifest this update:     Fri 17 May 2024 16:02:11 +0000
Manifest next update:     Sat 18 May 2024 16:02:11 +0000
Files and hashes:         1: j2XFjbfjxS5txp6rPJWo1xRivdw.roa (hash: qOtG2b4QwJZRyvfF390jC8Fdzvly7SGmL0iisW+VDl0=)
                          2: pN54WbA-KiS8fv-Z9mDScrHKjtc.roa (hash: Fq4dJ7WGUj9bpaAQbciexXQJKfe1Lxn/5KdaXLVuzsw=)
                          3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: oKEtFB+4QJTQNN8PLMycfC0qsYbtFEBdUEeoB3sIdwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1b:f0:ac:9b:88:08:ca:8c:b0:bc:55:62:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
        Validity
            Not Before: May 17 16:02:11 2024 GMT
            Not After : May 18 16:02:11 2024 GMT
        Subject: CN=c4feacfda9e0cc18aa6c5fef11b3ac5654483656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:6b:43:d8:fc:0b:0f:57:3c:34:18:8d:7f:
                    15:a2:7d:b3:e0:c8:ee:d9:91:91:21:55:60:c0:94:
                    32:ee:be:ff:55:27:58:08:36:c5:89:9c:a4:06:5a:
                    4c:1b:64:a9:56:56:de:12:e5:44:24:df:f3:6d:12:
                    46:ea:99:db:b6:d1:7e:51:4d:9e:83:cb:bf:cf:29:
                    8e:51:e2:80:4f:14:d1:3b:87:ae:b3:41:91:32:08:
                    8d:3c:5e:1b:c2:ee:2e:61:03:cf:5b:de:a8:0a:aa:
                    ba:bb:97:75:26:8c:7c:f6:c8:2e:9a:40:24:29:f2:
                    6f:9a:2c:ba:af:7c:bb:99:90:8e:73:7d:83:50:44:
                    24:5e:61:34:b5:c0:d4:71:5a:d8:89:2a:b2:2c:1b:
                    b9:11:31:6c:d2:63:3f:bd:80:98:f4:40:6e:eb:3b:
                    ac:1e:54:b6:ee:dc:2b:fd:f7:98:31:53:cb:5b:f7:
                    35:27:4b:f2:ec:7e:95:9c:31:69:a9:0e:d8:26:5a:
                    45:76:59:72:29:91:cc:84:12:14:92:ba:30:98:16:
                    18:13:9d:41:62:91:31:7e:7f:3e:19:87:ce:bb:df:
                    30:10:5a:64:e1:ac:fb:fb:9b:11:15:2b:8a:73:85:
                    bf:5c:12:4b:f2:de:6e:f9:39:0e:32:11:5a:77:52:
                    c1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:AC:FD:A9:E0:CC:18:AA:6C:5F:EF:11:B3:AC:56:54:48:36:56
            X509v3 Authority Key Identifier:
                keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:40:24:29:db:f6:6f:6d:d4:7b:c8:15:95:6a:4a:72:11:1c:
         b1:81:b6:32:0f:18:71:33:5b:6d:ae:08:0d:be:ab:0d:46:50:
         b2:e5:0f:cd:17:d5:c0:11:72:53:79:d8:76:69:49:ee:9b:ad:
         cc:6d:ca:8b:1d:6d:fd:b3:72:12:9f:d7:41:52:3e:25:bd:c2:
         55:4c:9e:40:32:5e:00:56:61:43:e1:23:ff:1b:ba:ec:1d:48:
         a8:d8:d7:62:05:e5:05:7a:35:bc:e7:b1:04:35:44:5d:a5:4b:
         2b:19:e8:cb:82:85:1f:64:64:14:22:8c:6b:a0:bc:5a:69:e8:
         fb:92:ce:a8:e6:ec:e7:86:1b:83:98:7f:bd:c0:9a:75:f5:95:
         14:76:25:09:58:8e:ef:65:b0:71:89:fd:20:15:91:c8:88:bc:
         d3:9e:da:3c:2e:ee:5b:9e:68:99:04:0d:61:07:4a:22:48:31:
         71:55:d6:01:92:97:b5:a4:e9:4b:28:78:92:11:65:0e:4c:25:
         28:10:56:e4:c5:8a:70:07:32:4a:6f:c0:89:a8:bc:17:ed:72:
         e2:1b:ba:68:15:8e:3e:82:e8:fa:71:5c:fc:76:0e:48:d4:40:
         86:e3:58:ae:8c:53:90:e1:52:55:a5:e3:d1:62:3d:57:8b:c0:
         3f:13:54:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HShvwrJuICMqMsLxVYmzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjQwNTE3MTYwMjExWhcNMjQwNTE4MTYwMjExWjAzMTEwLwYDVQQD
EyhjNGZlYWNmZGE5ZTBjYzE4YWE2YzVmZWYxMWIzYWM1NjU0NDgzNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXxrQ9j8Cw9XPDQYjX8Von2z4Mju
2ZGRIVVgwJQy7r7/VSdYCDbFiZykBlpMG2SpVlbeEuVEJN/zbRJG6pnbttF+UU2e
g8u/zymOUeKATxTRO4eus0GRMgiNPF4bwu4uYQPPW96oCqq6u5d1Jox89sgumkAk
KfJvmiy6r3y7mZCOc32DUEQkXmE0tcDUcVrYiSqyLBu5ETFs0mM/vYCY9EBu6zus
HlS27twr/feYMVPLW/c1J0vy7H6VnDFpqQ7YJlpFdllyKZHMhBIUkrowmBYYE51B
YpExfn8+GYfOu98wEFpk4az7+5sRFSuKc4W/XBJL8t5u+TkOMhFad1LBZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT+rP2p4MwYqmxf7xGzrFZUSDZWMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0AkKdv2
b23Ue8gVlWpKchEcsYG2Mg8YcTNbba4IDb6rDUZQsuUPzRfVwBFyU3nYdmlJ7put
zG3Kix1t/bNyEp/XQVI+Jb3CVUyeQDJeAFZhQ+Ej/xu67B1IqNjXYgXlBXo1vOex
BDVEXaVLKxnoy4KFH2RkFCKMa6C8Wmno+5LOqObs54Ybg5h/vcCadfWVFHYlCViO
72WwcYn9IBWRyIi8057aPC7uW55omQQNYQdKIkgxcVXWAZKXtaTpSyh4khFlDkwl
KBBW5MWKcAcySm/Aiai8F+1y4hu6aBWOPoLo+nFc/HYOSNRAhuNYroxTkOFSVaXj
0WI9V4vAPxNUdQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:15:15 2024 by rpki-client on console-ams.rpki-client.org