Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File:                     iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier:          ychGxIzwKOp552O1AZQI6bzf9tIGb9hIZuZke1OuyDQ=
Subject key identifier:   86:AE:4C:37:0B:B0:D2:C9:DA:FE:E3:C9:79:D6:67:E1:01:BC:DC:8D
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer:       /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial:       018F874865EE1ED23F2E456CC2476FAB707B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:19 +0000
Manifest this update:     Fri 17 May 2024 16:00:19 +0000
Manifest next update:     Sat 18 May 2024 16:00:19 +0000
Files and hashes:         1: L7R3g4R9Y7IPQ38r9aTtrIvpSR4.roa (hash: nAw8fYsYlXa+EWadzV6KYnyPx0a1Ym3w2Sh5cgZVCcY=)
                          2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: b9suvEmcdQPTuEBaWucAQ4b2K5/roFOS8BzktJdUlbw=)
                          3: uzCmRPY5e0dwgyl4AtQ5clRpYus.roa (hash: CsqOyziaXD6loMO7RhpUvFuZN3Y7fS3IsRnDmCO95rE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:65:ee:1e:d2:3f:2e:45:6c:c2:47:6f:ab:70:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
        Validity
            Not Before: May 17 16:00:19 2024 GMT
            Not After : May 18 16:00:19 2024 GMT
        Subject: CN=86ae4c370bb0d2c9dafee3c979d667e101bcdc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:ff:81:26:73:31:b8:3d:6d:16:47:90:13:
                    25:f8:e7:ee:41:fc:78:92:38:ae:6e:54:8b:9c:4b:
                    a4:44:2d:1f:d9:24:13:21:0e:ab:c0:88:4b:3b:db:
                    96:39:e7:ee:67:95:a5:88:b0:29:e7:ce:e6:6b:39:
                    42:9a:cd:35:88:5f:fc:e1:15:fe:77:4a:e1:b5:f7:
                    1c:f7:d9:43:01:d8:b4:b8:77:fa:e1:0b:b3:be:c5:
                    c9:e1:f6:31:1d:2e:31:d2:a1:fb:f2:20:bb:e7:37:
                    7b:a1:b4:3d:f9:48:a3:45:d2:d6:00:76:a0:8d:95:
                    19:7b:5c:e3:39:4b:c1:b4:55:82:ae:0d:b1:1d:45:
                    68:df:a6:80:3b:06:d8:73:fd:8d:01:63:69:28:cf:
                    91:62:84:69:c2:8c:49:7f:60:2b:5c:31:c2:80:ba:
                    06:5d:24:dc:7f:c6:c4:c1:a2:b0:d2:c3:5b:59:a5:
                    de:5c:6b:b2:bd:f7:6b:90:d8:41:90:a8:57:0b:34:
                    71:8e:8b:15:2c:ab:b6:83:56:4e:12:8e:0f:a6:e2:
                    f5:ab:f8:55:c6:33:cc:83:1b:fc:b9:bf:6f:d3:14:
                    23:45:d3:e7:c8:36:4f:1a:b5:76:b0:55:a3:59:13:
                    34:bc:94:41:c6:41:6d:08:c4:81:f7:da:bf:c8:3c:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AE:4C:37:0B:B0:D2:C9:DA:FE:E3:C9:79:D6:67:E1:01:BC:DC:8D
            X509v3 Authority Key Identifier:
                keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9b:e6:54:cc:f5:30:bb:7c:5f:cd:c5:c7:f1:b5:ff:9d:e6:
         53:26:be:83:91:bd:6c:65:b5:59:8e:24:d4:e0:08:0b:46:d9:
         55:eb:47:d4:6a:00:47:a5:bc:2c:64:78:23:5c:85:1b:e7:db:
         91:6c:86:72:7e:de:aa:57:dd:9a:f9:99:7f:4f:ab:03:25:69:
         77:f3:da:6a:78:d4:d0:17:27:18:85:c1:f1:55:08:4f:ec:cb:
         03:58:5a:42:05:09:b1:36:eb:60:29:7d:1c:26:48:39:a0:71:
         bb:76:8a:c1:3e:e0:e0:13:e8:38:09:b7:35:e1:db:58:69:11:
         da:20:27:90:df:2a:d9:58:8f:43:81:10:b5:e9:e5:6c:af:63:
         4d:a8:7a:68:30:4f:35:da:f2:46:ef:25:80:f2:66:f4:de:fb:
         be:f3:e1:1b:6e:23:61:f2:a1:e1:ef:3b:37:2b:12:6f:35:64:
         ae:47:5e:28:c8:74:5f:36:bb:a2:72:ae:fd:e6:81:8d:7a:64:
         d5:65:e9:54:54:bc:3a:08:db:95:6c:7f:08:ef:cf:e6:a7:cb:
         8a:71:85:26:0d:70:9c:05:76:9a:df:97:d5:15:bf:11:b6:c5:
         be:92:32:26:06:be:00:a1:a6:c5:fb:7a:94:33:ea:ad:1c:1a:
         c2:23:f0:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSGXuHtI/LkVswkdvq3B7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2
ODMwZmUwHhcNMjQwNTE3MTYwMDE5WhcNMjQwNTE4MTYwMDE5WjAzMTEwLwYDVQQD
Eyg4NmFlNGMzNzBiYjBkMmM5ZGFmZWUzYzk3OWQ2NjdlMTAxYmNkYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPj/gSZzMbg9bRZHkBMl+OfuQfx4
kjiublSLnEukRC0f2SQTIQ6rwIhLO9uWOefuZ5WliLAp587mazlCms01iF/84RX+
d0rhtfcc99lDAdi0uHf64QuzvsXJ4fYxHS4x0qH78iC75zd7obQ9+UijRdLWAHag
jZUZe1zjOUvBtFWCrg2xHUVo36aAOwbYc/2NAWNpKM+RYoRpwoxJf2ArXDHCgLoG
XSTcf8bEwaKw0sNbWaXeXGuyvfdrkNhBkKhXCzRxjosVLKu2g1ZOEo4PpuL1q/hV
xjPMgxv8ub9v0xQjRdPnyDZPGrV2sFWjWRM0vJRBxkFtCMSB99q/yDwCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIauTDcLsNLJ2v7jyXnWZ+EBvNyNMB8GA1UdIwQY
MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt
ODRmYWFmMTA1YTk3LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3
LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5vmVMz1
MLt8X83Fx/G1/53mUya+g5G9bGW1WY4k1OAIC0bZVetH1GoAR6W8LGR4I1yFG+fb
kWyGcn7eqlfdmvmZf0+rAyVpd/PaanjU0BcnGIXB8VUIT+zLA1haQgUJsTbrYCl9
HCZIOaBxu3aKwT7g4BPoOAm3NeHbWGkR2iAnkN8q2ViPQ4EQtenlbK9jTah6aDBP
NdryRu8lgPJm9N77vvPhG24jYfKh4e87NysSbzVkrkdeKMh0Xza7onKu/eaBjXpk
1WXpVFS8OgjblWx/CO/P5qfLinGFJg1wnAV2mt+X1RW/EbbFvpIyJga+AKGmxft6
lDPqrRwawiPwMg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:15:36 2024 by rpki-client on console-ams.rpki-client.org