Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          w1qTSnkA8UdBQnzx+ePx+bsdbh6oiLwUuE0d7Q4Hj1M=
Subject key identifier:   8E:49:1B:36:4D:08:95:B9:7B:2A:AF:11:84:7D:1A:A9:90:DE:B4:77
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       018F8748404648C3C2733642566E10F42D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:00:09 +0000
Manifest this update:     Fri 17 May 2024 16:00:09 +0000
Manifest next update:     Sat 18 May 2024 16:00:09 +0000
Files and hashes:         1: AzYDkxUWLaTZjB-XX-6Nvh-LWE4.roa (hash: fi96oSZBasCVRfM6Vgb5HhkMhxaQGlHtSNowYgJi0vo=)
                          2: CWj233lPAqw8_rMALxBmTEPyJlU.roa (hash: P6cfsKR3FgH9iwh9rK6dQ7yJ2NZK5YWiWQYv4mJVkp8=)
                          3: DG99ydt56AbkZ_iH7Oq6NNq3Tf8.roa (hash: 6UGTlTGb2kzg1TCNJrW+xXoODOI86hXrsgvB9zQ5b5s=)
                          4: DyWx6fnnjYUkrSWlylTt0GQe7oc.roa (hash: mrZMC5yn6HP2pfYaRI3UXzgu3el0WX6o/tbMuAD4z+o=)
                          5: FjrlhT1M167FHSdwm_rwiutafjk.roa (hash: p4Vv2oS3XKbd0+RJHbs36RdBkIjCU/k2xLvydzWBC5g=)
                          6: G2Nc7X8kuhaKkBB5rKZzY5f6d_w.roa (hash: BiQ1jJwpRLMR5whpXakkBkSSSmnMdLyFbrLDwM9WtXM=)
                          7: NJDTF5BiDxH2xSIKF9q-MQGA90w.roa (hash: NJGq3QWPIg9Qigxi5PBl+vCMoEQbNj/zmOAYVq5Qc5o=)
                          8: _QWAF4YKL2UUphqXSW3bXNArDiA.roa (hash: v0GrkY0j4LkSWmr+4RDsVhQVoA2WPqtMEQxHabJhRlc=)
                          9: aSE_vOxaBPTwzQojgmT49BImlkc.roa (hash: OIvF6XmAsffCFEWyuQeuAM2IcS4Blmxz4lQAKiXuSus=)
                          10: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: EfbVjzFMkOkwpdgmAJqeGVc62NI0liWKNvLOP2K5O9g=)
                          11: u_WkSaiz99hMIXWO3ApLD8m07JA.roa (hash: HT2GM0bq9jwDXyb7lx39cGT6xIdRxAxsRAw+XsmQxIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:40:46:48:c3:c2:73:36:42:56:6e:10:f4:2d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: May 17 16:00:09 2024 GMT
            Not After : May 18 16:00:09 2024 GMT
        Subject: CN=8e491b364d0895b97b2aaf11847d1aa990deb477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:2d:9d:2f:1b:0b:bd:25:ce:08:7b:a8:55:
                    dc:e7:3b:7a:6d:0b:e5:6c:14:46:1e:28:76:44:1d:
                    99:e5:b3:2b:39:03:85:9d:58:ed:bc:1d:77:73:97:
                    6b:c6:f2:9c:b0:4a:dd:ef:60:dd:74:11:ea:6a:3c:
                    9a:c1:86:e7:b6:82:e8:e1:06:13:93:02:58:04:0c:
                    5f:7e:a6:c6:3c:1e:91:7d:31:fd:70:cd:79:c7:4a:
                    52:a0:3e:88:01:ff:3a:db:a1:9c:70:48:10:e9:ae:
                    61:e4:1a:4c:4c:fb:78:34:b6:6a:16:47:1e:78:94:
                    a4:3c:69:03:52:3d:14:22:e4:d1:1f:3b:e6:11:34:
                    05:6e:49:f6:6a:43:5c:c3:52:20:83:e2:43:1e:b2:
                    02:a2:3e:c0:29:fb:b6:0a:04:ed:5d:7b:36:5c:9f:
                    a8:4b:bf:9d:9e:58:31:dd:12:12:39:4b:29:7c:3b:
                    28:7e:b2:8d:4e:24:02:50:50:04:33:e5:03:04:e6:
                    13:49:ea:69:89:05:34:d0:b3:54:63:90:26:cf:04:
                    db:00:3b:87:dd:86:95:68:4c:52:45:dd:ac:2c:46:
                    44:16:a0:39:ed:6e:91:37:e9:f3:0f:98:53:7a:5f:
                    2f:40:1b:36:34:71:7d:78:3c:df:1c:66:af:da:52:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:49:1B:36:4D:08:95:B9:7B:2A:AF:11:84:7D:1A:A9:90:DE:B4:77
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2e:38:d4:8f:0e:4c:08:6d:18:40:86:2c:99:3a:74:93:6f:
         88:7f:e4:a5:a6:1e:9e:73:d7:4e:83:13:71:14:ee:5f:37:43:
         8f:10:fb:a4:4d:4c:52:af:ca:84:3d:72:5e:e5:1e:2d:01:9e:
         38:c8:98:17:9e:dc:d6:1d:4e:25:a5:f1:a4:30:87:86:e1:b2:
         bd:90:58:fe:18:3b:3d:58:41:09:31:d4:d2:b0:75:58:60:e9:
         54:4f:d0:c0:d3:14:1a:0d:83:9c:69:a2:8d:b5:c0:7f:a2:cd:
         a9:7c:45:c1:88:82:af:0a:36:00:8d:7e:e0:e6:ac:4a:bd:06:
         fb:b1:a8:25:8a:a9:e5:46:d6:ee:36:06:34:5d:9a:74:9a:fc:
         63:ca:f1:5e:2a:f2:d2:2f:74:e0:67:ae:e1:cc:90:7b:05:29:
         ca:bb:51:26:6c:13:e8:da:40:e4:2a:6b:70:cb:c3:c3:5c:41:
         79:b2:61:6d:38:9c:ac:34:4d:54:03:a7:35:2e:ed:d2:d5:a1:
         57:8f:64:d7:20:89:1b:3e:51:3f:d9:98:e8:6d:68:3b:a8:d3:
         03:4d:dc:5b:b6:34:f3:90:39:fd:7a:0b:71:7b:08:86:15:5b:
         75:4a:65:00:e6:d4:be:07:60:90:c3:97:01:4d:cc:7b:96:58:
         a4:22:6d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSEBGSMPCczZCVm4Q9C0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3
MzlkMjEwHhcNMjQwNTE3MTYwMDA5WhcNMjQwNTE4MTYwMDA5WjAzMTEwLwYDVQQD
Eyg4ZTQ5MWIzNjRkMDg5NWI5N2IyYWFmMTE4NDdkMWFhOTkwZGViNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YctnS8bC70lzgh7qFXc5zt6bQvl
bBRGHih2RB2Z5bMrOQOFnVjtvB13c5drxvKcsErd72DddBHqajyawYbntoLo4QYT
kwJYBAxffqbGPB6RfTH9cM15x0pSoD6IAf8626GccEgQ6a5h5BpMTPt4NLZqFkce
eJSkPGkDUj0UIuTRHzvmETQFbkn2akNcw1Igg+JDHrICoj7AKfu2CgTtXXs2XJ+o
S7+dnlgx3RISOUspfDsofrKNTiQCUFAEM+UDBOYTSeppiQU00LNUY5AmzwTbADuH
3YaVaExSRd2sLEZEFqA57W6RN+nzD5hTel8vQBs2NHF9eDzfHGav2lICywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5JGzZNCJW5eyqvEYR9GqmQ3rR3MB8GA1UdIwQY
MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt
MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk
LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy441I8O
TAhtGECGLJk6dJNviH/kpaYennPXToMTcRTuXzdDjxD7pE1MUq/KhD1yXuUeLQGe
OMiYF57c1h1OJaXxpDCHhuGyvZBY/hg7PVhBCTHU0rB1WGDpVE/QwNMUGg2DnGmi
jbXAf6LNqXxFwYiCrwo2AI1+4OasSr0G+7GoJYqp5UbW7jYGNF2adJr8Y8rxXiry
0i904Geu4cyQewUpyrtRJmwT6NpA5CprcMvDw1xBebJhbTicrDRNVAOnNS7t0tWh
V49k1yCJGz5RP9mY6G1oO6jTA03cW7Y085A5/XoLcXsIhhVbdUplAObUvgdgkMOX
AU3Me5ZYpCJtxA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:39:20 2024 by rpki-client on console-fra.rpki-client.org