Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          AwoAQ7mV+HtoSLP9JNXEqdJodXCIBE2ekDRdOFzWGVg=
Subject key identifier:   55:6F:1F:22:5E:A5:37:A3:4D:E5:A9:7A:8E:53:CA:2E:70:A6:03:44
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       018F3A0BA5A49575ED91D1F578C6DA7C3EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          1157
Signing time:             Thu 02 May 2024 16:03:12 +0000
Manifest this update:     Thu 02 May 2024 16:03:12 +0000
Manifest next update:     Fri 03 May 2024 16:03:12 +0000
Files and hashes:         1: FD3g9-opiplxcGFg0DLV3mpiLvo.roa (hash: Ge+7bD7Oi5u8EDZD+NmabA5wT2nLhyiWKjLIIeupRRE=)
                          2: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: xZdL4sNKqx+xdFfpUhcDVSGtp3WXnYZEg9CXCJvLZVk=)
                          3: abPWT50cPtyTBZgNrGBKOQBTw5k.roa (hash: bYTH3Y6QfSw5EXSJPRDeQbLKzXq6AtnlrDUdcicOF/A=)
                          4: wLZ4tdq1mv7uF6FgUCl6C3LjOJE.roa (hash: xC5aUGaPaKSJeJn+l30PuciJV19+zIm95lga5Izdx1Q=)
                          5: xhsA_2cpMSBkV5U5o1doHhiIQ5Q.roa (hash: aBd6VWvbgdBzPaWkUyrRN+6jT9dgg9xm1ZzVtI4nF+A=)
                          6: yGlAAnzR0Ac36gBYhusymH0yYHs.roa (hash: SoMlDV4tNfDmsrOuZ9ODT8s9pKdQ7Kvs7fSidZk4kBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:a5:a4:95:75:ed:91:d1:f5:78:c6:da:7c:3e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: May  2 16:03:12 2024 GMT
            Not After : May  3 16:03:12 2024 GMT
        Subject: CN=556f1f225ea537a34de5a97a8e53ca2e70a60344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:f6:fb:8d:10:f2:d3:96:ce:00:66:ec:d7:
                    f8:76:8e:84:27:29:ac:57:a9:85:50:19:0a:62:ad:
                    e3:c0:02:3d:cc:5b:01:04:c6:b5:0e:82:5d:83:ae:
                    fd:62:fa:f4:04:27:13:5f:6c:80:4b:48:c4:ba:1c:
                    6e:1c:dd:5a:3c:14:ec:c5:33:84:aa:76:62:59:45:
                    9a:e0:db:e8:89:ca:43:9c:5d:e6:de:8a:1b:3f:5e:
                    69:f2:79:88:e3:90:7d:36:47:55:d3:61:be:0a:1d:
                    65:c4:10:f6:33:d6:4c:30:de:b2:49:67:1a:15:cc:
                    c4:46:71:de:a0:bf:09:b5:51:80:1d:3a:a5:8b:a1:
                    39:c8:c5:7b:87:93:82:e5:08:69:53:a8:1e:af:62:
                    4d:52:97:88:e0:6a:7c:0d:4b:e7:a9:42:87:3f:e5:
                    55:6c:ae:ac:44:91:e8:e9:c8:a5:5b:ef:b1:58:4d:
                    c0:f5:cf:f1:ae:5d:34:b5:a3:21:6e:fe:7e:cb:2f:
                    95:a2:d7:61:ab:12:5b:8c:06:0d:47:56:db:67:e5:
                    8e:c9:13:56:f6:46:c5:62:95:ba:7c:42:54:fa:d2:
                    19:30:60:68:b4:3a:98:ac:75:46:84:44:56:2e:4a:
                    fc:d2:66:5e:30:70:5f:fd:c1:91:22:57:b1:80:84:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:1F:22:5E:A5:37:A3:4D:E5:A9:7A:8E:53:CA:2E:70:A6:03:44
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:ca:cf:78:ed:16:77:66:d0:45:a7:16:04:18:cb:19:33:
         27:1e:52:f5:7f:39:87:96:13:00:87:f7:92:48:ad:1c:31:65:
         dc:be:8c:ec:12:b9:b6:2a:40:26:0a:ca:3f:fa:5a:78:eb:b8:
         dc:26:a7:38:8b:6d:bd:75:8d:0f:ac:b2:80:46:ab:4e:c7:10:
         25:86:af:7b:67:60:6f:ab:45:05:8e:7e:63:78:56:78:34:4c:
         d3:dc:45:88:2d:0f:12:a9:7f:72:e9:ad:86:9c:bd:97:d1:eb:
         f4:b6:12:44:a4:45:70:7b:3f:ef:41:6d:50:2c:ea:ef:c4:de:
         b2:02:f2:5a:54:3d:ad:26:f6:9f:be:58:53:6e:db:6d:88:01:
         d3:61:18:79:e8:09:78:d5:69:05:28:74:ec:72:3e:b6:39:0c:
         a8:b9:7a:8a:1c:4f:7e:07:45:f0:12:a9:02:2b:db:3b:60:14:
         55:cd:91:23:8b:cf:54:0b:1c:38:37:40:0b:d4:59:f2:d1:ba:
         fc:b4:93:bd:dc:cf:5e:b8:89:28:8b:1b:cf:39:a6:55:79:dd:
         f0:8e:c2:7f:4b:46:5a:fd:3d:1c:91:99:7f:00:6b:64:67:b5:
         30:85:3d:c1:d9:15:be:a8:3d:95:6a:f2:4d:81:cb:c6:82:24:
         9f:b5:b2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86C6WklXXtkdH1eMbafD7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw
ZTVjMTQwHhcNMjQwNTAyMTYwMzEyWhcNMjQwNTAzMTYwMzEyWjAzMTEwLwYDVQQD
Eyg1NTZmMWYyMjVlYTUzN2EzNGRlNWE5N2E4ZTUzY2EyZTcwYTYwMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYb2+40Q8tOWzgBm7Nf4do6EJyms
V6mFUBkKYq3jwAI9zFsBBMa1DoJdg679Yvr0BCcTX2yAS0jEuhxuHN1aPBTsxTOE
qnZiWUWa4NvoicpDnF3m3oobP15p8nmI45B9NkdV02G+Ch1lxBD2M9ZMMN6ySWca
FczERnHeoL8JtVGAHTqli6E5yMV7h5OC5QhpU6ger2JNUpeI4Gp8DUvnqUKHP+VV
bK6sRJHo6cilW++xWE3A9c/xrl00taMhbv5+yy+VotdhqxJbjAYNR1bbZ+WOyRNW
9kbFYpW6fEJU+tIZMGBotDqYrHVGhERWLkr80mZeMHBf/cGRIlexgITtxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVvHyJepTejTeWpeo5Tyi5wpgNEMB8GA1UdIwQY
MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt
MGJmYmFkNDg0OWNkLzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk
LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFvKz3jt
Fndm0EWnFgQYyxkzJx5S9X85h5YTAIf3kkitHDFl3L6M7BK5tipAJgrKP/paeOu4
3CanOIttvXWND6yygEarTscQJYave2dgb6tFBY5+Y3hWeDRM09xFiC0PEql/cumt
hpy9l9Hr9LYSRKRFcHs/70FtUCzq78TesgLyWlQ9rSb2n75YU27bbYgB02EYeegJ
eNVpBSh07HI+tjkMqLl6ihxPfgdF8BKpAivbO2AUVc2RI4vPVAscODdAC9RZ8tG6
/LSTvdzPXriJKIsbzzmmVXnd8I7Cf0tGWv09HJGZfwBrZGe1MIU9wdkVvqg9lWry
TYHLxoIkn7Wy6A==
-----END CERTIFICATE-----
Generated at Fri May 3 01:26:50 2024 by rpki-client on console-ams.rpki-client.org