Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          Qsmou5A2NhUTAHp0bSFRiNr4RHcLA16qOxxPwNabNfk=
Subject key identifier:   DA:94:C0:4C:FE:11:B4:D2:E0:A8:A8:C5:03:98:A0:53:DD:28:C8:B2
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       018F3FD5A90395608B7157D3B2C7A4415D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 19:01:57 +0000
Manifest this update:     Fri 03 May 2024 19:01:57 +0000
Manifest next update:     Sat 04 May 2024 19:01:57 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: 6xf7brex00pZfNmcdtsd8Oj0jSMEHGcC9MGbRuWow2E=)
                          2: t34KhsLVJfg3ykg9v-4WMqMSjXE.roa (hash: dmvmq0LFpWaE+DzDJHB27zoURld5elKnpVQQT18tPlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d5:a9:03:95:60:8b:71:57:d3:b2:c7:a4:41:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: May  3 19:01:57 2024 GMT
            Not After : May  4 19:01:57 2024 GMT
        Subject: CN=da94c04cfe11b4d2e0a8a8c50398a053dd28c8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:85:f1:df:ff:a3:60:5e:b6:0a:89:ab:5f:
                    2a:24:58:41:5c:62:10:af:4f:34:a4:a1:cf:fd:11:
                    3c:51:46:39:79:e9:69:44:be:af:dd:8b:5e:b9:0e:
                    4b:b7:3a:03:c7:5e:1d:84:92:8c:d2:a7:3b:7f:ee:
                    d0:42:89:1f:cc:d4:37:26:a6:4d:2a:61:70:dd:d6:
                    de:4b:e1:b6:34:43:44:f1:07:93:75:e7:30:f6:03:
                    d7:21:a6:f0:85:0f:7d:6b:bc:38:d6:10:47:98:e2:
                    5c:6d:02:f1:d1:27:a5:f0:63:54:7e:2f:68:5b:8c:
                    86:3c:10:33:b1:b4:93:9c:18:87:cf:66:4f:42:87:
                    78:21:50:22:89:23:f2:db:ac:ab:4e:4d:40:57:62:
                    b1:c9:78:9d:59:61:f7:4e:9e:6b:22:8b:77:7d:55:
                    e8:6f:8d:19:f2:74:7f:4c:ab:39:60:01:56:d4:f2:
                    46:ee:72:b0:a4:14:b2:18:02:77:55:35:b2:d4:37:
                    a8:ce:52:1f:24:19:b4:6b:40:f6:3e:3c:79:48:ca:
                    df:ee:50:b4:93:36:c4:1b:5e:29:cb:4c:c0:82:c1:
                    4d:f0:4f:4c:11:1c:a2:ec:60:f0:73:e0:00:9a:99:
                    41:c6:38:a3:ad:85:21:56:73:3e:8c:22:e1:14:b2:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:C0:4C:FE:11:B4:D2:E0:A8:A8:C5:03:98:A0:53:DD:28:C8:B2
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:33:75:37:20:d6:2b:e5:aa:06:ea:68:71:49:46:40:7e:
         c6:66:ab:b4:82:4a:52:f5:a3:43:26:a7:07:95:85:49:6a:b4:
         01:6c:95:3a:4e:ee:c2:87:28:ed:33:38:1a:f0:65:ad:ff:10:
         8d:f0:ed:78:02:21:f2:d1:b1:1d:dc:2c:c5:8c:d8:a6:38:47:
         33:8e:d1:7c:46:f9:d9:3a:cf:b4:9e:fd:b3:c9:d3:7d:66:6b:
         45:cd:82:08:8d:0d:6f:e1:9f:99:f3:96:7f:5c:84:be:d9:65:
         6c:2b:57:9c:8e:d2:8f:9d:a1:cb:fb:26:5e:7e:b4:be:b8:c6:
         8b:a6:c3:de:69:77:6a:d2:41:ac:47:20:35:d3:72:cb:df:d8:
         ee:0f:34:a3:2d:b8:8a:80:20:db:53:f2:61:61:4b:50:f3:88:
         90:e9:ec:04:ee:aa:5c:f0:35:54:c9:ef:10:66:63:39:e3:31:
         af:5c:64:c4:31:07:dd:59:6a:f4:10:29:b8:35:56:ff:3c:4d:
         36:64:1b:87:09:19:91:33:74:58:b6:ec:57:1d:ed:a5:7b:7c:
         c0:75:e5:ce:a5:d7:46:a6:59:5a:d2:18:57:13:cc:96:ac:39:
         73:97:32:c7:a8:11:75:6b:06:43:bf:33:af:20:7c:cd:92:66:
         4b:59:89:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY8/1akDlWCLcVfTssekQV1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQxMTBkMzllOTViNTQyZGY4ZDIwNzFkOTI0NTQ2OWEx
YjlmNDIwHhcNMjQwNTAzMTkwMTU3WhcNMjQwNTA0MTkwMTU3WjAzMTEwLwYDVQQD
EyhkYTk0YzA0Y2ZlMTFiNGQyZTBhOGE4YzUwMzk4YTA1M2RkMjhjOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNyF8d//o2BetgqJq18qJFhBXGIQ
r080pKHP/RE8UUY5eelpRL6v3YteuQ5LtzoDx14dhJKM0qc7f+7QQokfzNQ3JqZN
KmFw3dbeS+G2NENE8QeTdecw9gPXIabwhQ99a7w41hBHmOJcbQLx0Sel8GNUfi9o
W4yGPBAzsbSTnBiHz2ZPQod4IVAiiSPy26yrTk1AV2KxyXidWWH3Tp5rIot3fVXo
b40Z8nR/TKs5YAFW1PJG7nKwpBSyGAJ3VTWy1DeozlIfJBm0a0D2Pjx5SMrf7lC0
kzbEG14py0zAgsFN8E9MERyi7GDwc+AAmplBxjijrYUhVnM+jCLhFLLEDwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNqUwEz+EbTS4KioxQOYoFPdKMiyMB8GA1UdIwQY
MBaAFPitEQ056VtULfjSBx2SRUaaG59CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMFJEVG5wVzFRdC1OSUhIWkpGUnBvYm4wSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNjBlNjNjLWU2M2ItNGUxNi1hNWVi
LTc5YTViMzk3OGZmMi8xLzEtSzBSRFRucFcxUXQtTklISFpKRlJwb2JuMEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzYwZTYzYy1lNjNiLTRlMTYtYTVlYi03OWE1YjM5Nzhm
ZjIvMS8xLUswUkRUbnBXMVF0LU5JSEhaSkZScG9ibjBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+sz
dTcg1ivlqgbqaHFJRkB+xmartIJKUvWjQyanB5WFSWq0AWyVOk7uwoco7TM4GvBl
rf8QjfDteAIh8tGxHdwsxYzYpjhHM47RfEb52TrPtJ79s8nTfWZrRc2CCI0Nb+Gf
mfOWf1yEvtllbCtXnI7Sj52hy/smXn60vrjGi6bD3ml3atJBrEcgNdNyy9/Y7g80
oy24ioAg21PyYWFLUPOIkOnsBO6qXPA1VMnvEGZjOeMxr1xkxDEH3Vlq9BApuDVW
/zxNNmQbhwkZkTN0WLbsVx3tpXt8wHXlzqXXRqZZWtIYVxPMlqw5c5cyx6gRdWsG
Q78zryB8zZJmS1mJbw==
-----END CERTIFICATE-----
Generated at Fri May 3 20:51:31 2024 by rpki-client on console-fra.rpki-client.org