Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          w6noHAFw7ENJhOxO+DZgyUUREswb7lhrXElZmxB7Wb0=
Subject key identifier:   70:48:A7:0A:C0:E9:EE:EB:55:DA:5B:68:1D:C1:DB:68:38:C1:F7:11
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       018F3D0AD1005B71B7E76A6D9F0F69393B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1157
Signing time:             Fri 03 May 2024 06:01:10 +0000
Manifest this update:     Fri 03 May 2024 06:01:10 +0000
Manifest next update:     Sat 04 May 2024 06:01:10 +0000
Files and hashes:         1: 081ryxyj9w6cctmFl2mAufUbJWU.roa (hash: qCftz/7HqpQ8pk1Vgruue5fCBxqFA21jKAhbqU/kAEo=)
                          2: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: vwkbT0H/8KPZGPjtyYyfacouKV/XecArLDnFMSSgPvE=)
                          3: XoslUFFXy_cdjmNztNKtAd7CuvI.roa (hash: 8VOQo1VX3nSJSoQLm5wCfPHfWwSX5uK0uGEoLKzzhzs=)
                          4: jiU450SZbY72ODOkD7RKh7THjGo.roa (hash: +0rCNEAItW621V3SER36qpAUoHEYkhdNzZpX6C4NF+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:0a:d1:00:5b:71:b7:e7:6a:6d:9f:0f:69:39:3b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: May  3 06:01:10 2024 GMT
            Not After : May  4 06:01:10 2024 GMT
        Subject: CN=7048a70ac0e9eeeb55da5b681dc1db6838c1f711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:ce:2f:57:0f:85:5e:3c:93:f6:0f:c7:04:
                    a4:0c:b6:6d:1a:ff:51:f4:0f:63:0f:aa:53:14:34:
                    e9:d4:50:c3:22:d9:ba:a2:6b:16:db:0f:fb:b3:0b:
                    20:3a:de:66:5c:51:ee:13:42:4c:fd:26:81:89:91:
                    c0:2c:b0:79:cc:b1:08:91:8b:a2:c5:3c:22:d3:8f:
                    30:37:05:e5:54:dd:2b:8d:87:31:e7:d5:0e:3a:f2:
                    f8:ac:0a:99:d1:a5:83:3f:9d:8e:75:3b:90:64:94:
                    11:c6:99:96:4e:8d:55:ee:bb:a0:63:a8:81:d2:f9:
                    1d:03:3d:2c:05:f4:d6:84:98:17:35:63:5e:78:72:
                    4f:f2:b1:a1:e9:dc:14:0b:b7:67:de:90:22:68:e8:
                    f3:b9:6a:b4:31:44:4f:85:a2:d0:bb:9b:d4:93:fa:
                    5e:fc:d7:45:3c:49:2e:23:e3:a9:51:ba:21:14:d4:
                    37:ac:45:d7:a2:15:77:09:4f:c7:a6:ba:45:8d:df:
                    51:bb:0c:83:6f:73:93:30:35:3c:c2:cb:30:d1:4f:
                    4f:6a:b2:55:aa:11:a6:29:3a:18:76:c5:81:30:17:
                    25:1d:e6:ed:95:13:3b:ec:8e:5f:c2:35:ab:65:42:
                    c1:4c:1f:e1:73:df:ad:00:0d:14:f3:df:78:ba:3a:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:A7:0A:C0:E9:EE:EB:55:DA:5B:68:1D:C1:DB:68:38:C1:F7:11
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:bb:e3:b9:05:9e:7b:b9:41:b7:a2:ab:a9:c9:47:99:42:
         07:7c:65:48:e2:2f:10:60:50:a7:02:6d:6a:e6:76:7e:a2:1d:
         8b:b2:3d:af:e1:e5:52:9d:e3:62:95:c1:e0:84:7a:17:7a:09:
         3f:45:04:01:54:a8:04:37:0f:66:fe:78:29:92:d2:59:97:be:
         29:35:47:7f:0f:41:b1:77:97:7f:4f:7e:5c:67:d3:e3:8f:1c:
         88:21:8b:eb:08:b7:82:f3:e2:cb:3f:af:5b:f2:8f:a5:64:b1:
         39:bc:49:c9:31:9c:70:52:46:a2:bb:44:4e:5d:86:9a:73:dd:
         87:83:c6:f7:10:d5:cd:a2:6f:4c:45:6e:c7:81:57:27:41:a1:
         fd:c7:f6:c6:b6:71:af:08:5a:6b:14:2c:cc:1e:7d:d0:f2:a4:
         6a:f3:7e:18:f4:53:f5:44:93:99:ec:0d:55:a9:fd:da:53:4b:
         8a:ab:51:bb:3b:87:08:d2:2e:2c:85:2d:b3:41:e6:cc:ea:2f:
         f5:c1:03:b1:65:56:da:0f:c8:a4:58:6f:d2:9b:68:47:12:c1:
         92:7a:44:40:db:fb:ec:2d:5c:3b:d5:0e:fd:b1:7d:a8:4d:1a:
         86:5b:48:69:1e:9b:da:f3:bc:ae:04:8c:bd:7f:3d:cb:b5:56:
         de:b9:01:ca
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY89CtEAW3G352ptnw9pOTuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky
NTY2MTUwHhcNMjQwNTAzMDYwMTEwWhcNMjQwNTA0MDYwMTEwWjAzMTEwLwYDVQQD
Eyg3MDQ4YTcwYWMwZTllZWViNTVkYTViNjgxZGMxZGI2ODM4YzFmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohTOL1cPhV48k/YPxwSkDLZtGv9R
9A9jD6pTFDTp1FDDItm6omsW2w/7swsgOt5mXFHuE0JM/SaBiZHALLB5zLEIkYui
xTwi048wNwXlVN0rjYcx59UOOvL4rAqZ0aWDP52OdTuQZJQRxpmWTo1V7rugY6iB
0vkdAz0sBfTWhJgXNWNeeHJP8rGh6dwUC7dn3pAiaOjzuWq0MURPhaLQu5vUk/pe
/NdFPEkuI+OpUbohFNQ3rEXXohV3CU/HprpFjd9RuwyDb3OTMDU8wssw0U9ParJV
qhGmKToYdsWBMBclHebtlRM77I5fwjWrZULBTB/hc9+tAA0U8994ujp2awIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHBIpwrA6e7rVdpbaB3B22g4wfcRMB8GA1UdIwQY
MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh
LWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0
N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqq7
47kFnnu5Qbeiq6nJR5lCB3xlSOIvEGBQpwJtauZ2fqIdi7I9r+HlUp3jYpXB4IR6
F3oJP0UEAVSoBDcPZv54KZLSWZe+KTVHfw9BsXeXf09+XGfT448ciCGL6wi3gvPi
yz+vW/KPpWSxObxJyTGccFJGortETl2GmnPdh4PG9xDVzaJvTEVux4FXJ0Gh/cf2
xrZxrwhaaxQszB590PKkavN+GPRT9USTmewNVan92lNLiqtRuzuHCNIuLIUts0Hm
zOov9cEDsWVW2g/IpFhv0ptoRxLBknpEQNv77C1cO9UO/bF9qE0ahltIaR6b2vO8
rgSMvX89y7VW3rkByg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:15:56 2024 by rpki-client on console-ams.rpki-client.org