Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File:                     zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier:          LnPdTK9S8S+GDq+fpSbbxsUpEywzDHdpVjjzDAx/fxY=
Subject key identifier:   30:B8:5B:80:8C:B5:22:56:A1:36:DA:BF:75:8F:5B:9D:E4:8B:1D:05
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer:       /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial:       018F874AADA0948FC4FB13036D6921071368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:49 +0000
Manifest this update:     Fri 17 May 2024 16:02:49 +0000
Manifest next update:     Sat 18 May 2024 16:02:49 +0000
Files and hashes:         1: jlBgFq1VMPd_NGLdP4JA3M7T6mU.roa (hash: 03j3k4wrgFI+I1RjipXjVRx4hIo9e3k7oZjZwt2+O9c=)
                          2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: Fpi7mQQTQC7yBm4K8FgRee5mTRgcAXlwVIZ5hd1fZpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ad:a0:94:8f:c4:fb:13:03:6d:69:21:07:13:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
        Validity
            Not Before: May 17 16:02:49 2024 GMT
            Not After : May 18 16:02:49 2024 GMT
        Subject: CN=30b85b808cb52256a136dabf758f5b9de48b1d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:11:bf:9f:f7:5b:08:7d:32:14:05:9f:17:
                    4b:89:f7:d5:9d:aa:74:02:ae:02:91:ad:c6:c1:41:
                    8a:37:11:56:57:d9:35:51:54:7b:c9:37:9b:1a:60:
                    a8:6e:92:b4:97:0b:8f:e3:56:a3:65:d0:31:4b:1c:
                    b4:ba:ed:af:8d:5d:d3:45:3f:ca:01:cb:46:4a:72:
                    58:1e:f7:fb:49:9b:9d:3b:3a:f6:7a:bf:10:1e:f5:
                    18:70:d8:3e:f9:b1:35:65:87:cd:d9:4d:d0:fd:0f:
                    de:65:4b:86:7c:a8:83:70:19:58:52:63:62:e7:d2:
                    6d:d2:e7:7f:8b:9a:e4:3d:ec:0b:7b:2d:50:02:e0:
                    ec:d4:46:de:fe:bf:b8:f3:23:aa:00:8b:67:5e:8f:
                    e6:db:75:a6:94:fc:0f:ad:d2:9b:d9:85:0a:d5:f8:
                    7a:ba:44:af:d6:92:1e:c3:5f:73:9f:6a:3f:54:40:
                    3e:3c:ce:f1:7a:29:08:27:7b:34:e5:dd:40:b0:d0:
                    a7:9d:66:7c:ce:4a:8a:ab:f1:bb:eb:47:dc:49:24:
                    7f:e0:a1:20:bc:d7:5c:31:0f:48:1a:2a:1d:a5:11:
                    83:61:9f:b6:a6:28:7e:14:cd:80:3a:bb:40:b7:58:
                    26:d0:eb:76:a3:8b:bc:33:27:ef:25:5a:0a:9b:6a:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:5B:80:8C:B5:22:56:A1:36:DA:BF:75:8F:5B:9D:E4:8B:1D:05
            X509v3 Authority Key Identifier:
                keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:76:8a:35:ad:7e:a9:82:83:d9:98:dd:1c:51:e1:08:a2:ef:
         22:ae:85:0f:3e:c1:87:29:d7:ce:a9:1a:f5:fc:1e:0e:f5:dd:
         b3:9b:05:f8:da:a2:b3:84:1e:b3:8f:8e:97:ad:c1:26:54:4d:
         7d:bb:9c:14:11:3a:89:85:3b:af:46:ac:77:16:b2:8a:0b:a2:
         44:e5:02:5e:d0:47:fe:bd:c1:12:fe:01:40:0e:d2:c5:63:e1:
         11:2d:ae:a7:64:0f:ff:06:0f:67:c8:60:15:ef:47:ca:62:b9:
         47:20:10:35:86:44:6f:92:b1:3f:99:97:b9:a5:1d:e5:94:dd:
         83:e2:36:97:72:0c:43:1c:8b:16:5d:89:0c:95:f9:80:9c:d1:
         d1:6c:6c:86:12:cf:c6:33:f5:6d:f7:09:e6:87:c4:27:16:b7:
         26:be:77:ed:fe:b9:e6:4f:ad:0b:88:d9:3a:b6:4f:72:de:2e:
         40:5d:32:82:df:6f:d4:41:82:8b:e0:2f:6a:96:b1:8f:c0:f9:
         58:ad:f6:f0:e1:47:09:42:76:42:5e:9f:99:b2:28:1b:d5:ed:
         f3:67:67:a5:0e:4d:92:31:1a:fb:e0:68:4c:0a:67:59:7d:97:
         22:23:bb:be:75:29:aa:4b:a1:35:c9:38:34:b0:79:42:4e:76:
         6e:d9:1e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSq2glI/E+xMDbWkhBxNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjU0NzFiOTRhMzI2MGMyZDlmNjU4ZGNlZDJmODdmNDBi
NTQyNGIwHhcNMjQwNTE3MTYwMjQ5WhcNMjQwNTE4MTYwMjQ5WjAzMTEwLwYDVQQD
EygzMGI4NWI4MDhjYjUyMjU2YTEzNmRhYmY3NThmNWI5ZGU0OGIxZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPcRv5/3Wwh9MhQFnxdLiffVnap0
Aq4Cka3GwUGKNxFWV9k1UVR7yTebGmCobpK0lwuP41ajZdAxSxy0uu2vjV3TRT/K
ActGSnJYHvf7SZudOzr2er8QHvUYcNg++bE1ZYfN2U3Q/Q/eZUuGfKiDcBlYUmNi
59Jt0ud/i5rkPewLey1QAuDs1Ebe/r+48yOqAItnXo/m23WmlPwPrdKb2YUK1fh6
ukSv1pIew19zn2o/VEA+PM7xeikIJ3s05d1AsNCnnWZ8zkqKq/G760fcSSR/4KEg
vNdcMQ9IGiodpRGDYZ+2pih+FM2AOrtAt1gm0Ot2o4u8MyfvJVoKm2r29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDC4W4CMtSJWoTbav3WPW53kix0FMB8GA1UdIwQY
MBaAFM5lRxuUoyYMLZ9ljc7S+H9AtUJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2Yt
YmIwZTBjYzI2YzQ5LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2YtYmIwZTBjYzI2YzQ5
LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHaKNa1+
qYKD2ZjdHFHhCKLvIq6FDz7BhynXzqka9fweDvXds5sF+Nqis4Qes4+Ol63BJlRN
fbucFBE6iYU7r0asdxayiguiROUCXtBH/r3BEv4BQA7SxWPhES2up2QP/wYPZ8hg
Fe9HymK5RyAQNYZEb5KxP5mXuaUd5ZTdg+I2l3IMQxyLFl2JDJX5gJzR0WxshhLP
xjP1bfcJ5ofEJxa3Jr537f655k+tC4jZOrZPct4uQF0ygt9v1EGCi+Avapaxj8D5
WK328OFHCUJ2Ql6fmbIoG9Xt82dnpQ5NkjEa++BoTApnWX2XIiO7vnUpqkuhNck4
NLB5Qk52btkedw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:41:37 2024 by rpki-client on console-fra.rpki-client.org