Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          1RZzy2fZYmQRtCZ/vipLwIJkg+yXhyxheU1/gtVtQI0=
Subject key identifier:   26:3A:27:66:C7:9A:D7:B0:86:9A:32:A0:96:E7:D6:2C:F9:88:36:6C
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       018F836C4D0709AFF0BE2D7EBBD1C8D323B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          117D
Signing time:             Thu 16 May 2024 22:01:03 +0000
Manifest this update:     Thu 16 May 2024 22:01:03 +0000
Manifest next update:     Fri 17 May 2024 22:01:03 +0000
Files and hashes:         1: IhPVI-B3UfglUnjwYWqmry8wGHA.roa (hash: FyYSVbf5UUBjyENFu9Y/5OKjkumgyiBGL8SQOn9Q+q8=)
                          2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: JOw37KnzPQGZC3HJFh2BBHhB0NZ8vVNJsbxvadlKf30=)
                          3: RXEEhyHtoVBsjsgZbGbtjTy2kBw.roa (hash: unZ5NoAbc3A558NicFa4i4RG5dMWnnbUpeiukKVmqAI=)
                          4: yns2H9tAIF_TyPIKHLSEjFqiNQI.roa (hash: KiJXW9bXEr145FNj/5PPI0lRzzwyA0LwFVVTIWN9R4I=)
                          5: z25BH6ICZHlUMA4_ImkQhf7wpCw.roa (hash: UjDQ1VHCrZv89mhsIPY1AeQzcmiNKfRY0Z3keLU6kQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6c:4d:07:09:af:f0:be:2d:7e:bb:d1:c8:d3:23:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: May 16 22:01:03 2024 GMT
            Not After : May 17 22:01:03 2024 GMT
        Subject: CN=263a2766c79ad7b0869a32a096e7d62cf988366c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:97:a0:b3:fe:dc:a4:40:50:63:dc:00:7d:
                    49:f3:42:85:db:1d:7a:97:c6:3c:b1:f2:8f:29:3d:
                    83:73:1f:cb:8e:41:eb:bd:90:26:8a:cb:60:c3:29:
                    cf:f2:1d:cb:1d:65:3b:15:e1:a4:a1:fc:78:44:0c:
                    fd:30:56:36:49:31:7d:b3:18:c4:27:a2:9d:74:d7:
                    60:0c:d5:25:f0:95:dd:ae:15:84:23:6a:d4:ff:7a:
                    99:94:dd:77:93:2a:0d:59:ad:4d:dd:5d:47:fd:69:
                    2a:d3:19:6e:a6:0e:c0:33:54:e3:3f:b2:9a:bb:06:
                    31:d3:9e:c0:bf:68:36:2e:0a:65:3c:55:31:85:b5:
                    f5:d4:eb:10:e1:cd:ea:54:a4:85:58:5c:92:99:6e:
                    00:14:f9:5f:3c:b0:e6:08:91:89:2e:a3:5b:50:a8:
                    00:f4:e2:be:9d:f2:52:32:50:20:ea:86:59:71:9f:
                    fd:ac:24:63:a3:bb:01:d2:3b:41:76:71:11:3a:47:
                    2b:a4:28:ee:f0:95:cc:d3:c2:0d:3c:54:6d:40:29:
                    bc:74:0f:31:b7:56:ea:c8:67:9d:50:96:55:cc:19:
                    ef:e0:76:cd:d7:0b:be:5d:24:dc:41:07:9a:cf:1f:
                    2a:09:b7:bd:ce:12:9e:98:9a:c9:53:ad:f8:49:f5:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:27:66:C7:9A:D7:B0:86:9A:32:A0:96:E7:D6:2C:F9:88:36:6C
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:25:cf:d7:13:22:46:82:d1:1a:a8:23:c1:51:ba:39:1b:
         d2:7f:81:81:41:3a:3b:a0:eb:71:c8:a0:ff:ed:33:1c:5f:1e:
         36:a1:3b:7b:0f:b3:71:69:77:4f:ca:6a:98:7e:c8:e4:45:eb:
         5b:11:84:0a:88:cb:cc:82:4c:8b:af:5b:8b:df:57:eb:b5:c6:
         fd:2a:8e:75:d9:55:42:0f:a6:be:6b:a9:19:8b:71:18:5f:57:
         06:74:93:8f:d7:b0:4f:f1:8a:4f:fe:03:83:ee:fe:cd:e7:b3:
         52:5a:7c:21:02:0e:fb:78:1a:7d:2f:6f:9b:87:04:18:c7:f5:
         3f:47:f7:85:07:d6:9d:12:56:b1:f9:99:2a:96:d2:00:f7:56:
         3b:62:d1:4d:bb:c5:02:c9:8a:b3:8b:ec:dc:89:8b:a3:d6:66:
         4b:0e:fc:d2:79:93:ff:1b:ec:69:76:27:dc:f6:44:e6:43:89:
         e2:70:ab:fb:41:0a:92:36:27:1e:00:47:ab:12:2d:4b:fe:a2:
         15:8d:a2:31:4a:35:54:a5:aa:75:b1:1e:87:6e:ec:a5:4e:e3:
         c7:13:4d:ac:99:58:5d:94:38:9b:58:a3:62:bc:a6:30:d8:ae:
         04:ed:60:b8:8d:6a:3d:6c:fb:76:a1:d5:f0:13:e8:c1:e8:52:
         cb:2c:9c:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DbE0HCa/wvi1+u9HI0yOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk
OWJlMWQwHhcNMjQwNTE2MjIwMTAzWhcNMjQwNTE3MjIwMTAzWjAzMTEwLwYDVQQD
EygyNjNhMjc2NmM3OWFkN2IwODY5YTMyYTA5NmU3ZDYyY2Y5ODgzNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDqXoLP+3KRAUGPcAH1J80KF2x16
l8Y8sfKPKT2Dcx/LjkHrvZAmistgwynP8h3LHWU7FeGkofx4RAz9MFY2STF9sxjE
J6KddNdgDNUl8JXdrhWEI2rU/3qZlN13kyoNWa1N3V1H/Wkq0xlupg7AM1TjP7Ka
uwYx057Av2g2LgplPFUxhbX11OsQ4c3qVKSFWFySmW4AFPlfPLDmCJGJLqNbUKgA
9OK+nfJSMlAg6oZZcZ/9rCRjo7sB0jtBdnEROkcrpCju8JXM08INPFRtQCm8dA8x
t1bqyGedUJZVzBnv4HbN1wu+XSTcQQeazx8qCbe9zhKemJrJU634SfWD9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY6J2bHmtewhpoyoJbn1iz5iDZsMB8GA1UdIwQY
MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct
N2EwMzRkMTcwYjg1LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1
LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfglz9cT
IkaC0RqoI8FRujkb0n+BgUE6O6Drccig/+0zHF8eNqE7ew+zcWl3T8pqmH7I5EXr
WxGECojLzIJMi69bi99X67XG/SqOddlVQg+mvmupGYtxGF9XBnSTj9ewT/GKT/4D
g+7+zeezUlp8IQIO+3gafS9vm4cEGMf1P0f3hQfWnRJWsfmZKpbSAPdWO2LRTbvF
AsmKs4vs3ImLo9ZmSw780nmT/xvsaXYn3PZE5kOJ4nCr+0EKkjYnHgBHqxItS/6i
FY2iMUo1VKWqdbEeh27spU7jxxNNrJlYXZQ4m1ijYrymMNiuBO1guI1qPWz7dqHV
8BPowehSyyycHA==
-----END CERTIFICATE-----
Generated at Fri May 17 05:12:13 2024 by rpki-client on console-ams.rpki-client.org