Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File:                     kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier:          9485I5VkAG8RoDLuG3nI7Gwc0MbfWuj7G4eWVzD4amc=
Subject key identifier:   60:83:38:27:AE:47:DA:AC:48:05:FC:4D:32:F6:E8:3F:0E:C8:F3:85
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer:       /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial:       018F874B0D82AE53B3542BF338363ACBCE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number:          03A8
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: Dej3rpN5o4fJCx8gNyjHlFtwC8A.roa (hash: l6+wtWbeAdLo9rQRBz0cuQMfo+AoLGZP/XIMdTDMP0U=)
                          2: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: eUlijX7ONCOTNFuiU4ttWisfThD0CIRv3O4XH+PL1UA=)
                          3: ve4gvlWv1kxLp8_eHVc0b_t6lcU.roa (hash: i56ZcIVbp9RWAsdcUuisi27BwNgXaqfQWo2OlKtVqiw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0d:82:ae:53:b3:54:2b:f3:38:36:3a:cb:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=60833827ae47daac4805fc4d32f6e83f0ec8f385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:d7:62:8d:03:32:36:7c:ea:c2:05:da:cb:
                    93:f4:86:8a:ab:a9:7d:1e:45:a8:76:47:f0:71:c4:
                    e8:94:bd:c4:e1:99:0e:ba:48:9b:14:89:83:23:04:
                    39:17:90:d8:10:c0:fc:db:74:3b:40:cf:63:bb:4a:
                    96:a6:5a:71:28:f7:e6:05:15:af:93:79:61:4b:25:
                    74:83:c8:8d:45:b6:37:a1:15:43:9b:12:b9:f0:13:
                    8e:68:8a:de:82:90:84:95:a1:7d:d5:ee:70:62:2d:
                    55:46:a4:f1:9a:de:43:62:bf:5e:cd:0a:63:d2:b7:
                    80:9f:4e:91:55:b0:67:00:48:9e:05:56:1e:bd:29:
                    44:26:cf:d7:9b:4d:88:26:df:d3:83:1e:ff:98:13:
                    82:20:ee:93:44:ec:4e:4d:21:f1:04:12:c6:99:e0:
                    15:8b:47:00:5a:17:b2:39:b7:36:4c:e8:cd:df:c7:
                    9f:4a:00:d4:82:6e:3d:11:29:36:e3:42:38:b4:85:
                    25:f1:4c:67:72:d3:0f:02:22:40:c7:ee:6a:19:64:
                    d0:f9:3e:82:73:7d:9c:36:a5:40:c4:1d:cd:b6:84:
                    19:5f:5b:71:f3:d3:d9:34:f2:9e:39:68:e4:3a:26:
                    5d:e9:92:38:a4:e3:a6:1c:9b:51:f5:45:75:96:f2:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:83:38:27:AE:47:DA:AC:48:05:FC:4D:32:F6:E8:3F:0E:C8:F3:85
            X509v3 Authority Key Identifier:
                keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:40:de:2e:ac:31:81:a0:c8:d7:7f:30:27:55:ec:39:77:77:
         c7:0a:8c:30:10:13:e6:3a:2a:fd:43:34:1b:bb:b6:58:01:f9:
         fc:08:37:d9:4a:ac:4f:6c:d1:69:5c:42:4c:49:ed:86:f5:cc:
         7f:2c:d6:69:56:e2:eb:44:2c:7c:93:48:1e:67:31:ec:51:1d:
         39:83:2c:13:44:25:9e:c0:56:bd:a0:ae:22:a8:34:7f:d9:e5:
         e7:3c:44:03:22:c5:6e:7e:15:b3:85:1d:10:e7:b3:30:5a:b8:
         51:00:65:97:c0:48:e5:04:3f:d0:0b:9b:b4:06:85:f7:a5:7c:
         d2:b1:35:e5:45:dc:1b:5a:4c:30:fc:8d:b1:ae:4f:70:78:07:
         9c:8f:bf:1d:da:56:f7:e6:59:d7:f9:6a:f1:24:bf:ca:16:e2:
         90:a6:59:56:7d:4e:ac:51:2a:6d:08:dc:f1:42:07:45:ae:43:
         57:0d:2b:18:27:ad:16:79:c6:5c:e4:1b:57:0a:de:9f:31:c7:
         d9:f7:61:11:cd:9c:38:ac:21:b8:57:2b:0f:bc:b7:a0:c0:af:
         75:c6:5d:fb:22:5c:90:11:e1:9f:aa:a9:46:c2:11:4a:a4:00:
         90:7c:a7:f4:9b:a6:b1:b9:3d:77:28:38:cf:57:35:1a:77:b1:
         5d:be:a2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSw2CrlOzVCvzODY6y85AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy
MTY1ZWIwHhcNMjQwNTE3MTYwMzEzWhcNMjQwNTE4MTYwMzEzWjAzMTEwLwYDVQQD
Eyg2MDgzMzgyN2FlNDdkYWFjNDgwNWZjNGQzMmY2ZTgzZjBlYzhmMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxrXYo0DMjZ86sIF2suT9IaKq6l9
HkWodkfwccTolL3E4ZkOukibFImDIwQ5F5DYEMD823Q7QM9ju0qWplpxKPfmBRWv
k3lhSyV0g8iNRbY3oRVDmxK58BOOaIregpCElaF91e5wYi1VRqTxmt5DYr9ezQpj
0reAn06RVbBnAEieBVYevSlEJs/Xm02IJt/Tgx7/mBOCIO6TROxOTSHxBBLGmeAV
i0cAWheyObc2TOjN38efSgDUgm49ESk240I4tIUl8UxnctMPAiJAx+5qGWTQ+T6C
c32cNqVAxB3NtoQZX1tx89PZNPKeOWjkOiZd6ZI4pOOmHJtR9UV1lvJmqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCDOCeuR9qsSAX8TTL26D8OyPOFMB8GA1UdIwQY
MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt
OTQwYWU0NTRjYjg1LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1
LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUDeLqwx
gaDI138wJ1XsOXd3xwqMMBAT5joq/UM0G7u2WAH5/Ag32UqsT2zRaVxCTEnthvXM
fyzWaVbi60QsfJNIHmcx7FEdOYMsE0QlnsBWvaCuIqg0f9nl5zxEAyLFbn4Vs4Ud
EOezMFq4UQBll8BI5QQ/0AubtAaF96V80rE15UXcG1pMMPyNsa5PcHgHnI+/HdpW
9+ZZ1/lq8SS/yhbikKZZVn1OrFEqbQjc8UIHRa5DVw0rGCetFnnGXOQbVwrenzHH
2fdhEc2cOKwhuFcrD7y3oMCvdcZd+yJckBHhn6qpRsIRSqQAkHyn9Jumsbk9dyg4
z1c1GnexXb6iJQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:08 2024 by rpki-client on console-ams.rpki-client.org