Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File:                     ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier:          p2j/TK3OuWq+fU7s4dsLDoOqWMP47VEawf4YhtXv5YU=
Subject key identifier:   9B:43:7B:F2:BD:4C:81:D0:2B:13:D9:98:45:1C:19:D5:DC:B7:E6:2A
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer:       /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial:       018F889202BB37BEAF52518966D154391584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 22:00:21 +0000
Manifest this update:     Fri 17 May 2024 22:00:21 +0000
Manifest next update:     Sat 18 May 2024 22:00:21 +0000
Files and hashes:         1: 63vK6OYDeVzCQYe13ErvJXu4ZzY.roa (hash: yp/pUGunpq1hwC3DiuCsQHoWgmBByHqrTlX6tdoyeIg=)
                          2: 7V80gchO40kHwSQtmzPVEfGWdH0.roa (hash: 2dMoKXafSLaFQZtT94v5PGoqwyf8oxnEBdbP1HzBgHc=)
                          3: IZ9ExnaD6BffoV2NE9MW2tokpOQ.roa (hash: PBr4GeO9E6WKOwVy7bo0gR4XL8QG5wZY6CVOIDzpS8A=)
                          4: MSN15TyX8IOnW7SqqMjsOWalygY.roa (hash: vgcR+XHu4NvUUo+SXvpLtSDthnNheJ+Du81vbBY7Vx4=)
                          5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: MAHvH5vnKxB+jQ/EJATAS/DDjFCwFdFG8SHn1w3KHHc=)
                          6: bLL1UMbPM8e2AEitJ1jrsmxElaA.roa (hash: SqZAwg6pbolsTEjyQwbjWMY7Wu/Uu95zpr5QT1y6Lso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:02:bb:37:be:af:52:51:89:66:d1:54:39:15:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
        Validity
            Not Before: May 17 22:00:21 2024 GMT
            Not After : May 18 22:00:21 2024 GMT
        Subject: CN=9b437bf2bd4c81d02b13d998451c19d5dcb7e62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:d7:95:da:ae:af:9b:39:cf:db:29:69:26:
                    e9:fc:1e:ba:1a:a0:b5:86:25:63:dc:77:75:ac:f1:
                    41:af:c5:94:94:24:70:d8:a7:a6:10:47:9a:d6:a2:
                    69:7f:65:4b:1a:ae:79:1f:fe:20:32:24:ae:03:89:
                    3c:df:a8:82:2b:e8:62:2c:45:d8:3e:aa:41:2c:e2:
                    59:52:eb:4d:c4:e5:dd:3f:82:9c:42:cc:a5:83:9a:
                    42:75:48:f0:3d:05:91:fe:64:50:7a:d6:b5:65:cd:
                    ca:bd:e2:75:9d:24:aa:ff:7d:cd:05:c0:a4:7e:9d:
                    97:41:43:3a:1b:57:0a:4d:f3:f3:cf:a8:83:88:c3:
                    d5:9c:f7:e8:2f:49:b6:1b:2c:50:1f:09:ee:93:8c:
                    b3:1a:ef:ec:9f:73:15:4f:2d:30:ea:1d:d3:8a:27:
                    2c:6e:f2:5c:b2:47:52:a0:e9:da:d9:37:b8:8c:36:
                    a1:29:ce:c8:ad:d5:43:e9:f9:f6:1a:f2:b8:47:d8:
                    e7:38:66:7d:f2:6f:67:ba:76:b6:58:6c:15:08:c1:
                    91:90:37:4a:2e:03:68:44:1f:50:73:a8:47:89:78:
                    e9:1a:8c:52:cc:fd:3a:a9:d6:63:e2:d8:c6:23:45:
                    98:c2:14:df:8e:b0:3c:e0:22:60:51:9e:24:3e:09:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:7B:F2:BD:4C:81:D0:2B:13:D9:98:45:1C:19:D5:DC:B7:E6:2A
            X509v3 Authority Key Identifier:
                keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:83:ee:3c:fa:ad:9b:0a:f9:b2:7a:c4:b4:85:33:63:e7:
         7e:1a:32:c1:c9:bd:32:db:87:9e:b7:e2:38:d8:54:e9:ba:2c:
         85:72:f3:d0:16:6b:ea:c4:ed:a9:e5:98:fd:c0:e1:b9:f3:9b:
         33:ea:85:e7:a3:bd:68:25:7b:a0:e6:56:38:6e:4c:e7:da:78:
         bf:99:eb:0d:89:ce:fc:e6:11:2d:47:b4:a5:d7:15:d5:68:4b:
         78:7e:0c:24:cd:15:d6:b0:05:69:05:7a:56:8f:85:21:4b:f0:
         b6:a3:46:08:5f:2f:8b:f3:1e:14:04:c0:b0:91:8f:21:c8:6c:
         61:5a:5f:d9:34:24:60:07:37:c9:75:88:db:d4:5f:70:70:82:
         89:ef:e2:3e:a5:06:f0:8f:18:d9:5e:f1:ff:82:35:49:c1:fa:
         15:76:b7:72:6c:4a:00:fc:cf:34:d9:a9:64:3e:2c:9d:c6:ea:
         2a:e9:f3:f1:e0:1c:35:31:a0:d6:ec:72:64:31:f7:a2:fe:61:
         33:50:3b:66:7c:5e:52:f0:00:b4:25:3c:53:38:0d:2e:1c:f4:
         24:9d:d6:99:7c:83:b8:1c:5a:4a:c9:10:b3:96:c9:6a:60:5a:
         ac:a7:9f:1c:cc:de:a9:4c:ad:28:f7:71:58:fa:3f:bd:61:bf:
         f0:92:d4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkgK7N76vUlGJZtFUORWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0
ZTQzZWEwHhcNMjQwNTE3MjIwMDIxWhcNMjQwNTE4MjIwMDIxWjAzMTEwLwYDVQQD
Eyg5YjQzN2JmMmJkNGM4MWQwMmIxM2Q5OTg0NTFjMTlkNWRjYjdlNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPnXldqur5s5z9spaSbp/B66GqC1
hiVj3Hd1rPFBr8WUlCRw2KemEEea1qJpf2VLGq55H/4gMiSuA4k836iCK+hiLEXY
PqpBLOJZUutNxOXdP4KcQsylg5pCdUjwPQWR/mRQeta1Zc3KveJ1nSSq/33NBcCk
fp2XQUM6G1cKTfPzz6iDiMPVnPfoL0m2GyxQHwnuk4yzGu/sn3MVTy0w6h3Tiics
bvJcskdSoOna2Te4jDahKc7IrdVD6fn2GvK4R9jnOGZ98m9nuna2WGwVCMGRkDdK
LgNoRB9Qc6hHiXjpGoxSzP06qdZj4tjGI0WYwhTfjrA84CJgUZ4kPgkJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtDe/K9TIHQKxPZmEUcGdXct+YqMB8GA1UdIwQY
MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt
ZmVhMGFmZjM1OWY1LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1
LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlOD7jz6
rZsK+bJ6xLSFM2Pnfhoywcm9MtuHnrfiONhU6boshXLz0BZr6sTtqeWY/cDhufOb
M+qF56O9aCV7oOZWOG5M59p4v5nrDYnO/OYRLUe0pdcV1WhLeH4MJM0V1rAFaQV6
Vo+FIUvwtqNGCF8vi/MeFATAsJGPIchsYVpf2TQkYAc3yXWI29RfcHCCie/iPqUG
8I8Y2V7x/4I1ScH6FXa3cmxKAPzPNNmpZD4sncbqKunz8eAcNTGg1uxyZDH3ov5h
M1A7ZnxeUvAAtCU8UzgNLhz0JJ3WmXyDuBxaSskQs5bJamBarKefHMzeqUytKPdx
WPo/vWG/8JLU8g==
-----END CERTIFICATE-----
Generated at Fri May 17 22:54:49 2024 by rpki-client on console-ams.rpki-client.org