Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File:                     vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier:          6myhKyctoXUz5+kRbVNcn9DsTe7lP0LnorfxWOUqB4w=
Subject key identifier:   D6:56:80:30:52:06:8B:26:8F:69:9F:D5:E4:39:2B:C3:FC:28:76:8D
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer:       /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial:       018F6A543E00257B4102E23A52CC8C52BF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number:          1167
Signing time:             Sun 12 May 2024 01:04:16 +0000
Manifest this update:     Sun 12 May 2024 01:04:16 +0000
Manifest next update:     Mon 13 May 2024 01:04:16 +0000
Files and hashes:         1: mzwYJyswo8l1JsA6hfRfIoCBafA.roa (hash: Gfotfil+ck185Eo+qC6OPzrlOf4CHvljp/doqgLnc0M=)
                          2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: LZ0OBuFnFHaMyHxEACw+X50zMacOWAIVTGm7fuGD/20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 01:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6a:54:3e:00:25:7b:41:02:e2:3a:52:cc:8c:52:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
        Validity
            Not Before: May 12 01:04:16 2024 GMT
            Not After : May 13 01:04:16 2024 GMT
        Subject: CN=d656803052068b268f699fd5e4392bc3fc28768d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:f9:50:2b:0b:b2:a5:3a:03:86:56:e2:41:
                    53:09:b7:2b:c4:c4:1e:49:2f:b2:d0:5c:05:c9:ea:
                    87:b4:5c:64:84:53:e5:44:7f:5f:33:c0:a1:73:1d:
                    1f:05:6c:31:23:aa:8d:1b:77:af:00:c7:b5:15:ca:
                    23:52:5c:a5:f1:b5:ea:4f:0b:0c:7e:e6:97:8f:95:
                    78:ec:0f:67:6c:45:62:fe:c1:d0:c8:bc:22:c0:59:
                    c1:fb:b0:ce:bc:fa:33:01:4d:79:60:05:d4:3d:81:
                    4d:1f:1d:12:06:3e:10:61:ee:4a:97:8f:e2:ec:60:
                    ad:42:b8:60:31:0a:11:ba:1d:01:00:e6:e9:0f:fb:
                    15:da:42:5a:d2:02:28:14:75:85:07:3d:fa:c9:4c:
                    69:fd:ff:63:3b:38:cd:2e:e6:83:58:06:89:9b:81:
                    d6:8a:ff:27:70:58:86:0e:c2:fc:b6:ba:da:4f:38:
                    9f:ca:a4:c4:1c:31:80:81:84:5a:da:55:c3:82:db:
                    fc:66:34:8f:9c:c8:8b:3d:48:11:d9:e8:4d:cd:49:
                    09:b7:3d:56:4a:0d:27:2f:71:7c:88:d2:8c:88:91:
                    5e:a6:e4:1b:54:9b:0b:c4:11:77:71:72:a9:07:e1:
                    eb:a0:5e:a5:81:7e:73:98:f9:32:2b:71:af:a4:28:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:80:30:52:06:8B:26:8F:69:9F:D5:E4:39:2B:C3:FC:28:76:8D
            X509v3 Authority Key Identifier:
                keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:be:0d:72:2b:11:6f:22:47:54:a5:cf:f6:b6:82:da:67:f4:
         38:7e:96:46:ed:eb:07:9d:67:c8:13:4d:f5:9a:52:4b:f1:ec:
         e3:dd:13:a2:01:99:d2:a0:18:fa:a1:75:98:bd:a2:98:6c:94:
         72:2f:8b:a7:7d:32:71:01:09:c6:52:87:bc:9a:d2:1a:fc:de:
         21:03:ba:c0:d6:44:be:ec:c1:6c:16:d0:96:16:c9:53:9d:d7:
         a0:84:b4:5b:09:79:6f:4d:7c:69:07:05:21:6b:4e:f0:50:30:
         c0:dd:29:2c:dd:bb:5c:fc:33:76:16:59:53:50:65:20:4e:ea:
         8a:38:a1:8d:8c:f3:cb:44:35:7c:86:cf:da:3d:06:53:c5:87:
         26:6d:91:72:ab:dc:59:4f:2a:06:fd:81:3e:38:29:7b:2e:e4:
         51:a9:91:dc:96:2a:c5:2c:54:b3:d4:1c:12:c5:1c:f3:c1:44:
         27:f3:5e:9f:03:be:6a:9f:ad:3c:4e:1b:cb:8b:3e:a1:d3:2f:
         f5:e5:c6:5f:44:f1:9d:49:08:28:ce:43:c6:63:82:07:a9:0d:
         b2:c0:7a:59:46:96:b6:ae:5a:50:69:f8:96:91:ae:c0:b0:76:
         6f:1c:8a:50:33:4e:28:11:8f:e5:ad:c2:8a:14:65:e7:11:76:
         82:88:32:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9qVD4AJXtBAuI6UsyMUr+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOThkYTA5ZjBhNDVhNDA4ZjViN2YxYmFlNmQ5MWUzMzMz
ZDU3MzIwHhcNMjQwNTEyMDEwNDE2WhcNMjQwNTEzMDEwNDE2WjAzMTEwLwYDVQQD
EyhkNjU2ODAzMDUyMDY4YjI2OGY2OTlmZDVlNDM5MmJjM2ZjMjg3NjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJn5UCsLsqU6A4ZW4kFTCbcrxMQe
SS+y0FwFyeqHtFxkhFPlRH9fM8Chcx0fBWwxI6qNG3evAMe1FcojUlyl8bXqTwsM
fuaXj5V47A9nbEVi/sHQyLwiwFnB+7DOvPozAU15YAXUPYFNHx0SBj4QYe5Kl4/i
7GCtQrhgMQoRuh0BAObpD/sV2kJa0gIoFHWFBz36yUxp/f9jOzjNLuaDWAaJm4HW
iv8ncFiGDsL8trraTzifyqTEHDGAgYRa2lXDgtv8ZjSPnMiLPUgR2ehNzUkJtz1W
Sg0nL3F8iNKMiJFepuQbVJsLxBF3cXKpB+HroF6lgX5zmPkyK3GvpCheUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZWgDBSBosmj2mf1eQ5K8P8KHaNMB8GA1UdIwQY
MBaAFLyY2gnwpFpAj1t/G65tkeMzPVcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUt
NWU4NjExNjU4ODRjLzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUtNWU4NjExNjU4ODRj
LzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML4NcisR
byJHVKXP9raC2mf0OH6WRu3rB51nyBNN9ZpSS/Hs490TogGZ0qAY+qF1mL2imGyU
ci+Lp30ycQEJxlKHvJrSGvzeIQO6wNZEvuzBbBbQlhbJU53XoIS0Wwl5b018aQcF
IWtO8FAwwN0pLN27XPwzdhZZU1BlIE7qijihjYzzy0Q1fIbP2j0GU8WHJm2Rcqvc
WU8qBv2BPjgpey7kUamR3JYqxSxUs9QcEsUc88FEJ/NenwO+ap+tPE4by4s+odMv
9eXGX0TxnUkIKM5DxmOCB6kNssB6WUaWtq5aUGn4lpGuwLB2bxyKUDNOKBGP5a3C
ihRl5xF2gogyVg==
-----END CERTIFICATE-----
Generated at Sun May 12 04:04:54 2024 by rpki-client on console-fra.rpki-client.org