Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File:                     Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier:          X3acnhjMo4QmxXWi9hx99fvZVb9lf8ha6gbv1a3aB0g=
Subject key identifier:   D7:92:86:68:AA:84:C7:88:14:24:C7:9B:F1:EC:02:42:51:88:14:72
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer:       /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial:       018F87499ABE2F516DBB02CCEB046EF46FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number:          0135
Signing time:             Fri 17 May 2024 16:01:38 +0000
Manifest this update:     Fri 17 May 2024 16:01:38 +0000
Manifest next update:     Sat 18 May 2024 16:01:38 +0000
Files and hashes:         1: JwwsV4NCg0YxbBtv0iDhs9tc6WM.roa (hash: +3FNKUyMPtbkF2xXBpG0dGMwLmbw7FvktH2+q4vmbqg=)
                          2: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: 6oXOf2JoW5wbp8uPsQcXzbAND9Z73ywtNZe5q2KHHJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9a:be:2f:51:6d:bb:02:cc:eb:04:6e:f4:6f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
        Validity
            Not Before: May 17 16:01:38 2024 GMT
            Not After : May 18 16:01:38 2024 GMT
        Subject: CN=d7928668aa84c7881424c79bf1ec024251881472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:01:0a:11:02:7f:e2:e9:f3:b3:fb:0a:7a:
                    de:5b:84:be:bc:ad:d7:34:76:95:d4:bc:78:cc:b7:
                    73:85:45:4b:1c:8b:d6:2c:80:ba:d5:bf:52:79:54:
                    d9:6f:81:15:1b:bd:a3:df:cb:58:71:59:77:7e:b6:
                    26:7e:eb:27:1b:9a:c2:c3:3d:d5:4a:bd:8e:66:44:
                    f0:f2:19:37:90:98:8d:1d:0c:f0:fc:53:73:1d:1e:
                    8d:c9:d7:49:43:35:7d:f7:cd:d1:09:eb:cb:f1:91:
                    27:00:72:be:da:b9:67:9f:28:e3:b4:af:6d:83:2c:
                    35:f7:22:b8:11:5b:5b:29:23:47:3e:1a:9b:fb:6c:
                    0d:b4:39:35:c1:ac:f2:db:a3:c1:b8:44:a7:7f:6e:
                    d7:a1:39:21:1f:45:51:93:59:06:8e:07:13:cd:52:
                    1e:52:c4:47:5f:77:7e:00:9f:86:de:e9:67:7a:1b:
                    ab:f2:1e:bc:51:2a:17:14:93:8f:79:c5:f8:07:21:
                    27:21:8f:0e:c5:d6:56:7f:bb:21:1a:c4:45:8c:09:
                    79:9d:b9:c7:ea:b1:60:cd:79:79:86:38:2d:bc:ef:
                    c9:7c:ad:f3:22:09:2d:42:28:d8:b3:7f:9c:ef:e8:
                    51:17:54:fd:b9:a2:31:6a:5c:1f:bd:30:60:d4:97:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:92:86:68:AA:84:C7:88:14:24:C7:9B:F1:EC:02:42:51:88:14:72
            X509v3 Authority Key Identifier:
                keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:c7:09:d1:88:67:4a:84:77:ea:83:8c:2f:27:a9:54:71:
         37:f5:02:87:07:69:70:df:17:bd:c2:7e:c2:61:8f:f1:a4:5e:
         38:78:af:33:17:94:fa:c1:7f:a3:07:73:c4:d8:dd:5b:47:1f:
         1b:2e:e4:7f:68:a3:ab:ab:cc:51:a6:d9:9d:f1:5c:b1:be:39:
         28:7f:c5:03:d3:e8:97:7a:42:c5:39:50:8e:0d:34:45:8f:bc:
         c3:c5:2e:5b:03:08:d7:73:9a:31:d2:40:25:80:9e:12:0b:61:
         ae:32:6c:48:2a:01:22:f5:51:16:53:04:8b:6a:33:4d:c9:71:
         7b:e1:6e:25:1e:cc:7c:ed:48:b0:c8:3e:39:54:70:04:9f:8c:
         6e:97:90:3a:4e:8e:5c:f3:eb:b4:ed:a2:66:cb:fd:30:4a:ba:
         bf:0a:17:ad:14:83:e1:de:c0:90:be:13:2b:63:6d:25:f9:a9:
         d3:a6:f8:e9:c3:99:dd:c9:a8:fc:c4:c7:1e:5e:19:4d:06:61:
         aa:2a:c4:00:80:6f:eb:77:63:bc:0a:02:1c:bd:3f:3f:97:b8:
         75:fc:04:76:3e:d2:4c:b6:17:b8:7b:e6:1e:ab:31:a9:38:70:
         02:f0:9a:08:ba:f1:2b:bb:b5:ca:b3:59:1f:54:b2:89:ba:36:
         00:33:4b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZq+L1FtuwLM6wRu9G/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNmM3YWEzNTAyODI1YTY4YjM3NDViYjNkNjA3MjczMWZl
NTg3MmMwHhcNMjQwNTE3MTYwMTM4WhcNMjQwNTE4MTYwMTM4WjAzMTEwLwYDVQQD
EyhkNzkyODY2OGFhODRjNzg4MTQyNGM3OWJmMWVjMDI0MjUxODgxNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z0BChECf+Lp87P7CnreW4S+vK3X
NHaV1Lx4zLdzhUVLHIvWLIC61b9SeVTZb4EVG72j38tYcVl3frYmfusnG5rCwz3V
Sr2OZkTw8hk3kJiNHQzw/FNzHR6NyddJQzV9983RCevL8ZEnAHK+2rlnnyjjtK9t
gyw19yK4EVtbKSNHPhqb+2wNtDk1wazy26PBuESnf27XoTkhH0VRk1kGjgcTzVIe
UsRHX3d+AJ+G3ulnehur8h68USoXFJOPecX4ByEnIY8OxdZWf7shGsRFjAl5nbnH
6rFgzXl5hjgtvO/JfK3zIgktQijYs3+c7+hRF1T9uaIxalwfvTBg1JebvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeShmiqhMeIFCTHm/HsAkJRiBRyMB8GA1UdIwQY
MBaAFENseqNQKCWmizdFuz1gcnMf5YcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJ4Nm8xQW9KYWFMTjBXN1BXQnljeF9saHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80OGE2MjAtZDBiNy00YmI3LTg0OGQt
ZDZiZmNjYWEyMDM0LzEvUTJ4Nm8xQW9KYWFMTjBXN1BXQnljeF9saHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80OGE2MjAtZDBiNy00YmI3LTg0OGQtZDZiZmNjYWEyMDM0
LzEvUTJ4Nm8xQW9KYWFMTjBXN1BXQnljeF9saHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJPHCdGI
Z0qEd+qDjC8nqVRxN/UChwdpcN8XvcJ+wmGP8aReOHivMxeU+sF/owdzxNjdW0cf
Gy7kf2ijq6vMUabZnfFcsb45KH/FA9Pol3pCxTlQjg00RY+8w8UuWwMI13OaMdJA
JYCeEgthrjJsSCoBIvVRFlMEi2ozTclxe+FuJR7MfO1IsMg+OVRwBJ+MbpeQOk6O
XPPrtO2iZsv9MEq6vwoXrRSD4d7AkL4TK2NtJfmp06b46cOZ3cmo/MTHHl4ZTQZh
qirEAIBv63djvAoCHL0/P5e4dfwEdj7STLYXuHvmHqsxqThwAvCaCLrxK7u1yrNZ
H1Syibo2ADNLtg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:20 2024 by rpki-client on console-fra.rpki-client.org