Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File:                     1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier:          vdB/yLH0MmcO/HtD6ELGKYtx93080z+Tb/XNbP0uK0A=
Subject key identifier:   98:F8:BB:B8:C2:D5:EC:92:C0:D0:40:74:C9:67:51:17:15:EB:55:63
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer:       /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial:       018F23EF9D81F33FC141D3F4B8A6C0F18F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number:          1144
Signing time:             Sun 28 Apr 2024 09:00:56 +0000
Manifest this update:     Sun 28 Apr 2024 09:00:56 +0000
Manifest next update:     Mon 29 Apr 2024 09:00:56 +0000
Files and hashes:         1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: C3yPtMRDLYH5CH5esxdbYMHRf2k6p9qoIMYKohJahIY=)
                          2: JIt-cN-TJtL8VtT0aqf3mjQzYRE.roa (hash: rUyTWM4NtKXIeCNWMU8A/sKBiyF0x7SSDzOhB7THEmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:ef:9d:81:f3:3f:c1:41:d3:f4:b8:a6:c0:f1:8f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
        Validity
            Not Before: Apr 28 09:00:56 2024 GMT
            Not After : Apr 29 09:00:56 2024 GMT
        Subject: CN=98f8bbb8c2d5ec92c0d04074c967511715eb5563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:29:da:d4:e3:cf:83:e4:bb:66:39:2e:47:
                    e2:0d:06:af:1f:62:92:35:ac:e0:39:3b:0a:0d:e8:
                    fb:8a:2d:77:52:bb:1a:99:c9:0a:ba:da:f3:a7:ab:
                    11:e8:db:0e:99:f0:ba:db:e5:5e:1c:91:e4:11:15:
                    ac:bd:7f:31:86:ae:81:60:1a:e7:f5:cd:2a:9a:09:
                    4d:4b:90:4b:43:62:d5:ae:70:c0:7e:d3:cc:65:85:
                    75:b1:6e:a3:12:fc:a3:73:e3:9f:3d:75:68:66:cc:
                    99:1b:2a:3f:ec:20:50:e2:c5:79:6e:b0:3f:a6:01:
                    ff:1f:48:60:ed:94:e6:ed:32:fb:45:d3:61:3f:0f:
                    2c:ee:08:2b:73:3e:06:4d:cd:37:ec:65:08:6b:d5:
                    5b:97:4a:94:2b:84:ee:aa:1f:5a:d2:39:b6:86:4e:
                    4c:49:c3:19:0e:91:20:90:4b:75:67:2d:5f:2b:76:
                    ce:a5:a8:b1:b2:6d:a1:89:47:58:8f:1d:02:ae:4e:
                    ce:4d:b4:b9:a4:1c:70:39:20:eb:a4:4c:ea:e1:9b:
                    14:1a:00:76:74:36:58:2b:68:d4:fc:d2:4c:7f:a2:
                    69:62:12:fc:0a:5c:3d:27:33:40:d8:90:9d:22:5f:
                    de:f5:70:d1:51:19:af:2e:d6:3b:79:2e:33:28:32:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:BB:B8:C2:D5:EC:92:C0:D0:40:74:C9:67:51:17:15:EB:55:63
            X509v3 Authority Key Identifier:
                keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:8c:ae:0b:37:83:e6:d9:c2:0d:d2:99:16:8c:e5:4a:7e:
         f9:9c:f0:61:dc:c4:e0:7a:cf:09:16:da:a6:f3:ea:23:a9:50:
         4b:5f:90:05:55:f1:30:1b:e4:ba:53:a0:59:87:e2:4b:b2:28:
         70:97:22:f0:26:11:90:e0:f4:55:8f:ab:dc:d0:97:f5:17:38:
         0e:13:f2:c0:c9:3c:ca:45:23:eb:d6:a9:b2:e5:28:4a:bd:14:
         bc:8c:05:cc:ff:dc:6e:a8:ca:5c:fc:7d:77:38:05:fa:3d:a0:
         28:93:34:aa:44:8e:e6:ed:d6:ee:7e:b8:df:cb:e2:c9:7f:2f:
         76:e1:92:d1:8a:ed:54:89:04:92:c5:b3:72:27:4c:ba:d2:f7:
         da:f1:20:db:ac:f1:11:59:80:8f:32:48:47:36:43:cd:c4:8b:
         f7:d5:f3:a5:13:f1:93:0e:c0:0c:2c:07:0e:92:41:27:b3:8d:
         63:05:99:f0:72:64:89:3f:25:e9:c9:36:ad:63:68:7e:b2:61:
         06:5d:cd:5c:34:b9:fd:38:48:db:50:95:46:ca:7f:7c:ed:0c:
         53:8f:7e:a5:8a:af:c1:62:16:4f:93:e9:00:b1:2f:42:91:85:
         d7:e3:cc:a8:a8:47:55:dd:e9:6a:d0:83:44:55:9f:b2:77:4e:
         c9:7f:14:f2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY8j752B8z/BQdP0uKbA8Y8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYzBmMGRhMzlhMjJhNzlmODBjMWYzNzliNjY4YjkwZjZk
NzQ3MDgwHhcNMjQwNDI4MDkwMDU2WhcNMjQwNDI5MDkwMDU2WjAzMTEwLwYDVQQD
Eyg5OGY4YmJiOGMyZDVlYzkyYzBkMDQwNzRjOTY3NTExNzE1ZWI1NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmop2tTjz4Pku2Y5LkfiDQavH2KS
NazgOTsKDej7ii13UrsamckKutrzp6sR6NsOmfC62+VeHJHkERWsvX8xhq6BYBrn
9c0qmglNS5BLQ2LVrnDAftPMZYV1sW6jEvyjc+OfPXVoZsyZGyo/7CBQ4sV5brA/
pgH/H0hg7ZTm7TL7RdNhPw8s7ggrcz4GTc037GUIa9Vbl0qUK4Tuqh9a0jm2hk5M
ScMZDpEgkEt1Zy1fK3bOpaixsm2hiUdYjx0Crk7OTbS5pBxwOSDrpEzq4ZsUGgB2
dDZYK2jU/NJMf6JpYhL8Clw9JzNA2JCdIl/e9XDRURmvLtY7eS4zKDLpmwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJj4u7jC1eySwNBAdMlnURcV61VjMB8GA1UdIwQY
MBaAFPrA8No5oip5+AwfN5tmi5D210cIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zRHcyam1pS25uNERCODNtMmFMa1BiWFJ3Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODZlZDViLWJjYzEtNGQwMy05NWRh
LWI5OWQ0ZDAwZjgzMS8xLzEtc0R3MmptaUtubjREQjgzbTJhTGtQYlhSd2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg4Lzg2ZWQ1Yi1iY2MxLTRkMDMtOTVkYS1iOTlkNGQwMGY4
MzEvMS8xLXNEdzJqbWlLbm40REI4M20yYUxrUGJYUndnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdiM
rgs3g+bZwg3SmRaM5Up++ZzwYdzE4HrPCRbapvPqI6lQS1+QBVXxMBvkulOgWYfi
S7IocJci8CYRkOD0VY+r3NCX9Rc4DhPywMk8ykUj69apsuUoSr0UvIwFzP/cbqjK
XPx9dzgF+j2gKJM0qkSO5u3W7n6438viyX8vduGS0YrtVIkEksWzcidMutL32vEg
26zxEVmAjzJIRzZDzcSL99XzpRPxkw7ADCwHDpJBJ7ONYwWZ8HJkiT8l6ck2rWNo
frJhBl3NXDS5/ThI21CVRsp/fO0MU49+pYqvwWIWT5PpALEvQpGF1+PMqKhHVd3p
atCDRFWfsndOyX8U8g==
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:31:24 2024 by rpki-client on console-ams.rpki-client.org