Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File:                     r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier:          W4gZQskOduPo1py+rP8DTwWbl6pD7JMkykHsIPaGK2Y=
Subject key identifier:   D4:CF:F4:C7:A0:77:EB:6E:2A:35:1E:1A:96:41:CD:6D:02:44:5A:67
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer:       /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial:       018F88244913EA7249E69A76E9A2220F8F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:30 +0000
Manifest this update:     Fri 17 May 2024 20:00:30 +0000
Manifest next update:     Sat 18 May 2024 20:00:30 +0000
Files and hashes:         1: CDj4JHXHOLC8ZcR3cr__wQkXnWQ.roa (hash: JFI6OQZj5u+oHj8xFU1VGSMJuZkQSJlHp+qhy23e1G4=)
                          2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: lItks7iSCKPsQ/KFs+sk9bm/nkV6zj1zCiaWehKoaDE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:49:13:ea:72:49:e6:9a:76:e9:a2:22:0f:8f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
        Validity
            Not Before: May 17 20:00:30 2024 GMT
            Not After : May 18 20:00:30 2024 GMT
        Subject: CN=d4cff4c7a077eb6e2a351e1a9641cd6d02445a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:94:dd:2f:93:49:61:c1:fe:3e:55:16:dd:
                    47:10:54:07:15:0b:0b:37:28:05:d7:8a:16:87:45:
                    9f:4e:3c:10:3c:b7:d4:2b:b1:d8:d2:25:80:e2:8b:
                    d1:b7:dd:4a:df:56:3c:61:31:3f:85:c9:f6:09:3b:
                    92:54:a4:c3:7a:ed:d3:9f:ea:40:9d:dd:b5:b4:26:
                    1a:20:a2:20:dc:a1:a2:d9:dc:63:41:56:3e:36:3a:
                    85:cc:6e:ba:1e:e2:e2:82:80:06:8b:c8:0c:10:77:
                    9a:dc:78:e3:76:a6:3c:04:10:b2:5c:36:a2:f8:23:
                    ea:d6:b4:72:e2:78:f1:39:08:13:56:cc:af:35:7f:
                    1b:fe:12:6b:07:00:53:94:92:2c:c2:81:dd:30:3e:
                    2e:d9:02:b4:f5:74:15:b1:7a:77:89:8f:aa:de:08:
                    96:ff:3c:00:d3:86:48:f3:87:b3:00:4e:bc:b3:a8:
                    c4:79:22:8b:34:9f:50:9c:23:79:bd:fd:ad:34:5e:
                    95:a4:98:2f:d1:4a:ff:3b:50:15:c1:38:7a:bc:d2:
                    58:eb:dc:23:67:ea:98:6d:75:d4:af:6c:d9:f1:82:
                    64:c1:f2:4b:f9:0d:10:e0:68:00:85:b1:e7:30:85:
                    56:84:ba:bc:4b:e4:57:86:90:a5:04:77:47:f8:3b:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CF:F4:C7:A0:77:EB:6E:2A:35:1E:1A:96:41:CD:6D:02:44:5A:67
            X509v3 Authority Key Identifier:
                keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:41:4e:3a:fc:11:ba:b4:05:35:d4:2d:09:f5:f9:4a:60:
         02:5e:8b:18:fe:8e:3c:eb:91:ae:d2:ce:c2:77:c4:b6:a5:6e:
         8d:64:cc:8d:35:22:3a:c5:f8:8e:38:74:88:0a:56:60:a1:82:
         bd:96:34:eb:bb:71:49:15:5c:e7:7b:3f:03:1a:52:1b:17:a2:
         d0:c1:7f:f3:c9:33:db:93:08:7e:e4:8f:c7:bc:5f:52:b5:fa:
         ef:c5:e7:4f:dd:6b:9e:cc:99:59:33:9b:13:1f:84:1d:c2:ed:
         bd:8f:05:65:93:23:95:47:4f:69:73:a1:4a:93:10:b7:fd:ae:
         fb:43:71:73:8a:a7:bc:45:f6:63:7f:fa:9b:62:6c:1c:41:a9:
         7a:e7:af:7c:fe:43:d9:f8:d8:d5:84:d8:d1:eb:99:72:6a:10:
         98:00:86:37:42:7d:1c:f9:ad:34:1a:e2:2d:b8:74:1f:e1:ab:
         00:2d:8e:4b:8c:aa:6f:b3:13:7d:d2:07:e6:20:70:6e:43:18:
         4a:0c:90:02:7f:ae:28:9f:c4:c2:07:19:b2:44:e7:be:64:86:
         59:5a:95:73:3f:e0:9b:9d:1f:78:24:03:cf:81:b9:a1:3b:76:
         60:bb:5a:12:67:e8:01:c5:00:c1:85:41:b9:47:c0:52:fd:24:
         3a:f7:2f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJEkT6nJJ5pp26aIiD49JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjNhNDdhY2RiYThlYzFjZDg1ZDRkNzlmMzZiMzViNjk4
ZTVmODkwHhcNMjQwNTE3MjAwMDMwWhcNMjQwNTE4MjAwMDMwWjAzMTEwLwYDVQQD
EyhkNGNmZjRjN2EwNzdlYjZlMmEzNTFlMWE5NjQxY2Q2ZDAyNDQ1YTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/mU3S+TSWHB/j5VFt1HEFQHFQsL
NygF14oWh0WfTjwQPLfUK7HY0iWA4ovRt91K31Y8YTE/hcn2CTuSVKTDeu3Tn+pA
nd21tCYaIKIg3KGi2dxjQVY+NjqFzG66HuLigoAGi8gMEHea3HjjdqY8BBCyXDai
+CPq1rRy4njxOQgTVsyvNX8b/hJrBwBTlJIswoHdMD4u2QK09XQVsXp3iY+q3giW
/zwA04ZI84ezAE68s6jEeSKLNJ9QnCN5vf2tNF6VpJgv0Ur/O1AVwTh6vNJY69wj
Z+qYbXXUr2zZ8YJkwfJL+Q0Q4GgAhbHnMIVWhLq8S+RXhpClBHdH+DuWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTP9Megd+tuKjUeGpZBzW0CRFpnMB8GA1UdIwQY
MBaAFK9jpHrNuo7BzYXU1582s1tpjl+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQt
ZmUzZTMxOGNhZTljLzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQtZmUzZTMxOGNhZTlj
LzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn5BTjr8
Ebq0BTXULQn1+UpgAl6LGP6OPOuRrtLOwnfEtqVujWTMjTUiOsX4jjh0iApWYKGC
vZY067txSRVc53s/AxpSGxei0MF/88kz25MIfuSPx7xfUrX678XnT91rnsyZWTOb
Ex+EHcLtvY8FZZMjlUdPaXOhSpMQt/2u+0Nxc4qnvEX2Y3/6m2JsHEGpeuevfP5D
2fjY1YTY0euZcmoQmACGN0J9HPmtNBriLbh0H+GrAC2OS4yqb7MTfdIH5iBwbkMY
SgyQAn+uKJ/EwgcZskTnvmSGWVqVcz/gm50feCQDz4G5oTt2YLtaEmfoAcUAwYVB
uUfAUv0kOvcvaQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:01:49 2024 by rpki-client on console-fra.rpki-client.org