Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          fF/tNvFYFHHTxjXKoe6YclTuVUYNvbJlDaXoKJKanNc=
Subject key identifier:   8E:76:DE:66:7C:29:A8:1B:31:18:CB:A3:D1:CF:2E:FB:0A:A6:8C:0E
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       018F87EDD0AEA05B857785AC2EEE2C42FC21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 19:01:00 +0000
Manifest this update:     Fri 17 May 2024 19:01:00 +0000
Manifest next update:     Sat 18 May 2024 19:01:00 +0000
Files and hashes:         1: 2SHwIWXh97CgoOB0c8n8CiDagRM.roa (hash: Vagona71ZideQj+GJuWNKNk2ayUes2sfCXXDuD98S+U=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: L580JWYM226Adr3gQ2tgoKxyzG97WXlnI1uKPpTFtR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:d0:ae:a0:5b:85:77:85:ac:2e:ee:2c:42:fc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: May 17 19:01:00 2024 GMT
            Not After : May 18 19:01:00 2024 GMT
        Subject: CN=8e76de667c29a81b3118cba3d1cf2efb0aa68c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:2c:3b:61:b2:29:ad:57:20:67:06:3e:6d:
                    78:7d:4c:aa:50:64:1b:1b:5c:31:65:c6:fd:f7:a4:
                    e8:bc:03:b7:41:0a:cf:0c:3d:11:4d:8e:90:0d:dc:
                    b7:c5:b3:21:70:68:7c:56:b3:33:2b:1e:85:8a:9b:
                    3c:ba:1b:ab:bf:f8:4f:41:76:6a:7a:70:e3:5e:f8:
                    20:7c:eb:2d:8b:00:30:90:90:d1:bf:97:8f:7b:e4:
                    4f:57:74:86:6a:aa:f1:03:0a:f9:04:fa:d4:c6:7d:
                    60:de:23:db:56:58:58:a9:42:5b:38:f2:b9:bc:88:
                    4d:13:76:2a:3e:aa:25:0f:9f:1f:3b:cf:c5:ed:97:
                    d2:13:22:c4:d9:29:33:99:72:6f:4b:57:ce:e1:93:
                    32:72:08:f5:b7:55:9c:37:0c:6f:3e:61:2d:28:54:
                    36:f9:dc:05:78:90:55:ad:ee:ac:72:9f:ac:6b:65:
                    30:9c:36:f2:25:d4:86:ae:3a:62:92:bc:02:c9:7f:
                    cb:2d:64:fe:b8:42:20:26:8a:5b:15:e8:62:77:3d:
                    63:ed:1b:90:bb:44:ae:74:21:72:70:b8:fd:6e:8b:
                    8b:95:56:de:fb:60:6c:94:55:b6:d9:97:7a:55:65:
                    b4:d9:28:50:dd:a5:bc:31:07:dc:45:43:22:fe:11:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:76:DE:66:7C:29:A8:1B:31:18:CB:A3:D1:CF:2E:FB:0A:A6:8C:0E
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a0:35:8f:0b:98:70:38:18:18:64:bf:ce:64:e3:e9:3c:98:
         ef:57:44:6b:f9:ba:4b:eb:90:5e:f5:75:10:f0:63:16:e1:1e:
         bf:ef:3d:4c:9d:0e:7a:3b:f4:7d:5d:74:b3:8a:72:a1:11:24:
         65:ca:9e:7c:ac:7d:69:13:a9:84:e6:72:60:86:d7:8a:1a:0e:
         5c:9d:ac:8c:64:69:16:b1:18:2c:b0:56:52:06:12:f2:79:e1:
         a5:2c:f9:27:bd:ef:96:38:6a:84:92:5d:61:c5:92:8b:ad:17:
         49:84:0c:f4:e3:c2:11:0a:79:43:e9:45:b1:ed:8e:0f:93:73:
         87:ed:68:9e:22:1a:df:62:b2:d5:d4:6d:c0:a6:67:7d:31:2d:
         80:34:23:27:d9:33:2c:e2:bf:84:f3:07:14:db:5d:c2:a7:fc:
         cc:78:35:2e:e8:6d:96:dc:34:f3:f8:4c:fd:bb:fa:e4:3f:fe:
         26:78:e6:07:a4:01:83:e4:c0:0a:91:3c:75:e2:aa:ef:63:04:
         01:9a:bf:dc:ca:c9:8a:a0:d7:3f:db:29:c9:0b:2f:0b:a6:17:
         d6:10:20:b6:85:ca:7d:59:12:f4:47:d0:75:3e:f7:64:c0:11:
         9c:27:16:f3:b6:65:69:95:ed:3c:ac:eb:f1:74:21:33:5b:df:
         8f:bc:00:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7dCuoFuFd4WsLu4sQvwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz
MjA3ZmMwHhcNMjQwNTE3MTkwMTAwWhcNMjQwNTE4MTkwMTAwWjAzMTEwLwYDVQQD
Eyg4ZTc2ZGU2NjdjMjlhODFiMzExOGNiYTNkMWNmMmVmYjBhYTY4YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ecsO2GyKa1XIGcGPm14fUyqUGQb
G1wxZcb996TovAO3QQrPDD0RTY6QDdy3xbMhcGh8VrMzKx6Fips8uhurv/hPQXZq
enDjXvggfOstiwAwkJDRv5ePe+RPV3SGaqrxAwr5BPrUxn1g3iPbVlhYqUJbOPK5
vIhNE3YqPqolD58fO8/F7ZfSEyLE2SkzmXJvS1fO4ZMycgj1t1WcNwxvPmEtKFQ2
+dwFeJBVre6scp+sa2UwnDbyJdSGrjpikrwCyX/LLWT+uEIgJopbFehidz1j7RuQ
u0SudCFycLj9bouLlVbe+2BslFW22Zd6VWW02ShQ3aW8MQfcRUMi/hFDjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI523mZ8KagbMRjLo9HPLvsKpowOMB8GA1UdIwQY
MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt
MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj
LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqA1jwuY
cDgYGGS/zmTj6TyY71dEa/m6S+uQXvV1EPBjFuEev+89TJ0Oejv0fV10s4pyoREk
ZcqefKx9aROphOZyYIbXihoOXJ2sjGRpFrEYLLBWUgYS8nnhpSz5J73vljhqhJJd
YcWSi60XSYQM9OPCEQp5Q+lFse2OD5Nzh+1oniIa32Ky1dRtwKZnfTEtgDQjJ9kz
LOK/hPMHFNtdwqf8zHg1Luhtltw08/hM/bv65D/+JnjmB6QBg+TACpE8deKq72ME
AZq/3MrJiqDXP9spyQsvC6YX1hAgtoXKfVkS9EfQdT73ZMARnCcW87ZlaZXtPKzr
8XQhM1vfj7wAvw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:11:04 2024 by rpki-client on console-ams.rpki-client.org