Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File:                     aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier:          VLu6jK31hKWBqpH5ofna+aCL/ip+JL/8hJe97f41CzY=
Subject key identifier:   5F:F3:68:76:BD:F3:17:6F:16:32:C6:1C:68:C9:B0:50:DD:90:93:4B
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer:       /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial:       018F87496BCB75CBD354BEB8346379719D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:26 +0000
Manifest this update:     Fri 17 May 2024 16:01:26 +0000
Manifest next update:     Sat 18 May 2024 16:01:26 +0000
Files and hashes:         1: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: OHGLwXhBP3zMDzkxzPHuiLug7j2nlLvg4CB/Bf+k/EU=)
                          2: jF6Y0DhjziHiqezXQNvQDa1qMa8.roa (hash: A2waES0KvP7qtcj1EpOO7bDucyE3UIuT3TCAoR+G8oo=)
                          3: zPUU7PCg0t844Q-9WRi7WkAfL9E.roa (hash: 6XwvGSLpTu7H6isidOtDLywpnVdK6vK++oW/2HA/TcA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:6b:cb:75:cb:d3:54:be:b8:34:63:79:71:9d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
        Validity
            Not Before: May 17 16:01:26 2024 GMT
            Not After : May 18 16:01:26 2024 GMT
        Subject: CN=5ff36876bdf3176f1632c61c68c9b050dd90934b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:a4:77:f3:c0:ba:3c:48:bf:bb:04:25:94:
                    d5:6f:49:7d:14:4b:cb:cf:29:84:e6:46:71:c6:ca:
                    35:63:30:80:22:34:11:4a:6a:51:13:56:8c:72:7d:
                    be:24:52:10:ad:39:12:97:e6:fd:cd:d7:55:3d:eb:
                    dd:4f:f8:e7:73:df:33:98:31:d0:d5:c1:d0:b2:42:
                    ef:9a:29:4d:85:af:24:69:8c:56:e8:e8:da:63:b6:
                    9e:29:d3:a0:86:98:a0:b6:53:22:f9:3c:ab:62:8b:
                    31:23:94:f4:c3:43:cb:80:be:20:67:3a:48:88:b7:
                    0d:6c:c1:93:33:15:38:22:50:f2:8f:84:e1:34:ac:
                    26:bb:0c:ce:d4:9d:1c:ff:39:59:da:f0:89:57:02:
                    86:43:c3:bf:4a:9f:8e:14:fe:50:44:22:ff:d7:ba:
                    8d:3e:b2:cf:0d:3b:88:34:a2:07:96:0e:c4:03:3b:
                    fb:74:89:9c:6b:29:35:b7:35:e4:d0:02:43:a8:9c:
                    27:e4:4b:53:c6:69:b7:f7:68:94:73:d1:48:bb:12:
                    24:b0:ae:4e:30:d7:99:4f:81:c8:ac:a2:bd:49:d4:
                    62:7a:67:e3:5c:9f:21:0a:b1:3e:f1:37:75:18:23:
                    38:b8:50:7d:3f:a2:e7:cf:12:97:2b:5a:8b:7a:0a:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:68:76:BD:F3:17:6F:16:32:C6:1C:68:C9:B0:50:DD:90:93:4B
            X509v3 Authority Key Identifier:
                keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:9d:d2:2f:d1:f9:fe:f7:fc:25:fa:27:c0:dd:65:01:5d:d2:
         53:59:d8:24:7e:36:cb:fe:e3:21:0f:81:1a:b5:11:e3:02:4d:
         f0:98:f6:e5:a8:5a:8e:54:da:1b:d3:bc:61:5f:3c:59:e8:97:
         a9:ca:11:84:04:35:cb:e4:1e:91:77:f0:0b:5b:8d:4e:b9:bf:
         51:55:59:4a:2f:ed:71:a4:24:f7:66:02:74:17:ef:f5:1f:9a:
         b9:ab:de:a6:03:0b:7e:95:90:0a:d8:90:b7:7b:0c:ba:f8:3e:
         a6:41:04:a2:3d:1d:bd:16:97:3c:4a:69:0d:a8:e4:c4:85:ea:
         26:94:85:a6:de:4e:06:ac:11:82:15:52:64:c6:b5:fd:c2:68:
         18:07:8b:4c:03:7e:69:ec:78:c5:18:d7:6c:fc:32:7d:a2:99:
         46:2d:fd:8f:0a:13:ad:07:73:36:05:25:59:28:11:4d:a4:14:
         6e:26:d9:75:cd:a2:8b:70:13:af:c6:6f:df:da:bf:a9:14:ca:
         19:a4:0e:4a:04:65:b7:7f:c7:fe:a4:17:72:d6:da:c6:6f:0e:
         4c:62:19:50:0a:6b:38:fd:e2:7e:86:f0:e5:88:70:14:af:4c:
         a7:ba:a5:44:2b:1f:d6:7f:bd:01:be:69:c3:5a:45:66:60:3e:
         fe:97:45:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWvLdcvTVL64NGN5cZ2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTZmOWUzZTI2MjJhNzgxNWEyNTllNThkNTUyNDM5YzI1
NWEzMWIwHhcNMjQwNTE3MTYwMTI2WhcNMjQwNTE4MTYwMTI2WjAzMTEwLwYDVQQD
Eyg1ZmYzNjg3NmJkZjMxNzZmMTYzMmM2MWM2OGM5YjA1MGRkOTA5MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsqkd/PAujxIv7sEJZTVb0l9FEvL
zymE5kZxxso1YzCAIjQRSmpRE1aMcn2+JFIQrTkSl+b9zddVPevdT/jnc98zmDHQ
1cHQskLvmilNha8kaYxW6OjaY7aeKdOghpigtlMi+TyrYosxI5T0w0PLgL4gZzpI
iLcNbMGTMxU4IlDyj4ThNKwmuwzO1J0c/zlZ2vCJVwKGQ8O/Sp+OFP5QRCL/17qN
PrLPDTuINKIHlg7EAzv7dImcayk1tzXk0AJDqJwn5EtTxmm392iUc9FIuxIksK5O
MNeZT4HIrKK9SdRiemfjXJ8hCrE+8Td1GCM4uFB9P6LnzxKXK1qLegrLkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/zaHa98xdvFjLGHGjJsFDdkJNLMB8GA1UdIwQY
MBaAFGqm+ePiYip4FaJZ5Y1VJDnCVaMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4Mzct
YzUwNzM0ZDAyMGYwLzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4MzctYzUwNzM0ZDAyMGYw
LzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZ3SL9H5
/vf8JfonwN1lAV3SU1nYJH42y/7jIQ+BGrUR4wJN8Jj25ahajlTaG9O8YV88WeiX
qcoRhAQ1y+QekXfwC1uNTrm/UVVZSi/tcaQk92YCdBfv9R+auavepgMLfpWQCtiQ
t3sMuvg+pkEEoj0dvRaXPEppDajkxIXqJpSFpt5OBqwRghVSZMa1/cJoGAeLTAN+
aex4xRjXbPwyfaKZRi39jwoTrQdzNgUlWSgRTaQUbibZdc2ii3ATr8Zv39q/qRTK
GaQOSgRlt3/H/qQXctbaxm8OTGIZUAprOP3ifobw5YhwFK9Mp7qlRCsf1n+9Ab5p
w1pFZmA+/pdFMQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:50 2024 by rpki-client on console-fra.rpki-client.org