Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          ChdhrXyRhhgA2me06RWs2ULTUz57aLvWU01GB4uBs6E=
Subject key identifier:   93:45:33:DC:A4:C1:F3:6F:5E:59:C5:23:C3:A1:35:79:A8:99:EC:13
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       018F5D038B419AF60076C81FFAC4227DE02E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          1170
Signing time:             Thu 09 May 2024 11:01:04 +0000
Manifest this update:     Thu 09 May 2024 11:01:04 +0000
Manifest next update:     Fri 10 May 2024 11:01:04 +0000
Files and hashes:         1: 7dnCzTxsPRECBdbLH-hVl5yrUK4.roa (hash: cnxhHM+pxtkasSIsZ5aLAd+LIKRNNOyt9IQGVg0QJ/8=)
                          2: GR00k5QmmfS0cOUClVnK6RS66s8.roa (hash: wElYhpa1RlJTgvoyDSQXxyiexohiV/1r6XO0SK8c8es=)
                          3: MpOI5w8DL5opeoCQN4SZ8wjnVts.roa (hash: tlbHRL/hpJq36QXY99yAxnl4FKGJfD0J7XuKeK1WloY=)
                          4: Omc-NzBN2dxYiMi16TuLg7hzefA.roa (hash: bzBYxl8ZCmgzPMyFMfqjqhagIIhX/nzIxcgT7fp00Hs=)
                          5: _DL0HmnT9m_SEQxVLnEWxe4mGd4.roa (hash: 0mvIqpr8dTb2jLMm94cIJZ+qGtjDhS4PvdLfxdW8krU=)
                          6: eo1ldKAOybCByJyYx1I9BpnwkGw.roa (hash: 4TBhc5ntwvM3jtcJYB/UDidgCV6I7Ozi7EUYCIwg31c=)
                          7: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: ZeyDx3HUGeoEQPS4r7dr2lSX2/6HP+eeiIgzcx4IXvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 08:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:03:8b:41:9a:f6:00:76:c8:1f:fa:c4:22:7d:e0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: May  9 11:01:04 2024 GMT
            Not After : May 10 11:01:04 2024 GMT
        Subject: CN=934533dca4c1f36f5e59c523c3a13579a899ec13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:7d:bc:44:cc:ab:e5:81:93:f5:1d:3b:49:
                    25:38:0e:22:ea:0f:ec:19:a4:1d:0b:3c:86:c5:e2:
                    96:03:4f:3c:89:43:4e:17:c0:4d:16:f4:65:cd:47:
                    7b:5e:81:18:2d:37:87:31:2f:2b:21:ed:0a:56:9c:
                    0d:cd:fd:8f:54:4d:68:f8:3d:10:a9:c6:7f:41:fb:
                    3d:84:0e:2e:aa:89:54:7d:00:96:06:32:68:63:bd:
                    f0:79:8a:57:e0:1b:fa:3e:af:91:c8:03:8b:d0:7d:
                    ae:89:ef:dc:c1:a9:9c:56:f7:2b:58:04:09:a9:3b:
                    84:60:7c:99:20:a1:91:f9:e3:62:35:bb:ad:25:aa:
                    b6:36:be:ae:71:60:cf:1a:e0:13:6a:3b:e1:1f:ad:
                    a2:da:43:8c:a2:4a:8d:e9:e4:81:b6:2e:e3:b1:5e:
                    7d:c7:60:a3:d0:d0:fd:38:1a:4f:f8:87:16:55:a4:
                    dc:1a:47:f7:27:76:ce:98:dd:8a:1f:37:6e:97:51:
                    64:e3:52:33:ac:a5:de:67:2d:aa:41:77:f8:14:1f:
                    65:10:d7:7e:7c:dc:c5:b8:ab:87:31:dd:d0:86:03:
                    79:47:cc:9b:14:5f:e6:0d:ac:3e:c3:33:75:77:13:
                    fd:ad:22:d4:90:7d:23:e4:63:8a:cc:6e:65:87:54:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:45:33:DC:A4:C1:F3:6F:5E:59:C5:23:C3:A1:35:79:A8:99:EC:13
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:e3:64:a6:77:00:8a:82:00:05:35:45:16:34:6a:05:de:
         d9:87:76:9a:8a:d4:4e:32:80:1e:8b:42:15:0c:d1:10:69:3f:
         d7:37:a9:40:27:77:c6:ab:5a:d9:3a:0a:56:2d:3a:23:60:65:
         dd:9d:ed:6c:0e:44:76:82:a5:21:4e:3e:ad:ef:bd:81:3e:ea:
         5f:62:bb:b1:43:a1:a0:3c:73:7d:50:d3:11:18:da:bf:a1:3b:
         91:da:7e:c4:98:e3:9a:d3:24:59:07:34:d0:d7:cd:35:97:64:
         fd:85:07:11:fa:f6:37:de:46:46:ef:19:80:ca:d7:a8:47:1c:
         33:c8:7d:15:5b:63:b6:54:06:eb:ec:e3:c6:14:64:b9:db:e3:
         77:21:88:cb:df:a5:e6:ad:15:64:50:ca:e2:3b:43:4c:5c:98:
         24:81:ec:d2:a5:4e:b3:f5:c8:80:a9:76:e5:f5:b6:2c:3d:50:
         3a:92:57:32:32:c4:97:bf:81:94:b8:52:c4:12:64:41:03:c9:
         8b:d7:1e:40:22:15:e3:46:48:ba:6a:ca:57:ec:30:07:fe:84:
         ff:b8:38:9e:ee:73:41:b6:d9:c7:15:a0:7f:10:69:2a:7b:23:
         31:b9:29:e5:31:50:d6:f4:fd:e0:20:07:ae:7e:90:94:b9:cc:
         30:91:f5:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9dA4tBmvYAdsgf+sQifeAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjQwNTA5MTEwMTA0WhcNMjQwNTEwMTEwMTA0WjAzMTEwLwYDVQQD
Eyg5MzQ1MzNkY2E0YzFmMzZmNWU1OWM1MjNjM2ExMzU3OWE4OTllYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4x9vETMq+WBk/UdO0klOA4i6g/s
GaQdCzyGxeKWA088iUNOF8BNFvRlzUd7XoEYLTeHMS8rIe0KVpwNzf2PVE1o+D0Q
qcZ/Qfs9hA4uqolUfQCWBjJoY73weYpX4Bv6Pq+RyAOL0H2uie/cwamcVvcrWAQJ
qTuEYHyZIKGR+eNiNbutJaq2Nr6ucWDPGuATajvhH62i2kOMokqN6eSBti7jsV59
x2Cj0ND9OBpP+IcWVaTcGkf3J3bOmN2KHzdul1Fk41IzrKXeZy2qQXf4FB9lENd+
fNzFuKuHMd3QhgN5R8ybFF/mDaw+wzN1dxP9rSLUkH0j5GOKzG5lh1QmpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNFM9ykwfNvXlnFI8OhNXmomewTMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4jjZKZ3
AIqCAAU1RRY0agXe2Yd2morUTjKAHotCFQzREGk/1zepQCd3xqta2ToKVi06I2Bl
3Z3tbA5EdoKlIU4+re+9gT7qX2K7sUOhoDxzfVDTERjav6E7kdp+xJjjmtMkWQc0
0NfNNZdk/YUHEfr2N95GRu8ZgMrXqEccM8h9FVtjtlQG6+zjxhRkudvjdyGIy9+l
5q0VZFDK4jtDTFyYJIHs0qVOs/XIgKl25fW2LD1QOpJXMjLEl7+BlLhSxBJkQQPJ
i9ceQCIV40ZIumrKV+wwB/6E/7g4nu5zQbbZxxWgfxBpKnsjMbkp5TFQ1vT94CAH
rn6QlLnMMJH1Cg==
-----END CERTIFICATE-----
Generated at Thu May 9 12:53:12 2024 by rpki-client on console-ams.rpki-client.org