Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File:                     inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier:          NXnJjlV9NETv48avaWcU/nso0N2KbTNg8hxKca2zRDI=
Subject key identifier:   A8:62:C1:3C:3B:F7:3E:11:70:66:94:56:C9:D8:E9:09:1A:52:43:11
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       018F8749A3AA1613EFA8ACEA76EF8D2E3E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:01:41 +0000
Manifest this update:     Fri 17 May 2024 16:01:41 +0000
Manifest next update:     Sat 18 May 2024 16:01:41 +0000
Files and hashes:         1: C2Es_D6HcPyN9dW5tzAiNkpEQhw.roa (hash: Q+eppCqn6eYRsytF26UHKt/KdtgO6iHCAM31ZHmhgIs=)
                          2: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: 4gUNV/s6GyjDLZOkSKrDAw7xlBtYu8XkLKfKSgXWbj8=)
                          3: n-aqSwR2X_mJ8nj-vsH7vY4C9Io.roa (hash: iUJbq6AYapPSO596+YyM8vKarq6LJaBYFjg++suodzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a3:aa:16:13:ef:a8:ac:ea:76:ef:8d:2e:3e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: May 17 16:01:41 2024 GMT
            Not After : May 18 16:01:41 2024 GMT
        Subject: CN=a862c13c3bf73e1170669456c9d8e9091a524311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:83:59:8b:a2:c0:54:f1:da:b8:09:10:7a:
                    fb:df:45:ee:3b:71:ba:9b:b7:97:4e:6b:af:3d:d3:
                    f1:8d:40:9f:eb:0c:55:5c:58:27:56:1f:26:51:08:
                    58:c6:db:e4:e3:bd:4e:05:c7:6d:0c:82:15:76:21:
                    33:d9:d1:3a:3a:b9:f7:01:ce:70:b8:a1:a6:93:a1:
                    23:ed:32:43:0c:da:de:b3:f8:3f:6c:4c:8b:2b:1d:
                    2e:28:23:c2:7a:0f:10:94:3a:83:1a:ec:be:6a:37:
                    e0:33:b4:d2:e4:92:66:57:10:87:76:01:41:be:33:
                    be:4c:8f:b5:a6:b6:33:7f:86:2c:5c:f4:ee:be:43:
                    72:57:81:bb:c9:4a:1b:7d:84:a9:ff:28:49:46:ee:
                    ac:be:4d:80:39:87:57:85:ce:32:d8:1a:17:87:dc:
                    d5:ff:63:13:bc:79:11:95:db:60:05:df:6d:ae:6b:
                    71:57:99:5a:34:a4:ea:a3:3b:7a:02:76:b0:b0:99:
                    fd:88:e6:10:01:16:24:53:1f:2c:bb:9b:cb:98:53:
                    0e:ea:5f:29:c3:4c:33:d4:4b:54:53:23:7d:f2:93:
                    ea:61:cb:4f:9e:21:0c:38:37:a9:da:4b:5a:72:af:
                    73:8a:2e:b7:ca:5c:dd:df:fc:a6:35:31:83:3b:e9:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:C1:3C:3B:F7:3E:11:70:66:94:56:C9:D8:E9:09:1A:52:43:11
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:a5:de:2c:45:9e:64:b6:32:ff:fc:88:77:7e:d4:52:ed:
         3f:9d:0c:38:3d:01:ec:7e:bd:4b:9a:1a:7d:ab:d4:24:fe:01:
         72:f2:64:7b:24:bc:81:56:74:88:22:93:f8:e7:83:d2:03:62:
         9b:96:22:f0:10:38:34:ad:e7:08:30:33:62:15:03:0f:73:51:
         c7:d6:ba:22:f9:08:de:f4:8f:94:ad:8f:1f:02:34:7f:f7:84:
         a7:29:90:87:6c:3b:20:47:93:b1:ad:12:42:d3:38:d1:35:57:
         56:89:35:c7:f1:e8:9b:a5:6a:75:3b:76:61:08:c3:ce:b4:50:
         b3:45:aa:a9:06:6e:e4:0e:0e:93:28:9c:43:71:f2:95:60:fd:
         85:a9:cd:89:04:5a:7a:37:2d:c1:06:66:34:9a:51:8c:e6:d9:
         d8:9d:4d:4d:58:b1:d9:15:f1:d0:33:53:2c:3f:3f:b2:a0:41:
         61:6b:59:b1:cb:84:32:23:85:7f:a9:be:0e:9e:0b:01:0d:04:
         42:27:80:a5:67:be:c7:b2:6a:28:04:c7:62:7f:f1:b7:12:dd:
         28:13:92:3f:f0:63:85:63:78:e7:17:ed:06:98:c0:76:75:12:
         ad:e7:17:28:71:40:3f:00:d8:3d:83:d3:54:f6:6b:0e:c8:f8:
         ce:e1:18:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSaOqFhPvqKzqdu+NLj4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjQwNTE3MTYwMTQxWhcNMjQwNTE4MTYwMTQxWjAzMTEwLwYDVQQD
EyhhODYyYzEzYzNiZjczZTExNzA2Njk0NTZjOWQ4ZTkwOTFhNTI0MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlmDWYuiwFTx2rgJEHr730XuO3G6
m7eXTmuvPdPxjUCf6wxVXFgnVh8mUQhYxtvk471OBcdtDIIVdiEz2dE6Orn3Ac5w
uKGmk6Ej7TJDDNres/g/bEyLKx0uKCPCeg8QlDqDGuy+ajfgM7TS5JJmVxCHdgFB
vjO+TI+1prYzf4YsXPTuvkNyV4G7yUobfYSp/yhJRu6svk2AOYdXhc4y2BoXh9zV
/2MTvHkRldtgBd9trmtxV5laNKTqozt6AnawsJn9iOYQARYkUx8su5vLmFMO6l8p
w0wz1EtUUyN98pPqYctPniEMODep2ktacq9zii63ylzd3/ymNTGDO+mkqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhiwTw79z4RcGaUVsnY6QkaUkMRMB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwql3ixF
nmS2Mv/8iHd+1FLtP50MOD0B7H69S5oafavUJP4BcvJkeyS8gVZ0iCKT+OeD0gNi
m5Yi8BA4NK3nCDAzYhUDD3NRx9a6IvkI3vSPlK2PHwI0f/eEpymQh2w7IEeTsa0S
QtM40TVXVok1x/Hom6VqdTt2YQjDzrRQs0WqqQZu5A4OkyicQ3HylWD9hanNiQRa
ejctwQZmNJpRjObZ2J1NTVix2RXx0DNTLD8/sqBBYWtZscuEMiOFf6m+Dp4LAQ0E
QieApWe+x7JqKATHYn/xtxLdKBOSP/BjhWN45xftBpjAdnUSrecXKHFAPwDYPYPT
VPZrDsj4zuEYPg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:26:48 2024 by rpki-client on console-ams.rpki-client.org