Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File:                     XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier:          1UsJtDgaHXN/cTBzBlX3zs3gKBCNwsSDL0i3/F8y5hk=
Subject key identifier:   08:CC:08:C1:55:9F:41:2A:80:A1:2C:0E:CC:03:FA:59:FE:2E:74:9B
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer:       /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial:       018F87B65EE89291B8F7B35C5ECFF21F0033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number:          0161
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: eHtKNusMf9jmzADbNoxWIRYQIPGHaLCGBxaK8ORITtM=)
                          2: pMFqEmwS9VgWePybMMLWIr1p4kc.roa (hash: 1OT5vYEVfSiHh9JyOSUeB0dWDfF32SmYzi1miA33Ql0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5e:e8:92:91:b8:f7:b3:5c:5e:cf:f2:1f:00:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=08cc08c1559f412a80a12c0ecc03fa59fe2e749b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:da:3f:f8:3d:48:23:e0:da:d9:eb:2c:37:
                    c4:a1:41:e9:9e:db:3a:e7:84:b7:60:72:74:f0:99:
                    bf:cb:99:92:7b:9e:71:4c:bc:30:32:85:a2:ec:e1:
                    5e:17:4f:83:b9:87:0d:c6:e9:f1:3e:2c:57:be:a9:
                    07:c4:de:23:92:fe:29:b4:29:77:9c:e1:2b:5b:50:
                    3b:90:5e:6e:80:2e:ee:1b:2b:f0:ab:97:0e:ca:16:
                    7b:c9:68:ec:80:6e:57:da:77:d2:dd:b8:05:55:71:
                    4f:46:fe:78:a1:6a:b4:30:d8:10:99:25:13:78:21:
                    39:5b:0b:52:f2:3e:fe:4f:df:bb:35:33:57:bd:01:
                    15:de:86:9b:49:3d:37:2c:b3:9a:69:78:b1:f2:34:
                    ec:07:a7:b4:37:1a:9e:11:44:3c:30:4f:18:0e:0d:
                    c7:a8:ea:f1:90:14:f0:62:af:d1:02:39:a0:a9:6d:
                    22:e6:c9:20:cf:8b:4a:3e:ab:c2:85:f3:dc:3e:7c:
                    28:ac:16:7d:e3:c5:c7:ba:e6:46:57:e5:b3:df:08:
                    26:c6:09:a5:a9:ef:78:2f:dd:08:1e:69:fe:32:d2:
                    90:e0:c6:43:e8:2f:cb:54:7a:10:3b:85:2f:5e:53:
                    99:17:a7:39:13:b7:1f:65:ad:c7:9e:8b:bd:0d:fb:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CC:08:C1:55:9F:41:2A:80:A1:2C:0E:CC:03:FA:59:FE:2E:74:9B
            X509v3 Authority Key Identifier:
                keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:17:63:38:08:4f:5d:32:fa:37:d5:0d:0e:54:aa:7e:c6:fc:
         a2:70:86:7f:e5:27:6a:3b:d3:26:f3:4c:8b:55:f5:e5:0c:0c:
         30:78:3d:88:88:cd:43:52:11:a8:65:b6:5a:77:26:2e:44:b2:
         61:16:22:bb:42:2f:75:1a:50:20:36:69:e7:b3:5d:e9:7d:94:
         10:da:14:d7:34:4a:f3:61:2f:19:30:a1:38:fa:fa:c2:5b:80:
         a0:da:e2:91:4d:4e:96:71:65:ad:57:aa:1b:52:61:cb:69:12:
         54:7a:b4:05:3c:28:90:92:d6:22:1f:83:4d:19:f9:53:65:d7:
         34:9f:77:cd:68:d6:b6:e1:6b:a9:70:80:41:7f:ff:9a:85:ce:
         d0:74:a4:70:2d:32:1f:4e:65:c5:d2:d5:47:af:94:5a:56:1b:
         75:d7:10:5c:af:3a:0e:a9:39:9a:f4:8d:0a:f6:af:9a:9b:04:
         f1:96:7c:38:04:5c:0f:29:e1:03:e3:7d:5d:89:20:4b:35:36:
         82:d1:03:8a:aa:16:99:6e:eb:1d:75:d9:f5:50:04:51:61:65:
         4e:85:45:1b:74:6f:f2:94:22:07:d5:77:87:e6:37:c2:17:70:
         53:e8:df:af:c3:b5:3c:12:85:53:e3:b6:44:a4:ce:0a:a6:4c:
         18:c9:07:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htl7okpG497NcXs/yHwAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjQwNTE3MTgwMDI2WhcNMjQwNTE4MTgwMDI2WjAzMTEwLwYDVQQD
EygwOGNjMDhjMTU1OWY0MTJhODBhMTJjMGVjYzAzZmE1OWZlMmU3NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w7aP/g9SCPg2tnrLDfEoUHpnts6
54S3YHJ08Jm/y5mSe55xTLwwMoWi7OFeF0+DuYcNxunxPixXvqkHxN4jkv4ptCl3
nOErW1A7kF5ugC7uGyvwq5cOyhZ7yWjsgG5X2nfS3bgFVXFPRv54oWq0MNgQmSUT
eCE5WwtS8j7+T9+7NTNXvQEV3oabST03LLOaaXix8jTsB6e0NxqeEUQ8ME8YDg3H
qOrxkBTwYq/RAjmgqW0i5skgz4tKPqvChfPcPnworBZ948XHuuZGV+Wz3wgmxgml
qe94L90IHmn+MtKQ4MZD6C/LVHoQO4UvXlOZF6c5E7cfZa3Hnou9DfvHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjMCMFVn0EqgKEsDswD+ln+LnSbMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhdjOAhP
XTL6N9UNDlSqfsb8onCGf+UnajvTJvNMi1X15QwMMHg9iIjNQ1IRqGW2WncmLkSy
YRYiu0IvdRpQIDZp57Nd6X2UENoU1zRK82EvGTChOPr6wluAoNrikU1OlnFlrVeq
G1Jhy2kSVHq0BTwokJLWIh+DTRn5U2XXNJ93zWjWtuFrqXCAQX//moXO0HSkcC0y
H05lxdLVR6+UWlYbddcQXK86Dqk5mvSNCvavmpsE8ZZ8OARcDynhA+N9XYkgSzU2
gtEDiqoWmW7rHXXZ9VAEUWFlToVFG3Rv8pQiB9V3h+Y3whdwU+jfr8O1PBKFU+O2
RKTOCqZMGMkHIA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:17:55 2024 by rpki-client on console-fra.rpki-client.org