Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          krVf+htEbSJCZ9saGJUJdv+KSgpnNpr9y7xIqIguKZY=
Subject key identifier:   DF:CF:A3:AE:70:51:CC:D3:39:A7:14:2B:DA:52:C9:9E:B6:60:17:A8
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       018F8748BCAC8B9193A7AF1FF5EDCBAC3158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: 1-UngzwW9tP7x2ktKq_2hsaQk5qY.roa (hash: Mi5IDGOc+4ZZB0HrZuwzWZ1oNvQjOOTLLaOzsDZSgb8=)
                          2: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: /MiEyJmoIffKdLxzvqhKBEz/A5r6UoV1xvEj0vghWnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bc:ac:8b:91:93:a7:af:1f:f5:ed:cb:ac:31:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=dfcfa3ae7051ccd339a7142bda52c99eb66017a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d6:2b:1a:4c:63:45:85:cf:83:a9:8a:f2:0a:
                    1b:20:61:2f:e1:5b:60:c0:fd:ee:f1:95:b0:aa:02:
                    f9:b1:1e:52:7c:89:ea:1b:57:aa:78:92:40:ca:da:
                    60:fa:96:16:e6:bb:e3:e8:8e:6c:46:53:2c:ba:7a:
                    4e:54:cc:ff:e8:28:8d:c3:42:a8:ef:32:a5:89:a3:
                    39:d7:ef:da:50:35:72:46:f6:3b:ce:e0:de:f5:9d:
                    55:c4:c7:41:2b:0c:eb:04:57:15:46:65:bc:80:8a:
                    18:a1:bd:5a:b1:eb:aa:ca:59:78:bd:2f:af:95:b3:
                    83:7f:9d:17:2f:a6:ce:88:71:9a:43:b6:91:7d:8f:
                    2b:87:8d:8f:f3:4e:59:28:ee:8f:c3:5b:3d:ea:04:
                    38:2f:67:ad:a6:18:3a:ab:0b:d0:1b:21:c4:68:f6:
                    57:50:41:f1:73:54:ad:6e:4c:17:c9:89:db:d7:56:
                    73:58:9c:71:fc:f8:e1:d4:a7:4c:d6:7b:67:33:60:
                    b5:50:f9:ec:c1:34:36:ef:5b:38:6e:07:c0:ea:fe:
                    62:a5:dd:45:86:d6:48:f3:6b:68:74:be:b3:d6:1c:
                    1c:c9:e6:30:02:a1:32:8a:29:f5:c9:11:f7:54:26:
                    81:ee:a2:3c:45:db:80:d8:00:04:4e:35:c8:0f:31:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CF:A3:AE:70:51:CC:D3:39:A7:14:2B:DA:52:C9:9E:B6:60:17:A8
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:65:ae:bc:38:73:42:d5:08:f3:cb:2e:15:31:18:5f:bf:
         10:b7:c4:98:cf:a6:0b:f4:84:fc:fd:af:d1:d6:e3:c3:90:cc:
         22:64:74:50:f9:35:30:3e:23:b7:ff:06:ca:89:0f:c0:5a:ad:
         8a:72:45:93:73:6c:91:0c:20:4f:5c:97:d5:c7:66:e9:29:81:
         69:22:bd:a8:d3:af:b2:a1:49:ac:50:41:de:6d:56:a8:de:e3:
         7a:db:4e:7f:86:a4:2e:3f:ef:06:7f:bd:a3:0f:29:80:fe:e9:
         f6:41:8f:63:38:3b:cc:85:70:3f:fb:dc:bc:60:33:06:8e:18:
         bc:3a:6d:ca:ba:f5:4f:ab:64:3d:00:c6:39:e2:de:e4:9b:b9:
         d9:4a:ad:49:56:46:e2:10:fc:ac:8b:fd:b5:fe:03:13:67:c7:
         cc:39:7b:0e:62:02:bb:dd:20:35:7f:cb:f4:f0:ce:72:98:85:
         2d:04:42:b4:09:97:70:7a:e2:40:26:7b:31:d3:93:42:8c:28:
         08:e9:16:8c:e5:bf:08:bc:b7:0c:59:d2:20:88:e8:8f:51:69:
         2f:aa:1b:62:7f:c0:d7:01:5c:cc:0c:26:81:eb:ed:eb:19:f1:
         0e:ff:d9:e5:d7:e2:e5:fb:e5:e0:42:49:bc:b1:a7:3c:b4:81:
         c0:ca:91:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSLysi5GTp68f9e3LrDFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4
ZTJiYWIwHhcNMjQwNTE3MTYwMDQyWhcNMjQwNTE4MTYwMDQyWjAzMTEwLwYDVQQD
EyhkZmNmYTNhZTcwNTFjY2QzMzlhNzE0MmJkYTUyYzk5ZWI2NjAxN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltYrGkxjRYXPg6mK8gobIGEv4Vtg
wP3u8ZWwqgL5sR5SfInqG1eqeJJAytpg+pYW5rvj6I5sRlMsunpOVMz/6CiNw0Ko
7zKliaM51+/aUDVyRvY7zuDe9Z1VxMdBKwzrBFcVRmW8gIoYob1aseuqyll4vS+v
lbODf50XL6bOiHGaQ7aRfY8rh42P805ZKO6Pw1s96gQ4L2etphg6qwvQGyHEaPZX
UEHxc1StbkwXyYnb11ZzWJxx/Pjh1KdM1ntnM2C1UPnswTQ271s4bgfA6v5ipd1F
htZI82todL6z1hwcyeYwAqEyiin1yRH3VCaB7qI8RduA2AAETjXIDzHDyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/Po65wUczTOacUK9pSyZ62YBeoMB8GA1UdIwQY
MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt
NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx
LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbatlrrw4
c0LVCPPLLhUxGF+/ELfEmM+mC/SE/P2v0dbjw5DMImR0UPk1MD4jt/8GyokPwFqt
inJFk3NskQwgT1yX1cdm6SmBaSK9qNOvsqFJrFBB3m1WqN7jettOf4akLj/vBn+9
ow8pgP7p9kGPYzg7zIVwP/vcvGAzBo4YvDptyrr1T6tkPQDGOeLe5Ju52UqtSVZG
4hD8rIv9tf4DE2fHzDl7DmICu90gNX/L9PDOcpiFLQRCtAmXcHriQCZ7MdOTQowo
COkWjOW/CLy3DFnSIIjoj1FpL6obYn/A1wFczAwmgevt6xnxDv/Z5dfi5fvl4EJJ
vLGnPLSBwMqR+w==
-----END CERTIFICATE-----
Generated at Fri May 17 18:40:41 2024 by rpki-client on console-ams.rpki-client.org