Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File:                     FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier:          ZqNFz8VL97XICh77+rW7iXbVWGt0b9qDDfT36Vi0BF4=
Subject key identifier:   85:DD:C1:BE:49:4A:22:CE:9A:89:F3:26:1E:FF:49:C8:05:EC:D4:FD
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer:       /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial:       018F4A5900722142868F71B66313747CC011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 20:01:37 +0000
Manifest this update:     Sun 05 May 2024 20:01:37 +0000
Manifest next update:     Mon 06 May 2024 20:01:37 +0000
Files and hashes:         1: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: g6p9/BLgmEb2RgIPdIMd9S7dAVeXQgYXgHyQb7xFl6M=)
                          2: QaNK01qgkMP59jWxAUK4RBd-8RE.roa (hash: oHSyvIG6NxrRS2CgG1uOAZu/jlovJHMoOR541hKOAQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:59:00:72:21:42:86:8f:71:b6:63:13:74:7c:c0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
        Validity
            Not Before: May  5 20:01:37 2024 GMT
            Not After : May  6 20:01:37 2024 GMT
        Subject: CN=85ddc1be494a22ce9a89f3261eff49c805ecd4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:ab:cb:24:0f:dc:f8:7d:00:68:f6:12:55:
                    52:e7:11:97:5e:ed:82:26:4e:39:3c:db:23:68:4d:
                    e5:a7:25:0a:9a:9d:04:9b:4d:68:de:ab:a8:24:2b:
                    7a:38:1f:2e:17:28:bf:2e:34:de:6e:77:21:0c:1a:
                    6e:85:3c:3e:f1:ee:81:8e:63:5e:0d:74:f8:c4:c1:
                    6e:e2:ee:ca:7a:94:69:c2:79:05:d6:f9:da:f1:44:
                    30:cc:7e:17:03:67:47:45:4f:d9:a1:1d:e0:48:e0:
                    14:82:c1:fb:48:aa:5d:0a:e7:12:98:a5:c0:b7:21:
                    89:9c:a7:6b:b1:fc:ec:d9:47:44:c2:ba:78:5e:ca:
                    35:36:8d:a5:04:78:b2:58:11:5a:3c:35:6a:60:7e:
                    9c:1d:80:0a:48:8a:5d:02:81:83:1a:4b:9b:bf:50:
                    65:71:b3:a8:89:f4:a9:b2:23:98:1e:ed:3c:01:dc:
                    1a:1d:b6:4a:d5:ab:cb:42:18:1d:fb:a6:0d:04:3a:
                    eb:ca:fe:fa:cd:ab:3a:37:ba:a7:fc:cb:71:6e:93:
                    c3:21:52:66:b4:57:51:b6:f6:fc:35:a6:ff:eb:38:
                    8f:32:00:9d:9d:70:e6:12:0a:73:bf:1c:d3:2e:71:
                    08:1e:c3:39:8b:4b:9a:76:f4:38:1d:49:ed:0d:06:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DD:C1:BE:49:4A:22:CE:9A:89:F3:26:1E:FF:49:C8:05:EC:D4:FD
            X509v3 Authority Key Identifier:
                keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:53:33:82:c3:ba:5a:c5:b0:02:36:1c:b2:55:ce:51:a0:5b:
         41:32:b7:a3:04:08:d7:12:7a:10:b4:7d:c3:48:8e:d4:12:92:
         d9:56:69:8f:c9:55:bd:0d:51:e6:49:1a:ac:6d:5d:ee:2d:6f:
         ec:d9:08:c2:c4:ac:c4:39:61:f0:2b:07:08:cb:48:a7:bb:2e:
         bb:1d:1d:85:c9:ed:fb:da:96:84:45:c0:69:fc:e4:30:99:8e:
         00:00:f1:fe:78:d9:36:cf:0a:77:60:30:6f:41:16:51:a4:ac:
         a3:d9:57:25:f6:3c:aa:89:28:7d:1a:cf:0c:2e:9a:0a:3d:b6:
         51:04:e1:f8:43:6b:93:dc:f6:dc:fd:47:97:cc:4b:b5:68:28:
         39:16:eb:5c:e5:94:03:fd:24:87:ba:e8:e5:75:04:71:26:6e:
         f5:6e:e2:9a:ea:38:f8:30:2b:86:7b:b4:b5:0f:62:5a:9e:3a:
         fc:bb:89:d0:92:8c:10:4e:6b:6e:34:9a:4e:6f:81:d0:3c:04:
         39:83:93:74:b0:45:6f:b2:3d:ca:82:1c:02:f2:e3:96:bd:87:
         78:1a:72:9e:2f:0e:0b:fa:55:b6:ed:38:4c:6f:14:69:d1:df:
         dc:0f:28:b0:c8:e5:a0:43:3d:3a:4c:d7:39:14:2e:ad:5c:cd:
         be:af:bf:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9KWQByIUKGj3G2YxN0fMARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm
OTlhYTgwHhcNMjQwNTA1MjAwMTM3WhcNMjQwNTA2MjAwMTM3WjAzMTEwLwYDVQQD
Eyg4NWRkYzFiZTQ5NGEyMmNlOWE4OWYzMjYxZWZmNDljODA1ZWNkNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZuryyQP3Ph9AGj2ElVS5xGXXu2C
Jk45PNsjaE3lpyUKmp0Em01o3quoJCt6OB8uFyi/LjTebnchDBpuhTw+8e6BjmNe
DXT4xMFu4u7KepRpwnkF1vna8UQwzH4XA2dHRU/ZoR3gSOAUgsH7SKpdCucSmKXA
tyGJnKdrsfzs2UdEwrp4Xso1No2lBHiyWBFaPDVqYH6cHYAKSIpdAoGDGkubv1Bl
cbOoifSpsiOYHu08AdwaHbZK1avLQhgd+6YNBDrryv76zas6N7qn/MtxbpPDIVJm
tFdRtvb8Nab/6ziPMgCdnXDmEgpzvxzTLnEIHsM5i0uadvQ4HUntDQaABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXdwb5JSiLOmonzJh7/ScgF7NT9MB8GA1UdIwQY
MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt
MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw
LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVMzgsO6
WsWwAjYcslXOUaBbQTK3owQI1xJ6ELR9w0iO1BKS2VZpj8lVvQ1R5kkarG1d7i1v
7NkIwsSsxDlh8CsHCMtIp7suux0dhcnt+9qWhEXAafzkMJmOAADx/njZNs8Kd2Aw
b0EWUaSso9lXJfY8qokofRrPDC6aCj22UQTh+ENrk9z23P1Hl8xLtWgoORbrXOWU
A/0kh7ro5XUEcSZu9W7imuo4+DArhnu0tQ9iWp46/LuJ0JKMEE5rbjSaTm+B0DwE
OYOTdLBFb7I9yoIcAvLjlr2HeBpyni8OC/pVtu04TG8UadHf3A8osMjloEM9OkzX
ORQurVzNvq+/Bg==
-----END CERTIFICATE-----
Generated at Sun May 5 21:27:09 2024 by rpki-client on console-ams.rpki-client.org