Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File:                     yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier:          b9Tw3/8SbNPqDJPfscETxuGOyRHJPlMLNWUJFngNLe8=
Subject key identifier:   73:44:C1:E3:1B:A7:87:D8:3A:EC:06:A3:93:01:A7:0B:2F:99:ED:78
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer:       /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial:       018F87ED2A68675F335218502CC2848AD045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:18 +0000
Manifest this update:     Fri 17 May 2024 19:00:18 +0000
Manifest next update:     Sat 18 May 2024 19:00:18 +0000
Files and hashes:         1: T_Tu6KY40dBrqR0_mCRthTcTMBk.roa (hash: q7/RuNyibOD07nXTT3lC1j4xnzg46C08AoS1caAYeGw=)
                          2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: 9zZ38afzOHXl3Bzk1NIzy5iFiT6rnJ8X2p556cn3yCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2a:68:67:5f:33:52:18:50:2c:c2:84:8a:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
        Validity
            Not Before: May 17 19:00:18 2024 GMT
            Not After : May 18 19:00:18 2024 GMT
        Subject: CN=7344c1e31ba787d83aec06a39301a70b2f99ed78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:14:f6:8e:19:ce:39:cc:af:37:7a:3f:5e:
                    4f:55:ee:0c:d4:1c:4d:e9:3a:5f:e3:96:be:ec:1d:
                    d0:a1:1a:d3:82:ab:c7:6a:ea:e0:df:2f:39:eb:a0:
                    48:81:14:9d:4c:21:f9:a9:68:db:83:4f:b0:af:15:
                    82:8a:44:59:10:fc:b6:f9:7c:5f:33:4b:40:57:fe:
                    47:17:56:fa:0c:12:22:c1:b1:dd:4a:d2:f5:73:54:
                    0e:56:62:fb:00:10:f1:23:02:af:d1:da:a8:7b:81:
                    cf:d7:c1:4c:be:94:87:8a:a3:ac:4f:f8:cf:b4:c1:
                    00:9b:21:aa:81:05:bc:71:70:db:9d:0f:81:2d:77:
                    a4:25:00:40:15:b6:65:5c:b8:d5:9a:27:e9:04:61:
                    71:00:09:a9:62:2d:37:02:66:e1:57:72:58:2e:43:
                    ed:5f:a2:84:33:0e:93:bf:2f:b2:b5:79:43:da:6e:
                    70:07:d7:09:ba:1e:b7:33:43:25:b1:6c:fa:79:2a:
                    7a:f4:2d:af:5c:ad:bc:60:7b:8b:e2:8b:d9:cc:0d:
                    73:75:27:7f:6e:d9:61:00:bc:02:2c:1b:ec:7b:5c:
                    d9:3b:84:64:62:33:6e:d6:95:31:88:ad:47:ad:a5:
                    92:21:68:42:09:f8:0d:57:2b:86:43:d2:b0:03:c1:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:C1:E3:1B:A7:87:D8:3A:EC:06:A3:93:01:A7:0B:2F:99:ED:78
            X509v3 Authority Key Identifier:
                keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e4:50:77:47:ee:40:b5:7c:a9:98:2c:a6:86:3c:0d:48:af:
         75:eb:fa:ec:4e:b7:54:f6:15:6c:3e:0a:23:6f:7e:05:a0:7a:
         54:5f:0d:84:1a:63:6b:fd:e7:42:4e:4a:62:59:a4:40:7b:f3:
         0e:24:34:18:26:c8:af:61:46:d6:0c:f6:a5:13:5c:a2:b2:3e:
         bf:10:e4:7b:ba:3f:c0:61:58:9e:34:e2:da:c5:a6:a7:d5:72:
         1b:09:7d:30:26:39:71:ef:5c:ae:99:f6:b1:e6:65:94:c7:a9:
         49:8b:0c:2f:50:8a:08:74:ed:01:61:a5:13:3e:6d:93:3a:a6:
         96:40:ee:7d:a8:6c:bb:9c:78:16:95:51:71:4b:d2:4d:ef:2b:
         56:af:b1:93:1f:d4:19:4b:e1:5b:15:a6:58:fe:fc:31:9f:45:
         1a:fc:31:75:3d:02:68:1f:1c:40:dc:d2:19:36:a9:20:13:2b:
         e1:84:b5:b5:0e:9f:ec:12:57:ad:ab:75:2c:67:6c:c7:7f:c5:
         7b:33:35:7b:7f:42:d2:bd:6f:a0:e9:42:aa:53:dc:7c:0b:ca:
         76:bc:62:e4:55:a7:ec:4e:d6:ef:b7:26:ee:75:e8:a7:6c:ef:
         54:79:33:63:5d:e2:77:e2:cf:74:0c:a7:2f:9c:9c:78:df:98:
         66:b8:b2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7SpoZ18zUhhQLMKEitBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWY1MTBjNzJjZTBiNzljMjg5OWIzNTg0NWZmZTM2NzA2
OTNmMDUwHhcNMjQwNTE3MTkwMDE4WhcNMjQwNTE4MTkwMDE4WjAzMTEwLwYDVQQD
Eyg3MzQ0YzFlMzFiYTc4N2Q4M2FlYzA2YTM5MzAxYTcwYjJmOTllZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM0U9o4ZzjnMrzd6P15PVe4M1BxN
6Tpf45a+7B3QoRrTgqvHaurg3y8566BIgRSdTCH5qWjbg0+wrxWCikRZEPy2+Xxf
M0tAV/5HF1b6DBIiwbHdStL1c1QOVmL7ABDxIwKv0dqoe4HP18FMvpSHiqOsT/jP
tMEAmyGqgQW8cXDbnQ+BLXekJQBAFbZlXLjVmifpBGFxAAmpYi03AmbhV3JYLkPt
X6KEMw6Tvy+ytXlD2m5wB9cJuh63M0MlsWz6eSp69C2vXK28YHuL4ovZzA1zdSd/
btlhALwCLBvse1zZO4RkYjNu1pUxiK1HraWSIWhCCfgNVyuGQ9KwA8H0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNEweMbp4fYOuwGo5MBpwsvme14MB8GA1UdIwQY
MBaAFMhfUQxyzgt5wombNYRf/jZwaT8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEt
YjhjOWEyYTlkYTQ2LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hMmNmYjAtMGU2OC00ZTQ3LTg4ODEtYjhjOWEyYTlkYTQ2
LzEveUY5UkRITE9DM25DaVpzMWhGXy1ObkJwUHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuORQd0fu
QLV8qZgspoY8DUivdev67E63VPYVbD4KI29+BaB6VF8NhBpja/3nQk5KYlmkQHvz
DiQ0GCbIr2FG1gz2pRNcorI+vxDke7o/wGFYnjTi2sWmp9VyGwl9MCY5ce9crpn2
seZllMepSYsML1CKCHTtAWGlEz5tkzqmlkDufahsu5x4FpVRcUvSTe8rVq+xkx/U
GUvhWxWmWP78MZ9FGvwxdT0CaB8cQNzSGTapIBMr4YS1tQ6f7BJXrat1LGdsx3/F
ezM1e39C0r1voOlCqlPcfAvKdrxi5FWn7E7W77cm7nXop2zvVHkzY13id+LPdAyn
L5yceN+YZriySQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:18:11 2024 by rpki-client on console-fra.rpki-client.org