Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          34qipRkhH3+McTU7l9ijzcx1HxtAv5b4nMqFQ+mLxxA=
Subject key identifier:   73:83:76:B0:0D:95:AC:A5:47:A5:A9:11:B6:A3:C0:68:C5:94:20:63
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       018F86359BC7735B376638334CDCDFCFF5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 11:00:10 +0000
Manifest this update:     Fri 17 May 2024 11:00:10 +0000
Manifest next update:     Sat 18 May 2024 11:00:10 +0000
Files and hashes:         1: XqQz5sRVgt-R1mDDMdLho3p9CtU.roa (hash: fInfotx9ZGqRIkHkyre92Bdb8oMV3y8A3RTFHzeQmd0=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: 6Q503efg4NRtVe2+BPE9qmiV6OGz2tGBp8+q1a21U00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:9b:c7:73:5b:37:66:38:33:4c:dc:df:cf:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: May 17 11:00:10 2024 GMT
            Not After : May 18 11:00:10 2024 GMT
        Subject: CN=738376b00d95aca547a5a911b6a3c068c5942063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bd:57:1b:66:0a:65:03:9e:aa:89:ac:0c:ca:
                    a9:be:cf:fd:36:ac:28:a9:d5:af:0d:1d:61:2e:24:
                    10:4e:91:04:42:c8:74:fe:ad:90:ff:37:fc:d3:cb:
                    e6:49:d5:b9:de:e5:04:20:2d:23:9e:ae:a6:20:b6:
                    2c:54:17:d1:a3:c8:e2:57:00:c0:b7:9b:2a:8d:d4:
                    02:c7:87:15:88:06:31:9b:67:7e:fc:92:c7:f9:97:
                    10:88:92:4a:4a:f8:49:fb:ca:5c:df:86:13:65:bc:
                    38:0b:65:9c:90:a1:c6:cb:82:8a:a2:1b:60:e2:79:
                    2c:86:ab:f0:52:55:13:4c:d2:4a:05:1a:9e:9b:ae:
                    b2:27:d8:70:7e:26:75:30:8d:e2:49:01:b6:aa:eb:
                    1e:98:5e:d2:57:2b:8e:c7:dd:7e:94:2a:38:11:ca:
                    30:2e:62:c2:f2:30:2c:0a:4c:52:ec:18:75:95:b2:
                    8c:24:87:24:52:ed:dc:06:a6:be:98:99:2f:91:99:
                    87:a0:e4:26:21:ca:d5:75:fc:22:e9:cc:20:60:ae:
                    91:40:19:49:e7:dc:b1:5f:fc:b9:2e:0b:c9:52:16:
                    a1:65:27:94:5b:1c:ba:f4:e5:eb:ba:da:bb:2c:44:
                    19:0a:9c:d5:6e:4f:13:58:02:4f:d4:f7:f1:88:6f:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:76:B0:0D:95:AC:A5:47:A5:A9:11:B6:A3:C0:68:C5:94:20:63
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:03:a5:11:08:19:9e:fb:83:fe:9a:bc:94:4d:ac:ca:cc:d9:
         d0:db:53:7a:c4:6d:45:21:25:6f:98:b2:3f:6c:bc:30:05:db:
         d1:6a:b6:81:6e:c7:e5:a1:26:58:11:e3:70:fa:ac:85:4a:49:
         2a:06:a9:c8:c7:fa:db:4f:40:cc:0b:a9:64:00:81:74:31:ce:
         03:4f:d9:36:39:f7:9b:a5:8b:39:72:1f:b9:38:bc:98:95:dc:
         69:a4:c2:43:38:ff:4d:cb:13:c1:16:44:b2:41:39:46:2a:34:
         3a:b3:59:28:dc:a1:10:79:50:0f:2d:60:85:bd:f3:88:21:1f:
         76:32:35:18:c7:5a:a2:54:51:cc:42:c2:4e:be:8a:6c:c5:32:
         fe:6c:c1:af:52:14:4b:3e:6f:45:20:41:0e:6e:2c:52:f3:72:
         51:7a:65:a9:bd:0b:48:9d:dc:bc:64:94:74:a0:e4:e7:43:27:
         30:91:96:01:99:df:96:b1:a9:d3:48:5c:34:72:e3:24:e7:63:
         23:49:47:65:36:34:ab:2a:49:5b:e5:d5:2f:6c:53:7f:92:07:
         27:14:d6:a9:8d:79:e1:ee:89:d9:e0:1f:17:d3:84:ce:a6:0b:
         fb:1a:57:28:08:2b:0d:d0:d7:32:10:81:a4:5c:5e:4f:4a:dd:
         07:c9:f0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNZvHc1s3ZjgzTNzfz/XJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjQwNTE3MTEwMDEwWhcNMjQwNTE4MTEwMDEwWjAzMTEwLwYDVQQD
Eyg3MzgzNzZiMDBkOTVhY2E1NDdhNWE5MTFiNmEzYzA2OGM1OTQyMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L1XG2YKZQOeqomsDMqpvs/9Nqwo
qdWvDR1hLiQQTpEEQsh0/q2Q/zf808vmSdW53uUEIC0jnq6mILYsVBfRo8jiVwDA
t5sqjdQCx4cViAYxm2d+/JLH+ZcQiJJKSvhJ+8pc34YTZbw4C2WckKHGy4KKohtg
4nkshqvwUlUTTNJKBRqem66yJ9hwfiZ1MI3iSQG2qusemF7SVyuOx91+lCo4Ecow
LmLC8jAsCkxS7Bh1lbKMJIckUu3cBqa+mJkvkZmHoOQmIcrVdfwi6cwgYK6RQBlJ
59yxX/y5LgvJUhahZSeUWxy69OXrutq7LEQZCpzVbk8TWAJP1PfxiG98zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHODdrANlaylR6WpEbajwGjFlCBjMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgOlEQgZ
nvuD/pq8lE2syszZ0NtTesRtRSElb5iyP2y8MAXb0Wq2gW7H5aEmWBHjcPqshUpJ
KgapyMf6209AzAupZACBdDHOA0/ZNjn3m6WLOXIfuTi8mJXcaaTCQzj/TcsTwRZE
skE5Rio0OrNZKNyhEHlQDy1ghb3ziCEfdjI1GMdaolRRzELCTr6KbMUy/mzBr1IU
Sz5vRSBBDm4sUvNyUXplqb0LSJ3cvGSUdKDk50MnMJGWAZnflrGp00hcNHLjJOdj
I0lHZTY0qypJW+XVL2xTf5IHJxTWqY154e6J2eAfF9OEzqYL+xpXKAgrDdDXMhCB
pFxeT0rdB8nwUg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:50 2024 by rpki-client on console-ams.rpki-client.org