Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File:                     ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier:          mzYSik/S/H/xk9wPi6FnDvfIbCUQqtNzvFw7+SK9QHI=
Subject key identifier:   A3:4F:2E:62:1A:B7:5E:B9:FC:BF:4F:B8:E9:DF:BF:19:47:EF:12:BD
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       018F98AB383714E45AB0C61D3AE6B276994D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number:          1190
Signing time:             Tue 21 May 2024 01:01:48 +0000
Manifest this update:     Tue 21 May 2024 01:01:48 +0000
Manifest next update:     Wed 22 May 2024 01:01:48 +0000
Files and hashes:         1: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: ODQ6fnk5XTxOBNV1YSJzx0ETSAZ2Fpy9FjjK+EaYvvE=)
                          2: jLjA6A5v_0C9NfRnpbWcd4Pn1vE.roa (hash: n+nTfU7VyWnoOuz9tKRzzY2WnWXCBVgQhVl1dQ4Yf0k=)
                          3: wM_83nMF-cQ4n7aTakM00EeKPas.roa (hash: YxveY5akmZkactTxMhIDq5rGJLDpuLqwwZ+KKSwl5uk=)
                          4: zbtufAG2E0pkZrnFpAwcajDVV-M.roa (hash: IcIL58EIlX7bDx7l9puV4E7Yq6+BKDZcDNvoOjTwGS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:38:37:14:e4:5a:b0:c6:1d:3a:e6:b2:76:99:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: May 21 01:01:48 2024 GMT
            Not After : May 22 01:01:48 2024 GMT
        Subject: CN=a34f2e621ab75eb9fcbf4fb8e9dfbf1947ef12bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:83:09:6c:a5:9b:ca:24:e3:2b:80:6f:b2:
                    68:66:24:d3:8c:36:23:e9:08:f5:d3:0e:a8:37:e5:
                    d6:76:e4:1d:f4:a6:01:96:74:93:21:4f:f4:59:b4:
                    38:c9:81:61:bd:0b:3d:02:82:f6:5e:f5:a5:ad:0b:
                    92:83:93:4b:2d:ce:55:f2:67:4c:07:d6:bd:07:c1:
                    5b:46:6b:ac:a9:88:72:5a:8f:50:f8:4b:33:d7:3e:
                    36:13:0d:a0:d5:cf:71:d4:2d:a7:75:40:c0:b3:fa:
                    33:c7:af:cd:a2:c3:12:4f:ae:96:fd:5f:50:a5:07:
                    97:e3:77:15:e2:4e:88:1f:8e:bf:44:94:9a:1f:dc:
                    df:13:87:3e:02:73:a0:5a:86:ac:90:6d:d3:c4:21:
                    ae:3a:07:0a:59:0c:4b:85:c6:e4:a4:d5:38:a5:67:
                    ee:d2:2e:c3:38:e1:fc:d6:e6:a2:e2:aa:eb:7f:3f:
                    94:0b:78:2a:cd:66:7f:55:7e:ce:d0:48:39:85:c3:
                    6d:d8:e7:5f:2a:6d:bf:b2:9b:e9:20:e8:17:e6:eb:
                    02:0c:25:ad:4b:2b:fa:8a:dc:33:56:cb:48:c5:1b:
                    00:fc:9b:a0:08:16:ad:68:ec:6f:01:f4:37:a6:a6:
                    37:70:44:b3:50:7f:02:76:96:a4:4e:31:64:d1:4b:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4F:2E:62:1A:B7:5E:B9:FC:BF:4F:B8:E9:DF:BF:19:47:EF:12:BD
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:66:f0:ad:56:20:2b:3b:11:29:a2:c9:5a:86:60:be:cb:32:
         40:4e:88:3e:2f:f7:bb:8a:e8:6a:8a:a2:21:b0:d2:b6:c7:c8:
         7b:d2:d2:7e:21:a3:b6:94:6a:41:6d:1d:81:3a:c9:5c:7a:2c:
         7f:49:ce:cc:ad:bb:63:f1:97:ad:3f:3f:22:07:c0:47:8c:33:
         9d:34:61:12:f3:10:44:d2:fd:5d:f4:32:1e:a7:7d:f7:44:05:
         13:c6:37:20:6a:51:92:3d:09:92:03:28:c5:1d:a5:99:67:26:
         96:30:47:8d:fa:cc:7f:4e:3e:68:84:aa:12:4f:bd:1f:ac:04:
         47:35:25:00:d3:7e:25:8b:ac:7c:33:5c:01:e3:82:8f:f4:1f:
         6a:8b:81:09:25:56:9c:29:82:32:77:94:ee:21:fd:4c:bb:5b:
         f8:d4:53:f0:3b:8b:fd:27:5c:2a:db:9c:07:a3:b4:31:a5:d0:
         b9:63:d8:d9:3a:c2:95:0b:cf:62:33:07:80:f7:21:f2:52:36:
         60:3a:10:8f:4b:11:1d:c1:a1:21:1c:88:42:51:03:33:3e:f2:
         3b:2e:86:c8:5d:be:8f:df:aa:95:50:4f:79:7a:8d:65:f3:94:
         d4:8d:5f:db:eb:ad:d9:20:04:64:26:09:fa:c8:b9:ae:9d:c5:
         89:1b:66:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Yqzg3FORasMYdOuaydplNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk
NGMzZjEwHhcNMjQwNTIxMDEwMTQ4WhcNMjQwNTIyMDEwMTQ4WjAzMTEwLwYDVQQD
EyhhMzRmMmU2MjFhYjc1ZWI5ZmNiZjRmYjhlOWRmYmYxOTQ3ZWYxMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB2DCWylm8ok4yuAb7JoZiTTjDYj
6Qj10w6oN+XWduQd9KYBlnSTIU/0WbQ4yYFhvQs9AoL2XvWlrQuSg5NLLc5V8mdM
B9a9B8FbRmusqYhyWo9Q+Esz1z42Ew2g1c9x1C2ndUDAs/ozx6/NosMST66W/V9Q
pQeX43cV4k6IH46/RJSaH9zfE4c+AnOgWoaskG3TxCGuOgcKWQxLhcbkpNU4pWfu
0i7DOOH81uai4qrrfz+UC3gqzWZ/VX7O0Eg5hcNt2OdfKm2/spvpIOgX5usCDCWt
Syv6itwzVstIxRsA/JugCBataOxvAfQ3pqY3cESzUH8CdpakTjFk0UukAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNPLmIat165/L9PuOnfvxlH7xK9MB8GA1UdIwQY
MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt
NDI1MGNlNTUxN2Q5LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5
LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmbwrVYg
KzsRKaLJWoZgvssyQE6IPi/3u4roaoqiIbDStsfIe9LSfiGjtpRqQW0dgTrJXHos
f0nOzK27Y/GXrT8/IgfAR4wznTRhEvMQRNL9XfQyHqd990QFE8Y3IGpRkj0JkgMo
xR2lmWcmljBHjfrMf04+aISqEk+9H6wERzUlANN+JYusfDNcAeOCj/QfaouBCSVW
nCmCMneU7iH9TLtb+NRT8DuL/SdcKtucB6O0MaXQuWPY2TrClQvPYjMHgPch8lI2
YDoQj0sRHcGhIRyIQlEDMz7yOy6GyF2+j9+qlVBPeXqNZfOU1I1f2+ut2SAEZCYJ
+si5rp3FiRtmbg==
-----END CERTIFICATE-----
Generated at Tue May 21 02:11:27 2024 by rpki-client on console-fra.rpki-client.org