Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          v+K7Obj/TE6yUlps9F+ES/QnsS57S5LyqRKj307GkbQ=
Subject key identifier:   EF:49:AF:93:63:49:37:C0:9D:D9:9B:7D:12:7D:0C:71:C9:60:14:46
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       018F43B408770C8496ECDB834BC10D1F708F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 13:03:43 +0000
Manifest this update:     Sat 04 May 2024 13:03:43 +0000
Manifest next update:     Sun 05 May 2024 13:03:43 +0000
Files and hashes:         1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: f9WwIgqKmdpjMTp6OldlCxPTPpvikq37MZOXAr77Hk0=)
                          2: FFAz3tspOVpAOQ5WkLYtWcLplow.roa (hash: bwsBoT5Er7mvja24GfnhLb8+pG8eCidf8X45bfxAe/Q=)
                          3: STPjaz1_TKgGCsl-ElE-62AoIm4.roa (hash: drsFrbz7SfprXxeVoFWFYWOlwoT3h1eKFSRX5z8bfXY=)
                          4: dWAljN-VESiEsxSetRTl9Baapjk.roa (hash: 15QCrXH29sutoazus2fCjy3w3Zo+ubUPeSA+0ZnUh90=)
                          5: t46Jprw7IljAC70OUeLkA3ChpvQ.roa (hash: kbb6pBmFgDoyWPpCEnIjaJrUJv+rfd3j1OFQPwCpPH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:08:77:0c:84:96:ec:db:83:4b:c1:0d:1f:70:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: May  4 13:03:43 2024 GMT
            Not After : May  5 13:03:43 2024 GMT
        Subject: CN=ef49af93634937c09dd99b7d127d0c71c9601446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:14:87:4c:f9:a9:c9:47:08:14:22:d7:5a:
                    c1:c1:72:62:17:20:f4:f0:10:9e:67:c9:f8:34:18:
                    8b:02:42:ae:3f:81:31:ee:26:53:6c:a2:ea:95:11:
                    b0:a5:0c:ae:cf:58:b6:93:5c:83:35:99:c1:1f:01:
                    eb:05:28:7c:3d:ec:c5:83:3a:ed:6c:61:89:15:3b:
                    65:05:56:9c:36:56:ab:29:d4:d0:72:85:24:26:fe:
                    e1:80:63:4f:fe:70:12:93:a5:75:99:77:10:19:0a:
                    2a:b4:49:dc:14:f7:ed:63:f7:06:a9:17:7e:6b:dc:
                    96:82:b5:ef:b0:11:e0:93:c7:ff:b6:42:12:cd:b9:
                    30:bf:73:ca:5c:ff:a4:7c:77:f0:64:68:de:41:c3:
                    02:9c:15:4e:d6:dd:9e:f5:bd:9c:58:70:11:30:a1:
                    80:40:dd:17:40:35:d5:71:ae:9f:36:80:d6:dc:b2:
                    08:dd:bc:78:71:79:02:68:87:19:05:a2:d7:76:70:
                    4b:3b:1d:b0:f7:ca:6e:af:37:04:b5:ab:eb:0c:66:
                    65:4f:19:66:0a:8d:41:22:b3:34:a1:35:dd:5b:1d:
                    bf:04:f5:d1:e5:93:8b:89:bb:6b:97:63:52:fe:8b:
                    dc:ad:e5:f1:fd:b8:27:e6:5d:11:54:a7:a5:c3:f0:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:49:AF:93:63:49:37:C0:9D:D9:9B:7D:12:7D:0C:71:C9:60:14:46
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:50:01:22:2a:bd:88:02:e8:4a:c7:eb:46:3d:46:64:f8:37:
         b8:fe:cb:e6:89:de:33:2a:fb:5b:0c:08:74:7b:de:a5:7c:a3:
         60:c3:b0:56:a8:ed:9b:98:29:0f:13:e2:a3:3b:1e:73:ec:33:
         f6:97:d6:f2:7f:35:1f:10:91:97:e0:64:d5:6c:69:4b:35:cc:
         63:c4:5c:72:92:f2:83:bb:c4:71:4d:dd:93:3c:f1:29:1b:3f:
         83:d5:7d:e2:e2:84:e3:0b:1f:ff:75:59:3b:60:33:be:cc:74:
         fe:bb:b4:37:5a:d9:db:81:10:a9:6e:a2:92:08:58:ae:b9:aa:
         82:19:b0:65:86:a7:39:4a:7c:05:0c:18:96:c8:75:a8:86:72:
         9a:37:8b:e1:5b:c2:ec:12:ce:2a:d2:c6:ae:58:15:56:6a:5d:
         4e:28:71:60:c1:8e:54:5c:a0:20:62:83:eb:7f:97:dc:16:63:
         38:ab:01:3f:b2:e7:fb:17:ca:58:5e:2d:f1:32:9b:07:01:af:
         65:76:31:85:06:f7:9f:c7:43:cc:2a:81:74:2d:ea:e9:52:0d:
         cf:58:de:79:47:b2:53:00:af:dd:26:38:2c:ee:61:5f:01:28:
         c1:59:32:ab:04:6a:14:71:d0:32:d5:a6:b9:20:b0:7a:77:84:
         d9:b3:39:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DtAh3DISW7NuDS8ENH3CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4
YjhmNWEwHhcNMjQwNTA0MTMwMzQzWhcNMjQwNTA1MTMwMzQzWjAzMTEwLwYDVQQD
EyhlZjQ5YWY5MzYzNDkzN2MwOWRkOTliN2QxMjdkMGM3MWM5NjAxNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQUh0z5qclHCBQi11rBwXJiFyD0
8BCeZ8n4NBiLAkKuP4Ex7iZTbKLqlRGwpQyuz1i2k1yDNZnBHwHrBSh8PezFgzrt
bGGJFTtlBVacNlarKdTQcoUkJv7hgGNP/nASk6V1mXcQGQoqtEncFPftY/cGqRd+
a9yWgrXvsBHgk8f/tkISzbkwv3PKXP+kfHfwZGjeQcMCnBVO1t2e9b2cWHARMKGA
QN0XQDXVca6fNoDW3LII3bx4cXkCaIcZBaLXdnBLOx2w98purzcEtavrDGZlTxlm
Co1BIrM0oTXdWx2/BPXR5ZOLibtrl2NS/ovcreXx/bgn5l0RVKelw/CAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9Jr5NjSTfAndmbfRJ9DHHJYBRGMB8GA1UdIwQY
MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt
NGUxZGMxNTA1MjYwLzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw
LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlABIiq9
iALoSsfrRj1GZPg3uP7L5oneMyr7WwwIdHvepXyjYMOwVqjtm5gpDxPiozsec+wz
9pfW8n81HxCRl+Bk1WxpSzXMY8RccpLyg7vEcU3dkzzxKRs/g9V94uKE4wsf/3VZ
O2Azvsx0/ru0N1rZ24EQqW6ikghYrrmqghmwZYanOUp8BQwYlsh1qIZymjeL4VvC
7BLOKtLGrlgVVmpdTihxYMGOVFygIGKD63+X3BZjOKsBP7Ln+xfKWF4t8TKbBwGv
ZXYxhQb3n8dDzCqBdC3q6VINz1jeeUeyUwCv3SY4LO5hXwEowVkyqwRqFHHQMtWm
uSCweneE2bM5dw==
-----END CERTIFICATE-----
Generated at Sat May 4 13:56:55 2024 by rpki-client on console-fra.rpki-client.org