Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File:                     urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier:          52d5pajy9fHh0WjZAajTCoiXU03VaR7brNiYWQxSyW4=
Subject key identifier:   49:4E:CF:21:E8:58:E9:88:4D:19:59:5D:89:42:1C:31:E1:2C:08:12
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer:       /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial:       018F889277A8573D458DFA6316194E787778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 22:00:51 +0000
Manifest this update:     Fri 17 May 2024 22:00:51 +0000
Manifest next update:     Sat 18 May 2024 22:00:51 +0000
Files and hashes:         1: gLI4VuWFoxPxslY63ngtStQuGWg.roa (hash: /w8sGmohfqLUi/DccO8QFb+d68L/VmLgazpDKVZSFMY=)
                          2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: mHwWICHuKsKK1l3pG+l7rpStRdRNJNbOXcivMbYDcqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:77:a8:57:3d:45:8d:fa:63:16:19:4e:78:77:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
        Validity
            Not Before: May 17 22:00:51 2024 GMT
            Not After : May 18 22:00:51 2024 GMT
        Subject: CN=494ecf21e858e9884d19595d89421c31e12c0812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:d5:06:f0:db:15:4b:22:22:d0:21:10:3a:
                    f0:5f:02:4b:00:57:f3:fc:45:8f:80:ac:92:e9:b4:
                    5e:97:02:fe:43:bb:99:8e:28:2b:bc:da:1b:95:a8:
                    14:ed:a2:79:7f:94:af:56:3c:91:f1:1e:34:c0:33:
                    11:5c:f4:e1:c1:9f:d7:e3:9c:1f:8a:ee:91:63:c0:
                    66:2d:9b:05:32:50:8b:24:1b:4f:94:8e:3f:99:9d:
                    c7:93:53:eb:70:35:51:6f:c4:58:0f:03:d2:c2:cf:
                    14:bf:ca:6c:d6:40:cf:6e:34:cd:25:d5:f3:79:38:
                    30:12:84:2d:72:58:80:c3:0e:51:69:87:b8:dd:94:
                    bc:63:a1:50:81:5f:33:cb:a4:4c:da:32:eb:3a:60:
                    e4:4a:81:72:2a:60:70:2d:08:03:06:4d:fc:a4:47:
                    83:f5:e8:f0:31:2a:aa:d2:08:fc:8b:90:f9:d9:37:
                    65:45:16:a0:d4:bf:1d:3b:06:1c:b4:0c:5f:e4:20:
                    6b:38:c1:a8:f5:a6:3e:73:0b:b4:d5:8e:7a:ad:02:
                    24:73:a5:15:bd:f6:9b:24:5b:60:51:34:ee:99:45:
                    f3:4f:9a:42:b8:d0:11:90:c1:80:2f:e5:95:e9:db:
                    53:87:a9:61:a8:d6:49:42:f3:7d:9c:9a:b4:ec:d2:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:CF:21:E8:58:E9:88:4D:19:59:5D:89:42:1C:31:E1:2C:08:12
            X509v3 Authority Key Identifier:
                keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:66:46:8f:e3:d7:09:c2:84:d9:7f:7f:a7:c9:fb:ef:1f:bd:
         ed:09:cf:c4:22:f7:be:b8:e9:ab:cf:97:8c:c3:79:b9:72:7c:
         58:0e:02:1b:22:69:68:3b:9e:29:e9:62:cb:af:74:a3:de:09:
         41:7f:8e:61:5a:aa:a3:c8:19:8e:93:83:3d:d1:67:5b:5e:dc:
         95:07:1c:73:66:7d:70:92:1f:4e:32:50:36:24:7a:3b:6f:cd:
         1b:ea:ac:65:14:29:46:aa:1e:82:28:dc:f2:a7:65:65:82:aa:
         57:bf:e2:69:2b:e8:a6:3c:8c:b9:0d:02:0f:af:39:4a:80:a0:
         c5:2b:ad:f9:19:2d:8d:67:8e:98:47:8f:65:ae:14:73:99:14:
         9e:01:91:61:cf:03:fe:6f:0f:ab:d8:39:18:0d:27:2f:de:80:
         4d:53:01:98:c3:96:be:9d:dd:15:5a:d8:ad:1b:f8:f6:f4:78:
         73:13:49:98:14:f2:c1:18:ba:4e:35:af:ce:de:c7:90:b5:06:
         be:68:f8:af:4f:cc:eb:b7:43:67:30:7a:6c:6c:01:ab:6a:b1:
         92:2a:a5:c9:b7:69:17:77:6a:4b:9f:25:45:6a:12:2e:db:85:
         a5:7b:3f:10:0b:17:9a:ce:ce:e5:d2:8d:86:df:95:b1:6c:05:
         f5:c8:20:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkneoVz1FjfpjFhlOeHd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz
NmY4MjcwHhcNMjQwNTE3MjIwMDUxWhcNMjQwNTE4MjIwMDUxWjAzMTEwLwYDVQQD
Eyg0OTRlY2YyMWU4NThlOTg4NGQxOTU5NWQ4OTQyMWMzMWUxMmMwODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwzVBvDbFUsiItAhEDrwXwJLAFfz
/EWPgKyS6bRelwL+Q7uZjigrvNoblagU7aJ5f5SvVjyR8R40wDMRXPThwZ/X45wf
iu6RY8BmLZsFMlCLJBtPlI4/mZ3Hk1PrcDVRb8RYDwPSws8Uv8ps1kDPbjTNJdXz
eTgwEoQtcliAww5RaYe43ZS8Y6FQgV8zy6RM2jLrOmDkSoFyKmBwLQgDBk38pEeD
9ejwMSqq0gj8i5D52TdlRRag1L8dOwYctAxf5CBrOMGo9aY+cwu01Y56rQIkc6UV
vfabJFtgUTTumUXzT5pCuNARkMGAL+WV6dtTh6lhqNZJQvN9nJq07NKfQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElOzyHoWOmITRlZXYlCHDHhLAgSMB8GA1UdIwQY
MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt
NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh
LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWZGj+PX
CcKE2X9/p8n77x+97QnPxCL3vrjpq8+XjMN5uXJ8WA4CGyJpaDueKeliy690o94J
QX+OYVqqo8gZjpODPdFnW17clQccc2Z9cJIfTjJQNiR6O2/NG+qsZRQpRqoegijc
8qdlZYKqV7/iaSvopjyMuQ0CD685SoCgxSut+RktjWeOmEePZa4Uc5kUngGRYc8D
/m8Pq9g5GA0nL96ATVMBmMOWvp3dFVrYrRv49vR4cxNJmBTywRi6TjWvzt7HkLUG
vmj4r0/M67dDZzB6bGwBq2qxkiqlybdpF3dqS58lRWoSLtuFpXs/EAsXms7O5dKN
ht+VsWwF9cggTw==
-----END CERTIFICATE-----
Generated at Sat May 18 00:25:07 2024 by rpki-client on console-fra.rpki-client.org