Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File:                     5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier:          OL6WJEhzdI0jalWFCwmFn16jNI00DtQIyUVdNmzHH4I=
Subject key identifier:   4D:D5:E4:59:6D:3A:13:01:2A:67:6E:94:D7:71:9E:CA:69:46:A3:32
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       018F3776CB0BA6B6E2F8A1056C159E9E7725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number:          1188
Signing time:             Thu 02 May 2024 04:01:23 +0000
Manifest this update:     Thu 02 May 2024 04:01:23 +0000
Manifest next update:     Fri 03 May 2024 04:01:23 +0000
Files and hashes:         1: 3TAuZQtuG9-OIXa6b5B8AI-qmGs.roa (hash: 2MMQtMsKATInJMYJXVHECwigib+WWwYt2J0C+cV+NFU=)
                          2: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: rhCYxdcZc0G5I/XG1dy0G6zqVDZiWJxlQMKJkmUOXds=)
                          3: I3_ONo8A6BsPD7BodcVVKlLpryg.roa (hash: lysDOG8GjnpOoe2ONsez2K9bDxnnYt3jf+NBZlyTgdo=)
                          4: Tmvk8jmC3-qusc-MCQNKIfyudRM.roa (hash: m4IM5NAcJuocN0zxsTcTeakRMLK0ALxq71HIVfn86AY=)
                          5: qehO0PFxMgyOQyg9CgDYC4n27X0.roa (hash: Ax17bZiIH/jKyTYQ1vCPTOREv00WzcZlsRfA15FXjNc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:cb:0b:a6:b6:e2:f8:a1:05:6c:15:9e:9e:77:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: May  2 04:01:23 2024 GMT
            Not After : May  3 04:01:23 2024 GMT
        Subject: CN=4dd5e4596d3a13012a676e94d7719eca6946a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:c8:e6:14:f0:48:a6:e1:eb:98:ca:85:6e:
                    70:fd:eb:61:ae:2a:8c:05:ef:51:62:40:ca:2a:62:
                    7f:e0:b1:bb:f7:32:3d:d6:7d:70:f4:78:54:3c:a4:
                    a9:e7:ea:19:ce:c8:4f:b2:77:3d:82:57:d4:26:8c:
                    69:b5:7c:10:d4:ef:0a:08:d2:d1:5f:b5:14:98:9a:
                    26:d4:ab:63:df:10:5b:15:bf:88:96:d8:cb:06:ee:
                    2d:6d:0a:04:24:08:2b:70:4b:b4:be:6b:f6:48:1a:
                    58:0b:5e:be:57:3c:b6:27:ea:e4:5d:15:7a:26:6d:
                    0b:75:cc:95:9c:4d:5f:90:dd:a7:44:f7:09:98:1d:
                    8b:f6:b5:05:6e:cf:48:7e:50:ca:05:0b:75:8c:07:
                    d4:6c:0b:6e:5f:ff:59:ff:c6:dc:3a:fd:6f:23:5b:
                    ab:12:a1:e4:05:79:bf:10:60:80:0f:94:8a:08:cc:
                    5d:35:43:86:1e:93:c1:f5:a1:0b:b6:bc:91:1d:64:
                    3c:14:42:6a:14:83:ab:2b:dd:45:0a:bd:d1:aa:70:
                    bb:57:51:d8:f3:5f:76:16:ec:41:65:7c:d3:e9:47:
                    24:6a:f4:1a:0e:a5:30:0e:26:8b:0e:16:27:46:74:
                    d4:4b:c0:b6:dc:70:10:52:72:e2:d9:c6:90:83:94:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:E4:59:6D:3A:13:01:2A:67:6E:94:D7:71:9E:CA:69:46:A3:32
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c9:37:31:11:af:3b:72:28:8b:cb:27:3f:84:4c:1e:c5:df:
         aa:b0:29:b8:4a:80:b5:39:e4:a3:9e:32:24:81:b9:99:66:89:
         ca:07:b9:30:42:aa:e0:b8:34:66:ff:6e:f0:b4:7d:b5:b3:80:
         c4:62:0a:2d:f5:a3:32:ca:8c:82:7e:8d:d6:5d:14:30:f9:65:
         3c:7d:42:31:6a:bb:97:1c:08:2f:79:44:9e:8d:72:f5:92:2c:
         c8:20:0d:80:da:c3:64:0c:2c:a5:24:48:ff:c1:a7:69:f1:20:
         16:bd:51:c1:ff:e5:e8:2d:8e:5c:2f:76:a1:09:53:4d:b9:b4:
         f7:06:83:c9:24:6a:89:58:ee:d4:5b:a4:5f:08:2b:85:67:0e:
         ca:d1:39:83:61:15:04:34:49:2d:45:49:79:a9:c3:ba:7e:83:
         63:19:69:d6:b4:4e:cc:d8:af:38:ce:e8:15:f8:91:8d:93:d9:
         7e:c4:2b:fa:38:90:6c:9f:83:d0:eb:48:17:52:15:3c:ba:65:
         f5:3e:91:c5:ca:af:9b:08:de:d8:c4:7e:70:be:e0:4b:8b:5c:
         df:b2:06:a0:3c:bc:33:a3:01:45:38:32:4a:4d:04:8e:01:de:
         74:65:45:8c:72:da:07:ee:f0:a3:22:30:f4:1c:88:33:8f:57:
         b8:6e:82:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY83dssLprbi+KEFbBWennclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjQwNTAyMDQwMTIzWhcNMjQwNTAzMDQwMTIzWjAzMTEwLwYDVQQD
Eyg0ZGQ1ZTQ1OTZkM2ExMzAxMmE2NzZlOTRkNzcxOWVjYTY5NDZhMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/I5hTwSKbh65jKhW5w/ethriqM
Be9RYkDKKmJ/4LG79zI91n1w9HhUPKSp5+oZzshPsnc9glfUJoxptXwQ1O8KCNLR
X7UUmJom1Ktj3xBbFb+IltjLBu4tbQoEJAgrcEu0vmv2SBpYC16+Vzy2J+rkXRV6
Jm0LdcyVnE1fkN2nRPcJmB2L9rUFbs9IflDKBQt1jAfUbAtuX/9Z/8bcOv1vI1ur
EqHkBXm/EGCAD5SKCMxdNUOGHpPB9aELtryRHWQ8FEJqFIOrK91FCr3RqnC7V1HY
8192FuxBZXzT6UckavQaDqUwDiaLDhYnRnTUS8C23HAQUnLi2caQg5TimQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3V5FltOhMBKmdulNdxnsppRqMyMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMk3MRGv
O3Ioi8snP4RMHsXfqrApuEqAtTnko54yJIG5mWaJyge5MEKq4Lg0Zv9u8LR9tbOA
xGIKLfWjMsqMgn6N1l0UMPllPH1CMWq7lxwIL3lEno1y9ZIsyCANgNrDZAwspSRI
/8GnafEgFr1Rwf/l6C2OXC92oQlTTbm09waDySRqiVju1FukXwgrhWcOytE5g2EV
BDRJLUVJeanDun6DYxlp1rROzNivOM7oFfiRjZPZfsQr+jiQbJ+D0OtIF1IVPLpl
9T6Rxcqvmwje2MR+cL7gS4tc37IGoDy8M6MBRTgySk0EjgHedGVFjHLaB+7woyIw
9ByIM49XuG6Chw==
-----END CERTIFICATE-----
Generated at Thu May 2 10:13:45 2024 by rpki-client on console-fra.rpki-client.org