Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File:                     UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier:          5NmlE229YtUweoJ/4pWk3459IXqXwmgxKL70crhatbw=
Subject key identifier:   F5:0F:68:D6:9F:B1:C7:A8:DD:9C:B0:F1:C5:96:00:F3:C4:C3:1B:4C
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer:       /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial:       018F874A54FD4ABD839CC4D9CBB2C6E3DD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:26 +0000
Manifest this update:     Fri 17 May 2024 16:02:26 +0000
Manifest next update:     Sat 18 May 2024 16:02:26 +0000
Files and hashes:         1: I0A1XZK20LeCGssZOLkyFq_tvvI.roa (hash: ufBL4WGCjF4KzpmIfQd90cJFkWevLZg5H6nEN9/ucUc=)
                          2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: bfPv1lSuu07MBR3QDDvYsDtSpP9OJEhhMGtuMZOAdqY=)
                          3: W5qidBDhdu0ig_SVzUJ6Awj9kPQ.roa (hash: KLf1pasYYjOuACAwPDX/cSdIpz8S1aJHPd/dMAeGYUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:54:fd:4a:bd:83:9c:c4:d9:cb:b2:c6:e3:dd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
        Validity
            Not Before: May 17 16:02:26 2024 GMT
            Not After : May 18 16:02:26 2024 GMT
        Subject: CN=f50f68d69fb1c7a8dd9cb0f1c59600f3c4c31b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:2f:78:9e:a1:aa:c2:78:ac:98:ff:5b:b8:
                    f6:51:a6:9d:83:f5:d9:f9:33:a2:06:f8:8b:58:3c:
                    e2:e2:15:dc:60:56:b7:92:7c:b0:15:d6:66:03:78:
                    36:15:d1:01:91:94:3e:92:74:e9:c8:7f:fe:da:4a:
                    1f:23:d2:05:a9:12:cd:56:d9:af:a1:f6:05:77:c7:
                    6d:33:dd:d4:4f:cd:b2:92:0e:4c:c6:08:05:51:8c:
                    19:fc:83:b4:70:c8:06:5a:89:b1:54:d7:3c:5f:30:
                    75:7e:09:6d:67:b2:4d:9c:9c:39:5f:5e:1d:b6:f1:
                    61:d4:59:51:39:a5:f0:ad:01:75:9b:64:4a:75:11:
                    b0:0b:1b:50:e2:9f:4e:60:7e:e4:12:6d:f9:5e:b1:
                    f6:ee:97:ba:5e:ea:82:ff:54:14:ed:13:08:89:26:
                    f6:59:7f:3d:2d:77:4c:98:43:94:7f:dd:2c:86:80:
                    df:1d:43:4e:db:9a:09:63:6d:24:49:29:3d:74:3f:
                    f1:d4:0a:d8:78:d9:3d:a1:80:88:eb:99:64:5d:be:
                    ae:f0:71:d7:b7:2b:91:dd:ee:53:59:08:29:27:8c:
                    13:2d:7e:5b:78:5a:8e:ed:fa:7d:a4:68:2c:7f:d8:
                    12:21:44:bd:f7:fc:35:6f:b0:20:8d:b4:16:fc:4c:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0F:68:D6:9F:B1:C7:A8:DD:9C:B0:F1:C5:96:00:F3:C4:C3:1B:4C
            X509v3 Authority Key Identifier:
                keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:7a:e7:ab:d2:9e:54:79:c2:9e:cf:38:87:f9:be:53:20:
         70:fb:bf:f1:73:d1:25:87:c9:87:68:94:41:dd:71:18:9a:8c:
         3f:22:03:cc:14:12:2a:c4:8d:e2:74:5d:58:17:78:65:74:ca:
         25:98:3b:16:ec:54:9f:72:6e:bd:ab:2e:8f:c9:24:64:4e:b8:
         2b:d3:8c:e8:02:56:83:2e:48:6a:f7:61:25:fa:ac:41:11:f5:
         e0:5d:3a:70:f1:02:94:ce:40:ce:17:43:22:76:5e:95:a0:27:
         85:c4:a6:a9:be:de:a5:28:0d:4c:52:6a:ad:55:b1:8a:b1:bb:
         dc:57:10:f1:f0:98:67:db:38:3e:32:7a:e6:d7:24:9d:96:a4:
         20:23:94:7e:0f:91:af:b1:14:44:37:bb:bd:e0:26:fa:6f:31:
         81:87:e2:db:48:cb:46:21:ff:99:7d:9d:45:77:a2:87:36:cb:
         81:0b:24:48:f5:3d:af:de:d6:e4:ff:08:12:ec:d9:25:0b:e9:
         71:de:1a:35:08:32:f1:96:d5:ed:77:a6:d0:21:5f:83:3a:a1:
         41:03:03:6e:21:45:93:2a:5b:58:92:78:3b:e5:3e:be:a8:a6:
         77:bb:fe:40:b1:79:1a:52:66:cc:6a:7d:64:09:54:f8:6b:f1:
         df:cd:89:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSlT9Sr2DnMTZy7LG490xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMGRiMTcxNTA1MjI1M2JmNTIzZjE0MGI5ZjU2MzdhMTFk
NWU5YWYwHhcNMjQwNTE3MTYwMjI2WhcNMjQwNTE4MTYwMjI2WjAzMTEwLwYDVQQD
EyhmNTBmNjhkNjlmYjFjN2E4ZGQ5Y2IwZjFjNTk2MDBmM2M0YzMxYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48MveJ6hqsJ4rJj/W7j2Uaadg/XZ
+TOiBviLWDzi4hXcYFa3knywFdZmA3g2FdEBkZQ+knTpyH/+2kofI9IFqRLNVtmv
ofYFd8dtM93UT82ykg5MxggFUYwZ/IO0cMgGWomxVNc8XzB1fgltZ7JNnJw5X14d
tvFh1FlROaXwrQF1m2RKdRGwCxtQ4p9OYH7kEm35XrH27pe6XuqC/1QU7RMIiSb2
WX89LXdMmEOUf90shoDfHUNO25oJY20kSSk9dD/x1ArYeNk9oYCI65lkXb6u8HHX
tyuR3e5TWQgpJ4wTLX5beFqO7fp9pGgsf9gSIUS99/w1b7AgjbQW/EzDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUPaNafsceo3Zyw8cWWAPPEwxtMMB8GA1UdIwQY
MBaAFFANsXFQUiU79SPxQLn1Y3oR1emvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUEyeGNWQlNKVHYxSV9GQXVmVmplaEhWNmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjdiYWQtZTVkZC00ZTUyLWIwZDQt
OGY1Yzk4NjdlOTk4LzEvVUEyeGNWQlNKVHYxSV9GQXVmVmplaEhWNmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjdiYWQtZTVkZC00ZTUyLWIwZDQtOGY1Yzk4NjdlOTk4
LzEvVUEyeGNWQlNKVHYxSV9GQXVmVmplaEhWNmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0B656vS
nlR5wp7POIf5vlMgcPu/8XPRJYfJh2iUQd1xGJqMPyIDzBQSKsSN4nRdWBd4ZXTK
JZg7FuxUn3Juvasuj8kkZE64K9OM6AJWgy5IavdhJfqsQRH14F06cPEClM5AzhdD
InZelaAnhcSmqb7epSgNTFJqrVWxirG73FcQ8fCYZ9s4PjJ65tcknZakICOUfg+R
r7EURDe7veAm+m8xgYfi20jLRiH/mX2dRXeihzbLgQskSPU9r97W5P8IEuzZJQvp
cd4aNQgy8ZbV7Xem0CFfgzqhQQMDbiFFkypbWJJ4O+U+vqimd7v+QLF5GlJmzGp9
ZAlU+Gvx382JoA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:10 2024 by rpki-client on console-ams.rpki-client.org