Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File:                     iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier:          KwOTIcoypOjimaDDCDb3ATKsgoE6f56CLHzvTMrGMCU=
Subject key identifier:   98:52:71:2E:52:54:6A:E7:82:BF:B4:EB:80:A8:64:8E:F1:39:E3:7F
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer:       /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial:       018F87B694C4CB8A87430AC7264A8CB966FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: mTzDsPBL5AqQZ/PE7kjMWuv3czjl+M2rH+N4Yahgzcw=)
                          2: nzSxFMaFmDtXPyNdFQtuzCf-V1w.roa (hash: Dth3xoUu8Ywk+OX2P5LKa17+opTebPmVonMGxAvcB0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:94:c4:cb:8a:87:43:0a:c7:26:4a:8c:b9:66:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=9852712e52546ae782bfb4eb80a8648ef139e37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:bd:3e:5b:af:c2:82:b6:31:7f:ce:b4:de:
                    14:63:0f:9f:17:ce:c6:a2:e8:d4:65:0f:2c:3f:de:
                    b6:70:af:7e:ec:95:df:e6:ab:0d:45:a3:70:17:cb:
                    cd:6d:77:e1:3b:d5:36:17:fe:7d:fa:48:7c:8d:92:
                    07:46:aa:a9:41:15:a5:61:15:d8:57:99:3f:ee:3e:
                    d9:56:8a:71:db:d8:ae:8d:35:40:77:d9:ed:43:e2:
                    20:8c:ac:61:3e:3b:7b:45:50:f8:65:f7:4b:5c:e8:
                    ab:2d:e6:ea:9c:91:00:3a:05:19:fc:10:c3:41:e3:
                    a1:22:a3:c1:ac:b7:c0:f9:3c:9b:46:a9:5f:ec:be:
                    d6:0f:fd:f7:8a:52:27:97:0c:ef:ad:57:5b:03:9d:
                    85:bf:f3:d1:4f:ef:bd:08:1f:5b:28:24:c4:71:bb:
                    25:52:5d:ab:a7:79:87:4c:d8:9d:dc:8e:50:ec:af:
                    d8:7e:1f:e2:63:7d:75:5a:70:97:af:e9:22:21:5b:
                    bf:fa:1a:0d:0e:21:94:d6:0f:06:af:17:9b:16:3b:
                    69:86:14:eb:36:c1:b7:3b:68:4f:2d:0a:de:4f:fe:
                    3a:04:c8:68:33:03:42:d4:3b:27:11:f3:f4:71:3a:
                    6a:e7:dd:de:50:bb:f4:be:19:34:f7:0c:fd:43:71:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:52:71:2E:52:54:6A:E7:82:BF:B4:EB:80:A8:64:8E:F1:39:E3:7F
            X509v3 Authority Key Identifier:
                keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:98:50:cc:51:42:2d:8e:02:63:24:b6:0a:17:2b:6a:f9:
         90:86:65:f7:65:37:34:e6:6a:82:75:60:0d:77:3f:d4:5c:96:
         c9:45:65:d5:f1:2a:d8:e2:d9:d7:cf:49:9a:b7:1b:0e:00:69:
         07:f2:72:42:03:eb:a3:8b:c9:58:c9:bb:76:44:91:20:08:d0:
         ea:85:70:9e:7e:4c:2a:4a:19:99:7a:fe:ff:79:f9:88:47:b8:
         d6:36:71:67:40:e8:34:21:e2:48:84:71:b1:49:95:d3:91:30:
         bc:68:c2:0a:2f:b8:74:e0:8e:75:b3:b7:04:23:0d:87:24:b7:
         68:5f:89:81:84:0a:0a:ac:75:df:a8:b7:78:ec:da:40:e2:ed:
         47:04:a8:f6:05:b2:2c:6f:98:6e:ee:36:61:76:ca:bc:16:f2:
         85:1e:7b:ad:e8:56:14:5a:fa:b5:1a:c0:1e:c7:73:21:10:21:
         7f:c8:62:36:83:d7:87:af:bd:1c:f3:c0:c9:a8:22:2f:ad:72:
         3e:81:c2:a7:ea:31:b4:37:67:38:97:17:5f:9e:0f:8f:a1:79:
         7f:41:75:26:77:f6:e0:06:a0:80:b0:3b:a0:30:7b:3e:49:a7:
         e0:75:6c:e9:69:69:69:b6:78:d2:e3:4c:96:60:4d:53:c5:aa:
         b0:9b:22:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtpTEy4qHQwrHJkqMuWb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy
NDM1NGMwHhcNMjQwNTE3MTgwMDQwWhcNMjQwNTE4MTgwMDQwWjAzMTEwLwYDVQQD
Eyg5ODUyNzEyZTUyNTQ2YWU3ODJiZmI0ZWI4MGE4NjQ4ZWYxMzllMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBC9PluvwoK2MX/OtN4UYw+fF87G
oujUZQ8sP962cK9+7JXf5qsNRaNwF8vNbXfhO9U2F/59+kh8jZIHRqqpQRWlYRXY
V5k/7j7ZVopx29iujTVAd9ntQ+IgjKxhPjt7RVD4ZfdLXOirLebqnJEAOgUZ/BDD
QeOhIqPBrLfA+TybRqlf7L7WD/33ilInlwzvrVdbA52Fv/PRT++9CB9bKCTEcbsl
Ul2rp3mHTNid3I5Q7K/Yfh/iY311WnCXr+kiIVu/+hoNDiGU1g8GrxebFjtphhTr
NsG3O2hPLQreT/46BMhoMwNC1DsnEfP0cTpq593eULv0vhk09wz9Q3FpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhScS5SVGrngr+064CoZI7xOeN/MB8GA1UdIwQY
MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt
MWMxMzIwNmE4MTIzLzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQtMWMxMzIwNmE4MTIz
LzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiqYUMxR
Qi2OAmMktgoXK2r5kIZl92U3NOZqgnVgDXc/1FyWyUVl1fEq2OLZ189JmrcbDgBp
B/JyQgPro4vJWMm7dkSRIAjQ6oVwnn5MKkoZmXr+/3n5iEe41jZxZ0DoNCHiSIRx
sUmV05EwvGjCCi+4dOCOdbO3BCMNhyS3aF+JgYQKCqx136i3eOzaQOLtRwSo9gWy
LG+Ybu42YXbKvBbyhR57rehWFFr6tRrAHsdzIRAhf8hiNoPXh6+9HPPAyagiL61y
PoHCp+oxtDdnOJcXX54Pj6F5f0F1Jnf24AaggLA7oDB7Pkmn4HVs6WlpabZ40uNM
lmBNU8WqsJsi0w==
-----END CERTIFICATE-----
Generated at Fri May 17 20:12:23 2024 by rpki-client on console-ams.rpki-client.org