Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File:                     TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier:          nEYouFCBf5JC1ck93Nw7gjRumUVrRCtcv1t1s/hB17I=
Subject key identifier:   95:4A:85:68:CB:F8:BC:6E:4C:C2:97:CE:61:4E:91:C9:40:64:CA:00
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer:       /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial:       018F8937DE78A5D381F70F57E7DFEC95D454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number:          1178
Signing time:             Sat 18 May 2024 01:01:30 +0000
Manifest this update:     Sat 18 May 2024 01:01:30 +0000
Manifest next update:     Sun 19 May 2024 01:01:30 +0000
Files and hashes:         1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: NHPgLv2vLPvWU0feA9l0YNGrJtuCDHk22wY7KznIZus=)
                          2: a3Z-yy5kokno31NJ8vH-OQ6WlcM.roa (hash: t5CDumpT+6kxLhozBNQ0qFG/YxQOw86J8Mu3b3X6vk8=)
                          3: i3EpyGFcUSZRIuQOoEeMEEq5uTc.roa (hash: 64rd7uogo40gAQb5ZyFt/xOq4fA/Lcpw6QxmcFj48Vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:de:78:a5:d3:81:f7:0f:57:e7:df:ec:95:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
        Validity
            Not Before: May 18 01:01:30 2024 GMT
            Not After : May 19 01:01:30 2024 GMT
        Subject: CN=954a8568cbf8bc6e4cc297ce614e91c94064ca00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:df:ef:80:b0:3c:f4:87:c2:80:e3:e2:d9:
                    93:6d:45:e1:6a:34:ee:f5:65:cd:d8:dd:be:5e:e5:
                    e1:96:c4:21:b6:d6:2d:0f:4b:1f:60:21:66:73:1f:
                    e0:fd:78:86:81:b2:c7:7c:9d:38:2b:98:ed:ab:67:
                    59:ab:18:a4:38:88:12:b4:08:bc:06:ce:2e:f9:7a:
                    ab:62:e6:a2:b3:65:a9:68:8c:c6:a8:42:ac:46:df:
                    53:b0:46:cc:a9:73:63:70:98:62:85:4b:8a:8f:65:
                    f4:4d:bf:b8:07:0e:7b:16:2b:0f:2f:10:06:06:f0:
                    ee:cd:d3:1a:91:b9:a2:cc:44:4b:7d:96:9a:8f:13:
                    5f:83:fb:9a:78:fa:e8:e7:a0:69:13:48:6b:6f:23:
                    31:60:8a:62:7e:e2:10:5f:54:bb:b4:3f:89:fa:11:
                    d9:43:ec:cd:95:f4:e8:9d:d0:53:c8:c6:22:d6:13:
                    fc:3c:51:0f:d5:54:aa:6b:2c:96:8c:87:ef:87:8e:
                    18:05:00:3b:55:c1:c9:df:2c:82:6d:c4:1d:77:3e:
                    9a:7d:d5:5e:7b:4a:bd:1d:fc:3d:a8:9e:1d:ae:01:
                    28:7f:f9:c0:b6:50:d7:30:94:d0:ba:c6:18:db:ae:
                    b6:85:d2:b0:ff:00:c2:af:45:08:8c:76:45:e3:3c:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:85:68:CB:F8:BC:6E:4C:C2:97:CE:61:4E:91:C9:40:64:CA:00
            X509v3 Authority Key Identifier:
                keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:21:94:00:7c:c7:5b:90:a0:37:60:df:2c:36:be:b3:98:
         d0:5d:5b:d9:d7:48:dd:33:ad:f3:18:82:69:64:c5:60:5e:4c:
         4c:b6:4f:a7:9e:fc:a4:37:06:90:92:d3:15:ca:66:00:7f:03:
         e7:c4:45:61:fd:42:19:ab:c5:19:0c:48:b1:72:e6:be:6f:4c:
         42:48:81:5b:6f:07:d7:cb:2d:f7:64:65:27:5d:a0:35:aa:b1:
         93:f0:b9:d6:90:42:2a:44:65:ce:8c:19:bf:78:d9:93:47:59:
         95:87:c3:43:01:8c:74:48:fa:18:e8:2f:2b:f4:71:fd:75:9b:
         66:13:fd:9a:94:5e:12:49:8a:df:e4:3d:5e:54:82:12:7b:de:
         89:6d:a5:70:e8:fa:7f:a8:da:b3:1c:41:18:26:bf:2f:13:88:
         50:e4:2e:29:43:62:9c:5b:59:b8:1d:81:0f:e9:31:d9:31:f7:
         32:5c:ce:bb:d6:9f:9f:7f:92:50:6b:ae:b5:ad:9d:f0:ca:2b:
         d6:d1:6d:7a:ef:ed:e2:f7:61:0e:10:6c:55:6e:7b:84:72:eb:
         44:be:ff:e8:1d:07:fa:81:ad:f0:20:9a:2b:47:f0:d6:4b:69:
         24:0d:41:29:d4:54:2a:b6:51:5e:ff:2a:3a:27:31:26:47:ed:
         b2:14:3b:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN954pdOB9w9X59/sldRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj
MDM1MGUwHhcNMjQwNTE4MDEwMTMwWhcNMjQwNTE5MDEwMTMwWjAzMTEwLwYDVQQD
Eyg5NTRhODU2OGNiZjhiYzZlNGNjMjk3Y2U2MTRlOTFjOTQwNjRjYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobvf74CwPPSHwoDj4tmTbUXhajTu
9WXN2N2+XuXhlsQhttYtD0sfYCFmcx/g/XiGgbLHfJ04K5jtq2dZqxikOIgStAi8
Bs4u+XqrYuais2WpaIzGqEKsRt9TsEbMqXNjcJhihUuKj2X0Tb+4Bw57FisPLxAG
BvDuzdMakbmizERLfZaajxNfg/uaePro56BpE0hrbyMxYIpifuIQX1S7tD+J+hHZ
Q+zNlfTondBTyMYi1hP8PFEP1VSqayyWjIfvh44YBQA7VcHJ3yyCbcQddz6afdVe
e0q9Hfw9qJ4drgEof/nAtlDXMJTQusYY2662hdKw/wDCr0UIjHZF4zwKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVKhWjL+LxuTMKXzmFOkclAZMoAMB8GA1UdIwQY
MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct
NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5
LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOchlAB8
x1uQoDdg3yw2vrOY0F1b2ddI3TOt8xiCaWTFYF5MTLZPp578pDcGkJLTFcpmAH8D
58RFYf1CGavFGQxIsXLmvm9MQkiBW28H18st92RlJ12gNaqxk/C51pBCKkRlzowZ
v3jZk0dZlYfDQwGMdEj6GOgvK/Rx/XWbZhP9mpReEkmK3+Q9XlSCEnveiW2lcOj6
f6jasxxBGCa/LxOIUOQuKUNinFtZuB2BD+kx2TH3MlzOu9afn3+SUGuuta2d8Mor
1tFteu/t4vdhDhBsVW57hHLrRL7/6B0H+oGt8CCaK0fw1ktpJA1BKdRUKrZRXv8q
OicxJkftshQ7iw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:53:43 2024 by rpki-client on console-ams.rpki-client.org