Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
File:                     QLnKyTUxHngDS0BzgwqBo897Rdk.mft (raw, json)
Hash identifier:          CZ+ToTyR46J6i+ufuHVChjjCyfs22PXjD9zJNijke+A=
Subject key identifier:   2F:37:87:21:F9:55:35:2A:EB:DF:F0:A5:25:1D:53:2A:F9:A8:36:CD
Authority key identifier: 40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9
Certificate issuer:       /CN=40b9cac935311e78034b4073830a81a3cf7b45d9
Certificate serial:       018F874A45304FBCF0766DB62FCD610731E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:22 +0000
Manifest this update:     Fri 17 May 2024 16:02:22 +0000
Manifest next update:     Sat 18 May 2024 16:02:22 +0000
Files and hashes:         1: QLnKyTUxHngDS0BzgwqBo897Rdk.crl (hash: 38tKXxn0GpRnB8x9+aRe4fyOU2DwblE4DDy0ZQsWdjo=)
                          2: vQngG1WBdPpaiLWBU1hfcYq6apY.roa (hash: S6Dkj/loVeFzYSqZeqkGuUu7L7l1vb9yfMMrLuhgPA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:45:30:4f:bc:f0:76:6d:b6:2f:cd:61:07:31:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b9cac935311e78034b4073830a81a3cf7b45d9
        Validity
            Not Before: May 17 16:02:22 2024 GMT
            Not After : May 18 16:02:22 2024 GMT
        Subject: CN=2f378721f955352aebdff0a5251d532af9a836cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:55:f3:39:ce:b1:65:08:e4:02:f3:5f:c1:
                    49:2b:00:02:ac:1f:d8:7c:66:ae:df:8d:50:3a:be:
                    9b:70:e1:cc:2f:bf:f8:79:14:28:a0:e3:80:dd:7c:
                    59:da:71:ba:26:f9:d1:d2:97:1e:4c:c1:9f:b6:d7:
                    02:7b:11:ed:6e:16:0f:ed:97:13:c0:ab:15:99:b4:
                    aa:de:c5:2f:cc:50:57:ab:c9:68:1a:db:a9:1c:74:
                    d4:ea:da:fb:12:10:03:18:e6:22:25:6c:48:4c:6e:
                    89:2f:b9:1a:33:fa:46:59:7c:12:8e:fd:10:e9:14:
                    30:76:f7:9b:a6:35:a4:75:01:7b:51:78:7d:93:8a:
                    a3:ba:08:eb:ea:10:14:70:b8:73:c7:92:5c:78:55:
                    88:f6:a7:98:48:29:d7:66:bb:df:cf:59:2f:50:56:
                    32:88:ed:57:4a:03:24:28:03:d8:15:83:17:3d:dc:
                    bb:55:19:24:88:46:c6:29:18:0d:23:74:2c:72:cf:
                    01:ea:12:0b:27:da:46:ca:37:15:af:53:8f:3d:dc:
                    57:d3:3f:56:40:d6:ad:d1:7a:82:db:ff:1f:dd:2b:
                    bf:03:b8:37:d2:86:5d:ab:31:c1:6e:97:ce:55:7b:
                    aa:88:a1:1f:4e:55:47:7d:74:b1:6d:3c:57:a1:53:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:87:21:F9:55:35:2A:EB:DF:F0:A5:25:1D:53:2A:F9:A8:36:CD
            X509v3 Authority Key Identifier:
                keyid:40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c7:8d:f6:e7:f1:d7:79:23:22:61:13:18:2e:46:a1:e8:db:
         a0:4c:79:b8:88:35:8d:bc:0c:e9:9d:f2:6b:a9:5f:31:45:92:
         cf:30:de:ef:e9:5a:ea:bb:3b:7f:08:a2:d4:92:0d:ef:c4:bf:
         ba:d1:7f:06:80:2c:71:7b:a0:e1:b3:17:c2:ba:1c:06:64:a6:
         13:d9:85:bc:bc:0b:6b:19:0a:4d:5a:29:1a:f8:9f:9b:8e:66:
         a1:72:ed:9c:30:2d:d5:0e:84:c7:27:10:8c:ae:8a:0b:d7:0c:
         80:3b:df:28:59:ad:76:e6:78:c1:2e:aa:01:70:d7:e7:a0:ed:
         15:f7:8a:5d:c2:48:4c:c8:ed:72:87:24:3b:0b:4f:99:4c:3d:
         f7:de:f8:ca:d6:6a:4f:41:44:22:36:07:c0:90:6f:b9:3e:69:
         a0:0a:64:5e:a2:4a:a0:b3:6e:05:16:0e:1c:fa:14:ca:4e:1c:
         b6:e9:2f:a5:ae:56:31:6e:0b:28:3f:c2:ef:a8:d7:3f:b0:1b:
         8a:0f:4f:c6:05:64:64:46:bd:a5:fd:1f:05:0b:41:52:77:d1:
         a7:dd:f7:0f:97:68:12:a3:49:80:50:86:2a:63:0d:ae:ac:be:
         03:6d:6f:93:3e:15:5f:26:3f:e8:34:b9:c3:47:9f:39:83:84:
         75:5e:1e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSkUwT7zwdm22L81hBzHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYjljYWM5MzUzMTFlNzgwMzRiNDA3MzgzMGE4MWEzY2Y3
YjQ1ZDkwHhcNMjQwNTE3MTYwMjIyWhcNMjQwNTE4MTYwMjIyWjAzMTEwLwYDVQQD
EygyZjM3ODcyMWY5NTUzNTJhZWJkZmYwYTUyNTFkNTMyYWY5YTgzNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyJV8znOsWUI5ALzX8FJKwACrB/Y
fGau341QOr6bcOHML7/4eRQooOOA3XxZ2nG6JvnR0pceTMGfttcCexHtbhYP7ZcT
wKsVmbSq3sUvzFBXq8loGtupHHTU6tr7EhADGOYiJWxITG6JL7kaM/pGWXwSjv0Q
6RQwdvebpjWkdQF7UXh9k4qjugjr6hAUcLhzx5JceFWI9qeYSCnXZrvfz1kvUFYy
iO1XSgMkKAPYFYMXPdy7VRkkiEbGKRgNI3Qscs8B6hILJ9pGyjcVr1OPPdxX0z9W
QNat0XqC2/8f3Su/A7g30oZdqzHBbpfOVXuqiKEfTlVHfXSxbTxXoVMfpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC83hyH5VTUq69/wpSUdUyr5qDbNMB8GA1UdIwQY
MBaAFEC5ysk1MR54A0tAc4MKgaPPe0XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxuS3lUVXhIbmdEUzBCemd3cUJvODk3UmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yODVhYjYtMDEwOS00NGUxLWJiMmIt
NzUzNGZlMGYxYjgzLzEvUUxuS3lUVXhIbmdEUzBCemd3cUJvODk3UmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yODVhYjYtMDEwOS00NGUxLWJiMmItNzUzNGZlMGYxYjgz
LzEvUUxuS3lUVXhIbmdEUzBCemd3cUJvODk3UmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMeN9ufx
13kjImETGC5GoejboEx5uIg1jbwM6Z3ya6lfMUWSzzDe7+la6rs7fwii1JIN78S/
utF/BoAscXug4bMXwrocBmSmE9mFvLwLaxkKTVopGvifm45moXLtnDAt1Q6ExycQ
jK6KC9cMgDvfKFmtduZ4wS6qAXDX56DtFfeKXcJITMjtcockOwtPmUw99974ytZq
T0FEIjYHwJBvuT5poApkXqJKoLNuBRYOHPoUyk4ctukvpa5WMW4LKD/C76jXP7Ab
ig9PxgVkZEa9pf0fBQtBUnfRp933D5doEqNJgFCGKmMNrqy+A21vkz4VXyY/6DS5
w0efOYOEdV4eoA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:10:10 2024 by rpki-client on console-fra.rpki-client.org