Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File:                     qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier:          yhTbBWPSTzOopii77snMuRykBp7X28aOsBgS4zpqxIk=
Subject key identifier:   1E:2B:12:52:76:D6:EA:98:35:13:28:35:D9:03:EA:FD:02:9A:B0:80
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer:       /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial:       018F87ED7832FAC958DCF669CF0B05013A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number:          117F
Signing time:             Fri 17 May 2024 19:00:37 +0000
Manifest this update:     Fri 17 May 2024 19:00:37 +0000
Manifest next update:     Sat 18 May 2024 19:00:37 +0000
Files and hashes:         1: ljdJJiZ5KfRWs09kZTxP2k_eKVU.roa (hash: bIF0pVrr7T+QrJJWsiM784M3IxYzEf3hRrnt6gJEF8k=)
                          2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: h4vajXhm9vVtpUUlHOCVl+yS1Jsps3x5gGNUzasXMmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:78:32:fa:c9:58:dc:f6:69:cf:0b:05:01:3a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
        Validity
            Not Before: May 17 19:00:37 2024 GMT
            Not After : May 18 19:00:37 2024 GMT
        Subject: CN=1e2b125276d6ea9835132835d903eafd029ab080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:e6:d0:e7:46:82:df:78:74:3f:5a:14:44:
                    3f:c7:10:77:fa:67:ec:4a:c5:13:b6:13:88:43:15:
                    1b:86:a4:47:31:22:35:07:b2:46:20:f5:fb:ff:b3:
                    ac:74:17:94:c4:06:f0:d9:d1:1b:79:7f:69:0a:98:
                    ac:00:4c:48:c0:48:52:75:4d:e9:f4:b6:86:7e:d7:
                    95:7e:16:79:4d:44:43:e9:06:59:95:82:b4:a1:02:
                    cf:6f:2e:58:67:d4:07:6b:fb:92:86:f0:bd:e0:14:
                    18:b7:70:f9:89:9e:9f:cd:83:fd:9a:5c:bb:8a:dc:
                    6b:bc:a9:72:39:8c:ee:cb:34:5a:34:40:d9:92:a6:
                    e5:b7:4a:ae:33:98:f3:98:f9:d8:33:b2:27:df:61:
                    54:91:d3:bc:2e:8f:a4:6a:82:c5:67:ab:dc:8b:4c:
                    2b:5e:83:e2:32:fa:fd:62:21:0e:c4:c5:17:b5:86:
                    e9:9d:90:a6:cd:ae:89:b5:59:eb:11:85:17:6c:6e:
                    ea:23:16:57:35:fe:00:31:e1:7d:4d:3e:ab:7c:39:
                    e8:b6:02:7b:b1:a6:3d:8d:36:cc:1a:a3:b1:f2:23:
                    d1:46:84:b5:e0:4d:7b:28:51:25:a6:99:59:28:c3:
                    49:8d:83:74:4b:1c:15:f7:c8:ee:08:6f:1b:d9:76:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:12:52:76:D6:EA:98:35:13:28:35:D9:03:EA:FD:02:9A:B0:80
            X509v3 Authority Key Identifier:
                keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:64:7c:79:e6:b6:68:fa:91:57:88:3f:84:fb:3c:8d:7a:8d:
         eb:1c:d6:c9:e8:86:9d:f3:9c:c5:42:fa:64:f5:fb:c4:80:79:
         47:44:34:dc:c9:a5:83:31:c1:f8:7a:96:4c:8e:8c:7a:dd:1b:
         ba:99:60:34:a0:f0:83:48:c9:57:5f:50:a8:4a:9e:c1:e6:5b:
         7b:f2:db:9f:69:ad:56:d3:1c:b5:d7:3b:a9:26:a2:8b:41:50:
         70:9b:1d:e8:59:7d:60:20:dd:66:66:94:59:d4:ae:f5:39:31:
         b1:72:e6:85:67:d4:97:20:d7:5e:ed:0a:82:8d:29:4e:28:fa:
         2a:76:b2:a2:2d:c6:8d:3c:d5:c6:ca:75:56:19:0d:a5:13:56:
         d9:86:a0:22:60:b9:34:dd:7f:4c:f1:d2:f0:68:39:26:86:94:
         8f:ac:41:a0:a1:a0:22:ab:34:70:9b:33:46:6b:cb:8f:8b:8e:
         3c:41:6b:00:24:e5:90:34:22:85:b8:4e:01:d1:16:78:e0:c8:
         fb:56:69:ab:9d:3c:fb:81:07:83:40:a9:7b:94:55:72:65:1f:
         73:3f:4b:6b:6c:1e:e9:7c:0b:e5:75:09:67:eb:8a:bd:8e:4f:
         64:0f:ad:d3:06:02:89:1f:77:0d:23:bc:8e:cd:d5:96:ef:0d:
         93:b9:bc:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Xgy+slY3PZpzwsFATqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw
MGQ2ODQwHhcNMjQwNTE3MTkwMDM3WhcNMjQwNTE4MTkwMDM3WjAzMTEwLwYDVQQD
EygxZTJiMTI1Mjc2ZDZlYTk4MzUxMzI4MzVkOTAzZWFmZDAyOWFiMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRrm0OdGgt94dD9aFEQ/xxB3+mfs
SsUTthOIQxUbhqRHMSI1B7JGIPX7/7OsdBeUxAbw2dEbeX9pCpisAExIwEhSdU3p
9LaGfteVfhZ5TURD6QZZlYK0oQLPby5YZ9QHa/uShvC94BQYt3D5iZ6fzYP9mly7
itxrvKlyOYzuyzRaNEDZkqblt0quM5jzmPnYM7In32FUkdO8Lo+kaoLFZ6vci0wr
XoPiMvr9YiEOxMUXtYbpnZCmza6JtVnrEYUXbG7qIxZXNf4AMeF9TT6rfDnotgJ7
saY9jTbMGqOx8iPRRoS14E17KFElpplZKMNJjYN0SxwV98juCG8b2XbGzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4rElJ21uqYNRMoNdkD6v0CmrCAMB8GA1UdIwQY
MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt
YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4
LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWR8eea2
aPqRV4g/hPs8jXqN6xzWyeiGnfOcxUL6ZPX7xIB5R0Q03MmlgzHB+HqWTI6Met0b
uplgNKDwg0jJV19QqEqeweZbe/Lbn2mtVtMctdc7qSaii0FQcJsd6Fl9YCDdZmaU
WdSu9TkxsXLmhWfUlyDXXu0Kgo0pTij6Knayoi3GjTzVxsp1VhkNpRNW2YagImC5
NN1/TPHS8Gg5JoaUj6xBoKGgIqs0cJszRmvLj4uOPEFrACTlkDQihbhOAdEWeODI
+1Zpq508+4EHg0Cpe5RVcmUfcz9La2we6XwL5XUJZ+uKvY5PZA+t0wYCiR93DSO8
js3Vlu8Nk7m8Kg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:12:42 2024 by rpki-client on console-ams.rpki-client.org