Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File:                     lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier:          Qx965YjU51h5NPCDHDQqiiZgWAOAYr1khte4qyaoELw=
Subject key identifier:   B0:AF:49:ED:48:FC:B2:1C:4A:7E:B8:79:15:FB:DC:98:33:A0:1C:EE
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer:       /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial:       018F87498404D5F4CA06D4A2F0897DE6150A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:33 +0000
Manifest this update:     Fri 17 May 2024 16:01:33 +0000
Manifest next update:     Sat 18 May 2024 16:01:33 +0000
Files and hashes:         1: JghK_awl-kdNB3ZsWfQClaRt5FQ.roa (hash: n+yJxNa17w/1zbkbvYfpGssN7gjWHcY73Wn01S+UzwM=)
                          2: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: m3A2UynbOPs+biM0D4lXk5pznCN4LtSvmtkquveCUCY=)
                          3: mWXMa4dC33KXdbyhmRJVNcEMCXQ.roa (hash: Ex032lvTGot1BocrdW+67w/RPUOcm3iOvnPMdEQ/twk=)
                          4: s9aryt5k6Su7DV6LcTInlHGn1jY.roa (hash: 1IbCxnrzPzghGWZoFO01f9dmKnDs6cdq9xjYj/RLFNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:84:04:d5:f4:ca:06:d4:a2:f0:89:7d:e6:15:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
        Validity
            Not Before: May 17 16:01:33 2024 GMT
            Not After : May 18 16:01:33 2024 GMT
        Subject: CN=b0af49ed48fcb21c4a7eb87915fbdc9833a01cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:81:33:b7:1c:b1:a6:44:78:3e:35:16:17:
                    60:c6:29:86:1a:4c:7b:7e:bc:1f:4f:51:35:45:ce:
                    3a:55:99:dd:e8:54:0c:10:ea:19:9b:05:e6:4b:5b:
                    2e:9f:40:b1:2e:13:84:5a:e6:49:c0:f9:76:7d:ac:
                    d2:62:66:bb:93:40:a2:2a:74:7a:6d:be:83:64:fe:
                    05:18:61:ce:74:d6:56:b1:81:b2:80:ea:05:8b:00:
                    a2:52:fc:17:85:61:60:d3:2a:f9:24:c2:9e:7c:ba:
                    2d:19:57:a1:29:27:a9:aa:06:b4:72:5c:b7:a1:24:
                    b2:2b:30:60:1f:e6:18:9e:6f:26:2c:79:d9:45:cb:
                    5f:52:32:d4:7b:44:37:98:57:17:6b:31:ee:4c:7d:
                    80:25:e9:4a:32:62:44:05:a5:6a:b8:ed:09:f9:20:
                    31:c6:a5:a6:58:ba:fe:7f:27:ea:35:30:ae:42:10:
                    fc:48:8c:39:c2:9a:56:80:9b:b3:bd:69:70:8f:fb:
                    30:52:66:c6:b0:f8:0b:79:0a:be:ae:95:1f:99:4d:
                    c1:b3:a9:81:e0:99:e1:60:11:60:c4:e9:17:cd:cc:
                    19:04:62:c4:10:37:2b:69:de:2b:87:ba:22:d0:b6:
                    3d:68:ee:cd:26:37:00:03:b3:e8:e8:b9:6b:5a:8d:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:49:ED:48:FC:B2:1C:4A:7E:B8:79:15:FB:DC:98:33:A0:1C:EE
            X509v3 Authority Key Identifier:
                keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b2:1b:be:15:a0:be:3a:19:1a:77:94:53:04:ba:9a:1c:c3:
         e1:e3:eb:58:0e:ec:00:70:40:48:ae:ff:9a:57:e6:c0:9f:51:
         f8:cd:da:25:eb:12:3d:d4:f9:75:63:f4:3e:5c:81:6b:69:4f:
         25:a4:dc:70:97:c6:17:81:d6:36:fb:8f:cc:aa:b7:59:60:8c:
         b1:cb:c3:8f:28:f2:3b:8a:99:9f:2f:98:47:49:dc:4f:6f:77:
         4c:73:3d:bf:46:84:b2:c3:8d:9d:18:77:6d:e0:58:63:fd:7c:
         fe:86:67:f1:9c:e5:a3:5c:11:ad:cf:54:68:77:cf:b2:f8:41:
         15:73:e9:1b:65:34:1b:87:82:ed:48:e2:e0:d6:26:11:de:1a:
         1d:38:1e:a2:ae:98:e7:9c:ba:7c:3d:13:e5:a1:6e:13:c9:9c:
         0f:86:5a:a0:95:84:f5:73:b4:ef:c7:00:7d:c4:04:32:31:66:
         de:57:ae:63:28:84:2e:77:d6:62:eb:05:e0:da:7d:8d:f4:84:
         01:1d:4e:0d:37:bc:18:45:1c:26:8b:bc:bc:3a:44:d9:63:21:
         33:f5:50:85:81:fc:f3:0e:5b:11:74:65:c2:8d:3c:3c:d9:b8:
         f1:60:e4:83:d6:e1:2b:f5:3e:38:8e:4d:0c:f1:17:35:22:cd:
         67:75:04:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSYQE1fTKBtSi8Il95hUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGVjNjQxMDUxYjAyNmI5NWM4NDU5MTUwY2E0N2RkYWVj
ODk2NjgwHhcNMjQwNTE3MTYwMTMzWhcNMjQwNTE4MTYwMTMzWjAzMTEwLwYDVQQD
EyhiMGFmNDllZDQ4ZmNiMjFjNGE3ZWI4NzkxNWZiZGM5ODMzYTAxY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYGBM7ccsaZEeD41FhdgximGGkx7
frwfT1E1Rc46VZnd6FQMEOoZmwXmS1sun0CxLhOEWuZJwPl2fazSYma7k0CiKnR6
bb6DZP4FGGHOdNZWsYGygOoFiwCiUvwXhWFg0yr5JMKefLotGVehKSepqga0cly3
oSSyKzBgH+YYnm8mLHnZRctfUjLUe0Q3mFcXazHuTH2AJelKMmJEBaVquO0J+SAx
xqWmWLr+fyfqNTCuQhD8SIw5wppWgJuzvWlwj/swUmbGsPgLeQq+rpUfmU3Bs6mB
4JnhYBFgxOkXzcwZBGLEEDcrad4rh7oi0LY9aO7NJjcAA7Po6LlrWo2bhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCvSe1I/LIcSn64eRX73JgzoBzuMB8GA1UdIwQY
MBaAFJTexkEFGwJrlchFkVDKR92uyJZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTExMTMtZWQ4NS00MmIyLWI2NGYt
OWVhNjQ4NjJhOWFiLzEvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTExMTMtZWQ4NS00MmIyLWI2NGYtOWVhNjQ4NjJhOWFi
LzEvbE43R1FRVWJBbXVWeUVXUlVNcEgzYTdJbG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzrIbvhWg
vjoZGneUUwS6mhzD4ePrWA7sAHBASK7/mlfmwJ9R+M3aJesSPdT5dWP0PlyBa2lP
JaTccJfGF4HWNvuPzKq3WWCMscvDjyjyO4qZny+YR0ncT293THM9v0aEssONnRh3
beBYY/18/oZn8Zzlo1wRrc9UaHfPsvhBFXPpG2U0G4eC7Uji4NYmEd4aHTgeoq6Y
55y6fD0T5aFuE8mcD4ZaoJWE9XO078cAfcQEMjFm3leuYyiELnfWYusF4Np9jfSE
AR1ODTe8GEUcJou8vDpE2WMhM/VQhYH88w5bEXRlwo08PNm48WDkg9bhK/U+OI5N
DPEXNSLNZ3UEfQ==
-----END CERTIFICATE-----
Generated at Fri May 17 19:11:58 2024 by rpki-client on console-fra.rpki-client.org