Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          LNHyT6ncbr3r38JggXmGWdn3sXQilHpL/pyPxo6Xqdc=
Subject key identifier:   51:BC:E4:6C:4B:C9:4E:98:41:4E:4B:75:88:82:1B:A6:95:D6:76:85
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       018F874AFA35A6C183FCF40D3E3AEA4F3938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: Gg6oisODn2qTRlYfJ5GXCjCwAjI.roa (hash: ZvhQWlrWAOHGJkfGnTRwDVkkNCW5DQDDMDZroYNA1JI=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: UggDiN3ZoMvv244T8acndbgkXLCHgjRSAFa57xn6AVQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fa:35:a6:c1:83:fc:f4:0d:3e:3a:ea:4f:39:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=51bce46c4bc94e98414e4b7588821ba695d67685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:9e:45:d2:3d:b5:5a:02:73:db:0a:73:02:
                    12:8d:15:e6:04:cb:f7:2b:e2:d9:98:2c:98:e8:2d:
                    2c:9a:e1:55:7a:56:6f:4f:24:8d:69:16:fe:07:fd:
                    c8:b8:fe:c7:23:94:e2:82:7a:63:f7:74:29:94:b4:
                    52:f4:3a:97:51:e3:d8:13:ed:b1:61:9c:9a:ea:c4:
                    19:0a:4b:90:c5:53:f4:ea:c2:48:d2:b3:77:ab:04:
                    24:c0:88:64:7a:94:2a:7c:2b:97:43:37:9f:26:c2:
                    dc:c4:ca:fe:c9:68:6c:d5:81:b4:78:34:5c:58:50:
                    18:b1:b6:d8:af:18:b1:7e:0d:61:43:6d:aa:d6:5c:
                    ec:ec:b8:b1:d2:50:33:83:10:53:c1:31:27:5d:9d:
                    47:4e:36:aa:33:db:6c:ee:f4:b8:8b:f0:5e:63:99:
                    bf:11:72:15:84:69:9e:73:84:90:9c:7d:82:bc:bb:
                    24:1c:8b:7a:20:f5:f9:16:36:d2:53:76:66:7e:f2:
                    25:ca:49:91:c1:81:a4:10:05:e0:97:5e:59:a1:01:
                    18:15:81:66:07:26:41:00:dc:0a:df:ad:58:69:a8:
                    86:26:33:65:78:c3:eb:05:92:79:11:a0:e2:be:56:
                    b6:78:aa:63:cd:56:3c:98:ef:26:7f:93:86:5c:e8:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:E4:6C:4B:C9:4E:98:41:4E:4B:75:88:82:1B:A6:95:D6:76:85
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:90:da:56:54:19:70:7e:db:07:22:f1:89:66:6e:5a:26:d1:
         94:41:f9:90:28:86:f0:12:e1:36:61:ff:39:b5:a0:be:40:53:
         08:d3:33:41:57:61:44:1d:c6:fc:c8:3b:dd:d8:29:df:09:e7:
         7f:5d:13:fb:40:f5:23:d2:a3:6d:37:5d:93:60:c2:f7:60:65:
         c6:34:94:68:c1:4e:8b:83:cf:b4:6c:c6:0f:d8:cb:8e:29:62:
         3d:9d:66:5a:67:5a:75:19:8e:7c:99:05:4b:3c:d7:02:67:ea:
         d8:04:a1:95:6e:33:af:cb:18:85:a0:86:1e:94:7b:8e:df:df:
         01:6a:ac:9a:3c:9b:9d:e4:69:d5:17:af:f1:eb:5a:29:da:2c:
         79:b0:7c:20:4b:37:17:b7:df:59:09:b2:41:94:9f:86:26:1d:
         83:4a:f2:9a:76:f9:d6:8a:b1:8d:38:61:2f:2f:dd:b2:61:56:
         0d:55:02:c0:71:e5:cf:2d:aa:c5:df:2d:8c:1d:85:6e:91:db:
         74:ef:af:bb:4b:9c:ea:87:d4:8a:af:c1:cd:5e:0e:26:ba:0f:
         87:6b:17:2c:35:e7:79:d5:26:ae:85:bc:89:d7:60:f8:0b:c3:
         41:d9:e7:a3:a8:f8:b7:69:78:99:9d:b5:37:8c:e6:54:f4:d1:
         05:41:86:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSvo1psGD/PQNPjrqTzk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMDJmNWY0OGUxMjJlNTU2ZjliNTk4YWQ5YTYyZDNjM2Ux
NDQxOWEwHhcNMjQwNTE3MTYwMzA4WhcNMjQwNTE4MTYwMzA4WjAzMTEwLwYDVQQD
Eyg1MWJjZTQ2YzRiYzk0ZTk4NDE0ZTRiNzU4ODgyMWJhNjk1ZDY3Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvCeRdI9tVoCc9sKcwISjRXmBMv3
K+LZmCyY6C0smuFVelZvTySNaRb+B/3IuP7HI5Tignpj93QplLRS9DqXUePYE+2x
YZya6sQZCkuQxVP06sJI0rN3qwQkwIhkepQqfCuXQzefJsLcxMr+yWhs1YG0eDRc
WFAYsbbYrxixfg1hQ22q1lzs7Lix0lAzgxBTwTEnXZ1HTjaqM9ts7vS4i/BeY5m/
EXIVhGmec4SQnH2CvLskHIt6IPX5FjbSU3ZmfvIlykmRwYGkEAXgl15ZoQEYFYFm
ByZBANwK361YaaiGJjNleMPrBZJ5EaDivla2eKpjzVY8mO8mf5OGXOjubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG85GxLyU6YQU5LdYiCG6aV1naFMB8GA1UdIwQY
MBaAFM8C9fSOEi5Vb5tZitmmLTw+FEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvendMMTlJNFNMbFZ2bTFtSzJhWXRQRDRVUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84ZWMzYTktY2VmMi00YmY4LWEwNmEt
N2UyYzRiOTc1YjM5LzEvendMMTlJNFNMbFZ2bTFtSzJhWXRQRDRVUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84ZWMzYTktY2VmMi00YmY4LWEwNmEtN2UyYzRiOTc1YjM5
LzEvendMMTlJNFNMbFZ2bTFtSzJhWXRQRDRVUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZDaVlQZ
cH7bByLxiWZuWibRlEH5kCiG8BLhNmH/ObWgvkBTCNMzQVdhRB3G/Mg73dgp3wnn
f10T+0D1I9KjbTddk2DC92BlxjSUaMFOi4PPtGzGD9jLjiliPZ1mWmdadRmOfJkF
SzzXAmfq2AShlW4zr8sYhaCGHpR7jt/fAWqsmjybneRp1Rev8etaKdosebB8IEs3
F7ffWQmyQZSfhiYdg0rymnb51oqxjThhLy/dsmFWDVUCwHHlzy2qxd8tjB2FbpHb
dO+vu0uc6ofUiq/BzV4OJroPh2sXLDXnedUmroW8iddg+AvDQdnno6j4t2l4mZ21
N4zmVPTRBUGGOw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:43:48 2024 by rpki-client on console-fra.rpki-client.org