Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File:                     i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier:          9b6OaDxdN5rpAhCEBBc+5s9E7V942pjoPCmQbUkoFYk=
Subject key identifier:   CA:08:43:D0:84:44:DA:9C:4E:38:46:91:99:E8:B5:26:AF:3D:02:82
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer:       /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial:       018F83D97B0F87791591F9DF70869619A0F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 00:00:19 +0000
Manifest this update:     Fri 17 May 2024 00:00:19 +0000
Manifest next update:     Sat 18 May 2024 00:00:19 +0000
Files and hashes:         1: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: 1QJ0R2gCMteN3zI8/0qbXVFcfH4FwzDiQFeeh67WLvQ=)
                          2: lNbdYG0vEw5aI2Y8TZv5BWQqlu4.roa (hash: qmqIAoTYddYOuIvrQaw8qQfelXzkc/5wSuypSj1lYWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 00:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:7b:0f:87:79:15:91:f9:df:70:86:96:19:a0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
        Validity
            Not Before: May 17 00:00:19 2024 GMT
            Not After : May 18 00:00:19 2024 GMT
        Subject: CN=ca0843d08444da9c4e38469199e8b526af3d0282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:76:d1:25:aa:08:2a:2b:dc:18:c9:b4:0a:
                    76:aa:a7:2b:b8:1d:de:b6:1c:dd:79:70:32:fc:86:
                    04:2f:ba:41:b4:8b:b3:15:dc:ee:95:9e:01:52:f3:
                    17:5a:e1:82:1f:dc:3e:13:04:58:e5:1d:25:e6:f1:
                    48:e0:c8:c2:44:83:c0:5d:4f:d5:39:f5:23:af:54:
                    65:2a:b0:01:6b:28:25:51:78:36:93:47:4b:de:4f:
                    64:83:c2:41:0b:a4:01:64:e4:81:fe:a8:66:4a:97:
                    37:e3:19:7c:79:bd:61:30:d4:ff:99:a9:14:e6:70:
                    5f:06:a6:5e:b8:5d:a6:b8:aa:76:38:8e:c9:7a:8e:
                    5f:c6:22:03:a6:5c:5b:77:07:5e:a3:dd:fe:02:56:
                    ed:3e:a3:53:ad:63:69:48:c6:e8:b7:cb:4d:ca:2f:
                    60:0a:f1:10:5f:3a:05:3d:f9:1a:85:02:d9:cb:3f:
                    cb:2f:a3:42:76:a0:e3:8f:5f:91:87:54:c0:66:d7:
                    ca:89:77:8d:76:ac:2a:35:60:26:c4:85:4f:25:3c:
                    9a:da:d3:8c:21:74:47:53:24:3d:82:c8:61:7a:f3:
                    35:d1:cb:5c:8a:04:ca:d7:18:5c:01:64:d5:0a:86:
                    5f:9f:0c:e3:55:3a:e0:c2:77:5a:26:17:4c:b9:75:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:43:D0:84:44:DA:9C:4E:38:46:91:99:E8:B5:26:AF:3D:02:82
            X509v3 Authority Key Identifier:
                keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:80:36:22:e8:85:4f:78:73:79:b7:0e:4e:a1:2f:1f:8b:
         13:ca:db:50:35:0f:60:0e:8a:e3:79:c5:19:1b:62:36:1e:ab:
         e4:f8:93:e3:76:5d:0d:c7:bf:7e:90:3f:cd:20:5d:88:bf:82:
         56:66:5f:90:a4:a1:3c:f5:5e:0a:b9:7f:27:20:ab:fe:94:45:
         70:11:29:e2:9c:8d:3a:7e:4d:e2:dc:83:70:9c:f3:9e:8b:a9:
         5e:03:bd:56:ce:4b:9e:57:41:ca:c2:67:44:5c:87:5b:38:06:
         ee:0b:39:73:3a:24:2b:f3:fa:81:f3:57:8e:2b:88:b3:70:53:
         1b:4c:cf:e0:ef:79:d6:ab:52:92:5d:a1:86:75:a6:c8:42:27:
         f7:c8:49:e0:20:5a:86:1f:68:9b:94:02:98:d4:89:3d:a6:f5:
         33:41:eb:f4:c3:f0:6c:02:28:40:2b:e7:c6:dd:38:32:2e:77:
         7d:e4:00:3c:e4:69:26:7a:41:8b:42:f7:70:c6:74:8a:db:49:
         a9:f6:b9:03:7f:f1:d2:3d:78:51:a8:8f:8d:91:17:99:e9:4c:
         48:81:d0:59:ca:45:dc:e1:38:4d:cd:97:8c:44:18:2a:8e:2c:
         17:97:0c:90:76:aa:80:f1:9e:9d:d3:73:f0:97:9b:e2:5c:bc:
         f5:3f:15:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+D2XsPh3kVkfnfcIaWGaDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjc3MzgxODUxMjQ5MGE1MDBhZDg0M2VhMmFlNzE3ZWYy
MWIxNGMwHhcNMjQwNTE3MDAwMDE5WhcNMjQwNTE4MDAwMDE5WjAzMTEwLwYDVQQD
EyhjYTA4NDNkMDg0NDRkYTljNGUzODQ2OTE5OWU4YjUyNmFmM2QwMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4d20SWqCCor3BjJtAp2qqcruB3e
thzdeXAy/IYEL7pBtIuzFdzulZ4BUvMXWuGCH9w+EwRY5R0l5vFI4MjCRIPAXU/V
OfUjr1RlKrABayglUXg2k0dL3k9kg8JBC6QBZOSB/qhmSpc34xl8eb1hMNT/makU
5nBfBqZeuF2muKp2OI7Jeo5fxiIDplxbdwdeo93+AlbtPqNTrWNpSMbot8tNyi9g
CvEQXzoFPfkahQLZyz/LL6NCdqDjj1+Rh1TAZtfKiXeNdqwqNWAmxIVPJTya2tOM
IXRHUyQ9gshhevM10ctcigTK1xhcAWTVCoZfnwzjVTrgwndaJhdMuXVAYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoIQ9CERNqcTjhGkZnotSavPQKCMB8GA1UdIwQY
MBaAFIu3c4GFEkkKUArYQ+oq5xfvIbFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUt
NTJiM2Y2OGRjMGMyLzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUtNTJiM2Y2OGRjMGMy
LzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJO2ANiLo
hU94c3m3Dk6hLx+LE8rbUDUPYA6K43nFGRtiNh6r5PiT43ZdDce/fpA/zSBdiL+C
VmZfkKShPPVeCrl/JyCr/pRFcBEp4pyNOn5N4tyDcJzznoupXgO9Vs5LnldBysJn
RFyHWzgG7gs5czokK/P6gfNXjiuIs3BTG0zP4O951qtSkl2hhnWmyEIn98hJ4CBa
hh9om5QCmNSJPab1M0Hr9MPwbAIoQCvnxt04Mi53feQAPORpJnpBi0L3cMZ0ittJ
qfa5A3/x0j14UaiPjZEXmelMSIHQWcpF3OE4Tc2XjEQYKo4sF5cMkHaqgPGendNz
8Jeb4ly89T8VOg==
-----END CERTIFICATE-----
Generated at Fri May 17 09:53:25 2024 by rpki-client on console-ams.rpki-client.org