Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File:                     ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier:          Csbpyn/UbkkIWbPMYQG/MWazVTdYVPjPshNdHbg8tTg=
Subject key identifier:   1E:58:CE:05:B0:A3:3C:72:4E:CC:ED:E5:C2:4D:39:CB:AF:29:62:0A
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer:       /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial:       018F87ED9CB0614340B494D608F6EC5B586C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: GRMT4YzUD721_HXV7R0Cm0DYeDc.roa (hash: HTgP63VsembF9gZ8a2HF28H27f9lfeAkaOA2D7ANKxk=)
                          2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: Kd2/VeardbuqMmdrGl02J7YnZ0bMdUn0GsZMVIYSKnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9c:b0:61:43:40:b4:94:d6:08:f6:ec:5b:58:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=1e58ce05b0a33c724eccede5c24d39cbaf29620a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:7f:62:1b:ee:88:b2:4e:f8:9c:0a:60:18:
                    c9:8b:a6:92:d9:96:d3:af:43:7b:f9:98:82:07:8c:
                    f9:11:44:a1:bb:da:1d:d7:69:11:b5:12:8a:25:f8:
                    1c:e0:f7:d5:5e:61:0c:ba:3f:09:6c:3d:46:9c:a0:
                    dc:12:40:51:de:75:63:4d:4b:35:18:d8:a8:22:fc:
                    b4:f1:ca:1c:e6:56:fb:c4:b0:67:bf:ea:52:b5:aa:
                    9e:75:73:42:64:d0:75:d1:20:bc:5c:6e:5c:0a:c3:
                    16:44:da:de:81:3d:72:8c:d4:a3:98:45:aa:a1:4c:
                    d7:8f:62:6f:19:70:3b:ee:e6:8f:4e:d6:53:21:58:
                    7b:17:22:7f:3b:94:57:9a:ef:a3:9d:3a:66:e2:33:
                    d1:9d:63:c4:a6:4e:96:ad:12:9b:88:5d:da:30:ad:
                    58:90:c7:1f:8e:9c:25:ab:1d:3e:e7:f5:c6:3c:21:
                    53:6e:ca:8c:4e:af:57:c7:8a:c7:26:de:12:2b:99:
                    0a:22:b6:73:41:d9:f0:93:ae:59:64:3b:9e:03:8b:
                    2b:e0:5a:4b:f9:e0:e4:e0:75:8e:c3:68:a9:f8:3f:
                    21:4c:67:95:0f:c3:f4:b3:9a:d9:8b:89:f9:97:14:
                    cc:f6:5e:16:17:cc:e2:d7:f8:6b:78:b8:86:70:0e:
                    af:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:CE:05:B0:A3:3C:72:4E:CC:ED:E5:C2:4D:39:CB:AF:29:62:0A
            X509v3 Authority Key Identifier:
                keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:68:43:fc:25:b1:29:ff:c0:83:86:51:b9:81:46:48:a6:da:
         9e:6d:d6:c6:57:be:7f:87:e2:e8:6b:9b:e0:fa:dd:61:cf:1e:
         99:9f:6a:97:84:1e:ec:dd:1c:33:77:38:e8:d3:b8:a7:62:da:
         43:3f:4f:8e:70:16:f4:37:50:09:b2:2d:8d:16:71:8d:bd:72:
         d4:9f:5a:8a:7a:13:99:d1:73:0b:77:16:d1:43:ab:a2:56:dd:
         f3:01:c2:0b:28:16:dc:ab:ca:59:c6:d1:4f:e5:4a:03:a4:b6:
         77:79:b9:04:44:27:49:b9:15:c2:b2:7f:1a:c5:88:28:2b:49:
         f3:64:4f:3e:f8:73:86:22:84:36:53:ed:b0:23:f7:84:04:68:
         12:8c:42:5b:80:28:2a:e3:20:6e:7b:fb:f7:a3:2c:8d:59:1a:
         54:ee:bd:d1:31:40:cb:0d:83:89:82:15:e0:2a:8d:c7:f4:11:
         73:08:08:2e:4e:5c:ad:1d:15:03:77:a0:2b:3c:38:ac:19:22:
         b8:ff:ec:17:2e:94:3f:09:6b:60:50:de:b8:90:d2:41:dc:e6:
         60:0e:68:ee:be:22:81:18:2a:f3:36:bb:74:54:3e:04:9a:b1:
         4c:7a:4d:da:66:b0:18:16:08:45:e5:6d:60:a7:a4:49:f2:7f:
         e3:08:f8:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7ZywYUNAtJTWCPbsW1hsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MGIxZjg3NzJjNmVmNDg0ZTJjZDJkNjYyNjNmMmVmOThm
YTM5NjgwHhcNMjQwNTE3MTkwMDQ3WhcNMjQwNTE4MTkwMDQ3WjAzMTEwLwYDVQQD
EygxZTU4Y2UwNWIwYTMzYzcyNGVjY2VkZTVjMjRkMzljYmFmMjk2MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO5/YhvuiLJO+JwKYBjJi6aS2ZbT
r0N7+ZiCB4z5EUShu9od12kRtRKKJfgc4PfVXmEMuj8JbD1GnKDcEkBR3nVjTUs1
GNioIvy08coc5lb7xLBnv+pStaqedXNCZNB10SC8XG5cCsMWRNregT1yjNSjmEWq
oUzXj2JvGXA77uaPTtZTIVh7FyJ/O5RXmu+jnTpm4jPRnWPEpk6WrRKbiF3aMK1Y
kMcfjpwlqx0+5/XGPCFTbsqMTq9Xx4rHJt4SK5kKIrZzQdnwk65ZZDueA4sr4FpL
+eDk4HWOw2ip+D8hTGeVD8P0s5rZi4n5lxTM9l4WF8zi1/hreLiGcA6vlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5YzgWwozxyTszt5cJNOcuvKWIKMB8GA1UdIwQY
MBaAFGQLH4dyxu9ITizS1mJj8u+Y+jloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQt
Mzg3YWZhMGE1MzRmLzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQtMzg3YWZhMGE1MzRm
LzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2hD/CWx
Kf/Ag4ZRuYFGSKbanm3Wxle+f4fi6Gub4PrdYc8emZ9ql4Qe7N0cM3c46NO4p2La
Qz9PjnAW9DdQCbItjRZxjb1y1J9ainoTmdFzC3cW0UOrolbd8wHCCygW3KvKWcbR
T+VKA6S2d3m5BEQnSbkVwrJ/GsWIKCtJ82RPPvhzhiKENlPtsCP3hARoEoxCW4Ao
KuMgbnv796MsjVkaVO690TFAyw2DiYIV4CqNx/QRcwgILk5crR0VA3egKzw4rBki
uP/sFy6UPwlrYFDeuJDSQdzmYA5o7r4igRgq8za7dFQ+BJqxTHpN2mawGBYIReVt
YKekSfJ/4wj4oQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:18 2024 by rpki-client on console-ams.rpki-client.org