Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File:                     lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier:          F4xaZ4NHYdnymYzqiMi74P7B5Omm/Zs4mRSRGamLoGs=
Subject key identifier:   DE:B0:B7:F6:85:47:BA:26:B2:C7:83:BE:95:C3:63:71:20:90:F5:EF
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer:       /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial:       018F8749D723F3E6C8BB08739A4AB6BCC728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: i0F4KlbSSU6rw6vcDyMO1qm5wYo.roa (hash: 3OAvRLeHMrzZ2E6ssjVSxFSqHC9n8ch1SP2wQIMj8og=)
                          2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: /9tnq+5T4XKETIOSgE0mmFhucOJ+HoJUhmgpWtI4R08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d7:23:f3:e6:c8:bb:08:73:9a:4a:b6:bc:c7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=deb0b7f68547ba26b2c783be95c363712090f5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:21:f4:0e:64:f7:29:5c:0f:1f:3b:2e:cc:
                    5f:bc:80:c9:a4:4f:ca:86:30:86:e4:97:a2:63:9c:
                    83:c8:26:55:50:99:bc:83:a9:08:5b:50:28:ca:6c:
                    2b:b6:dc:65:21:9f:23:80:44:9a:18:ca:c3:4d:f4:
                    e2:cb:cb:9b:78:12:df:3d:99:a7:ee:7f:cd:2b:94:
                    52:32:7d:a1:58:3e:10:87:ae:ce:6b:2b:a8:a9:da:
                    eb:7d:95:1a:c2:5f:ac:ce:36:3e:8c:24:5a:f3:68:
                    0f:a0:84:6e:86:90:7b:f8:21:5a:ce:67:b7:e4:62:
                    2c:12:d1:67:5a:0c:7b:57:81:90:0c:2d:b0:d8:ba:
                    02:84:f1:ad:3b:51:8d:93:9b:5c:6c:e8:99:f2:5f:
                    26:51:fb:5e:b4:39:54:f5:5d:6c:80:33:53:a6:0f:
                    ca:41:6c:51:bd:17:64:4f:37:a4:42:0f:c7:bd:4c:
                    15:23:3a:8d:6a:00:4f:dc:f6:c4:ab:f9:eb:16:30:
                    20:1e:c4:43:45:65:96:ee:c4:6b:70:25:af:09:70:
                    8e:09:8f:b6:a9:8c:c5:a3:7d:e1:67:86:3d:96:a7:
                    e9:e2:a9:0e:46:c1:4c:5f:7e:19:a0:86:bf:a9:31:
                    f8:29:73:4a:de:85:29:6c:c0:6b:e6:d0:ae:07:ab:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B0:B7:F6:85:47:BA:26:B2:C7:83:BE:95:C3:63:71:20:90:F5:EF
            X509v3 Authority Key Identifier:
                keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:dd:f1:d5:6b:79:f1:e6:0e:fe:aa:24:20:da:3f:28:c9:
         9c:42:bb:d8:ed:f0:40:b2:c9:19:70:d5:70:6b:c9:a5:1a:ab:
         19:7a:a4:25:d5:32:c2:c6:88:c5:d2:1d:9e:0c:dd:45:8d:b9:
         27:ce:c1:d4:1b:e7:40:17:aa:1c:f1:fd:55:64:be:dc:90:b2:
         4d:6c:0c:a8:b5:d9:fc:31:9d:3b:9e:9b:da:6d:7f:64:26:e1:
         d6:04:cb:6d:63:bd:0c:b5:03:54:60:a0:58:29:b4:c1:07:ec:
         cf:c2:5e:08:35:69:26:f0:b7:3b:41:8d:1b:b8:97:01:81:7c:
         13:c1:62:3f:f4:f3:6f:05:d6:7d:7a:8b:b4:77:96:91:46:61:
         82:39:e8:50:7b:b4:77:68:11:a1:3d:7a:b7:0b:5a:3a:94:c1:
         74:5a:fd:35:6d:13:75:66:4a:d6:82:ee:13:4a:78:56:9f:ba:
         da:ab:07:94:78:6f:b2:ee:4b:50:67:9e:4f:81:f4:c0:0f:75:
         f6:c2:77:1e:95:ae:46:03:35:6e:ee:29:f9:1b:61:20:02:94:
         47:7c:ee:9a:fd:be:29:b9:6e:ee:ed:64:7a:08:0a:d3:60:0a:
         c3:e5:6b:df:f0:f0:04:76:11:08:d0:e1:3c:f1:a0:39:8f:d5:
         a8:b1:82:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdcj8+bIuwhzmkq2vMcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3
YjBiMDkwHhcNMjQwNTE3MTYwMTU0WhcNMjQwNTE4MTYwMTU0WjAzMTEwLwYDVQQD
EyhkZWIwYjdmNjg1NDdiYTI2YjJjNzgzYmU5NWMzNjM3MTIwOTBmNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5gh9A5k9ylcDx87LsxfvIDJpE/K
hjCG5JeiY5yDyCZVUJm8g6kIW1AoymwrttxlIZ8jgESaGMrDTfTiy8ubeBLfPZmn
7n/NK5RSMn2hWD4Qh67OayuoqdrrfZUawl+szjY+jCRa82gPoIRuhpB7+CFazme3
5GIsEtFnWgx7V4GQDC2w2LoChPGtO1GNk5tcbOiZ8l8mUftetDlU9V1sgDNTpg/K
QWxRvRdkTzekQg/HvUwVIzqNagBP3PbEq/nrFjAgHsRDRWWW7sRrcCWvCXCOCY+2
qYzFo33hZ4Y9lqfp4qkORsFMX34ZoIa/qTH4KXNK3oUpbMBr5tCuB6uMwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6wt/aFR7omsseDvpXDY3EgkPXvMB8GA1UdIwQY
MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt
YTgyZjY1OGEyYWExLzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx
LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmzd8dVr
efHmDv6qJCDaPyjJnEK72O3wQLLJGXDVcGvJpRqrGXqkJdUywsaIxdIdngzdRY25
J87B1BvnQBeqHPH9VWS+3JCyTWwMqLXZ/DGdO56b2m1/ZCbh1gTLbWO9DLUDVGCg
WCm0wQfsz8JeCDVpJvC3O0GNG7iXAYF8E8FiP/TzbwXWfXqLtHeWkUZhgjnoUHu0
d2gRoT16twtaOpTBdFr9NW0TdWZK1oLuE0p4Vp+62qsHlHhvsu5LUGeeT4H0wA91
9sJ3HpWuRgM1bu4p+RthIAKUR3zumv2+Kblu7u1keggK02AKw+Vr3/DwBHYRCNDh
PPGgOY/VqLGCww==
-----END CERTIFICATE-----
Generated at Fri May 17 19:13:54 2024 by rpki-client on console-fra.rpki-client.org