Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File:                     kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier:          9doJP2IxrS61mt0iSj0L8b5bbUIdE5HkVW4ybumyDZk=
Subject key identifier:   DC:02:66:2A:36:71:A9:31:8D:31:84:65:67:57:D3:4A:11:76:A2:E2
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer:       /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial:       018F8823F6621473DC6DFB219B408A397A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: J0nJlAS8YWaeE8-CVsqMHSQOGGU.roa (hash: BgiZc518kP+rsId+whs8FGYn1k4gZxIJtCXkP/otmhg=)
                          2: UIsaIlZSTz4fxX_IN1UmaYBYTpQ.roa (hash: FrNzM0jyqMbkM/2WxV0tzZPvh3BKXAWmbtjG4vwkAfg=)
                          3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: zwLQtQUgy21/w+kgJ7Ym1pDni9lIWYf4GyIVxAexnmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f6:62:14:73:dc:6d:fb:21:9b:40:8a:39:7a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=dc02662a3671a9318d3184656757d34a1176a2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:9c:c9:cc:3a:67:21:2b:35:fc:9e:0e:54:
                    80:57:ed:81:7b:95:71:41:da:1c:88:1c:a4:72:d8:
                    67:51:c8:7e:d3:f6:dd:8c:05:3e:90:8f:a1:27:66:
                    fe:40:92:78:3d:04:6a:d2:85:ed:0d:92:59:3f:7a:
                    20:66:06:77:d8:f8:f2:de:00:ad:72:c9:c5:a2:8c:
                    cc:e1:c2:55:03:35:cf:12:32:7d:3a:77:1b:d8:d4:
                    94:5b:56:3a:21:78:ec:d7:f9:5f:1e:e6:af:b9:59:
                    4b:a5:a0:b5:a4:7e:46:ec:e1:4d:b9:30:57:b7:7e:
                    47:ff:22:fb:c1:49:2b:44:f4:3f:d4:66:56:e5:cf:
                    ce:12:11:9b:28:89:44:2a:67:8b:f2:e2:f2:8e:42:
                    5f:c5:cf:53:b6:ee:b4:52:5c:be:df:ed:a1:1d:9e:
                    60:3d:e1:05:e2:a4:04:58:20:bc:f6:5d:b9:2c:74:
                    b7:bf:b2:43:7b:c5:e0:93:c2:98:fc:1b:b1:a1:82:
                    b1:3e:62:9d:16:06:a1:a9:b5:a9:1c:1f:3e:62:e0:
                    62:da:06:8b:25:4f:ab:a5:73:b1:47:ae:3f:6c:39:
                    0c:72:eb:93:95:67:5e:cb:40:90:03:f4:63:64:1b:
                    b6:e4:ae:4c:8d:9a:da:b1:6a:c0:8b:7c:af:39:88:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:02:66:2A:36:71:A9:31:8D:31:84:65:67:57:D3:4A:11:76:A2:E2
            X509v3 Authority Key Identifier:
                keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:b6:19:f1:74:28:a1:73:9c:89:ca:7f:c0:ab:11:75:e7:
         b8:13:5b:00:aa:a4:04:b4:09:5a:c7:bb:6b:18:fb:ab:2f:e0:
         b1:9d:72:af:5f:29:09:f5:f6:d1:5e:b0:d0:f9:18:cd:1b:9d:
         19:30:1d:52:44:ad:2b:cc:6b:7e:6f:12:27:e8:41:93:6b:2f:
         44:c6:3b:5e:f5:e9:8b:d3:cd:9f:b9:c8:4c:02:c2:ca:61:c5:
         86:4e:b6:e6:ae:2f:46:51:30:9f:da:22:6e:bd:34:b9:61:06:
         eb:28:e4:94:b3:49:44:61:98:45:ed:07:7a:85:09:16:5e:f0:
         00:a9:b4:26:c9:1f:c4:7f:24:06:4f:41:ad:33:8f:9a:5b:c9:
         ea:39:c3:23:5e:9a:b3:8f:2a:ff:bb:8a:9e:69:8b:6d:c3:ee:
         c7:87:47:1e:68:ec:31:e3:d5:fa:60:9f:2a:f9:41:fb:9c:ab:
         58:19:14:ee:e3:78:0b:3e:bb:62:7b:2e:fb:47:df:36:d8:a8:
         c4:d4:52:46:f9:e9:8a:91:28:a0:ae:21:11:b5:13:07:98:d4:
         f1:19:88:d6:34:65:16:7a:26:d7:7b:c7:c4:2f:52:e4:76:9f:
         51:87:aa:67:31:a3:4a:60:ae:f4:16:46:55:71:92:17:ce:06:
         2d:f5:a1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II/ZiFHPcbfshm0CKOXp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx
MzQwZGYwHhcNMjQwNTE3MjAwMDA5WhcNMjQwNTE4MjAwMDA5WjAzMTEwLwYDVQQD
EyhkYzAyNjYyYTM2NzFhOTMxOGQzMTg0NjU2NzU3ZDM0YTExNzZhMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wicycw6ZyErNfyeDlSAV+2Be5Vx
QdociBykcthnUch+0/bdjAU+kI+hJ2b+QJJ4PQRq0oXtDZJZP3ogZgZ32Pjy3gCt
csnFoozM4cJVAzXPEjJ9Oncb2NSUW1Y6IXjs1/lfHuavuVlLpaC1pH5G7OFNuTBX
t35H/yL7wUkrRPQ/1GZW5c/OEhGbKIlEKmeL8uLyjkJfxc9Ttu60Uly+3+2hHZ5g
PeEF4qQEWCC89l25LHS3v7JDe8Xgk8KY/BuxoYKxPmKdFgahqbWpHB8+YuBi2gaL
JU+rpXOxR64/bDkMcuuTlWdey0CQA/RjZBu25K5MjZrasWrAi3yvOYiqjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwCZio2cakxjTGEZWdX00oRdqLiMB8GA1UdIwQY
MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt
NTA4MmMyOGI3MTVmLzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm
LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/q2GfF0
KKFznInKf8CrEXXnuBNbAKqkBLQJWse7axj7qy/gsZ1yr18pCfX20V6w0PkYzRud
GTAdUkStK8xrfm8SJ+hBk2svRMY7XvXpi9PNn7nITALCymHFhk625q4vRlEwn9oi
br00uWEG6yjklLNJRGGYRe0HeoUJFl7wAKm0JskfxH8kBk9BrTOPmlvJ6jnDI16a
s48q/7uKnmmLbcPux4dHHmjsMePV+mCfKvlB+5yrWBkU7uN4Cz67Ynsu+0ffNtio
xNRSRvnpipEooK4hEbUTB5jU8RmI1jRlFnom13vHxC9S5HafUYeqZzGjSmCu9BZG
VXGSF84GLfWh1Q==
-----END CERTIFICATE-----
Generated at Sat May 18 00:36:35 2024 by rpki-client on console-ams.rpki-client.org