Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.mft
File:                     kzSoL9wI8OjeXYSNN34Mxdl3mb8.mft (raw, json)
Hash identifier:          lZk/z3Q27owcuMjVC0bM2qzrv8c2d57b1LUbjQI45CQ=
Subject key identifier:   59:11:23:E7:8F:53:D7:5A:B0:32:0D:77:2C:72:FC:BC:F0:F3:6B:FE
Authority key identifier: 93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
Certificate issuer:       /CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Certificate serial:       018F87B6601F322F784AEA7AF3E6F0DDBF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:27 +0000
Manifest this update:     Fri 17 May 2024 18:00:27 +0000
Manifest next update:     Sat 18 May 2024 18:00:27 +0000
Files and hashes:         1: D63W_9WXibQkWLzeYyePg-FdZNU.roa (hash: 3m5Cq/cLXNmMfbSNuSs7vVEQTIJLdywYNliZqe7fs80=)
                          2: kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl (hash: 9Unn7QFUpEEI74Mq8fRjws3O5otrKpYj5wMpl6ozbIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:60:1f:32:2f:78:4a:ea:7a:f3:e6:f0:dd:bf:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
        Validity
            Not Before: May 17 18:00:27 2024 GMT
            Not After : May 18 18:00:27 2024 GMT
        Subject: CN=591123e78f53d75ab0320d772c72fcbcf0f36bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:81:9d:8f:5e:07:88:54:b8:9d:20:58:72:
                    7f:d1:33:80:51:e4:e0:bb:26:76:ec:63:e5:c9:b5:
                    7a:d7:f3:98:d1:43:73:fb:e5:49:16:8d:f1:e0:f9:
                    b2:6a:49:b2:6a:aa:3c:0b:a4:09:e1:4f:a0:dc:79:
                    b0:f4:33:ec:d4:ef:fa:f8:3b:db:2e:97:9e:19:8b:
                    65:0c:18:a5:a4:c1:bd:ea:99:44:5a:f0:89:43:40:
                    dc:3b:3d:28:b4:04:af:c6:bb:f1:7a:05:6c:cb:ca:
                    40:9a:5a:77:c2:d6:73:23:39:61:ae:a8:d2:31:c8:
                    83:eb:a2:13:c3:3d:de:38:89:46:3b:42:bd:ee:25:
                    02:79:5a:fe:57:ad:dd:75:55:83:0c:04:ec:80:b5:
                    c4:6a:0c:16:a9:d8:e8:79:43:58:7f:fb:63:a6:65:
                    a2:a2:80:81:3c:ff:7c:b1:30:5b:97:10:39:80:eb:
                    a9:a7:76:75:fe:a6:d1:d9:d6:bf:cd:64:e3:aa:b6:
                    c0:51:d9:8e:e4:c2:bc:a1:e4:79:bb:92:fb:c3:6d:
                    42:4d:df:bc:38:f5:94:74:be:f0:a8:79:0a:29:32:
                    3a:08:24:d1:e0:21:6f:fd:3c:38:7f:61:97:f1:99:
                    2e:9b:b1:1d:26:b7:2d:fc:dc:5b:2e:0b:57:89:17:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:11:23:E7:8F:53:D7:5A:B0:32:0D:77:2C:72:FC:BC:F0:F3:6B:FE
            X509v3 Authority Key Identifier:
                keyid:93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:67:c4:53:75:12:c9:bd:3e:eb:e2:dc:14:a1:fd:85:85:3a:
         a2:c4:0c:9f:88:8d:13:8a:79:0b:f0:d3:d2:36:2b:79:fe:43:
         10:20:7c:c6:c2:fa:dd:46:94:92:3b:cf:50:ef:ce:9b:d9:09:
         c5:71:75:2f:66:e2:0d:54:0c:48:da:e4:12:eb:5f:b3:b5:0f:
         71:8f:aa:0f:e4:d9:a6:1f:52:1f:b2:33:67:79:77:6a:72:b3:
         dd:dc:56:9c:55:2d:2c:32:bb:a4:b0:91:e1:96:23:ce:8a:2d:
         c6:c5:ad:be:e8:fa:78:58:57:2a:1d:f0:e7:ed:45:64:76:9e:
         d0:7d:cc:d5:fb:bb:03:76:51:97:22:6c:1a:b8:84:a5:fa:29:
         78:ad:3d:b5:18:89:ca:b5:03:ae:cf:58:61:31:72:82:d6:03:
         1b:15:7a:96:63:71:b5:2e:d0:98:f3:20:f3:0f:56:30:b3:9d:
         b7:71:eb:ba:f8:9e:2e:ce:2b:41:ec:d0:59:64:fc:f5:38:51:
         38:f0:a1:e8:38:fc:c7:90:1d:27:14:35:57:37:83:82:95:d6:
         a1:6b:28:ce:0c:db:5f:55:16:ff:bc:49:bc:9a:3a:84:a5:91:
         24:05:52:df:2d:eb:d6:0d:00:2a:85:f7:51:a6:a4:a6:84:13:
         76:27:af:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtmAfMi94Sup68+bw3b+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzRhODJmZGMwOGYwZThkZTVkODQ4ZDM3N2UwY2M1ZDk3
Nzk5YmYwHhcNMjQwNTE3MTgwMDI3WhcNMjQwNTE4MTgwMDI3WjAzMTEwLwYDVQQD
Eyg1OTExMjNlNzhmNTNkNzVhYjAzMjBkNzcyYzcyZmNiY2YwZjM2YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjeBnY9eB4hUuJ0gWHJ/0TOAUeTg
uyZ27GPlybV61/OY0UNz++VJFo3x4Pmyakmyaqo8C6QJ4U+g3Hmw9DPs1O/6+Dvb
LpeeGYtlDBilpMG96plEWvCJQ0DcOz0otASvxrvxegVsy8pAmlp3wtZzIzlhrqjS
MciD66ITwz3eOIlGO0K97iUCeVr+V63ddVWDDATsgLXEagwWqdjoeUNYf/tjpmWi
ooCBPP98sTBblxA5gOupp3Z1/qbR2da/zWTjqrbAUdmO5MK8oeR5u5L7w21CTd+8
OPWUdL7wqHkKKTI6CCTR4CFv/Tw4f2GX8Zkum7EdJrct/NxbLgtXiRcTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkRI+ePU9dasDINdyxy/Lzw82v+MB8GA1UdIwQY
MBaAFJM0qC/cCPDo3l2EjTd+DMXZd5m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pTb0w5d0k4T2plWFlTTk4zNE14ZGwzbWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjZlN2UtYWIxZC00ZGE1LTljOTYt
ZmY2OGU5MjI1ZjdkLzEva3pTb0w5d0k4T2plWFlTTk4zNE14ZGwzbWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iYjZlN2UtYWIxZC00ZGE1LTljOTYtZmY2OGU5MjI1Zjdk
LzEva3pTb0w5d0k4T2plWFlTTk4zNE14ZGwzbWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2fEU3US
yb0+6+LcFKH9hYU6osQMn4iNE4p5C/DT0jYref5DECB8xsL63UaUkjvPUO/Om9kJ
xXF1L2biDVQMSNrkEutfs7UPcY+qD+TZph9SH7IzZ3l3anKz3dxWnFUtLDK7pLCR
4ZYjzootxsWtvuj6eFhXKh3w5+1FZHae0H3M1fu7A3ZRlyJsGriEpfopeK09tRiJ
yrUDrs9YYTFygtYDGxV6lmNxtS7QmPMg8w9WMLOdt3HruvieLs4rQezQWWT89ThR
OPCh6Dj8x5AdJxQ1VzeDgpXWoWsozgzbX1UW/7xJvJo6hKWRJAVS3y3r1g0AKoX3
UaakpoQTdievDQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:54 2024 by rpki-client on console-fra.rpki-client.org