Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          Rcdw5lEVxVfUGkAea4lIjfkEGmq6dBFQYfw5GPNjZyw=
Subject key identifier:   B3:58:8E:54:78:B5:FE:6F:90:68:51:77:32:C2:27:C9:9A:40:47:8D
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       018F89373337E347C97066B594B800663B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          1178
Signing time:             Sat 18 May 2024 01:00:47 +0000
Manifest this update:     Sat 18 May 2024 01:00:47 +0000
Manifest next update:     Sun 19 May 2024 01:00:47 +0000
Files and hashes:         1: 1BNIV5NkRTj5CjNR6dxPoCeqQLk.roa (hash: OQ1K1b23vvC31SAfUJDSqdcbbcqYisms5QfhHvMan2s=)
                          2: HzEaWN2wE3J6qMUDkQEtIVh2LZA.roa (hash: pvvGuSDldZ1sLgH7atKBPNn58A/CP7fzdGK+l/XFsVM=)
                          3: SdtEv5h89KVftBAvhjsPcXjFUgE.roa (hash: Vwyf4J4z5TjpDEBV9qMjzmVvI9/CJvK7GD0NH6CC7sU=)
                          4: qKs1YWZUrZZ3gjRwE3dglX4BIeM.roa (hash: +LfEhJeRaLV5Z8wfcDeb4S7e0iNY1GBXp3UGrFDI7is=)
                          5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: 1ouhe0+eqfLeVZrFqxlWLLPG2JdYPXL3IrOHJhCS9PY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:33:37:e3:47:c9:70:66:b5:94:b8:00:66:3b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: May 18 01:00:47 2024 GMT
            Not After : May 19 01:00:47 2024 GMT
        Subject: CN=b3588e5478b5fe6f9068517732c227c99a40478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:bc:d9:f0:5a:a6:21:11:2d:46:a3:43:13:
                    ac:88:8b:1c:f4:60:b9:b3:d6:df:59:48:86:0a:88:
                    5a:24:a0:ac:af:0d:48:04:25:ce:ed:d6:b5:bc:18:
                    14:40:8e:89:4e:7a:39:57:21:c3:ee:71:f6:f4:50:
                    4c:3c:c9:1b:43:af:9a:be:50:af:07:40:4e:6a:d4:
                    51:ab:b4:16:3c:bc:aa:8c:ef:14:b2:06:e6:0b:05:
                    18:83:78:cb:06:53:4c:ef:a3:a4:31:40:7b:e4:e3:
                    3f:6e:d0:4d:8a:f8:2d:85:14:0d:c7:14:92:ec:b8:
                    33:97:5a:56:c3:8b:d0:f2:66:bc:63:db:c2:7b:28:
                    fb:cb:6a:a1:07:c6:ab:36:24:56:36:1a:0d:8a:64:
                    79:f4:12:5c:6b:a6:e2:7e:c8:66:db:c7:bb:d4:8f:
                    84:60:d7:ec:e6:74:d7:6d:2b:90:4c:11:e6:e9:41:
                    5e:d8:79:df:b7:ac:82:b1:35:2d:25:4e:43:28:c3:
                    84:2c:36:d4:56:6c:8d:59:81:c5:a0:8f:ec:12:4f:
                    6d:69:83:a3:3b:0c:bc:38:bd:50:6e:87:09:2f:c1:
                    d9:ea:96:21:94:22:83:0f:ef:f5:c6:fc:63:8c:ca:
                    c9:2a:62:62:81:f5:f7:57:5f:c6:1d:23:80:7d:45:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:8E:54:78:B5:FE:6F:90:68:51:77:32:C2:27:C9:9A:40:47:8D
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:bb:c6:74:42:4d:43:1c:cc:06:50:fa:62:97:d9:d1:d0:
         1a:08:ec:d2:dd:60:0e:80:bb:b0:7b:53:9b:bd:90:0a:e3:2e:
         15:6b:da:fe:83:af:bf:18:ea:18:d8:2e:65:74:71:2a:57:01:
         49:1e:8b:8a:ee:1a:27:4a:fd:20:bc:44:3f:6e:d9:f8:41:a3:
         27:1b:eb:71:62:d8:c4:be:d4:a2:6e:af:e3:87:da:a4:1e:2c:
         70:48:01:35:84:d1:66:c9:23:60:81:67:c7:23:aa:ad:09:c9:
         83:b8:63:13:71:3a:a7:4e:e2:fd:d0:af:55:82:c9:4a:25:dc:
         89:df:25:9b:dc:d6:97:c7:cf:5e:ed:3a:9a:68:c2:44:6f:73:
         d9:fc:c3:30:8a:ca:fb:ed:14:62:35:5d:da:1e:7c:fa:82:2d:
         99:9b:2b:77:1c:e3:9b:96:af:ba:5c:38:eb:67:79:62:d9:b0:
         2f:ba:22:fe:a5:ac:22:a9:70:e1:c2:81:12:b5:4f:f9:21:b5:
         7c:c0:52:73:12:dd:7e:b5:f0:1a:e9:1b:d6:b1:da:10:5b:aa:
         28:86:40:79:3f:aa:bf:4e:d6:bd:7e:49:4c:d2:e4:6b:3e:0a:
         f5:06:4e:ce:fc:11:f7:85:88:ee:e4:e9:68:8b:8d:35:6e:04:
         fa:4e:43:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNzM340fJcGa1lLgAZjtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjU0YmNjNDkyOTFhMWYzMmI3Y2VhZDRmMjk2ODgyZDA1
MzE0OTIwHhcNMjQwNTE4MDEwMDQ3WhcNMjQwNTE5MDEwMDQ3WjAzMTEwLwYDVQQD
EyhiMzU4OGU1NDc4YjVmZTZmOTA2ODUxNzczMmMyMjdjOTlhNDA0NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh+82fBapiERLUajQxOsiIsc9GC5
s9bfWUiGCohaJKCsrw1IBCXO7da1vBgUQI6JTno5VyHD7nH29FBMPMkbQ6+avlCv
B0BOatRRq7QWPLyqjO8UsgbmCwUYg3jLBlNM76OkMUB75OM/btBNivgthRQNxxSS
7Lgzl1pWw4vQ8ma8Y9vCeyj7y2qhB8arNiRWNhoNimR59BJca6bifshm28e71I+E
YNfs5nTXbSuQTBHm6UFe2Hnft6yCsTUtJU5DKMOELDbUVmyNWYHFoI/sEk9taYOj
Owy8OL1QbocJL8HZ6pYhlCKDD+/1xvxjjMrJKmJigfX3V1/GHSOAfUUSswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNYjlR4tf5vkGhRdzLCJ8maQEeNMB8GA1UdIwQY
MBaAFKy1S8xJKRofMrfOrU8paILQUxSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYt
YWYzYTY4NWQ1NzlmLzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYtYWYzYTY4NWQ1Nzlm
LzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy67xnRC
TUMczAZQ+mKX2dHQGgjs0t1gDoC7sHtTm72QCuMuFWva/oOvvxjqGNguZXRxKlcB
SR6Liu4aJ0r9ILxEP27Z+EGjJxvrcWLYxL7Uom6v44fapB4scEgBNYTRZskjYIFn
xyOqrQnJg7hjE3E6p07i/dCvVYLJSiXcid8lm9zWl8fPXu06mmjCRG9z2fzDMIrK
++0UYjVd2h58+oItmZsrdxzjm5avulw462d5YtmwL7oi/qWsIqlw4cKBErVP+SG1
fMBScxLdfrXwGukb1rHaEFuqKIZAeT+qv07WvX5JTNLkaz4K9QZOzvwR94WI7uTp
aIuNNW4E+k5D/Q==
-----END CERTIFICATE-----
Generated at Sat May 18 02:47:43 2024 by rpki-client on console-fra.rpki-client.org