Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
File:                     KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft (raw, json)
Hash identifier:          EIM1IOd0qFicS1o61z4hdhuPVbpggs8gASUbEP52x/A=
Subject key identifier:   D9:28:5D:A3:55:58:5F:D2:8F:51:39:CB:50:CD:B2:05:4F:13:8F:E8
Authority key identifier: 29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
Certificate issuer:       /CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Certificate serial:       018F8D147B2CEB9731D60ADDDB4AD9E21161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
Manifest number:          117B
Signing time:             Sat 18 May 2024 19:01:20 +0000
Manifest this update:     Sat 18 May 2024 19:01:20 +0000
Manifest next update:     Sun 19 May 2024 19:01:20 +0000
Files and hashes:         1: 2LznWitOwJw0nrlmleIR1SjucLc.roa (hash: g0Tg/Ae6mIhD/x99yf7a4KS7V41tfypZQeh0BI6YDJI=)
                          2: KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl (hash: cx0K/iaPO6zJy6aYymGZg+kwsOc4msnCX0xHQnOB3PY=)
                          3: VPNe19xvXzWoRGMIFX7-3BDvCy4.roa (hash: Xjgf+vzurd/vncL7NiVWDAtL7P/PLCpabCTrIajDNzg=)
                          4: _RunQ5O74rbmNkV2HgwlyC4u7CQ.roa (hash: myNebH1OQScE+Kro/UAlzsQoAoqNjDnyZVpYC3wqp5g=)
                          5: eSHOLEOW0ZT8f0zX3SE5relMhZI.roa (hash: 6R155v8lntee4rE1CGDeUcgNWoFhZyqonWuqCr4M730=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:7b:2c:eb:97:31:d6:0a:dd:db:4a:d9:e2:11:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29878a2888c9ac3123c795ff9681f1957ca0f964
        Validity
            Not Before: May 18 19:01:20 2024 GMT
            Not After : May 19 19:01:20 2024 GMT
        Subject: CN=d9285da355585fd28f5139cb50cdb2054f138fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:21:cd:8e:1e:05:15:dd:99:f8:cd:5d:b1:
                    d1:f2:ec:4b:f9:b8:86:f0:95:47:38:b8:cc:3d:81:
                    dc:d7:36:c6:6d:e7:d9:e1:0a:45:46:93:a8:72:e9:
                    51:fa:7b:d8:bb:71:6b:d1:1a:73:dc:90:99:4c:29:
                    47:77:79:dd:44:86:53:9d:74:6c:be:e0:80:b4:01:
                    4a:df:43:9e:6f:57:06:21:7f:ab:d5:a2:2b:e2:27:
                    9e:0d:47:47:b8:62:dd:ae:fa:ee:7e:c1:bc:f6:cd:
                    dd:75:0b:01:a7:44:e5:91:15:f5:52:a3:68:c7:6c:
                    5f:5b:2f:19:56:51:a8:0b:5f:7e:73:52:80:a9:ae:
                    75:a2:f5:46:15:14:a7:9a:f8:f7:52:92:2d:ea:4d:
                    14:b5:f6:b0:c9:49:fe:67:c1:66:5a:ef:0d:8d:86:
                    95:ec:c2:a5:b2:67:9e:3b:f3:b3:22:67:b4:17:74:
                    d2:af:dc:63:75:ef:a3:8e:42:6e:e3:98:84:f3:7f:
                    e6:41:fb:ef:7d:3f:a5:13:5c:01:99:91:ac:64:b9:
                    b1:5e:9e:41:4f:99:8b:57:c0:5c:6e:70:38:0c:27:
                    10:ad:38:63:60:8f:ad:29:58:ff:0a:66:9c:ff:17:
                    a0:71:05:fd:bf:57:87:5c:9b:5d:56:25:4a:c8:73:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:5D:A3:55:58:5F:D2:8F:51:39:CB:50:CD:B2:05:4F:13:8F:E8
            X509v3 Authority Key Identifier:
                keyid:29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:de:92:ed:fc:b3:95:5d:66:09:2e:b0:27:6e:27:a1:98:66:
         3b:69:cd:ac:47:77:8b:7c:3b:ad:d9:5d:92:7e:b1:5a:75:e6:
         0b:14:b6:bb:de:94:b8:fc:3f:3d:08:cc:ab:2e:c4:85:03:3c:
         36:b7:6f:ed:92:c7:7c:08:4d:98:fa:cd:a1:d5:44:96:a6:43:
         3b:ec:24:94:77:c6:e7:0b:75:31:ec:e3:ca:d2:2e:e3:1d:7c:
         d0:79:6f:22:c7:2f:5f:80:a3:49:ee:4a:9a:7f:87:6a:83:55:
         38:6c:7b:1c:8f:8d:2c:47:64:ef:4d:ee:2b:40:55:2b:1f:c4:
         e0:fd:49:a1:be:27:90:ac:76:db:ae:4e:63:39:4b:9d:c6:fe:
         2c:f1:a2:ca:ae:fd:09:f7:80:dc:82:11:14:d1:a2:97:70:dc:
         77:2c:42:6d:e4:1c:75:a1:03:a3:f5:8b:47:51:70:06:db:27:
         19:fb:78:f4:3e:df:8c:c2:4a:b5:af:cc:83:f7:70:54:0a:60:
         7f:20:4d:1e:70:4b:a4:3b:37:3a:2e:0d:0a:60:2d:6c:37:c5:
         d8:6d:98:51:9b:89:73:d8:c5:16:84:db:38:5c:94:e3:35:b7:
         8d:74:39:58:c5:e9:f2:3e:5c:f0:21:20:be:18:72:de:f4:db:
         1d:c2:98:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NFHss65cx1grd20rZ4hFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODc4YTI4ODhjOWFjMzEyM2M3OTVmZjk2ODFmMTk1N2Nh
MGY5NjQwHhcNMjQwNTE4MTkwMTIwWhcNMjQwNTE5MTkwMTIwWjAzMTEwLwYDVQQD
EyhkOTI4NWRhMzU1NTg1ZmQyOGY1MTM5Y2I1MGNkYjIwNTRmMTM4ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33ghzY4eBRXdmfjNXbHR8uxL+biG
8JVHOLjMPYHc1zbGbefZ4QpFRpOoculR+nvYu3Fr0Rpz3JCZTClHd3ndRIZTnXRs
vuCAtAFK30Oeb1cGIX+r1aIr4ieeDUdHuGLdrvrufsG89s3ddQsBp0TlkRX1UqNo
x2xfWy8ZVlGoC19+c1KAqa51ovVGFRSnmvj3UpIt6k0UtfawyUn+Z8FmWu8NjYaV
7MKlsmeeO/OzIme0F3TSr9xjde+jjkJu45iE83/mQfvvfT+lE1wBmZGsZLmxXp5B
T5mLV8BcbnA4DCcQrThjYI+tKVj/Cmac/xegcQX9v1eHXJtdViVKyHOZTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkoXaNVWF/Sj1E5y1DNsgVPE4/oMB8GA1UdIwQY
MBaAFCmHiiiIyawxI8eV/5aB8ZV8oPlkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1llS0tJakpyREVqeDVYX2xvSHhsWHlnLVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lM2FhNTEtNjEyOS00OTNkLTkxZDIt
NTE3NTFiMjlmOGI0LzEvS1llS0tJakpyREVqeDVYX2xvSHhsWHlnLVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lM2FhNTEtNjEyOS00OTNkLTkxZDItNTE3NTFiMjlmOGI0
LzEvS1llS0tJakpyREVqeDVYX2xvSHhsWHlnLVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfd6S7fyz
lV1mCS6wJ24noZhmO2nNrEd3i3w7rdldkn6xWnXmCxS2u96UuPw/PQjMqy7EhQM8
Nrdv7ZLHfAhNmPrNodVElqZDO+wklHfG5wt1MezjytIu4x180HlvIscvX4CjSe5K
mn+HaoNVOGx7HI+NLEdk703uK0BVKx/E4P1Job4nkKx2265OYzlLncb+LPGiyq79
CfeA3IIRFNGil3DcdyxCbeQcdaEDo/WLR1FwBtsnGft49D7fjMJKta/Mg/dwVApg
fyBNHnBLpDs3Oi4NCmAtbDfF2G2YUZuJc9jFFoTbOFyU4zW3jXQ5WMXp8j5c8CEg
vhhy3vTbHcKYeg==
-----END CERTIFICATE-----
Generated at Sat May 18 23:28:42 2024 by rpki-client on console-ams.rpki-client.org