Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
File:                     9vT-urM3YEdXVXVRIrnyAmI5G5I.mft (raw, json)
Hash identifier:          wCQAm5mhbwwhR/zBxVeHXu0cZjsKA37BqyENvxQAgoQ=
Subject key identifier:   8E:B7:91:67:E1:73:CE:3F:A5:4E:7D:BE:B4:3A:EF:79:4A:31:A0:9D
Authority key identifier: F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
Certificate issuer:       /CN=f6f4febab33760475755755122b9f20262391b92
Certificate serial:       018F45A2550203F21004B930E41F3523D90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
Manifest number:          1159
Signing time:             Sat 04 May 2024 22:03:37 +0000
Manifest this update:     Sat 04 May 2024 22:03:37 +0000
Manifest next update:     Sun 05 May 2024 22:03:37 +0000
Files and hashes:         1: 8BfIfbqRbr7vFJJdsZjek3I2_OE.roa (hash: 20YyxvLv/C/kCSItZfaNXnEf5xotGjl4Unvx5nEgPOk=)
                          2: 9vT-urM3YEdXVXVRIrnyAmI5G5I.crl (hash: 5sWJES7n2yeuUK7z/2+L1bOHN7SdKoOlZHJbiJI/FE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:55:02:03:f2:10:04:b9:30:e4:1f:35:23:d9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f4febab33760475755755122b9f20262391b92
        Validity
            Not Before: May  4 22:03:37 2024 GMT
            Not After : May  5 22:03:37 2024 GMT
        Subject: CN=8eb79167e173ce3fa54e7dbeb43aef794a31a09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:40:88:5c:86:1d:cd:61:a7:6f:a9:8e:90:
                    7d:79:20:c5:b7:99:cc:56:83:74:3b:f7:8b:17:f0:
                    7c:0d:82:a3:ad:eb:77:78:1d:17:95:3f:6b:3b:6f:
                    31:18:74:36:6d:64:e5:8a:60:7b:be:37:b2:cd:b9:
                    bc:47:6c:6e:e9:82:62:9e:7e:01:3b:ad:b4:7d:6c:
                    04:57:bc:14:56:dd:72:c8:b9:3f:ec:28:f0:c2:e2:
                    06:74:19:45:f5:7b:a7:2e:76:e4:ac:3f:4b:7b:00:
                    9f:f6:bf:c2:2d:64:29:36:7c:ee:0b:cd:ba:dd:96:
                    2e:70:8d:4c:19:83:90:5e:e7:16:a5:99:7f:9b:7c:
                    0a:01:7a:91:0c:5a:56:3f:03:99:b1:0e:a6:97:9e:
                    ab:51:81:6d:f0:de:8e:ae:10:cd:0b:f6:39:d2:71:
                    96:7b:82:88:cb:96:4d:87:ff:c8:4f:3e:46:25:cc:
                    ce:3d:5a:53:c4:eb:89:de:cf:7b:f0:b9:22:2e:4d:
                    7c:d1:02:f1:f0:36:0d:2e:4e:4a:89:80:35:d8:c0:
                    a0:06:05:1b:7b:c8:f3:39:0f:50:24:0e:51:27:d2:
                    c0:53:06:13:d3:bd:ea:f5:eb:af:ce:06:f3:43:21:
                    20:71:02:7c:e3:0e:18:ff:d9:27:cf:f0:c8:3e:5b:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:91:67:E1:73:CE:3F:A5:4E:7D:BE:B4:3A:EF:79:4A:31:A0:9D
            X509v3 Authority Key Identifier:
                keyid:F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:f4:49:78:a4:0a:9a:50:6d:c3:9a:23:95:f3:c1:1e:2d:
         0d:4e:0d:fb:f1:e3:3b:76:5d:30:24:bb:82:7b:b6:29:b4:00:
         8b:6b:62:f2:0e:94:46:58:ad:17:b0:66:cb:0f:7a:68:98:9b:
         b0:7d:e5:c8:3a:3c:3b:9c:9e:1b:43:37:eb:15:b7:cf:4a:f6:
         96:3e:3d:e2:01:32:d9:88:86:3d:f7:a7:c8:26:86:ab:7a:25:
         f9:f5:83:df:3a:e6:fb:b0:86:fc:ec:ed:53:dd:e6:47:bc:52:
         5d:d3:7c:d9:1c:d1:d2:6a:9e:84:ff:20:90:da:97:a6:18:0c:
         60:3b:5b:d8:f3:16:d5:e9:05:87:c7:3f:97:5b:6e:da:09:1a:
         50:21:cd:1b:e9:2f:eb:41:0e:70:ce:c1:08:25:6b:79:ac:3e:
         87:b6:20:be:d2:0e:e1:4e:de:7b:cc:13:3a:5a:13:87:9e:45:
         db:c6:75:7b:54:d5:f0:f2:1d:16:16:1f:de:e1:1a:5d:96:bc:
         c3:f2:c4:8b:9c:65:a2:c2:57:93:01:94:cf:cf:3b:9f:70:75:
         a7:3f:ef:6d:f7:2e:2a:f1:2d:b0:38:8a:f2:91:a3:dd:97:06:
         23:cd:30:1b:7c:7f:f8:d3:6c:cc:01:29:da:78:c4:f0:d1:33:
         56:b4:00:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9FolUCA/IQBLkw5B81I9kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjRmZWJhYjMzNzYwNDc1NzU1NzU1MTIyYjlmMjAyNjIz
OTFiOTIwHhcNMjQwNTA0MjIwMzM3WhcNMjQwNTA1MjIwMzM3WjAzMTEwLwYDVQQD
Eyg4ZWI3OTE2N2UxNzNjZTNmYTU0ZTdkYmViNDNhZWY3OTRhMzFhMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFZAiFyGHc1hp2+pjpB9eSDFt5nM
VoN0O/eLF/B8DYKjret3eB0XlT9rO28xGHQ2bWTlimB7vjeyzbm8R2xu6YJinn4B
O620fWwEV7wUVt1yyLk/7CjwwuIGdBlF9XunLnbkrD9LewCf9r/CLWQpNnzuC826
3ZYucI1MGYOQXucWpZl/m3wKAXqRDFpWPwOZsQ6ml56rUYFt8N6OrhDNC/Y50nGW
e4KIy5ZNh//ITz5GJczOPVpTxOuJ3s978LkiLk180QLx8DYNLk5KiYA12MCgBgUb
e8jzOQ9QJA5RJ9LAUwYT073q9euvzgbzQyEgcQJ84w4Y/9knz/DIPlsQWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI63kWfhc84/pU59vrQ673lKMaCdMB8GA1UdIwQY
MBaAFPb0/rqzN2BHV1V1USK58gJiORuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZULXVyTTNZRWRYVlhWUklybnlBbUk1RzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jMjlhMWMtMjQ0ZC00NGQ0LWJmMWIt
ZGI4NDMzNDBmM2Q1LzEvOXZULXVyTTNZRWRYVlhWUklybnlBbUk1RzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jMjlhMWMtMjQ0ZC00NGQ0LWJmMWItZGI4NDMzNDBmM2Q1
LzEvOXZULXVyTTNZRWRYVlhWUklybnlBbUk1RzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb30SXik
CppQbcOaI5XzwR4tDU4N+/HjO3ZdMCS7gnu2KbQAi2ti8g6URlitF7Bmyw96aJib
sH3lyDo8O5yeG0M36xW3z0r2lj494gEy2YiGPfenyCaGq3ol+fWD3zrm+7CG/Ozt
U93mR7xSXdN82RzR0mqehP8gkNqXphgMYDtb2PMW1ekFh8c/l1tu2gkaUCHNG+kv
60EOcM7BCCVreaw+h7YgvtIO4U7ee8wTOloTh55F28Z1e1TV8PIdFhYf3uEaXZa8
w/LEi5xlosJXkwGUz887n3B1pz/vbfcuKvEtsDiK8pGj3ZcGI80wG3x/+NNszAEp
2njE8NEzVrQAqg==
-----END CERTIFICATE-----
Generated at Sun May 5 07:15:15 2024 by rpki-client on console-ams.rpki-client.org