Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File:                     qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier:          DBjp/yQMGwOtvuIoqacQt90EZ7Kh2HprKv/mohwttfc=
Subject key identifier:   D3:BF:CF:66:96:00:A0:E1:56:79:F4:B8:9B:91:A9:C5:23:A8:AD:A8
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer:       /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial:       018F885AF7724A9BE5F367FA98C13AAAD88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:14 +0000
Manifest this update:     Fri 17 May 2024 21:00:14 +0000
Manifest next update:     Sat 18 May 2024 21:00:14 +0000
Files and hashes:         1: 4qBD8BCWoM3qZiqdrjR2yla4Bog.roa (hash: NHI2UXRzgnpfHSiJzK5/HjIaV/sFV36KERfsNOmhjEc=)
                          2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: H7l93xbwlK4rDz69g4Bjq2asmYEljFvW6eubu1Dlz6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f7:72:4a:9b:e5:f3:67:fa:98:c1:3a:aa:d8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
        Validity
            Not Before: May 17 21:00:14 2024 GMT
            Not After : May 18 21:00:14 2024 GMT
        Subject: CN=d3bfcf669600a0e15679f4b89b91a9c523a8ada8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:c6:5d:25:28:34:49:d8:d4:c1:41:57:16:
                    f5:b8:45:10:25:46:80:b3:ec:46:a7:fd:9d:c5:20:
                    62:d4:90:14:4c:dc:44:e8:fb:37:03:dd:e0:d2:b2:
                    99:ac:69:bf:7e:ee:c2:58:c6:e3:cc:a3:11:de:7e:
                    14:dd:4c:5c:40:f2:10:37:e0:67:2f:f7:c3:35:23:
                    b4:72:77:c1:9c:95:9d:7b:c5:b5:6b:bd:37:19:00:
                    57:31:d2:e9:1a:8f:13:35:60:61:d3:fd:22:8c:b5:
                    a8:eb:64:6b:c7:bb:c3:f7:ad:6c:97:49:6e:24:e7:
                    5b:5a:df:fa:ba:5c:41:b0:37:ff:c1:a0:8f:1d:b5:
                    21:bf:6c:b4:59:7b:73:82:9b:2e:d9:e7:ff:ab:8b:
                    0c:a1:03:d0:9b:87:fa:7d:63:dd:e2:ce:cd:7a:d1:
                    4c:1d:0a:9b:9b:b4:ec:18:e2:9e:0b:8e:3f:f4:64:
                    fd:d7:37:4a:b6:34:5b:d3:94:11:5b:cc:4e:62:e3:
                    fb:75:72:3e:2a:92:60:0d:a0:97:e8:e7:17:ba:71:
                    7b:9a:14:64:e3:8e:02:1f:f6:68:54:4b:79:6b:0c:
                    fd:88:6d:de:82:c2:27:a4:cc:fe:a5:7b:1e:25:74:
                    67:34:d2:77:6b:b8:ca:2b:06:12:8c:4b:c4:60:29:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BF:CF:66:96:00:A0:E1:56:79:F4:B8:9B:91:A9:C5:23:A8:AD:A8
            X509v3 Authority Key Identifier:
                keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:ad:38:35:ad:f3:0b:78:42:b7:e7:14:5e:f0:43:57:35:
         5d:dd:d8:2e:06:8d:df:d1:6a:33:a6:19:f6:1f:6f:6a:30:65:
         11:46:c7:0a:fa:fc:d4:32:b7:13:1a:ce:43:4e:b9:6a:c4:29:
         ab:fc:37:62:40:85:08:f9:01:c2:4e:10:b6:a3:55:13:fc:be:
         db:08:e0:39:31:5a:5b:a2:64:9a:30:83:a1:ee:5f:b2:26:09:
         99:15:9e:32:0c:38:92:22:6b:77:92:9a:25:59:5e:bb:7f:49:
         9e:d2:6a:3d:c6:45:d8:86:47:11:ab:c3:7f:87:a4:54:1e:48:
         71:2e:3c:5d:2b:a1:f0:c3:c2:22:f3:a6:6b:40:a7:46:5f:37:
         e1:6c:53:c3:dd:d6:02:78:ff:d2:8b:d9:bb:13:16:ac:65:52:
         1c:f2:31:02:ef:c8:24:4b:3f:17:5a:a1:ed:78:00:4a:a3:cd:
         cf:e1:7d:2c:3b:72:b5:d2:ef:35:f9:ed:d5:96:b2:92:d3:1d:
         85:de:ef:84:bf:78:9a:16:c4:57:a5:3f:d7:a8:c6:ac:0a:78:
         62:2b:d7:99:98:6d:ad:34:84:60:1e:a9:06:fb:dc:f5:11:63:
         46:a5:2f:2e:f5:49:55:0d:b6:5a:01:35:02:70:42:fd:66:89:
         45:29:e9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWvdySpvl82f6mME6qtiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzU3NWNhZmEwMGJjNDFkNTdjNDk0YWMxZjVkYmNmZWU3
ODMzMmUwHhcNMjQwNTE3MjEwMDE0WhcNMjQwNTE4MjEwMDE0WjAzMTEwLwYDVQQD
EyhkM2JmY2Y2Njk2MDBhMGUxNTY3OWY0Yjg5YjkxYTljNTIzYThhZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JjGXSUoNEnY1MFBVxb1uEUQJUaA
s+xGp/2dxSBi1JAUTNxE6Ps3A93g0rKZrGm/fu7CWMbjzKMR3n4U3UxcQPIQN+Bn
L/fDNSO0cnfBnJWde8W1a703GQBXMdLpGo8TNWBh0/0ijLWo62Rrx7vD961sl0lu
JOdbWt/6ulxBsDf/waCPHbUhv2y0WXtzgpsu2ef/q4sMoQPQm4f6fWPd4s7NetFM
HQqbm7TsGOKeC44/9GT91zdKtjRb05QRW8xOYuP7dXI+KpJgDaCX6OcXunF7mhRk
444CH/ZoVEt5awz9iG3egsInpMz+pXseJXRnNNJ3a7jKKwYSjEvEYClb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO/z2aWAKDhVnn0uJuRqcUjqK2oMB8GA1UdIwQY
MBaAFKrFdcr6ALxB1XxJSsH128/ueDMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYt
OGY5MTNlMjY5NmU1LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYtOGY5MTNlMjY5NmU1
LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrytODWt
8wt4QrfnFF7wQ1c1Xd3YLgaN39FqM6YZ9h9vajBlEUbHCvr81DK3ExrOQ065asQp
q/w3YkCFCPkBwk4QtqNVE/y+2wjgOTFaW6JkmjCDoe5fsiYJmRWeMgw4kiJrd5Ka
JVleu39JntJqPcZF2IZHEavDf4ekVB5IcS48XSuh8MPCIvOma0CnRl834WxTw93W
Anj/0ovZuxMWrGVSHPIxAu/IJEs/F1qh7XgASqPNz+F9LDtytdLvNfnt1ZayktMd
hd7vhL94mhbEV6U/16jGrAp4YivXmZhtrTSEYB6pBvvc9RFjRqUvLvVJVQ22WgE1
AnBC/WaJRSnp5Q==
-----END CERTIFICATE-----
Generated at Fri May 17 22:07:26 2024 by rpki-client on console-ams.rpki-client.org