Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File:                     cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier:          qZlZPWTCMa8xSDan0O8G9KNTDeYCu3nMrVfjxlBIjPM=
Subject key identifier:   16:8A:EF:D3:73:BD:70:9D:1A:65:47:65:A2:18:FD:6B:B6:4A:7C:BA
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer:       /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial:       018F874A8FABAA49B94F3E322F8AEA1B673E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number:          05B6
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: Iwil3FpB7h2Y/LWrSE4uL5FwnGAZG23y2fQzrLUEMYo=)
                          2: l5T_St9yx2dbcws5bEaAvWIATS0.roa (hash: cNVkf6QxpiirfMnsNigw4g28jJZn2/IEqgxcxBm4+C0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8f:ab:aa:49:b9:4f:3e:32:2f:8a:ea:1b:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=168aefd373bd709d1a654765a218fd6bb64a7cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:e3:d3:16:e7:c5:04:b7:3e:0a:8c:88:33:
                    bc:c2:ce:17:30:6a:9f:d0:33:db:4b:82:94:59:da:
                    fb:37:c9:54:d9:63:41:ff:89:f6:d9:58:ba:14:d4:
                    5d:b7:6d:20:61:b5:a8:94:ab:a6:40:3a:eb:5e:5c:
                    8b:1a:ff:5f:6f:cf:14:82:5c:5a:86:09:78:ce:90:
                    89:d3:b6:c8:0f:e3:1b:79:ba:42:c1:a4:64:01:82:
                    4f:86:97:ed:74:33:b9:35:76:87:cb:cf:07:01:59:
                    b9:64:32:44:9c:20:c0:f2:ca:e6:b0:12:3e:9e:26:
                    17:c4:1e:07:b8:48:89:4d:d5:a7:a6:90:3f:9e:37:
                    f2:e0:dd:71:bc:52:2a:b2:4c:e7:c5:80:f5:e2:42:
                    00:f6:9f:29:f4:8c:b0:7e:ce:b7:5b:6b:c3:00:50:
                    cb:3d:f9:98:f0:ea:34:cf:79:1b:ca:f3:ab:38:fc:
                    9b:ca:4c:6f:a0:84:65:d1:21:bd:cd:7e:0e:e9:0e:
                    b8:4e:66:e4:8c:05:5c:dc:6e:84:c0:c2:72:bf:84:
                    88:bb:52:49:82:51:9c:01:7e:f3:7a:29:78:e9:1f:
                    f4:69:7a:da:6a:16:98:66:70:95:d3:8c:67:1f:eb:
                    16:5f:f7:d2:99:83:ae:4c:f1:b9:14:9c:a3:57:8a:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:EF:D3:73:BD:70:9D:1A:65:47:65:A2:18:FD:6B:B6:4A:7C:BA
            X509v3 Authority Key Identifier:
                keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ff:68:a6:3b:a1:00:cd:ab:c3:3f:2f:bc:50:7b:5c:26:92:
         47:0c:83:21:83:fc:84:9e:a8:4e:7a:88:53:ab:91:15:d6:34:
         cf:f6:cd:5f:7d:dd:03:5a:17:ac:12:78:05:97:9a:30:3f:2a:
         2d:69:ab:9f:3d:8a:0d:41:d8:e4:6f:81:ed:7c:b0:39:34:b5:
         0f:24:20:a8:dd:ea:0e:a9:30:80:6c:fc:b4:bb:7a:15:5b:63:
         9f:71:fa:a0:ee:85:4c:ae:34:37:7b:7a:87:bc:b1:79:f7:f3:
         39:85:a9:4e:93:1e:e0:81:1b:b6:1c:d9:f6:76:e6:f2:48:58:
         6e:1b:fd:6d:86:41:4a:29:bb:46:5a:7b:df:f1:ea:22:12:92:
         22:0b:59:10:f4:bd:f1:03:8d:c1:54:10:5a:ac:19:4f:40:ed:
         99:56:09:de:fa:e8:24:e3:24:a4:0f:36:ef:36:5c:6e:fc:fe:
         d4:85:60:ae:6e:58:09:90:94:c6:bb:e3:0b:34:27:ff:47:db:
         92:54:8e:dc:82:9e:02:1d:b5:67:68:9c:5b:d1:fb:7b:44:a3:
         d9:6e:cd:ee:a0:00:2f:fd:73:74:66:99:28:32:61:6d:7a:e0:
         66:d3:5f:88:49:85:4b:34:da:8b:b8:bb:09:4a:b2:91:37:01:
         2c:e0:67:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSo+rqkm5Tz4yL4rqG2c+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl
MzY2MmMwHhcNMjQwNTE3MTYwMjQxWhcNMjQwNTE4MTYwMjQxWjAzMTEwLwYDVQQD
EygxNjhhZWZkMzczYmQ3MDlkMWE2NTQ3NjVhMjE4ZmQ2YmI2NGE3Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOvj0xbnxQS3PgqMiDO8ws4XMGqf
0DPbS4KUWdr7N8lU2WNB/4n22Vi6FNRdt20gYbWolKumQDrrXlyLGv9fb88Uglxa
hgl4zpCJ07bID+MbebpCwaRkAYJPhpftdDO5NXaHy88HAVm5ZDJEnCDA8srmsBI+
niYXxB4HuEiJTdWnppA/njfy4N1xvFIqskznxYD14kIA9p8p9Iywfs63W2vDAFDL
PfmY8Oo0z3kbyvOrOPybykxvoIRl0SG9zX4O6Q64TmbkjAVc3G6EwMJyv4SIu1JJ
glGcAX7zeil46R/0aXraahaYZnCV04xnH+sWX/fSmYOuTPG5FJyjV4p0FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaK79NzvXCdGmVHZaIY/Wu2Sny6MB8GA1UdIwQY
MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt
NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2
LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP9opjuh
AM2rwz8vvFB7XCaSRwyDIYP8hJ6oTnqIU6uRFdY0z/bNX33dA1oXrBJ4BZeaMD8q
LWmrnz2KDUHY5G+B7XywOTS1DyQgqN3qDqkwgGz8tLt6FVtjn3H6oO6FTK40N3t6
h7yxeffzOYWpTpMe4IEbthzZ9nbm8khYbhv9bYZBSim7Rlp73/HqIhKSIgtZEPS9
8QONwVQQWqwZT0DtmVYJ3vroJOMkpA827zZcbvz+1IVgrm5YCZCUxrvjCzQn/0fb
klSO3IKeAh21Z2icW9H7e0Sj2W7N7qAAL/1zdGaZKDJhbXrgZtNfiEmFSzTai7i7
CUqykTcBLOBnmg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:56:26 2024 by rpki-client on console-ams.rpki-client.org