Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File:                     qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier:          rrmlGazg8JDY5x6gMWMV6+h+6s6xfNKluwhjN3Gw67U=
Subject key identifier:   A2:1A:0F:70:19:1D:AF:C9:14:73:85:6A:7D:2B:68:8B:F4:6C:0D:C2
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer:       /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial:       018F8749BD0CBBF9696936C214D0C256332E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: EDfZKDFKdoMjVe-axmbkQgBjt3c.roa (hash: BBlgevxZjmV+674NEOsaw/Fj2d/NVMQ5YIeLy14vDvQ=)
                          2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: 6Hyj4JRcY4obunY2Cymv65rqPfZhx0WUA184xcdE81U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bd:0c:bb:f9:69:69:36:c2:14:d0:c2:56:33:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=a21a0f70191dafc91473856a7d2b688bf46c0dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:60:f1:b1:b9:8d:81:21:a8:76:f4:59:b9:
                    eb:d3:dd:9a:a7:59:84:37:55:27:76:df:bd:a8:60:
                    3e:e4:13:a3:a7:05:8d:ed:96:31:fa:95:93:a1:b0:
                    0d:72:4c:b1:33:17:28:74:08:b2:60:01:fb:65:2b:
                    09:12:92:55:de:fd:bf:70:f5:44:ae:96:74:1e:9a:
                    de:aa:fd:76:e8:e7:51:71:87:97:79:3b:b9:e1:d7:
                    3f:b7:3c:50:59:c4:2a:09:c6:08:a9:8d:7c:58:ef:
                    37:e3:73:6c:14:e0:bb:a5:b1:79:9e:9b:be:b9:77:
                    80:ef:fa:49:7d:a7:34:b3:e9:39:aa:0d:36:78:99:
                    61:c9:99:c3:39:7a:8d:44:f8:aa:bc:76:c1:77:95:
                    bc:5a:c2:13:80:b5:0c:7a:be:9d:e1:3d:74:ad:c7:
                    7e:bc:f0:7f:52:92:19:06:d2:4d:74:63:f3:c4:1e:
                    ac:ce:87:20:47:17:96:b0:16:54:e3:bd:29:7e:e5:
                    b0:67:5f:a6:ae:62:0f:1f:4a:c7:81:d2:b5:5a:52:
                    0d:35:3b:b4:d1:c5:1b:73:bd:d7:49:c7:26:81:57:
                    60:8b:5a:0a:d7:2e:6f:c1:c4:f8:b8:04:65:f0:75:
                    13:9e:54:e5:4f:91:5d:30:c1:42:c4:1c:68:45:73:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1A:0F:70:19:1D:AF:C9:14:73:85:6A:7D:2B:68:8B:F4:6C:0D:C2
            X509v3 Authority Key Identifier:
                keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:05:13:0f:5b:1f:61:62:c2:fa:3a:c2:77:36:2e:03:23:c5:
         c0:2b:58:94:db:92:78:db:b5:ac:dd:73:84:52:e8:33:6a:a2:
         31:f4:99:93:52:b1:2a:a2:10:f1:d1:de:0a:4d:9c:b9:28:3c:
         87:34:c8:33:d2:ac:25:83:44:f6:37:31:a7:93:25:10:14:51:
         a2:40:52:ea:08:8e:38:ea:50:b0:c1:c5:4b:72:9f:da:cb:f4:
         12:43:a0:59:f5:02:a0:bb:5c:fd:a4:62:49:f9:47:21:b5:b5:
         1a:e0:49:b2:ee:cb:8e:4e:a2:c5:8c:1f:dc:74:59:35:84:32:
         58:11:41:ca:8f:3d:41:72:15:ec:5d:5a:30:ee:45:c4:a4:5c:
         41:9c:d7:b3:7a:7f:ed:13:ad:5f:66:f9:93:65:16:bb:9b:95:
         50:dc:bc:66:65:0d:f4:d9:10:0b:73:38:74:10:fb:d5:5e:c7:
         85:34:b4:78:c4:4b:fd:9d:78:39:ee:a9:03:4a:98:f5:e2:31:
         60:82:d0:ea:4b:8a:21:5e:c8:88:9a:93:7a:ad:c4:01:bc:2b:
         bf:27:90:7b:95:a6:bf:20:08:82:ac:2b:a4:40:3c:96:e6:1b:
         20:97:99:55:60:50:5d:14:90:63:a0:e3:66:2f:e6:d8:e9:d7:
         03:89:9e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSb0Mu/lpaTbCFNDCVjMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjQwNTE3MTYwMTQ3WhcNMjQwNTE4MTYwMTQ3WjAzMTEwLwYDVQQD
EyhhMjFhMGY3MDE5MWRhZmM5MTQ3Mzg1NmE3ZDJiNjg4YmY0NmMwZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jxg8bG5jYEhqHb0Wbnr092ap1mE
N1Undt+9qGA+5BOjpwWN7ZYx+pWTobANckyxMxcodAiyYAH7ZSsJEpJV3v2/cPVE
rpZ0Hpreqv126OdRcYeXeTu54dc/tzxQWcQqCcYIqY18WO8343NsFOC7pbF5npu+
uXeA7/pJfac0s+k5qg02eJlhyZnDOXqNRPiqvHbBd5W8WsITgLUMer6d4T10rcd+
vPB/UpIZBtJNdGPzxB6szocgRxeWsBZU470pfuWwZ1+mrmIPH0rHgdK1WlINNTu0
0cUbc73XSccmgVdgi1oK1y5vwcT4uARl8HUTnlTlT5FdMMFCxBxoRXPGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIaD3AZHa/JFHOFan0raIv0bA3CMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgUTD1sf
YWLC+jrCdzYuAyPFwCtYlNuSeNu1rN1zhFLoM2qiMfSZk1KxKqIQ8dHeCk2cuSg8
hzTIM9KsJYNE9jcxp5MlEBRRokBS6giOOOpQsMHFS3Kf2sv0EkOgWfUCoLtc/aRi
SflHIbW1GuBJsu7Ljk6ixYwf3HRZNYQyWBFByo89QXIV7F1aMO5FxKRcQZzXs3p/
7ROtX2b5k2UWu5uVUNy8ZmUN9NkQC3M4dBD71V7HhTS0eMRL/Z14Oe6pA0qY9eIx
YILQ6kuKIV7IiJqTeq3EAbwrvyeQe5WmvyAIgqwrpEA8luYbIJeZVWBQXRSQY6Dj
Zi/m2OnXA4meng==
-----END CERTIFICATE-----
Generated at Sat May 18 00:42:51 2024 by rpki-client on console-ams.rpki-client.org