Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          Sf5jLvV9hb4IS2eYt0zM0Msy1mPu7M6pR/2fZ8I6w6A=
Subject key identifier:   39:33:4D:0A:64:5E:BD:DC:27:15:C0:59:E3:5A:7E:B4:28:30:5D:B7
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       01901F3503B8AC7DB12F3C2F5654071BA356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0247
Signing time:             Sun 16 Jun 2024 04:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:26 +0000
Files and hashes:         1: dCLqmMwEdd49RbQFj2qkqVx4qjw.roa (hash: tgv5ELt3BhWnTyIg4UGDbKqpDfbVMMh29A4IOCntxck=)
                          2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: LwbAa1nFKqJmJY3FW70NkWBzdK2h+/5Jh7uLrunpK8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:35:03:b8:ac:7d:b1:2f:3c:2f:56:54:07:1b:a3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Jun 16 04:01:26 2024 GMT
            Not After : Jun 17 04:01:26 2024 GMT
        Subject: CN=39334d0a645ebddc2715c059e35a7eb428305db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:b8:03:e5:e8:cb:93:12:fa:0b:70:09:82:
                    cd:c7:8e:f7:a7:c4:fe:8d:6c:c6:e1:69:01:aa:6f:
                    33:df:86:eb:30:30:30:57:70:48:1c:f7:09:83:a2:
                    7c:15:a6:0f:13:20:24:d7:09:54:0c:4e:ce:1e:9f:
                    60:62:16:6b:47:ee:1d:4e:a5:df:53:88:18:81:15:
                    65:b5:16:1d:1e:51:28:b9:bb:4a:d1:58:a8:41:31:
                    83:77:56:3a:f2:e5:aa:f1:b0:19:8e:15:df:f9:66:
                    dd:e1:a9:0b:7d:be:75:46:cb:b6:7a:31:27:7b:a3:
                    09:1f:18:7c:3e:05:2a:35:d6:44:1d:75:b4:20:f1:
                    b9:30:e1:7f:a2:8a:62:a2:09:cd:77:cd:e9:6e:ba:
                    43:11:74:73:26:0f:26:e5:c0:d6:f3:02:06:4f:ff:
                    f8:31:34:70:57:f1:45:07:d0:50:aa:a8:35:38:18:
                    a2:ea:3f:9b:0e:31:79:38:f1:31:ee:4f:90:ec:b2:
                    fc:cc:c7:6d:f2:a1:b0:33:ce:a7:6c:0b:89:9d:dc:
                    6e:66:13:3d:86:6f:b3:75:0a:db:fc:5e:93:e0:38:
                    76:18:0f:70:d6:74:60:c7:0d:d6:d2:90:83:e6:ef:
                    0a:18:8c:5e:ee:98:a2:fa:0f:4e:91:67:8e:45:79:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:4D:0A:64:5E:BD:DC:27:15:C0:59:E3:5A:7E:B4:28:30:5D:B7
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:23:7d:84:1e:73:a1:c9:84:14:58:8d:15:94:5c:8a:bc:
         9d:b9:77:9c:40:f5:bf:fd:15:45:b9:e1:88:bc:01:82:02:6e:
         fe:28:90:fd:b7:51:82:78:da:f2:67:e5:dc:d9:7b:8f:cb:48:
         ed:56:47:8d:0f:35:ba:f9:7f:53:ab:07:6a:74:dc:1e:d5:89:
         0f:84:b4:76:4b:05:46:a6:28:9b:2e:79:f5:e4:56:d5:a5:da:
         b7:44:a8:ce:16:66:18:c3:b6:d8:6d:37:76:09:bd:06:42:b3:
         cf:16:e7:db:3b:bb:1b:12:ef:78:74:0a:fd:68:4b:56:37:ef:
         e7:12:bb:23:74:4f:7a:3f:78:cf:30:3a:04:b9:be:84:3d:ce:
         2d:bc:75:76:cd:3e:03:35:8c:74:12:74:8f:f9:96:04:86:02:
         68:16:71:c4:5c:bc:95:34:73:85:71:01:69:c5:c3:43:23:07:
         df:b5:19:78:7b:15:e8:8e:41:f7:db:74:4e:2e:17:45:6e:16:
         b8:5f:dc:fd:72:61:1e:ff:0f:23:a5:b6:21:06:7c:56:db:54:
         a4:b2:a7:2d:ef:cf:4f:6a:d5:21:8b:a2:3c:6e:fc:70:33:53:
         a2:5e:e7:c4:8b:24:1b:c2:1c:c6:b8:16:f8:d2:53:05:07:2b:
         cd:4a:95:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNQO4rH2xLzwvVlQHG6NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk
MGVlZjUwHhcNMjQwNjE2MDQwMTI2WhcNMjQwNjE3MDQwMTI2WjAzMTEwLwYDVQQD
EygzOTMzNGQwYTY0NWViZGRjMjcxNWMwNTllMzVhN2ViNDI4MzA1ZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdi4A+Xoy5MS+gtwCYLNx473p8T+
jWzG4WkBqm8z34brMDAwV3BIHPcJg6J8FaYPEyAk1wlUDE7OHp9gYhZrR+4dTqXf
U4gYgRVltRYdHlEoubtK0VioQTGDd1Y68uWq8bAZjhXf+Wbd4akLfb51Rsu2ejEn
e6MJHxh8PgUqNdZEHXW0IPG5MOF/oopiognNd83pbrpDEXRzJg8m5cDW8wIGT//4
MTRwV/FFB9BQqqg1OBii6j+bDjF5OPEx7k+Q7LL8zMdt8qGwM86nbAuJndxuZhM9
hm+zdQrb/F6T4Dh2GA9w1nRgxw3W0pCD5u8KGIxe7pii+g9OkWeORXlIKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkzTQpkXr3cJxXAWeNafrQoMF23MB8GA1UdIwQY
MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt
OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5
LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2MjfYQe
c6HJhBRYjRWUXIq8nbl3nED1v/0VRbnhiLwBggJu/iiQ/bdRgnja8mfl3Nl7j8tI
7VZHjQ81uvl/U6sHanTcHtWJD4S0dksFRqYomy559eRW1aXat0SozhZmGMO22G03
dgm9BkKzzxbn2zu7GxLveHQK/WhLVjfv5xK7I3RPej94zzA6BLm+hD3OLbx1ds0+
AzWMdBJ0j/mWBIYCaBZxxFy8lTRzhXEBacXDQyMH37UZeHsV6I5B99t0Ti4XRW4W
uF/c/XJhHv8PI6W2IQZ8VttUpLKnLe/PT2rVIYuiPG78cDNTol7nxIskG8IcxrgW
+NJTBQcrzUqVMw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:44:58 2024 by rpki-client on console-fra.rpki-client.org