Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          tGz3gOVcq26mddA2G66IijwIi54Mb5RHiQSKkn8vbkw=
Subject key identifier:   60:EC:B0:D1:30:13:43:30:05:BA:F5:A4:83:0A:E1:A4:48:08:31:EA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       018F896DA20091BA2B430CF9759F9CB368D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          0BD3
Signing time:             Sat 18 May 2024 02:00:14 +0000
Manifest this update:     Sat 18 May 2024 02:00:14 +0000
Manifest next update:     Sun 19 May 2024 02:00:14 +0000
Files and hashes:         1: 6R_RRxsxiQsvDxqL9oibXIHhyWQ.roa (hash: L2JVMCui1eP6aTE9qQ9GsfVKmjGvbLdgdaGmNYAYbtk=)
                          2: 8xJ8l2l4Aa5WC7qMCr40TCODPN8.roa (hash: D5Cu8gxok1zuyb4II9NXS1vDc4ORvg0xWJUkyQlIDPU=)
                          3: BFe5yiFUn0D1HOLzBsXMStcu6lo.roa (hash: CnWkE+4ssBFuD/IZs6CdrUKmGLo1nK9/KPzjEhTievo=)
                          4: Kn0eCmbisvQqbDQduMwjENEu6sg.roa (hash: K6elA5ENq31sbbrAsJ1sdp2aMa9lt+ha/ccXpsyJ2wU=)
                          5: OX8hXywptnX-Y8b946IZc0csbJk.roa (hash: XOROmwix7jX1v0m0cTKVche2NUhvhTDfQQ77DcnjgQE=)
                          6: RMde8GL3rOynsH01TAXXVp9JG2w.roa (hash: 6IwB7gXLgy3XhefDop3p6c9RYvWefpfKRtnhWhYyR4E=)
                          7: RNNIOSnOFjdxzT0oI3kMd3nwXbo.roa (hash: sUeyej56sQDYO3zOWi/DwYmPIp5MyndUhm6/i0uFCIA=)
                          8: VKQGHU_R8DNUPGOi_onFsqSoc5E.roa (hash: VJardR24ldudnuMMZHWsq2LfEb/hNynWfMgnV+H7g6I=)
                          9: WfyIx_aAibcIEzp9Gdk36nwTUdU.roa (hash: bj3DUQ/27CkQjgP4qNj0urWul7BNnBRYWqBydpjpHlY=)
                          10: cXfDxJN_mQjBwPAndy1rv4fKYBI.roa (hash: bbcG/BPsdQi31fTxEL+zlCg6HyPrAk13eeIT1OVI0Pw=)
                          11: ew8HE4wfUuBLX1_wXEdaVAnTXeM.roa (hash: 8sUiQO0MJ/eMVWeoycLgv21dWtxZoGDpj/43ZNyuzPw=)
                          12: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: tNIAwvUnaHY9dFn5PAMt8hzi/GVLax28frUSIXhycGk=)
                          13: hzyjak_efsJQ7xw9vmK1q72KXAw.roa (hash: AXD5SamfIkWSIm07bod4/K0OafxPncyEfjOYePl2q0w=)
                          14: rln2hAhK9q0geLnR19x-k9rfUSk.roa (hash: qDAvtwIPM9I7SBAh3PqUzYnsR/A+f2mQuVlipgK2994=)
                          15: s6eQUeCekHvX4-zAtY_xr-hveYo.roa (hash: Ak9QIrXI3KqGuuyA7qIC/xlJxyzdD4xq9gmd364IEgc=)
                          16: y37F9BpnYyXscRjkxLLo614_xG4.roa (hash: tg0hYBmVJzkBkcbQ8YbRHRIxuSppwX0pxush736VMoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:6d:a2:00:91:ba:2b:43:0c:f9:75:9f:9c:b3:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: May 18 02:00:14 2024 GMT
            Not After : May 19 02:00:14 2024 GMT
        Subject: CN=60ecb0d13013433005baf5a4830ae1a4480831ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:c3:b2:63:24:da:d9:07:cb:c1:ea:62:f9:
                    57:16:98:61:d0:63:89:aa:07:28:15:7e:6f:98:e6:
                    cf:66:c4:0c:62:9c:ff:27:42:2b:3d:2c:ee:5a:a8:
                    be:76:1d:1c:1b:b6:01:1e:26:ee:55:7f:45:98:2b:
                    73:ef:12:3d:77:6d:cc:c8:8c:0f:9b:8a:7b:97:55:
                    ef:a3:ea:07:d3:8c:1c:52:5b:21:3f:00:de:b7:45:
                    ad:77:b6:3a:60:82:2a:f4:9c:f6:c3:06:28:cf:ff:
                    78:c0:a3:f0:27:08:bf:91:e2:9b:f5:86:02:7f:8b:
                    1d:4c:2b:bd:9a:dc:d1:d3:bf:2e:e9:58:36:5a:0c:
                    92:43:c4:2c:de:ed:a8:64:96:49:84:3b:b4:ca:b9:
                    ff:7d:08:f6:9b:39:63:de:d7:8d:97:d9:7f:6c:45:
                    c6:e4:f1:03:bc:4e:a3:93:c3:2a:e5:cf:c8:0c:90:
                    f3:8d:b6:63:2a:2b:46:65:28:7e:8c:47:38:b1:9c:
                    f2:3f:47:91:59:7b:d0:a7:a0:c1:66:48:67:7b:c4:
                    a4:90:9a:da:d4:2b:56:63:eb:92:f4:bf:4c:91:dd:
                    d4:cc:ab:bb:4d:ed:c1:b9:74:5a:8a:92:b1:59:b2:
                    85:49:d1:3f:db:bf:9e:46:1c:f2:c2:df:d2:e1:d4:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EC:B0:D1:30:13:43:30:05:BA:F5:A4:83:0A:E1:A4:48:08:31:EA
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:99:c4:13:c3:7d:ac:0a:cd:f0:97:b8:21:ef:ad:17:48:
         8b:2b:f4:e8:f0:82:bc:0d:ca:2f:f0:c1:45:35:c8:64:f6:6f:
         9e:7f:ff:59:4f:9b:21:53:b0:66:3e:a0:1a:85:08:fc:21:d7:
         ca:b8:99:7f:89:93:a7:37:03:ab:25:d6:e3:6a:4c:17:0d:21:
         8c:16:aa:2b:bf:94:4d:87:53:d8:41:65:33:81:72:e7:e6:3c:
         56:39:42:7e:f8:25:5b:a7:33:88:c3:de:3e:6d:21:50:48:23:
         84:e8:2f:eb:15:6e:1f:5d:d1:e3:61:c5:42:44:fb:e2:09:a8:
         d7:81:8b:08:c9:a2:4c:93:9f:a6:68:f8:c0:52:68:21:19:94:
         18:a9:6b:39:65:2e:0b:be:4b:36:7d:42:1f:67:96:71:fc:f2:
         5e:1c:0f:58:8f:05:ac:d5:32:37:ec:ae:f8:56:8f:ff:07:09:
         54:58:cb:72:0f:82:17:64:9f:4c:80:cf:61:e1:72:5d:65:03:
         4e:50:f3:00:6a:9f:93:50:52:a0:53:38:a4:dd:df:1a:14:44:
         41:58:57:54:cb:fd:c9:b1:3c:4a:f7:34:0c:6f:20:5f:11:5a:
         5e:3c:0e:e9:d7:01:fb:b9:6c:30:c8:f7:68:bd:4f:71:49:30:
         84:30:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:42:59 2024 by rpki-client on console-ams.rpki-client.org