Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File:                     hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier:          3oBFy6+UrK7OeVD1pO2azsRF+tFqkX3wUaI4jn31rF8=
Subject key identifier:   40:AD:DF:A4:85:B4:F7:DF:6B:43:D3:A1:C0:35:4D:8C:55:B5:74:12
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer:       /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial:       018F8D819CCD38284C52536A8542C93A0F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number:          0B0A
Signing time:             Sat 18 May 2024 21:00:32 +0000
Manifest this update:     Sat 18 May 2024 21:00:32 +0000
Manifest next update:     Sun 19 May 2024 21:00:32 +0000
Files and hashes:         1: Gxzk52QpRdmHdyvIJkJlC2oVPmg.roa (hash: pE0S3nu3CVAb5nAO8LOnIRj/WxUUHFEa3AuabTFvZ1s=)
                          2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: dTkZ9mdgCS3UVGuz7tW0rKUX9T+Ql2QM9dBzLS2Z9NM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:81:9c:cd:38:28:4c:52:53:6a:85:42:c9:3a:0f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
        Validity
            Not Before: May 18 21:00:32 2024 GMT
            Not After : May 19 21:00:32 2024 GMT
        Subject: CN=40addfa485b4f7df6b43d3a1c0354d8c55b57412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:30:b4:8f:16:d2:05:ba:3c:96:54:73:5b:
                    a5:61:f5:64:be:51:9d:46:33:93:0c:8c:ad:f6:18:
                    3d:ed:a0:f6:74:7c:33:b7:d0:c7:ba:08:c3:67:c9:
                    0a:30:26:91:e7:f2:f2:58:03:e2:f2:7f:26:80:ae:
                    82:f9:0e:71:11:f0:59:9d:5f:db:08:f8:d6:33:8e:
                    26:81:c0:7c:57:17:81:88:f3:87:b1:51:64:69:26:
                    76:f6:e2:8f:6b:29:8d:d1:46:ff:f2:c9:bc:01:c3:
                    b1:34:51:8a:92:89:a8:4e:53:57:1f:4b:47:1a:cc:
                    35:39:e7:4a:fb:d2:aa:3b:c3:e1:be:ea:5c:15:78:
                    af:f0:58:c3:6a:b0:2f:e4:c6:19:f5:5d:69:03:bc:
                    b8:8e:31:13:fc:9d:7b:73:67:b0:8c:bc:be:d3:b6:
                    25:7e:ab:97:09:37:7b:48:ba:fc:d0:b7:43:56:97:
                    fa:c8:37:38:96:c8:0b:ec:3a:d2:53:b1:6b:7e:d1:
                    5f:5a:25:6f:5c:de:a4:ad:68:41:dc:ac:b7:26:30:
                    a0:dc:a8:d7:a4:11:10:ad:1d:20:e9:39:db:5e:e3:
                    98:8d:26:26:6e:ed:2e:29:11:c8:38:aa:af:1c:66:
                    77:ab:04:0c:08:32:37:5e:08:62:5e:76:dd:74:ba:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AD:DF:A4:85:B4:F7:DF:6B:43:D3:A1:C0:35:4D:8C:55:B5:74:12
            X509v3 Authority Key Identifier:
                keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:da:2f:20:29:7a:6c:0f:c2:c0:ab:10:02:5a:5d:56:5e:
         bb:cc:f6:3d:03:08:58:d8:3c:b4:84:ec:09:91:2a:4f:65:c9:
         41:ee:cb:78:23:9a:d3:88:f2:cc:d8:ac:da:9c:44:4f:3f:ec:
         f4:c1:06:78:02:5d:f9:df:02:c2:2f:fa:ef:80:03:5a:89:75:
         b2:39:c0:9e:28:c7:3b:39:d1:c6:2d:27:b0:3b:67:67:57:c4:
         d6:46:0a:87:70:19:ae:49:44:4a:25:c3:aa:6f:d8:38:6a:9d:
         7f:20:3e:87:5d:83:2b:8d:6a:2f:7f:e9:a2:06:ee:ef:2a:55:
         b9:62:b9:48:db:79:2b:a4:6b:b0:4f:ff:14:59:a2:7e:5c:31:
         0b:42:79:d4:9c:e5:93:8e:23:94:40:a9:a0:c4:8f:8b:2b:e4:
         26:9b:e7:b1:83:9c:3e:9b:1e:95:46:0d:2f:d4:2e:41:27:13:
         07:ba:c1:b1:b1:35:07:d8:62:96:3d:f2:e1:30:4d:5b:96:42:
         bd:6c:a8:58:ea:09:4a:05:25:01:20:98:c3:fd:1b:f1:4e:e2:
         e8:e7:de:b2:b7:1f:51:cc:f4:78:64:59:24:fc:98:18:82:63:
         50:2f:6d:93:ba:57:02:9b:83:6b:ad:b2:ef:35:af:bc:e0:54:
         40:e4:82:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NgZzNOChMUlNqhULJOg9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi
YTljNGYwHhcNMjQwNTE4MjEwMDMyWhcNMjQwNTE5MjEwMDMyWjAzMTEwLwYDVQQD
Eyg0MGFkZGZhNDg1YjRmN2RmNmI0M2QzYTFjMDM1NGQ4YzU1YjU3NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CgwtI8W0gW6PJZUc1ulYfVkvlGd
RjOTDIyt9hg97aD2dHwzt9DHugjDZ8kKMCaR5/LyWAPi8n8mgK6C+Q5xEfBZnV/b
CPjWM44mgcB8VxeBiPOHsVFkaSZ29uKPaymN0Ub/8sm8AcOxNFGKkomoTlNXH0tH
Gsw1OedK+9KqO8PhvupcFXiv8FjDarAv5MYZ9V1pA7y4jjET/J17c2ewjLy+07Yl
fquXCTd7SLr80LdDVpf6yDc4lsgL7DrSU7FrftFfWiVvXN6krWhB3Ky3JjCg3KjX
pBEQrR0g6TnbXuOYjSYmbu0uKRHIOKqvHGZ3qwQMCDI3XghiXnbddLo2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECt36SFtPffa0PTocA1TYxVtXQSMB8GA1UdIwQY
MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt
Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2
LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9jaLyAp
emwPwsCrEAJaXVZeu8z2PQMIWNg8tITsCZEqT2XJQe7LeCOa04jyzNis2pxETz/s
9MEGeAJd+d8Cwi/674ADWol1sjnAnijHOznRxi0nsDtnZ1fE1kYKh3AZrklESiXD
qm/YOGqdfyA+h12DK41qL3/pogbu7ypVuWK5SNt5K6RrsE//FFmiflwxC0J51Jzl
k44jlECpoMSPiyvkJpvnsYOcPpselUYNL9QuQScTB7rBsbE1B9hilj3y4TBNW5ZC
vWyoWOoJSgUlASCYw/0b8U7i6OfesrcfUcz0eGRZJPyYGIJjUC9tk7pXApuDa62y
7zWvvOBUQOSCWg==
-----END CERTIFICATE-----
Generated at Sun May 19 05:53:22 2024 by rpki-client on console-fra.rpki-client.org