Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
File:                     _gyfMOO0bVC40b95udHbhPJRNLo.mft (raw, json)
Hash identifier:          QLpMPax7dvKUDaHqiILzNKql7+pcinS4TJIKhn8xE0I=
Subject key identifier:   90:5A:AA:4C:36:13:D3:A1:5F:28:06:86:3A:72:8C:09:ED:F6:F1:CB
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       018F90F0A5E00AFF81882EB3EA33AF6293FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
Manifest number:          08B8
Signing time:             Sun 19 May 2024 13:00:41 +0000
Manifest this update:     Sun 19 May 2024 13:00:41 +0000
Manifest next update:     Mon 20 May 2024 13:00:41 +0000
Files and hashes:         1: NXGee85ErSqoPHit0HbEI9RiTXA.roa (hash: mrQojEodQoPywO1DCX1hNHlcS314pUQ+hShQlzfdTpc=)
                          2: XXKSMBfdtj4wckKpZqtviuU7xFg.roa (hash: AnVa68j0ow0iry2rgLMUfSnCOuwaBZQrrfYMJBvfaO0=)
                          3: _gyfMOO0bVC40b95udHbhPJRNLo.crl (hash: I0jmW2Ox9M07GOqT2upt5T96076Tuh0wtrIlX34Gu58=)
                          4: ne7u7zrQx9h3GyUCTzVtTKZz5yc.roa (hash: 3jTE7nHCoy0u9yFZiKr5iAaof29Zj8WJDdeH8FAjGpc=)
                          5: s8LVsFvaOxwp2E4b-2DaV_21w1I.roa (hash: P95qrYxWkT8pnUh8iTszvyQhE+gKTkiqgI76lRaKS6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f0:a5:e0:0a:ff:81:88:2e:b3:ea:33:af:62:93:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: May 19 13:00:41 2024 GMT
            Not After : May 20 13:00:41 2024 GMT
        Subject: CN=905aaa4c3613d3a15f2806863a728c09edf6f1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:7c:bb:f7:6e:3f:bd:9a:32:9d:d4:52:1b:
                    d6:1c:c9:e2:e0:b9:9b:c6:6f:83:7d:1c:23:13:85:
                    4f:76:07:27:28:ac:47:aa:83:7f:e6:b6:08:79:bb:
                    47:2d:5b:d6:30:22:73:f0:57:7e:b1:7d:46:ec:ce:
                    9c:71:d1:36:28:ac:69:82:37:fe:ec:94:f8:6b:b2:
                    57:a1:2d:b6:5f:57:88:f2:2f:1c:ba:26:2f:9a:00:
                    8d:6b:f9:73:32:aa:39:6c:e2:f8:d0:04:d4:6a:6a:
                    e1:d9:e8:94:5e:35:df:c0:bb:cd:0d:ea:e0:07:79:
                    06:4b:6d:27:a9:3f:07:32:d8:00:74:5a:84:5e:d0:
                    64:41:c8:10:2a:59:35:2f:16:e6:90:bb:93:6c:2b:
                    52:1b:21:0f:45:95:b7:6e:d0:c3:6c:5d:9c:98:24:
                    d5:12:f3:86:67:ba:55:05:89:e9:6e:20:81:5f:b2:
                    4f:53:5d:93:47:40:13:0f:fe:2b:f4:ba:48:d7:b2:
                    01:f7:d4:78:88:0e:c3:77:b9:4c:e4:96:cd:e4:dc:
                    6c:0e:6b:e1:40:7e:06:5b:9f:bb:4b:18:ac:4b:11:
                    77:7e:02:05:06:1b:fd:0e:56:30:bf:40:81:91:6e:
                    55:a2:b4:e8:ea:2c:6b:c1:6b:b7:bd:c4:be:4e:27:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5A:AA:4C:36:13:D3:A1:5F:28:06:86:3A:72:8C:09:ED:F6:F1:CB
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:8c:f2:5a:aa:4f:fe:83:04:e2:00:50:4f:88:5d:98:f0:
         e0:ea:ca:2b:70:62:5e:16:7d:a4:5f:20:a3:dd:f4:84:00:46:
         4d:0a:52:6c:5c:17:80:d3:6e:1c:c6:c5:2f:a7:a9:b2:90:3c:
         3b:54:4b:8d:f0:60:7a:e8:99:b1:dd:db:47:ee:4f:b3:06:36:
         3b:ee:2a:9e:8a:c1:d7:c4:fe:13:1d:2f:8d:ea:d4:91:05:d4:
         29:61:a4:43:ef:56:58:45:f5:f5:8e:8f:14:a8:50:d7:a7:c3:
         27:8c:f6:09:ff:9e:15:6e:80:85:66:9d:a4:39:5e:d1:06:e2:
         9b:45:7c:76:f3:16:86:b4:80:05:5e:6d:6f:68:3e:be:c8:ca:
         ff:e9:f7:70:51:57:78:50:28:94:d1:dc:c3:64:2d:4f:9a:e3:
         88:73:98:8e:12:f9:05:1c:8b:de:7f:53:66:ee:29:dd:44:b9:
         df:dd:9c:41:da:3a:2e:e4:9b:dc:59:5f:14:c4:53:00:f9:a2:
         d3:3d:3f:fa:4e:0f:03:50:5a:b1:ef:85:02:a7:a3:b3:b3:ab:
         c5:58:58:1d:2a:d4:94:e8:33:c2:a9:f6:de:8e:d4:51:b8:b0:
         fd:73:e2:c6:33:86:f7:b2:e9:8c:9b:26:bd:6a:03:c6:47:52:
         a5:9a:18:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Q8KXgCv+BiC6z6jOvYpP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGM5ZjMwZTNiNDZkNTBiOGQxYmY3OWI5ZDFkYjg0ZjI1
MTM0YmEwHhcNMjQwNTE5MTMwMDQxWhcNMjQwNTIwMTMwMDQxWjAzMTEwLwYDVQQD
Eyg5MDVhYWE0YzM2MTNkM2ExNWYyODA2ODYzYTcyOGMwOWVkZjZmMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7R8u/duP72aMp3UUhvWHMni4Lmb
xm+DfRwjE4VPdgcnKKxHqoN/5rYIebtHLVvWMCJz8Fd+sX1G7M6ccdE2KKxpgjf+
7JT4a7JXoS22X1eI8i8cuiYvmgCNa/lzMqo5bOL40ATUamrh2eiUXjXfwLvNDerg
B3kGS20nqT8HMtgAdFqEXtBkQcgQKlk1LxbmkLuTbCtSGyEPRZW3btDDbF2cmCTV
EvOGZ7pVBYnpbiCBX7JPU12TR0ATD/4r9LpI17IB99R4iA7Dd7lM5JbN5NxsDmvh
QH4GW5+7SxisSxF3fgIFBhv9DlYwv0CBkW5VorTo6ixrwWu3vcS+TiewUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBaqkw2E9OhXygGhjpyjAnt9vHLMB8GA1UdIwQY
MBaAFP4MnzDjtG1QuNG/ebnR24TyUTS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iOWVkNmMtZThjNS00MzFlLWIxODgt
ZjUyMDBmNTQ5Mzc3LzEvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iOWVkNmMtZThjNS00MzFlLWIxODgtZjUyMDBmNTQ5Mzc3
LzEvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzyM8lqq
T/6DBOIAUE+IXZjw4OrKK3BiXhZ9pF8go930hABGTQpSbFwXgNNuHMbFL6epspA8
O1RLjfBgeuiZsd3bR+5PswY2O+4qnorB18T+Ex0vjerUkQXUKWGkQ+9WWEX19Y6P
FKhQ16fDJ4z2Cf+eFW6AhWadpDle0Qbim0V8dvMWhrSABV5tb2g+vsjK/+n3cFFX
eFAolNHcw2QtT5rjiHOYjhL5BRyL3n9TZu4p3US5392cQdo6LuSb3FlfFMRTAPmi
0z0/+k4PA1Base+FAqejs7OrxVhYHSrUlOgzwqn23o7UUbiw/XPixjOG97LpjJsm
vWoDxkdSpZoYFQ==
-----END CERTIFICATE-----
Generated at Sun May 19 14:52:25 2024 by rpki-client on console-fra.rpki-client.org