Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          afYNAisWW7ycD7DkEFZkqE9C1H9cJlQdQ/RpjIrtmrw=
Subject key identifier:   A1:83:06:5C:F0:65:CB:9C:DF:68:AE:46:E1:B5:07:07:12:DA:CD:1B
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       018F836E62CE272BD744352EEBF19B1DF435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          09B1
Signing time:             Thu 16 May 2024 22:03:20 +0000
Manifest this update:     Thu 16 May 2024 22:03:20 +0000
Manifest next update:     Fri 17 May 2024 22:03:20 +0000
Files and hashes:         1: 3nN8Vr9yMJ8KYpDk-U_EtSoyWzA.roa (hash: cHCFiGwuTeTiLaP8ffR1+nwmgGFYJnb8UZdu7tYUVPQ=)
                          2: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: HBKpTPh+JtwQvmOENXNpEl9v8oZmrWbNNp2lIS6Z72c=)
                          3: H45IyaaEr811i7_XBQJ1qb-WyiA.roa (hash: /pRri/d3HDJxbLpxuJZAk2pZWG7BxHfKtNpbOG98wl0=)
                          4: MtORRkj6KzBYdubYDseSTdp0h1I.roa (hash: BKam7PcrRKZE7SE6qK2CoqqGToCrXa4T9X6XMC+0n8I=)
                          5: OI0ouhfkNMHl-dyhdxvS-36TqHs.roa (hash: 4zQ8g5DbZ/V9wAKj+GchIVuhl5XocF5c4fpqaAbcd90=)
                          6: TOXEwMgPIZ3nZApYaDZhoXO5uK0.roa (hash: 04y9jyCkY5lBbFiyIipk3b6tQX+m3INXBU+Cg9JQYvE=)
                          7: VGXHAYnYw4P0CW2UNClbBzQixSk.roa (hash: Ts5Bf7fMj1dxLowyY/QS6cpQRN4d5JLetbKVbgoEnKg=)
                          8: hC2yuzpsvdYdaca2Mwwa1eLLvuw.roa (hash: rqnswvNx5PQWQSJhMgdxCY/qEwMWrSB7aESUAjx2qSw=)
                          9: uTqavOzXshbfOmcCVEm5icvSg9k.roa (hash: oRCR5prfFV83ScldQEdL5piG6MV9YpSYLu+0dbWK4EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:62:ce:27:2b:d7:44:35:2e:eb:f1:9b:1d:f4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: May 16 22:03:20 2024 GMT
            Not After : May 17 22:03:20 2024 GMT
        Subject: CN=a183065cf065cb9cdf68ae46e1b5070712dacd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:70:34:d9:8e:02:92:bf:6b:11:de:ae:e5:
                    02:a6:61:d7:23:47:a5:f9:23:b2:36:bb:e5:a3:49:
                    be:ab:e4:7d:1a:59:9c:c3:ff:29:09:4c:a9:f0:77:
                    28:fb:f2:2f:f2:f4:20:74:f8:d0:20:54:02:88:26:
                    c9:e1:1e:01:75:ff:14:8a:c2:54:8b:39:32:6f:f8:
                    64:ed:68:4e:de:cf:49:c4:7f:8a:45:39:0d:40:66:
                    46:79:86:65:37:40:c5:0d:11:7c:88:9f:ee:80:22:
                    a9:50:64:04:74:8c:43:cc:92:5f:06:ae:99:3f:93:
                    4c:ed:d3:2a:27:58:b4:d3:60:bb:05:f2:1f:ea:47:
                    83:3b:c4:7b:17:54:87:4c:ce:f6:72:fe:a8:75:5e:
                    20:6d:d8:50:c9:1b:d1:bf:ae:f3:45:f9:96:8a:c1:
                    41:83:8a:49:6e:d4:ae:d6:7f:a3:08:de:22:d9:67:
                    49:6d:cc:2b:e6:2e:0c:70:c1:1b:da:43:57:36:eb:
                    65:72:cd:98:28:54:20:5b:61:60:73:5e:5f:2c:fd:
                    6c:90:20:b2:57:68:1d:ca:71:77:64:c9:0b:06:48:
                    92:eb:67:25:b5:40:0a:77:e0:dd:e7:bd:21:ba:82:
                    39:ef:67:da:df:10:a8:61:6c:98:17:15:a1:83:0b:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:06:5C:F0:65:CB:9C:DF:68:AE:46:E1:B5:07:07:12:DA:CD:1B
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:d6:89:b2:08:f2:8b:02:a6:bf:ad:aa:b8:9a:9e:9d:88:
         c1:46:96:78:e8:f1:95:1e:e7:9a:61:76:36:04:3f:4d:d4:c0:
         60:fd:60:ae:36:1b:04:76:e4:c1:c4:c5:1a:1e:d5:58:e5:78:
         86:05:52:68:14:4c:b0:ac:50:f6:8a:ae:ba:9f:2c:51:66:62:
         f0:89:c7:64:e5:1d:c9:bf:04:fb:60:fa:33:63:6b:b0:d8:77:
         31:71:d2:7f:83:ae:91:d9:53:10:70:c8:7b:76:2b:11:9c:23:
         8e:94:e4:cf:3f:b0:b9:74:f2:38:da:eb:f4:73:3f:79:d2:a0:
         87:f9:c0:27:a4:2b:f5:c7:a1:0f:71:db:d9:76:b0:7f:cf:a4:
         23:b4:7f:c6:9b:d6:64:02:cd:be:79:1c:cc:e2:4b:c3:0c:2c:
         78:2d:34:23:be:75:97:99:9e:b4:a0:35:14:f3:f1:2a:f5:f2:
         d6:e2:9f:e0:b9:ab:08:95:82:ea:9f:e6:6d:4b:7c:32:f6:b2:
         7e:ff:de:5f:09:4f:4b:b1:72:0c:ca:0a:4b:61:a6:57:1f:c9:
         29:5c:19:0e:55:2a:60:5c:bd:bd:46:5e:82:d7:7e:48:32:de:
         ea:28:a6:d3:64:90:49:e7:9b:0e:1c:1d:11:f1:d2:79:75:e5:
         64:9f:74:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DbmLOJyvXRDUu6/GbHfQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjQwNTE2MjIwMzIwWhcNMjQwNTE3MjIwMzIwWjAzMTEwLwYDVQQD
EyhhMTgzMDY1Y2YwNjVjYjljZGY2OGFlNDZlMWI1MDcwNzEyZGFjZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NZwNNmOApK/axHeruUCpmHXI0el
+SOyNrvlo0m+q+R9Glmcw/8pCUyp8Hco+/Iv8vQgdPjQIFQCiCbJ4R4Bdf8UisJU
izkyb/hk7WhO3s9JxH+KRTkNQGZGeYZlN0DFDRF8iJ/ugCKpUGQEdIxDzJJfBq6Z
P5NM7dMqJ1i002C7BfIf6keDO8R7F1SHTM72cv6odV4gbdhQyRvRv67zRfmWisFB
g4pJbtSu1n+jCN4i2WdJbcwr5i4McMEb2kNXNutlcs2YKFQgW2Fgc15fLP1skCCy
V2gdynF3ZMkLBkiS62cltUAKd+Dd570huoI572fa3xCoYWyYFxWhgwtxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGDBlzwZcuc32iuRuG1BwcS2s0bMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwnWibII
8osCpr+tqrianp2IwUaWeOjxlR7nmmF2NgQ/TdTAYP1grjYbBHbkwcTFGh7VWOV4
hgVSaBRMsKxQ9oquup8sUWZi8InHZOUdyb8E+2D6M2NrsNh3MXHSf4OukdlTEHDI
e3YrEZwjjpTkzz+wuXTyONrr9HM/edKgh/nAJ6Qr9cehD3Hb2Xawf8+kI7R/xpvW
ZALNvnkczOJLwwwseC00I751l5metKA1FPPxKvXy1uKf4LmrCJWC6p/mbUt8Mvay
fv/eXwlPS7FyDMoKS2GmVx/JKVwZDlUqYFy9vUZegtd+SDLe6iim02SQSeebDhwd
EfHSeXXlZJ90rA==
-----END CERTIFICATE-----
Generated at Fri May 17 05:49:37 2024 by rpki-client on console-ams.rpki-client.org