Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File:                     dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier:          TXPOXdDurmflzzryGae68NVQuceHj6YNAUg/1UFGwoU=
Subject key identifier:   51:FC:B9:46:13:BC:24:DC:96:5C:C9:AA:21:43:75:D9:8C:4E:95:DD
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer:       /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial:       018F3BFAF954AF1F73293BAEBDB0DC468665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number:          0B34
Signing time:             Fri 03 May 2024 01:04:14 +0000
Manifest this update:     Fri 03 May 2024 01:04:14 +0000
Manifest next update:     Sat 04 May 2024 01:04:14 +0000
Files and hashes:         1: Dy2XHgoLwrXSjcRN2sPvRWvXJCM.roa (hash: axCqiyP6vi71vJurX94tzCRztO4iN22vOzzyBGi7tUo=)
                          2: NvwZlMcAwIjQXQv7WwIwajy-4MA.roa (hash: hpvvOOULb8qH39AXRffuRNY2rcxNszNa6+bTgcHHp60=)
                          3: O8MPljUcxmuVEM-kiZkhSI4CAP8.roa (hash: WLx+qlgNu1IKI5PP521v9ATAFFCd1t9s/27w0CA8Vlc=)
                          4: XfxxmkbuReYrJgsmqz-gcyD5nRs.roa (hash: QkP+cipVROTKmggAUodmV6SseyzIeA3uYFvSuhIheAc=)
                          5: ZG1WOqcat7NEb6oXdVx8DM6AMys.roa (hash: /PuKz7vWYyfh5qGuj9mKKQdo87M6f6ra/vvfo8DY/50=)
                          6: _jGbiXplAbj22NUPEmgjSFrSwHQ.roa (hash: 0rJLRelU+d2tFQMXvfXqEYR+od3TJbna1h9THRiNfCQ=)
                          7: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: lilmS62ZYNkMgmFionuqLUJCTELA8uMfY6/gATKsRoQ=)
                          8: eyTPDyHnMvGnEntloukdlStH5kU.roa (hash: jp+EEccLH2ErDaRdgYgJ1SwfQwpFVpK1cXileDLghI8=)
                          9: hrGnS7JnuaCe8zNPhZxIcWaNtpE.roa (hash: VwSt7q0EqWDH6GnoptLLPhAgm+aqUHW8+0YUqFCm1Os=)
                          10: isUSzxZ49dbz8CqHHUwiVhVzOFw.roa (hash: ekPkPBrDXGBJ9m5r54mNHtxYetPGOw+9mlPHu1puJW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:f9:54:af:1f:73:29:3b:ae:bd:b0:dc:46:86:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
        Validity
            Not Before: May  3 01:04:14 2024 GMT
            Not After : May  4 01:04:14 2024 GMT
        Subject: CN=51fcb94613bc24dc965cc9aa214375d98c4e95dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:68:71:19:d9:5c:b1:d3:b0:08:ea:68:cc:
                    16:f0:71:63:ef:bc:b3:07:bf:c9:15:4c:91:c2:81:
                    1d:4b:52:6c:35:88:c6:82:49:e5:be:40:66:ac:6a:
                    ef:ef:16:b9:61:00:d9:0b:45:29:03:fb:32:3e:b3:
                    8f:8b:2f:06:30:79:f8:65:5a:c3:f6:49:b7:55:96:
                    ee:88:67:94:b7:08:6d:cd:7c:94:9d:ba:e1:96:29:
                    32:58:11:02:85:6f:ca:67:f8:58:37:05:80:d5:f1:
                    3e:6d:21:21:d8:f2:00:3e:72:bd:34:0f:ac:25:11:
                    fd:26:3d:b4:5d:80:0e:e8:af:69:68:8c:44:f1:7b:
                    a5:b1:d3:1c:65:4f:39:a4:2c:10:0f:3a:ca:d1:23:
                    20:35:d3:a4:97:ef:a3:90:3f:e2:3c:50:70:15:72:
                    58:58:59:09:88:18:49:aa:c7:ff:d6:be:4b:f6:ac:
                    35:a2:14:08:ed:82:aa:eb:46:86:7c:5d:90:fe:7d:
                    d7:7a:e0:43:e6:aa:7f:0d:d4:f4:cc:ae:ff:64:c5:
                    44:62:6c:76:4e:e6:98:03:bd:26:0d:20:dc:c9:fa:
                    d3:ed:7f:49:df:10:c6:a1:f5:ee:16:d1:d3:23:df:
                    ad:5c:19:9b:66:87:75:38:7e:c7:36:73:37:58:a4:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:B9:46:13:BC:24:DC:96:5C:C9:AA:21:43:75:D9:8C:4E:95:DD
            X509v3 Authority Key Identifier:
                keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:7a:d7:df:85:61:e2:54:c4:87:0f:0b:7b:06:54:a0:ff:
         d3:ef:6b:f3:08:3b:0e:e9:32:f0:c7:b4:56:ac:7f:f7:92:fe:
         4d:0b:86:64:fc:85:65:c0:4f:4e:5c:91:be:14:12:d3:2d:51:
         05:9b:ef:36:4e:5e:96:2c:ae:9b:53:0d:2c:4f:85:f2:29:76:
         6b:66:4e:7b:d2:c5:23:96:da:ca:d2:f8:41:d6:2e:b1:2d:b8:
         36:2e:b5:36:fa:e0:a8:16:04:7c:90:0a:02:ba:ba:37:b5:74:
         76:34:fc:be:39:7c:31:bf:e2:dd:49:5f:17:c3:da:a9:b4:88:
         ce:c4:4f:05:3c:2b:4c:53:08:75:7d:10:78:35:5b:bc:30:4c:
         c1:b5:9c:41:b3:e3:ce:9f:bc:e5:e2:bf:72:ad:a4:aa:a2:c7:
         8c:f1:09:22:45:b5:34:0d:5f:f3:15:f0:2b:10:22:c4:bf:09:
         61:9c:da:37:7a:d1:04:fb:cf:6a:3b:4a:62:6f:35:e0:ee:e5:
         48:44:a5:90:b0:b9:06:86:19:95:87:ce:ca:29:16:6b:d5:9a:
         bd:07:2f:69:1c:b3:8d:1f:a7:5d:7d:e8:6a:36:8f:9e:da:eb:
         5f:c5:9d:52:f6:6d:50:96:94:5d:06:ca:4e:ba:f7:52:bf:df:
         eb:2d:9e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+vlUrx9zKTuuvbDcRoZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjQwNTAzMDEwNDE0WhcNMjQwNTA0MDEwNDE0WjAzMTEwLwYDVQQD
Eyg1MWZjYjk0NjEzYmMyNGRjOTY1Y2M5YWEyMTQzNzVkOThjNGU5NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzBocRnZXLHTsAjqaMwW8HFj77yz
B7/JFUyRwoEdS1JsNYjGgknlvkBmrGrv7xa5YQDZC0UpA/syPrOPiy8GMHn4ZVrD
9km3VZbuiGeUtwhtzXyUnbrhlikyWBEChW/KZ/hYNwWA1fE+bSEh2PIAPnK9NA+s
JRH9Jj20XYAO6K9paIxE8XulsdMcZU85pCwQDzrK0SMgNdOkl++jkD/iPFBwFXJY
WFkJiBhJqsf/1r5L9qw1ohQI7YKq60aGfF2Q/n3XeuBD5qp/DdT0zK7/ZMVEYmx2
TuaYA70mDSDcyfrT7X9J3xDGofXuFtHTI9+tXBmbZod1OH7HNnM3WKRpvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH8uUYTvCTcllzJqiFDddmMTpXdMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTx619+F
YeJUxIcPC3sGVKD/0+9r8wg7Duky8Me0Vqx/95L+TQuGZPyFZcBPTlyRvhQS0y1R
BZvvNk5eliyum1MNLE+F8il2a2ZOe9LFI5baytL4QdYusS24Ni61NvrgqBYEfJAK
Arq6N7V0djT8vjl8Mb/i3UlfF8PaqbSIzsRPBTwrTFMIdX0QeDVbvDBMwbWcQbPj
zp+85eK/cq2kqqLHjPEJIkW1NA1f8xXwKxAixL8JYZzaN3rRBPvPajtKYm814O7l
SESlkLC5BoYZlYfOyikWa9WavQcvaRyzjR+nXX3oajaPntrrX8WdUvZtUJaUXQbK
Trr3Ur/f6y2e1g==
-----END CERTIFICATE-----
Generated at Fri May 3 03:28:25 2024 by rpki-client on console-ams.rpki-client.org