Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          Jf09bylmeUIvL/YTcjKisUjwf/zOdJ6gFfTeSwLDNEU=
Subject key identifier:   FD:59:AC:E7:A5:06:BE:DA:7F:6E:9F:FD:09:B1:FA:05:20:68:9B:F5
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       018F4C7E3A391C6903C74825D4915309A858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 06:01:31 +0000
Manifest this update:     Mon 06 May 2024 06:01:31 +0000
Manifest next update:     Tue 07 May 2024 06:01:31 +0000
Files and hashes:         1: 8bjqwqDpxRvB3-FavUFytURJoJQ.roa (hash: xIeGi8GWb7TEXIssByYdA0KoR/uQIkmb9ztEHO6zgOc=)
                          2: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: rV37r5j5yGUqCS4enYhpiw/BMLqoru/3bOFG0mCJQHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7e:3a:39:1c:69:03:c7:48:25:d4:91:53:09:a8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: May  6 06:01:31 2024 GMT
            Not After : May  7 06:01:31 2024 GMT
        Subject: CN=fd59ace7a506beda7f6e9ffd09b1fa0520689bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:09:15:a5:24:4c:5a:21:16:f7:60:3a:fe:
                    3a:0f:a2:7a:45:00:52:53:75:c7:97:d6:5e:5c:1b:
                    b5:37:97:c9:d1:f4:f2:b2:6a:05:b7:a8:16:13:b5:
                    eb:65:ae:5a:56:35:8f:b6:0f:08:2d:b4:71:50:f2:
                    ee:99:bc:ac:ef:8e:72:82:76:3b:82:ef:cc:d6:f5:
                    d6:fd:69:7c:5f:0e:7f:4a:bf:94:7a:e4:1a:b1:c0:
                    ad:f7:5b:86:f5:5d:c8:0c:a1:cd:3d:15:18:e6:31:
                    33:40:84:fc:fc:0d:19:26:7f:53:8a:01:5c:d5:6f:
                    fd:03:99:2c:3d:d2:34:50:77:71:8f:51:d0:8b:60:
                    b4:b5:b9:a7:56:ca:7d:78:cd:df:4c:14:6a:c7:08:
                    4f:3b:5c:d0:44:6b:71:ea:c3:bc:a4:5b:7b:a9:89:
                    ca:4f:2a:39:fa:83:fe:60:6a:35:4b:64:94:81:be:
                    d7:78:83:84:6b:45:a0:5a:b9:73:db:e3:72:7b:ba:
                    ff:d0:56:26:3b:ea:df:85:72:91:8f:39:92:d0:ab:
                    2a:1f:30:50:b3:11:b7:b3:e1:59:7f:58:56:d7:38:
                    1d:68:c9:a3:57:e6:27:31:fd:fb:ed:86:48:fe:33:
                    f8:ec:f1:b6:5b:15:85:40:c1:0b:cf:9b:68:8b:9b:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:59:AC:E7:A5:06:BE:DA:7F:6E:9F:FD:09:B1:FA:05:20:68:9B:F5
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:e9:87:43:da:84:e9:c2:e7:3c:06:82:13:63:e6:f5:5d:
         06:5a:49:84:0d:db:22:63:4d:ce:bc:5a:17:b3:ee:44:fd:20:
         f1:9a:0c:88:31:92:1f:54:e8:13:38:55:a2:cd:5c:6d:3d:df:
         62:87:12:6f:2c:af:df:3f:17:c4:e8:60:08:9f:91:2d:52:c2:
         b8:da:04:44:d6:10:9f:b8:41:2a:f8:39:9a:ec:41:f0:e3:73:
         9c:0f:f0:36:c3:d6:46:5f:b0:e0:b4:23:08:d0:ba:bc:fb:82:
         da:21:a2:8c:5f:93:c4:b7:4c:cd:14:a7:b7:2b:c6:fb:2e:01:
         2c:e0:69:43:67:0a:a3:8a:b3:57:5b:ce:c0:53:54:24:98:e0:
         ea:ab:bd:01:64:e1:56:eb:08:07:1a:5b:2f:94:32:9f:dd:b9:
         0b:8b:62:d3:f5:b7:42:8f:47:7e:7d:da:c2:d3:41:33:4b:06:
         23:4f:83:1a:a2:b5:f4:cb:3a:92:93:b4:f0:e8:6f:0d:1e:23:
         a1:22:a9:53:48:55:db:14:97:d7:e0:6a:1b:d5:6e:d7:0e:9b:
         c4:05:f3:84:49:f8:6f:9f:13:25:bc:e4:69:54:e9:2d:2a:51:
         ce:75:a7:cc:a9:5d:74:71:07:1e:31:b4:d6:1d:8a:ee:97:75:
         96:f7:5a:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Mfjo5HGkDx0gl1JFTCahYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1
YTE3N2QwHhcNMjQwNTA2MDYwMTMxWhcNMjQwNTA3MDYwMTMxWjAzMTEwLwYDVQQD
EyhmZDU5YWNlN2E1MDZiZWRhN2Y2ZTlmZmQwOWIxZmEwNTIwNjg5YmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NwJFaUkTFohFvdgOv46D6J6RQBS
U3XHl9ZeXBu1N5fJ0fTysmoFt6gWE7XrZa5aVjWPtg8ILbRxUPLumbys745ygnY7
gu/M1vXW/Wl8Xw5/Sr+UeuQascCt91uG9V3IDKHNPRUY5jEzQIT8/A0ZJn9TigFc
1W/9A5ksPdI0UHdxj1HQi2C0tbmnVsp9eM3fTBRqxwhPO1zQRGtx6sO8pFt7qYnK
Tyo5+oP+YGo1S2SUgb7XeIOEa0WgWrlz2+Nye7r/0FYmO+rfhXKRjzmS0KsqHzBQ
sxG3s+FZf1hW1zgdaMmjV+YnMf377YZI/jP47PG2WxWFQMELz5toi5sa7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1ZrOelBr7af26f/Qmx+gUgaJv1MB8GA1UdIwQY
MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt
ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi
LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2rph0Pa
hOnC5zwGghNj5vVdBlpJhA3bImNNzrxaF7PuRP0g8ZoMiDGSH1ToEzhVos1cbT3f
YocSbyyv3z8XxOhgCJ+RLVLCuNoERNYQn7hBKvg5muxB8ONznA/wNsPWRl+w4LQj
CNC6vPuC2iGijF+TxLdMzRSntyvG+y4BLOBpQ2cKo4qzV1vOwFNUJJjg6qu9AWTh
VusIBxpbL5Qyn925C4ti0/W3Qo9Hfn3awtNBM0sGI0+DGqK19Ms6kpO08OhvDR4j
oSKpU0hV2xSX1+BqG9Vu1w6bxAXzhEn4b58TJbzkaVTpLSpRznWnzKlddHEHHjG0
1h2K7pd1lvda4Q==
-----END CERTIFICATE-----
Generated at Mon May 6 15:23:32 2024 by rpki-client on console-ams.rpki-client.org