Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File:                     K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier:          2wrkvHPwBW6AFlSg0rw6W1yIMBFc7O0ByOKtE3jIRtE=
Subject key identifier:   A2:BB:FC:AE:E0:74:3C:5B:D1:50:8F:F7:77:F0:B9:2A:6B:53:D1:68
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer:       /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial:       018F87492C74E8D0398FE4B50067B49495E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number:          0768
Signing time:             Fri 17 May 2024 16:01:10 +0000
Manifest this update:     Fri 17 May 2024 16:01:10 +0000
Manifest next update:     Sat 18 May 2024 16:01:10 +0000
Files and hashes:         1: 16SVhbUlz4IQ9tIN3DumwLTziZI.roa (hash: ODSAhdKnM6LGhLx7U0Owo54N8V1Kfo82QfWRh4pPAE0=)
                          2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: 1zxqxHI0YAEFuT6GLUVc4o+of4yrt+9KjInzVwNtSKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2c:74:e8:d0:39:8f:e4:b5:00:67:b4:94:95:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
        Validity
            Not Before: May 17 16:01:10 2024 GMT
            Not After : May 18 16:01:10 2024 GMT
        Subject: CN=a2bbfcaee0743c5bd1508ff777f0b92a6b53d168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:0e:63:39:3d:fc:b6:7c:68:3f:cd:c0:42:
                    1a:f0:00:20:83:4e:b2:b3:0d:03:e9:06:bb:e2:e6:
                    90:35:00:0c:43:8a:d3:ee:c3:d2:14:56:e4:4a:44:
                    c4:58:a1:68:bf:cf:cf:c1:96:67:7b:01:bd:15:b6:
                    43:79:c7:fe:51:10:87:7f:c0:ad:88:10:8b:aa:17:
                    3a:18:be:57:43:c5:01:53:8f:fd:45:e0:21:1c:50:
                    c1:cc:18:2d:0c:75:90:61:05:dd:2f:74:51:18:b6:
                    4c:a9:c3:4e:5e:d1:08:3d:5a:41:7d:c0:f6:7d:e6:
                    31:93:44:50:7f:6b:53:4d:8a:a8:97:a5:41:b4:14:
                    4b:3b:9c:34:2b:c5:32:4c:ab:4f:b3:e9:fb:dc:0f:
                    f1:ce:6a:11:da:33:75:8b:f5:31:e1:22:e2:3e:31:
                    8e:9b:ab:85:85:1e:78:8e:83:68:6b:18:de:29:bd:
                    24:ac:50:c3:46:f0:58:46:09:1e:c2:7d:0f:48:a7:
                    93:77:43:ed:9e:c3:86:fe:76:f5:8f:da:ed:b7:59:
                    44:d1:0a:ef:91:2f:13:00:01:80:f7:7c:12:70:35:
                    a9:9f:64:42:00:93:20:db:35:6d:cd:d0:ba:ea:9a:
                    23:fb:b5:e5:72:3d:98:e6:5c:ee:af:d1:31:52:b2:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BB:FC:AE:E0:74:3C:5B:D1:50:8F:F7:77:F0:B9:2A:6B:53:D1:68
            X509v3 Authority Key Identifier:
                keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:03:f9:25:82:86:82:63:d4:a5:4d:fc:5f:0b:cb:f2:e7:a3:
         e0:9e:8f:fd:d1:b9:b8:e0:7e:c6:2a:f7:2e:87:95:1c:73:ca:
         b5:8a:5f:8a:d0:70:90:d1:e2:74:ed:72:e3:38:32:f2:aa:3a:
         7c:a9:99:1f:83:dd:45:15:5b:d1:ae:99:f8:d1:d4:05:72:96:
         b3:6c:cc:b4:b2:97:aa:62:01:fb:ae:91:56:b7:09:e2:98:84:
         aa:ca:79:06:94:4b:45:68:ff:33:e6:b8:97:d2:74:e0:90:12:
         ba:c4:1b:cc:34:40:27:77:20:a4:a7:5e:66:32:91:d0:95:73:
         6e:0a:4b:55:48:ac:a2:7c:37:5c:9d:74:99:66:8d:ce:6a:d2:
         28:50:92:29:24:65:9c:3f:99:af:14:63:8c:fe:a9:e5:e1:58:
         6c:ef:0a:89:58:8c:67:30:32:5d:c9:dc:ec:8c:4e:05:c8:5a:
         b6:f9:c0:9c:b4:eb:9b:c8:b2:86:42:63:e9:c4:2e:55:88:66:
         81:3a:64:5d:61:e9:ef:49:77:3f:8f:90:eb:be:40:f3:88:fc:
         92:7c:32:b6:ce:9f:c5:be:6e:cf:45:c4:cf:4a:da:55:3f:a1:
         50:4f:ed:0f:17:97:3c:e7:86:23:56:73:9c:82:df:1f:14:ca:
         ef:27:00:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSSx06NA5j+S1AGe0lJXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3
ZjI2MWMwHhcNMjQwNTE3MTYwMTEwWhcNMjQwNTE4MTYwMTEwWjAzMTEwLwYDVQQD
EyhhMmJiZmNhZWUwNzQzYzViZDE1MDhmZjc3N2YwYjkyYTZiNTNkMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxYOYzk9/LZ8aD/NwEIa8AAgg06y
sw0D6Qa74uaQNQAMQ4rT7sPSFFbkSkTEWKFov8/PwZZnewG9FbZDecf+URCHf8Ct
iBCLqhc6GL5XQ8UBU4/9ReAhHFDBzBgtDHWQYQXdL3RRGLZMqcNOXtEIPVpBfcD2
feYxk0RQf2tTTYqol6VBtBRLO5w0K8UyTKtPs+n73A/xzmoR2jN1i/Ux4SLiPjGO
m6uFhR54joNoaxjeKb0krFDDRvBYRgkewn0PSKeTd0PtnsOG/nb1j9rtt1lE0Qrv
kS8TAAGA93wScDWpn2RCAJMg2zVtzdC66poj+7Xlcj2Y5lzur9ExUrLQhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK7/K7gdDxb0VCP93fwuSprU9FoMB8GA1UdIwQY
MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt
OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy
LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAywP5JYKG
gmPUpU38XwvL8uej4J6P/dG5uOB+xir3LoeVHHPKtYpfitBwkNHidO1y4zgy8qo6
fKmZH4PdRRVb0a6Z+NHUBXKWs2zMtLKXqmIB+66RVrcJ4piEqsp5BpRLRWj/M+a4
l9J04JASusQbzDRAJ3cgpKdeZjKR0JVzbgpLVUisonw3XJ10mWaNzmrSKFCSKSRl
nD+ZrxRjjP6p5eFYbO8KiViMZzAyXcnc7IxOBchatvnAnLTrm8iyhkJj6cQuVYhm
gTpkXWHp70l3P4+Q675A84j8knwyts6fxb5uz0XEz0raVT+hUE/tDxeXPOeGI1Zz
nILfHxTK7ycAEA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:18 2024 by rpki-client on console-fra.rpki-client.org