Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File:                     MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier:          sI9+QG/bdxq32DsDQ2EitazzS2srTYdu9FZ2PRfdC4E=
Subject key identifier:   DC:1D:1C:FE:33:18:84:7F:6B:B4:B7:AD:A1:26:02:B2:52:C3:E4:18
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer:       /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial:       018F87EDB899084D821B442771FCE72ACD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number:          0EA4
Signing time:             Fri 17 May 2024 19:00:54 +0000
Manifest this update:     Fri 17 May 2024 19:00:54 +0000
Manifest next update:     Sat 18 May 2024 19:00:54 +0000
Files and hashes:         1: IQsAQD3-uM5EELmjXIi6RRmFJlM.roa (hash: 1O1BkvQ6feIQSCg+NciCRDBJf/2gSLyY3fvyejdg6wM=)
                          2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: vTkaOm42zI7Jzi/3FmKFtrcPfIUsCoR7Bpb2dG9vZaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b8:99:08:4d:82:1b:44:27:71:fc:e7:2a:cd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
        Validity
            Not Before: May 17 19:00:54 2024 GMT
            Not After : May 18 19:00:54 2024 GMT
        Subject: CN=dc1d1cfe3318847f6bb4b7ada12602b252c3e418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:75:14:3f:2c:19:57:48:02:6d:50:05:65:
                    90:c5:00:d4:01:9c:e5:32:e9:28:4c:2f:2e:5b:e8:
                    c5:40:d0:8e:68:4d:ef:8e:d9:d7:b3:7b:fc:27:38:
                    7d:75:5c:db:4b:d5:a3:d2:98:ce:bd:f1:25:0e:af:
                    d7:c0:65:8c:ee:cf:2d:67:47:b4:9b:fd:f5:8d:f5:
                    c3:02:10:d8:bd:13:1d:0f:dc:2f:17:57:71:85:1f:
                    ec:fb:7a:aa:a5:93:68:e8:0f:3b:7b:e1:14:db:a7:
                    33:af:83:e5:82:e3:f5:a7:b8:4a:b9:c5:85:1b:cf:
                    4f:dd:a2:3f:16:31:49:90:e8:49:12:86:ae:a3:78:
                    9c:38:76:d5:08:20:ef:44:8f:ab:53:7a:07:c7:3d:
                    9d:7b:87:eb:33:7a:f0:85:63:50:a3:79:04:93:85:
                    94:de:35:6d:a9:5e:89:c8:ef:5e:2f:a1:52:4d:f1:
                    f5:7b:2a:59:7f:63:43:6f:e2:67:81:38:9f:61:28:
                    70:ea:52:59:e0:63:66:04:8a:6d:16:1d:bb:2b:9f:
                    9f:eb:da:ee:53:b7:56:39:a8:0a:b6:8f:d3:a6:c3:
                    5d:8a:d9:83:81:2c:fa:dd:09:5a:a1:44:91:fa:25:
                    71:45:f7:6b:67:33:23:1f:86:76:da:c5:81:96:58:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1D:1C:FE:33:18:84:7F:6B:B4:B7:AD:A1:26:02:B2:52:C3:E4:18
            X509v3 Authority Key Identifier:
                keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:64:3b:7b:e9:e1:41:c1:4a:ed:78:71:2b:16:ae:9b:c7:b4:
         89:21:aa:4d:29:f8:48:07:e3:b5:48:20:ba:eb:76:e2:46:0d:
         ff:2e:ec:86:6b:50:08:a2:bb:cc:4d:47:e9:50:8d:d5:fc:07:
         2a:39:69:96:e3:77:d4:ad:6c:58:e9:22:f4:8b:21:de:a1:ec:
         b9:98:c0:fe:d5:32:51:52:aa:54:32:88:4e:f9:c3:ae:71:54:
         a3:0a:b9:03:f5:91:b7:8a:57:74:e2:81:fc:e4:5a:0a:47:4c:
         5a:97:9e:09:3d:64:c4:a0:82:26:f6:91:9d:98:0b:45:1c:7a:
         88:5b:11:21:22:8b:56:f2:e9:32:4b:48:7a:b4:d5:dc:4e:9a:
         fd:c3:84:f9:92:d3:a4:2c:bc:81:3e:86:01:f8:ce:98:53:48:
         8d:6c:46:72:7d:ed:84:f7:5a:d4:25:66:3e:53:5c:80:8f:bf:
         90:c2:97:bd:1a:ac:96:bd:88:b7:79:de:2a:61:d3:56:f3:41:
         f3:ae:28:3f:bc:6f:7d:ad:ce:80:be:34:cd:fa:8e:57:0a:e1:
         34:b4:c6:a7:09:f7:10:94:93:43:e1:dc:12:ae:e3:98:40:ed:
         98:76:d9:3e:37:d3:4e:ff:13:be:2d:a3:c4:64:6b:48:17:53:
         93:ba:57:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7biZCE2CG0QncfznKs2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz
MTQ3ZDgwHhcNMjQwNTE3MTkwMDU0WhcNMjQwNTE4MTkwMDU0WjAzMTEwLwYDVQQD
EyhkYzFkMWNmZTMzMTg4NDdmNmJiNGI3YWRhMTI2MDJiMjUyYzNlNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkel1FD8sGVdIAm1QBWWQxQDUAZzl
MukoTC8uW+jFQNCOaE3vjtnXs3v8Jzh9dVzbS9Wj0pjOvfElDq/XwGWM7s8tZ0e0
m/31jfXDAhDYvRMdD9wvF1dxhR/s+3qqpZNo6A87e+EU26czr4PlguP1p7hKucWF
G89P3aI/FjFJkOhJEoauo3icOHbVCCDvRI+rU3oHxz2de4frM3rwhWNQo3kEk4WU
3jVtqV6JyO9eL6FSTfH1eypZf2NDb+JngTifYShw6lJZ4GNmBIptFh27K5+f69ru
U7dWOagKto/TpsNditmDgSz63QlaoUSR+iVxRfdrZzMjH4Z22sWBllgu5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwdHP4zGIR/a7S3raEmArJSw+QYMB8GA1UdIwQY
MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt
ZDQ5MzQ0OTNhNjc5LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5
LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWQ7e+nh
QcFK7XhxKxaum8e0iSGqTSn4SAfjtUgguut24kYN/y7shmtQCKK7zE1H6VCN1fwH
KjlpluN31K1sWOki9Ish3qHsuZjA/tUyUVKqVDKITvnDrnFUowq5A/WRt4pXdOKB
/ORaCkdMWpeeCT1kxKCCJvaRnZgLRRx6iFsRISKLVvLpMktIerTV3E6a/cOE+ZLT
pCy8gT6GAfjOmFNIjWxGcn3thPda1CVmPlNcgI+/kMKXvRqslr2It3neKmHTVvNB
864oP7xvfa3OgL40zfqOVwrhNLTGpwn3EJSTQ+HcEq7jmEDtmHbZPjfTTv8Tvi2j
xGRrSBdTk7pXIQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:12:58 2024 by rpki-client on console-fra.rpki-client.org