Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File:                     EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier:          M2IeEJHUPA1FWKcahYio6+37pCjbYyCr9t+V3B6boXk=
Subject key identifier:   7E:B1:CD:DB:B9:EF:38:E5:F0:E6:28:AD:83:DA:E2:79:1D:1E:D4:67
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer:       /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial:       018E848156C1AFA0E7D84875B563190148C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number:          10F5
Signing time:             Thu 28 Mar 2024 10:00:52 +0000
Manifest this update:     Thu 28 Mar 2024 10:00:52 +0000
Manifest next update:     Fri 29 Mar 2024 10:00:52 +0000
Files and hashes:         1: 42qVnHimqFNOMXwAvvQx2lPEMJ4.roa (hash: JK2TkNyTPi5+I71rvz/JhlYiDrSMTtxNq2piOHwMRq4=)
                          2: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: kyrvS8VcJ2QYWmDkf1x49DSmNKL6kPmTS/xOSLzRfg0=)
                          3: M2tFrjY58rsUg4UHvPSGiRaxNBo.roa (hash: 6igT4Z5uhDDDN+n+A7eRUv9NnJvuwXvaBnL5BXUSPHo=)
                          4: RY7YMyxrHOr2CB8wHzShA96G9HY.roa (hash: KlFcdX9qijQE40j4qVfMdHWUleYIWM3rYMw97YQcNtU=)
                          5: _VqpKNWMtFPkASwQ2N8ASGJLpvM.roa (hash: y6sBVrQJ19O94R2lPYyuQC/zqu2AElPxo6+cHp+7edw=)
                          6: _soj7vmBNOPRBIFGr-eNrEKyyYQ.roa (hash: qoBvN8sToEkEuN5s+clsiY0tb2yoVkxGZQFO9ejqpVQ=)
                          7: iXKN4-0Q5TmzoftYJ_JehGe7Jog.roa (hash: TLOzZHT9JaesQDeR6UlNHjxrXdl5xXoy5tsVyYS/i5E=)
                          8: o97tiazmeP4S1oafRvjVVOM5OFo.roa (hash: l0OSa+NGbB1Qyh91CUyN2A/heXy/A0whdvBYXcNQv88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:84:81:56:c1:af:a0:e7:d8:48:75:b5:63:19:01:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
        Validity
            Not Before: Mar 28 10:00:52 2024 GMT
            Not After : Mar 29 10:00:52 2024 GMT
        Subject: CN=7eb1cddbb9ef38e5f0e628ad83dae2791d1ed467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:2c:a2:d9:b5:54:cb:a1:8d:5a:4f:83:b5:
                    e4:9c:3f:ef:c2:b2:8f:ad:6e:a8:6b:6d:95:bb:ae:
                    ca:49:36:34:a9:52:55:b7:38:e3:5a:18:73:17:9a:
                    c3:24:f9:c4:00:4c:34:4d:a5:4b:99:39:e4:59:c4:
                    9a:b7:09:78:e0:09:c4:e1:fb:cb:b8:9a:38:12:fd:
                    d4:81:64:84:bb:14:21:fa:98:fe:bb:dc:0e:a9:f3:
                    ad:b6:61:1f:72:ee:f5:9d:f2:0d:b6:4e:6a:03:bd:
                    26:4b:b6:d6:53:7f:9f:4d:b6:2e:1a:e0:e2:f8:cc:
                    8c:0e:7d:11:42:88:53:62:5c:61:13:7c:0b:bf:80:
                    44:ba:24:4d:46:39:39:1a:42:9e:de:82:f3:4c:da:
                    8a:0b:ed:b1:46:f8:98:b9:78:1a:23:05:d6:84:16:
                    04:90:b3:ac:0e:60:38:d1:4c:0a:40:f5:07:52:5f:
                    76:56:11:85:be:d2:b9:3a:d8:db:6b:48:b8:9d:64:
                    87:40:3a:b9:e0:f0:59:f2:fa:1a:06:05:e5:c1:44:
                    1f:fb:d1:69:15:4b:7c:10:12:fb:78:f9:35:6a:61:
                    8b:88:eb:11:58:ed:f1:fc:cb:25:02:3a:94:f3:18:
                    25:b2:1b:d4:ce:29:f2:42:bc:43:08:0c:dd:bb:36:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:CD:DB:B9:EF:38:E5:F0:E6:28:AD:83:DA:E2:79:1D:1E:D4:67
            X509v3 Authority Key Identifier:
                keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:71:88:ae:41:22:46:87:d5:5a:92:19:1e:a5:93:9c:a1:34:
         4a:43:6b:4b:3e:16:30:e9:87:f7:0e:50:bd:0f:29:42:a0:58:
         67:d2:45:2a:41:c8:99:74:44:46:a5:6b:68:32:59:62:fc:1b:
         1f:8d:b8:ad:6a:ed:bd:d7:a5:87:19:3d:40:67:34:eb:10:9b:
         ee:97:f3:6f:a4:b4:f7:70:60:07:bc:55:02:90:4b:7c:95:ae:
         52:3a:3e:d0:80:9a:2d:4a:72:0f:da:58:3a:3f:5c:cb:d8:f9:
         d5:5d:29:f8:35:22:8c:9f:52:a4:4f:e9:e4:e4:af:cd:ea:98:
         62:5f:85:2a:97:b9:9a:01:15:b9:7b:05:6b:00:ca:f2:34:57:
         0a:99:72:b3:94:ac:e1:e8:ab:52:04:67:1e:ae:68:f2:bf:4b:
         5a:e8:85:54:f4:db:bb:f1:ca:37:e3:63:4d:09:29:0e:3e:44:
         ad:03:2e:1f:73:96:03:46:5d:32:99:9a:3c:2b:e2:60:7e:11:
         d7:53:03:c1:33:6f:3d:f4:41:7f:3a:95:79:49:7b:f5:76:53:
         66:3e:0c:8c:e5:93:12:19:0c:65:8c:ae:68:42:67:3a:15:2f:
         40:7b:f1:10:a1:ac:5e:64:b4:dd:3b:e5:61:0c:da:96:96:12:
         eb:5a:80:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY6EgVbBr6Dn2Eh1tWMZAUjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjQwMzI4MTAwMDUyWhcNMjQwMzI5MTAwMDUyWjAzMTEwLwYDVQQD
Eyg3ZWIxY2RkYmI5ZWYzOGU1ZjBlNjI4YWQ4M2RhZTI3OTFkMWVkNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWQsotm1VMuhjVpPg7XknD/vwrKP
rW6oa22Vu67KSTY0qVJVtzjjWhhzF5rDJPnEAEw0TaVLmTnkWcSatwl44AnE4fvL
uJo4Ev3UgWSEuxQh+pj+u9wOqfOttmEfcu71nfINtk5qA70mS7bWU3+fTbYuGuDi
+MyMDn0RQohTYlxhE3wLv4BEuiRNRjk5GkKe3oLzTNqKC+2xRviYuXgaIwXWhBYE
kLOsDmA40UwKQPUHUl92VhGFvtK5Otjba0i4nWSHQDq54PBZ8voaBgXlwUQf+9Fp
FUt8EBL7ePk1amGLiOsRWO3x/MslAjqU8xglshvUzinyQrxDCAzduzaEJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6xzdu57zjl8OYorYPa4nkdHtRnMB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHGIrkEi
RofVWpIZHqWTnKE0SkNrSz4WMOmH9w5QvQ8pQqBYZ9JFKkHImXRERqVraDJZYvwb
H424rWrtvdelhxk9QGc06xCb7pfzb6S093BgB7xVApBLfJWuUjo+0ICaLUpyD9pY
Oj9cy9j51V0p+DUijJ9SpE/p5OSvzeqYYl+FKpe5mgEVuXsFawDK8jRXCplys5Ss
4eirUgRnHq5o8r9LWuiFVPTbu/HKN+NjTQkpDj5ErQMuH3OWA0ZdMpmaPCviYH4R
11MDwTNvPfRBfzqVeUl79XZTZj4MjOWTEhkMZYyuaEJnOhUvQHvxEKGsXmS03Tvl
YQzalpYS61qA5w==
-----END CERTIFICATE-----
Generated at Thu Mar 28 13:40:44 2024 by rpki-client on console-ams.rpki-client.org