Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
File:                     gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json)
Hash identifier:          bU6xgY2yhueYN9+YVoHSkbwNJEwBO/vAgKKxSuIdroU=
Subject key identifier:   B0:54:48:EC:90:BC:EA:FA:CB:A8:F2:B1:C0:01:D4:6E:DD:1F:9F:98
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       018EF896FBA87E06966A6F73A7FF8DC9E326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
Manifest number:          0B88
Signing time:             Fri 19 Apr 2024 23:00:28 +0000
Manifest this update:     Fri 19 Apr 2024 23:00:28 +0000
Manifest next update:     Sat 20 Apr 2024 23:00:28 +0000
Files and hashes:         1: 6R_RRxsxiQsvDxqL9oibXIHhyWQ.roa (hash: L2JVMCui1eP6aTE9qQ9GsfVKmjGvbLdgdaGmNYAYbtk=)
                          2: 8xJ8l2l4Aa5WC7qMCr40TCODPN8.roa (hash: D5Cu8gxok1zuyb4II9NXS1vDc4ORvg0xWJUkyQlIDPU=)
                          3: BFe5yiFUn0D1HOLzBsXMStcu6lo.roa (hash: CnWkE+4ssBFuD/IZs6CdrUKmGLo1nK9/KPzjEhTievo=)
                          4: Kn0eCmbisvQqbDQduMwjENEu6sg.roa (hash: K6elA5ENq31sbbrAsJ1sdp2aMa9lt+ha/ccXpsyJ2wU=)
                          5: OX8hXywptnX-Y8b946IZc0csbJk.roa (hash: XOROmwix7jX1v0m0cTKVche2NUhvhTDfQQ77DcnjgQE=)
                          6: RMde8GL3rOynsH01TAXXVp9JG2w.roa (hash: 6IwB7gXLgy3XhefDop3p6c9RYvWefpfKRtnhWhYyR4E=)
                          7: RNNIOSnOFjdxzT0oI3kMd3nwXbo.roa (hash: sUeyej56sQDYO3zOWi/DwYmPIp5MyndUhm6/i0uFCIA=)
                          8: VKQGHU_R8DNUPGOi_onFsqSoc5E.roa (hash: VJardR24ldudnuMMZHWsq2LfEb/hNynWfMgnV+H7g6I=)
                          9: WfyIx_aAibcIEzp9Gdk36nwTUdU.roa (hash: bj3DUQ/27CkQjgP4qNj0urWul7BNnBRYWqBydpjpHlY=)
                          10: cXfDxJN_mQjBwPAndy1rv4fKYBI.roa (hash: bbcG/BPsdQi31fTxEL+zlCg6HyPrAk13eeIT1OVI0Pw=)
                          11: ew8HE4wfUuBLX1_wXEdaVAnTXeM.roa (hash: 8sUiQO0MJ/eMVWeoycLgv21dWtxZoGDpj/43ZNyuzPw=)
                          12: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: PFWIDTJJhynvvs+CrNtmi/I937FhxfaM8NC4BY4S0KY=)
                          13: hzyjak_efsJQ7xw9vmK1q72KXAw.roa (hash: AXD5SamfIkWSIm07bod4/K0OafxPncyEfjOYePl2q0w=)
                          14: rln2hAhK9q0geLnR19x-k9rfUSk.roa (hash: qDAvtwIPM9I7SBAh3PqUzYnsR/A+f2mQuVlipgK2994=)
                          15: s6eQUeCekHvX4-zAtY_xr-hveYo.roa (hash: Ak9QIrXI3KqGuuyA7qIC/xlJxyzdD4xq9gmd364IEgc=)
                          16: y37F9BpnYyXscRjkxLLo614_xG4.roa (hash: tg0hYBmVJzkBkcbQ8YbRHRIxuSppwX0pxush736VMoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f8:96:fb:a8:7e:06:96:6a:6f:73:a7:ff:8d:c9:e3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Apr 19 23:00:28 2024 GMT
            Not After : Apr 20 23:00:28 2024 GMT
        Subject: CN=b05448ec90bceafacba8f2b1c001d46edd1f9f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:d8:40:00:07:cf:bf:d7:f8:dc:d9:3c:fa:
                    d1:04:26:59:75:6f:80:1f:79:aa:bc:4d:8c:25:1e:
                    33:7d:b3:99:7e:d7:51:48:3a:b6:64:94:4a:94:4f:
                    d6:48:06:8f:2a:a7:e3:23:88:bc:84:6e:2f:98:e4:
                    ee:5c:c0:a5:e0:42:99:7d:41:d2:a5:d9:13:dd:37:
                    32:d4:3f:6e:f4:08:ee:98:e6:88:c2:db:75:3c:2f:
                    bb:c3:58:c9:46:ed:89:f0:ba:6a:d4:e4:bc:c1:f5:
                    e5:36:29:0f:2a:40:6e:3f:41:84:9f:b1:e8:5d:c1:
                    87:89:cd:12:be:5a:82:bc:f1:03:57:78:fb:34:c4:
                    07:df:46:f7:8e:e0:61:90:79:44:a5:49:bc:b8:ec:
                    81:4b:21:bd:a2:f3:07:41:1b:ed:44:2e:1d:b1:b1:
                    6a:30:44:0f:c1:c4:27:dc:af:93:05:d9:5c:67:fa:
                    12:6e:7a:93:ef:f8:83:60:4f:95:51:c6:44:75:30:
                    56:be:7b:9b:e5:78:29:ba:36:0d:28:60:ff:72:62:
                    04:c9:9b:6f:0a:3d:0e:62:17:b9:1b:62:8f:59:ca:
                    82:de:a1:73:95:03:ab:58:d2:66:1f:12:49:bb:8c:
                    5d:bf:36:27:46:95:e3:40:e2:14:f3:91:15:5f:fe:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:54:48:EC:90:BC:EA:FA:CB:A8:F2:B1:C0:01:D4:6E:DD:1F:9F:98
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:71:2d:34:ee:ce:65:b3:1d:09:5b:93:bd:7f:fc:fb:5e:
         72:5e:2a:15:21:5f:fd:91:42:83:8f:fa:82:20:93:ca:5c:f1:
         06:94:62:fc:70:10:9d:6f:1d:29:94:45:19:85:1d:4c:8f:dc:
         6a:b6:28:91:a4:bf:1c:a7:2f:d6:ff:78:b8:2d:21:f6:12:e9:
         61:17:07:bf:47:d1:07:51:a3:53:3e:e4:19:22:f2:cf:03:8a:
         18:e5:dc:28:de:d7:82:fa:84:a7:23:57:f7:40:07:58:ec:47:
         9b:92:ef:b5:7f:f4:56:f8:f3:e0:f4:2e:95:19:62:db:b5:2c:
         cc:77:98:c3:a7:87:5d:4a:9f:1b:20:0d:60:b7:b5:e4:01:6a:
         6e:28:3d:7e:ab:62:b2:55:eb:b1:29:83:5c:de:6b:8a:2a:1d:
         2c:00:20:c8:6f:f1:93:f2:92:e8:18:d5:1e:52:43:64:9b:70:
         57:71:51:19:71:ee:d6:13:2e:1a:96:2f:49:8c:a3:c0:6c:44:
         88:fd:52:a6:71:1a:64:f0:3c:68:35:e1:30:8a:25:d8:b2:d0:
         dd:e0:46:dd:df:6a:ec:df:c7:36:8d:6d:ab:f3:68:ed:e3:d8:
         ac:56:a3:9b:60:6e:19:cd:dd:34:fb:37:03:62:a5:5f:35:b5:
         bc:67:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:01:12 2024 by rpki-client on console-ams.rpki-client.org