Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File:                     9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier:          7OosTyvaTEVq/lkUbLdPBK85W9E+648sWSzHZmUy2Fo=
Subject key identifier:   D1:58:92:A7:C9:D7:B4:C0:24:B1:0D:13:0B:68:5E:56:EB:1F:6B:B0
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer:       /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial:       018F3EC2584F1F33123015EE591F244FD3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number:          0E66
Signing time:             Fri 03 May 2024 14:01:14 +0000
Manifest this update:     Fri 03 May 2024 14:01:14 +0000
Manifest next update:     Sat 04 May 2024 14:01:14 +0000
Files and hashes:         1: 8j4B1jt3Wq1_U6wF6fLAN41lzDA.roa (hash: U1B+YgEQxTSH10L2kgDJ/FvIcxuY9ey6kNYm3xTwNH4=)
                          2: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: aRB7ooonLRS6RFsymTHqOq/M9o3JJ63GxzQ6xKh10C0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:58:4f:1f:33:12:30:15:ee:59:1f:24:4f:d3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
        Validity
            Not Before: May  3 14:01:14 2024 GMT
            Not After : May  4 14:01:14 2024 GMT
        Subject: CN=d15892a7c9d7b4c024b10d130b685e56eb1f6bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:d2:92:77:69:82:9c:c7:2f:1f:d2:24:06:
                    10:dd:f0:df:1e:7d:3c:af:fa:5a:ee:8b:ff:5f:03:
                    84:13:5e:e4:a7:8e:69:7f:e1:66:c8:b5:0f:b9:ba:
                    2c:a2:90:42:d7:0e:28:92:b7:db:f3:a5:da:9b:7f:
                    b7:55:69:7e:8c:4a:de:56:d0:bc:38:db:a6:0c:64:
                    5e:12:81:a7:5b:9d:03:25:ac:9a:9b:bb:16:22:8d:
                    51:90:01:a1:10:10:68:14:da:7e:62:b0:6b:8a:a2:
                    31:9a:4a:9e:74:ce:14:77:ac:7c:d6:a6:d1:87:a2:
                    3c:22:99:36:1f:6b:bd:9e:ff:f8:b4:b3:43:00:f6:
                    61:44:32:9b:b4:dc:61:a2:9e:41:7b:3d:c6:bd:41:
                    04:1b:6d:6d:1f:bc:a7:1d:4d:45:83:c3:eb:71:dd:
                    45:25:c0:c5:64:28:d8:4f:48:78:bd:61:4c:2e:54:
                    e3:4f:c6:08:18:8a:fc:75:9d:ac:78:a5:c8:69:55:
                    80:0d:de:51:b4:66:ee:a9:e6:4a:e8:c9:10:60:3f:
                    6f:0e:b6:f7:16:bc:4f:07:48:99:10:08:ee:87:34:
                    91:93:36:b9:6d:a1:2d:f9:a2:34:07:ff:b3:c0:d8:
                    d0:f9:82:a9:af:0a:ce:89:67:86:4a:4b:ff:c9:ec:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:58:92:A7:C9:D7:B4:C0:24:B1:0D:13:0B:68:5E:56:EB:1F:6B:B0
            X509v3 Authority Key Identifier:
                keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:03:05:79:49:06:fe:e5:4e:22:81:30:66:b3:e9:25:22:51:
         4f:46:d2:f5:4c:2b:9d:31:bc:b2:24:6b:c8:e7:7f:fc:48:80:
         ed:79:ac:d1:90:a9:f3:9e:38:f4:c5:13:cd:37:c7:8f:e5:82:
         8d:b6:e9:e1:5c:32:d8:97:54:0d:f9:51:99:e0:e5:21:75:93:
         05:2a:6d:f6:b1:ac:11:20:94:a7:fa:08:7c:02:9f:61:93:f2:
         b8:6d:09:dd:0a:4d:f7:62:99:7c:de:3b:76:06:67:9f:2d:96:
         1e:7e:e8:97:67:0e:dd:2b:07:cb:6e:d5:c9:90:f1:a2:73:61:
         ef:8a:17:fb:4a:9a:a0:a4:60:67:e7:58:dd:a2:32:9f:83:79:
         4b:5e:7c:2b:5c:83:44:e8:01:2c:60:ee:89:7f:c1:f6:aa:5d:
         f5:31:fa:e3:d0:05:6f:8c:45:90:35:4b:e0:12:09:1a:bc:a2:
         65:eb:0e:b7:3d:8e:49:68:60:db:23:01:d4:e0:b9:ec:bc:d5:
         24:10:96:7a:38:37:86:01:d9:40:02:6e:12:cd:6c:bb:86:73:
         9a:fe:d2:29:4d:a7:5a:b9:98:64:81:16:b0:16:f2:1b:25:46:
         b0:93:ab:b1:65:9d:77:3d:ee:07:ac:2e:d6:27:d5:0b:3f:94:
         80:6b:09:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+wlhPHzMSMBXuWR8kT9PrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDU3ZTc0YWFkMjFhYmNmMTMzNzRmNTkxNWIxYTdlODI3
ZDRlYTEwHhcNMjQwNTAzMTQwMTE0WhcNMjQwNTA0MTQwMTE0WjAzMTEwLwYDVQQD
EyhkMTU4OTJhN2M5ZDdiNGMwMjRiMTBkMTMwYjY4NWU1NmViMWY2YmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmvSkndpgpzHLx/SJAYQ3fDfHn08
r/pa7ov/XwOEE17kp45pf+FmyLUPubosopBC1w4okrfb86Xam3+3VWl+jEreVtC8
ONumDGReEoGnW50DJayam7sWIo1RkAGhEBBoFNp+YrBriqIxmkqedM4Ud6x81qbR
h6I8Ipk2H2u9nv/4tLNDAPZhRDKbtNxhop5Bez3GvUEEG21tH7ynHU1Fg8Prcd1F
JcDFZCjYT0h4vWFMLlTjT8YIGIr8dZ2seKXIaVWADd5RtGbuqeZK6MkQYD9vDrb3
FrxPB0iZEAjuhzSRkza5baEt+aI0B/+zwNjQ+YKprwrOiWeGSkv/yewAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFYkqfJ17TAJLENEwtoXlbrH2uwMB8GA1UdIwQY
MBaAFPYFfnSq0hq88TN09ZFbGn6CfU6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgt
MGE5YTFmMWM5ODljLzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgtMGE5YTFmMWM5ODlj
LzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwMFeUkG
/uVOIoEwZrPpJSJRT0bS9UwrnTG8siRryOd//EiA7Xms0ZCp85449MUTzTfHj+WC
jbbp4Vwy2JdUDflRmeDlIXWTBSpt9rGsESCUp/oIfAKfYZPyuG0J3QpN92KZfN47
dgZnny2WHn7ol2cO3SsHy27VyZDxonNh74oX+0qaoKRgZ+dY3aIyn4N5S158K1yD
ROgBLGDuiX/B9qpd9TH649AFb4xFkDVL4BIJGryiZesOtz2OSWhg2yMB1OC57LzV
JBCWejg3hgHZQAJuEs1su4Zzmv7SKU2nWrmYZIEWsBbyGyVGsJOrsWWddz3uB6wu
1ifVCz+UgGsJvA==
-----END CERTIFICATE-----
Generated at Fri May 3 18:07:53 2024 by rpki-client on console-ams.rpki-client.org