Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          0m6vPEq+b5r7GDe8oGsmQTL5BcQTOROiXB+tozTROWE=
Subject key identifier:   CA:EE:E9:AA:2C:BC:5C:18:D3:8D:2B:88:B1:E9:45:F5:A4:8B:C1:2C
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       018F701F8037FA0674AFB8E710727548F0D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          0C8B
Signing time:             Mon 13 May 2024 04:04:23 +0000
Manifest this update:     Mon 13 May 2024 04:04:23 +0000
Manifest next update:     Tue 14 May 2024 04:04:23 +0000
Files and hashes:         1: CYiPvrXiDA5WP9aHtlJHSkuRKS0.roa (hash: Tq1/d6zCRvzGSdLQKeBiPOSU9R+LO/ENCLYwG6r9AJw=)
                          2: In7rLnISMOG6zDg8Tw3L7xnnNZk.roa (hash: 6ERjF6s+MI3mdMg4UgVe0qrNBf2TbBxwJUma98PIg+4=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: bInlq1p2hyV5J5kYhERbjFClxnN0O0hOfMb6LWzSxXA=)
                          4: q0Uk5ClVTWHxHz2_hqET9KmDDoQ.roa (hash: mvgGdXSJsk/p0bbGP42fNw3FNKrLafML+OfuUnF9WaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 04:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:1f:80:37:fa:06:74:af:b8:e7:10:72:75:48:f0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: May 13 04:04:23 2024 GMT
            Not After : May 14 04:04:23 2024 GMT
        Subject: CN=caeee9aa2cbc5c18d38d2b88b1e945f5a48bc12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:85:da:77:63:e2:6d:3b:2a:55:b0:96:0a:
                    37:56:f8:a6:c7:16:2a:a1:ea:a6:06:7d:8c:56:b7:
                    23:49:7b:3e:4a:44:a8:96:f2:c0:bd:5c:f0:c2:fb:
                    22:6f:00:bf:6c:fa:bb:c8:43:11:40:b9:f6:36:8c:
                    27:c4:aa:5d:a8:5e:c8:12:e6:88:62:ed:e3:80:20:
                    37:a9:ca:89:d4:d2:6b:f7:f9:3d:5a:2c:71:db:0a:
                    30:27:4e:6d:30:81:0d:d5:b6:ab:77:05:56:b1:c4:
                    42:28:d9:59:c5:ea:a6:1c:24:e3:25:c6:38:e1:10:
                    eb:e3:4c:bc:69:d3:07:d6:fc:96:51:e0:ae:86:2f:
                    4c:f7:90:22:e1:58:ce:f4:14:59:31:3f:a8:60:b4:
                    21:ed:18:22:e2:71:66:c4:46:e3:12:d3:02:de:c7:
                    47:92:f0:f0:a9:95:e4:f3:a6:d1:ed:d7:2e:17:da:
                    57:9a:27:37:1c:c9:37:b7:ad:ae:36:ec:05:2a:2f:
                    89:bb:07:08:c6:df:f9:b1:37:c7:18:b5:ca:c3:5d:
                    82:ad:b9:ca:39:bb:17:2b:7f:e0:76:99:90:48:75:
                    9b:23:1b:0b:61:af:3b:06:3f:bc:ba:44:3d:aa:9d:
                    85:fb:c2:ce:bf:ac:c2:00:90:1e:f9:2f:39:a3:ca:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:E9:AA:2C:BC:5C:18:D3:8D:2B:88:B1:E9:45:F5:A4:8B:C1:2C
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:2a:59:62:2d:6c:23:a5:32:d2:dd:ba:d9:98:db:37:08:
         d4:51:14:c5:d7:d5:93:74:02:79:a9:4b:60:17:18:7c:ca:dc:
         1d:88:e4:8d:c8:82:fb:e2:d8:95:46:f0:63:37:19:48:74:12:
         98:0c:69:cd:1b:49:2c:b4:87:35:3c:3e:e0:27:ca:10:ce:9e:
         c1:5b:73:51:f0:21:2f:48:f1:3e:aa:2c:27:ee:20:7c:c1:9c:
         4f:bb:4f:0c:e0:49:d0:6c:78:09:a7:15:29:30:ed:6c:8b:e8:
         50:10:7b:40:91:6c:30:13:9d:64:cd:1d:58:34:fb:2c:6e:1b:
         b5:af:73:36:31:45:c7:c5:38:da:cf:6d:38:49:e1:cf:8b:0f:
         44:20:40:2a:4e:89:c3:a3:5c:c0:86:49:27:9b:1a:1e:92:cd:
         8e:30:72:98:7e:c1:a7:37:e4:79:e2:47:55:a2:14:3d:a4:3d:
         d1:e6:21:1d:d2:73:61:62:da:87:0a:aa:6e:d7:4f:86:16:c0:
         f8:33:18:b7:e0:55:e2:7d:c1:b8:bd:85:f0:50:7e:03:2b:61:
         7b:1c:0a:cf:fa:e2:3a:61:9e:9b:ab:6a:81:00:00:dc:b7:a5:
         83:64:47:7b:ce:ae:b0:74:53:12:6c:37:2a:0b:3f:87:1c:74:
         e3:53:ba:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9wH4A3+gZ0r7jnEHJ1SPDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5
MGMxNTcwHhcNMjQwNTEzMDQwNDIzWhcNMjQwNTE0MDQwNDIzWjAzMTEwLwYDVQQD
EyhjYWVlZTlhYTJjYmM1YzE4ZDM4ZDJiODhiMWU5NDVmNWE0OGJjMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+yF2ndj4m07KlWwlgo3VvimxxYq
oeqmBn2MVrcjSXs+SkSolvLAvVzwwvsibwC/bPq7yEMRQLn2NownxKpdqF7IEuaI
Yu3jgCA3qcqJ1NJr9/k9Wixx2wowJ05tMIEN1bardwVWscRCKNlZxeqmHCTjJcY4
4RDr40y8adMH1vyWUeCuhi9M95Ai4VjO9BRZMT+oYLQh7Rgi4nFmxEbjEtMC3sdH
kvDwqZXk86bR7dcuF9pXmic3HMk3t62uNuwFKi+JuwcIxt/5sTfHGLXKw12CrbnK
ObsXK3/gdpmQSHWbIxsLYa87Bj+8ukQ9qp2F+8LOv6zCAJAe+S85o8p/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMru6aosvFwY040riLHpRfWki8EsMB8GA1UdIwQY
MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt
ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw
LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdosqWWIt
bCOlMtLdutmY2zcI1FEUxdfVk3QCealLYBcYfMrcHYjkjciC++LYlUbwYzcZSHQS
mAxpzRtJLLSHNTw+4CfKEM6ewVtzUfAhL0jxPqosJ+4gfMGcT7tPDOBJ0Gx4CacV
KTDtbIvoUBB7QJFsMBOdZM0dWDT7LG4bta9zNjFFx8U42s9tOEnhz4sPRCBAKk6J
w6NcwIZJJ5saHpLNjjBymH7BpzfkeeJHVaIUPaQ90eYhHdJzYWLahwqqbtdPhhbA
+DMYt+BV4n3BuL2F8FB+AythexwKz/riOmGem6tqgQAA3Lelg2RHe86usHRTEmw3
Kgs/hxx041O6xw==
-----END CERTIFICATE-----
Generated at Mon May 13 07:49:03 2024 by rpki-client on console-fra.rpki-client.org