Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          O8gL3SChrigITI/R7osr7NpSkk7HtdLbpRFi5Vc0k74=
Subject key identifier:   F8:93:B6:2B:3B:AE:15:32:88:EF:D4:DB:6D:A6:74:A5:5B:C7:A9:6D
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       018F87B6C7E3B24A9A4DE70DD1B8C98A3472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          0CE8
Signing time:             Fri 17 May 2024 18:00:53 +0000
Manifest this update:     Fri 17 May 2024 18:00:53 +0000
Manifest next update:     Sat 18 May 2024 18:00:53 +0000
Files and hashes:         1: ELq1vd5UXElum5a7M8vdDcMmocE.roa (hash: QLaQk0l7Nzhms+RyYZsUAQGtLSnwLE37oNVw4MPeeLc=)
                          2: b6XzgssuddUO2gxgLD7KQu-nSZE.roa (hash: +m3En8RiBU9EDA5QAqo7YAqlWhNtcf3a2UXGnrRfmIY=)
                          3: fBepe3eeK-8PKmvqiv1b-dyLJT8.roa (hash: nfv8rfVU37/nhmGQ7kFChB8QQoMvD8iNdo3PvcSWLsE=)
                          4: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: wDWooZkxzzQ03ofyJj05+ZnN1vnNfoZB9jbzkXGEANo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c7:e3:b2:4a:9a:4d:e7:0d:d1:b8:c9:8a:34:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: May 17 18:00:53 2024 GMT
            Not After : May 18 18:00:53 2024 GMT
        Subject: CN=f893b62b3bae153288efd4db6da674a55bc7a96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:29:bd:36:c7:15:b3:cb:d7:8b:fb:a2:99:
                    c8:a3:ad:84:a1:92:91:6c:5b:45:fc:96:f3:58:41:
                    aa:b2:33:f5:93:22:d8:e4:44:69:1e:b2:81:10:17:
                    47:94:0e:cb:0d:af:50:7e:79:ad:94:1a:2b:e7:d0:
                    58:f6:d8:65:b2:cf:f7:bb:b0:c1:24:82:89:ca:f1:
                    42:5c:d0:d3:69:7d:fb:e6:af:74:c7:af:85:e0:b9:
                    6b:d5:09:a5:2a:7d:38:81:fc:63:73:65:f7:e5:8b:
                    ea:8e:86:cc:cb:97:d4:6e:f3:ae:6b:13:42:d9:6c:
                    66:9f:28:1b:ee:81:b9:fb:a2:cc:2b:16:57:5f:a7:
                    44:e1:b7:a1:87:e7:b5:54:8e:00:5b:05:ba:0e:d1:
                    6e:5d:4a:fb:b2:22:90:e5:c4:1c:7b:19:d8:0e:e7:
                    23:d9:d9:a5:f5:60:97:36:d7:db:55:2a:de:c6:04:
                    6f:94:26:14:9c:3a:81:8c:a9:71:c6:0b:6e:1b:31:
                    97:89:00:b9:8c:1d:0d:d0:dd:8f:b4:65:d0:e6:de:
                    2c:e5:7a:69:fb:58:59:f1:30:fc:c2:f7:59:f7:2c:
                    32:be:a3:26:62:1a:9a:fa:52:62:d8:d5:f9:35:b6:
                    22:73:33:92:8c:1f:7c:e0:31:f5:8e:85:7c:ec:45:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:93:B6:2B:3B:AE:15:32:88:EF:D4:DB:6D:A6:74:A5:5B:C7:A9:6D
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:77:ae:d2:92:1b:28:a2:59:be:30:a8:df:93:51:bf:3a:
         4f:4d:38:ac:c3:d4:0b:68:f6:a4:8c:bb:23:3c:1a:a6:f0:65:
         76:b8:32:c4:ca:5c:82:46:b6:95:25:9e:1c:1b:40:0f:2d:e6:
         5e:cb:d6:e3:24:5a:97:e3:a1:43:08:b2:90:46:b8:8b:e6:7e:
         81:ad:fa:fb:4f:6c:93:d3:92:e6:16:76:19:38:92:c5:d3:99:
         94:ea:e8:30:22:8c:27:9c:24:0b:57:15:fd:16:11:8d:5e:6a:
         2c:59:52:ac:58:a9:e7:12:9a:f8:cc:ed:d7:52:f5:06:72:95:
         7a:2a:c4:d5:e9:7b:7f:9f:f8:10:40:a1:b6:4e:05:ac:7d:53:
         1e:5a:60:e7:d9:d1:77:f3:64:40:10:87:e2:ae:41:db:38:7e:
         83:b8:9b:5a:60:99:fd:e6:2b:3f:85:05:a2:73:f9:8a:f3:0a:
         e1:bf:3b:f1:e7:71:62:39:e4:21:bd:6b:6a:79:98:84:f3:33:
         7a:f9:83:71:8f:af:a1:43:10:58:0c:55:36:83:7e:16:3c:b0:
         3f:24:91:9e:30:bd:b1:8b:49:37:65:8d:14:34:1f:ab:7c:69:
         e8:91:a3:ad:64:20:89:23:59:14:c5:3f:ed:7b:69:f5:09:47:
         bc:8b:6d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtsfjskqaTecN0bjJijRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2
ZDU0NDMwHhcNMjQwNTE3MTgwMDUzWhcNMjQwNTE4MTgwMDUzWjAzMTEwLwYDVQQD
EyhmODkzYjYyYjNiYWUxNTMyODhlZmQ0ZGI2ZGE2NzRhNTViYzdhOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXIpvTbHFbPL14v7opnIo62EoZKR
bFtF/JbzWEGqsjP1kyLY5ERpHrKBEBdHlA7LDa9QfnmtlBor59BY9thlss/3u7DB
JIKJyvFCXNDTaX375q90x6+F4Llr1QmlKn04gfxjc2X35YvqjobMy5fUbvOuaxNC
2Wxmnygb7oG5+6LMKxZXX6dE4behh+e1VI4AWwW6DtFuXUr7siKQ5cQcexnYDucj
2dml9WCXNtfbVSrexgRvlCYUnDqBjKlxxgtuGzGXiQC5jB0N0N2PtGXQ5t4s5Xpp
+1hZ8TD8wvdZ9ywyvqMmYhqa+lJi2NX5NbYiczOSjB984DH1joV87EWn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiTtis7rhUyiO/U222mdKVbx6ltMB8GA1UdIwQY
MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt
NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2
LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8Z3rtKS
GyiiWb4wqN+TUb86T004rMPUC2j2pIy7IzwapvBldrgyxMpcgka2lSWeHBtADy3m
XsvW4yRal+OhQwiykEa4i+Z+ga36+09sk9OS5hZ2GTiSxdOZlOroMCKMJ5wkC1cV
/RYRjV5qLFlSrFip5xKa+Mzt11L1BnKVeirE1el7f5/4EEChtk4FrH1THlpg59nR
d/NkQBCH4q5B2zh+g7ibWmCZ/eYrP4UFonP5ivMK4b878edxYjnkIb1ranmYhPMz
evmDcY+voUMQWAxVNoN+FjywPySRnjC9sYtJN2WNFDQfq3xp6JGjrWQgiSNZFMU/
7Xtp9QlHvIttEQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:36 2024 by rpki-client on console-ams.rpki-client.org