Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File:                     t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier:          RR5a5lAQUiCErSd49nD+hTb/wMJWr5OsH44bjLF5le0=
Subject key identifier:   DD:10:20:92:69:66:27:3F:8E:05:09:4A:82:40:17:D4:84:3E:04:A1
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer:       /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial:       018F874B20883FB48B9FD1425EC1EA916717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number:          09E8
Signing time:             Fri 17 May 2024 16:03:18 +0000
Manifest this update:     Fri 17 May 2024 16:03:18 +0000
Manifest next update:     Sat 18 May 2024 16:03:18 +0000
Files and hashes:         1: 3vjjNVHimSqLoHRuujRD7oc_KGA.roa (hash: CqhogwtD/R2dihav7o+5frTvRWU+cuUOmlir/pHrJhw=)
                          2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: 5lRYyeDwcXrub8D6JG8z4gj58jWV0pEK9jji2YGSw5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:20:88:3f:b4:8b:9f:d1:42:5e:c1:ea:91:67:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
        Validity
            Not Before: May 17 16:03:18 2024 GMT
            Not After : May 18 16:03:18 2024 GMT
        Subject: CN=dd1020926966273f8e05094a824017d4843e04a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:af:28:2a:04:07:e7:0c:44:37:2c:0f:ec:
                    59:c2:46:0c:ad:bf:ed:73:61:7c:1c:23:79:89:03:
                    33:26:3b:e1:c5:dc:16:bd:20:51:8d:38:e0:93:c7:
                    7b:37:92:4e:0e:07:ad:28:55:1f:c4:29:25:54:80:
                    73:15:de:8d:81:39:3a:1b:e2:93:eb:0f:29:70:6b:
                    13:e6:86:1b:bb:3d:60:fc:d5:8e:8f:14:03:f9:08:
                    22:22:da:a8:9e:0e:a1:46:45:1e:1a:5a:2d:52:fd:
                    cd:9d:89:61:25:fa:1c:a2:c1:e9:52:e6:7d:63:35:
                    89:28:fb:3b:c5:83:ed:00:a0:9d:65:b2:02:be:cb:
                    27:85:0f:bf:99:9b:60:07:a9:2a:91:ba:3e:f1:cc:
                    1a:fc:cf:97:ba:5b:00:09:c5:be:f7:68:9f:49:53:
                    a8:96:f3:f5:4a:d9:77:2b:d4:90:95:9b:8d:e2:33:
                    e1:5c:b4:1e:d3:0f:c7:46:78:45:b4:62:f2:c8:3e:
                    d5:94:ac:e7:af:02:87:16:ea:e6:e0:4e:13:ea:3f:
                    4c:a4:ec:ca:64:0e:bd:b8:77:aa:d0:68:f6:37:1b:
                    c0:a5:51:9d:57:3b:3e:4d:bb:2d:99:18:20:76:e9:
                    d5:f9:9f:14:0d:de:17:39:43:fa:bf:49:83:1f:b6:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:10:20:92:69:66:27:3F:8E:05:09:4A:82:40:17:D4:84:3E:04:A1
            X509v3 Authority Key Identifier:
                keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:a0:0d:5f:14:ee:6f:37:ae:54:d3:7c:d2:fe:0d:e7:15:
         83:9c:30:d2:25:02:48:e1:cd:46:99:41:bb:03:4b:e9:23:db:
         35:48:fc:46:c4:d2:48:22:13:23:60:ce:82:bf:f8:0c:71:67:
         5e:de:e8:98:81:9d:0f:67:07:56:69:a9:bc:c6:60:f8:82:2d:
         f8:8a:b9:55:6c:73:a7:89:ab:d7:99:b5:e7:43:df:ad:00:06:
         4f:9a:69:d3:fa:48:e1:8b:a6:0a:c2:b1:10:9a:63:0d:8b:85:
         6f:40:f4:59:c7:7a:e3:a4:b4:e7:14:4e:76:06:5b:33:76:65:
         3f:14:86:56:1b:30:64:3d:87:b4:66:e3:72:7c:c1:a4:b7:b7:
         e4:b7:76:f5:a9:73:a6:34:02:e9:8f:a8:ac:1e:67:a5:d1:69:
         70:4f:86:ba:de:a3:f1:60:87:b0:2c:73:a5:fc:f3:a5:a0:49:
         68:54:40:15:b1:b7:92:55:bc:c9:95:3f:ce:82:86:09:04:bd:
         3a:db:3d:4c:b8:ac:5d:1c:46:87:e2:00:5a:e7:1c:a5:74:e4:
         f6:3e:de:67:b5:fc:21:00:bc:12:f7:08:34:ef:aa:5b:12:9c:
         a5:29:86:10:96:a7:6c:a6:ce:9d:8d:73:53:08:df:ce:30:2e:
         85:31:4b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSyCIP7SLn9FCXsHqkWcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy
NTIyYzUwHhcNMjQwNTE3MTYwMzE4WhcNMjQwNTE4MTYwMzE4WjAzMTEwLwYDVQQD
EyhkZDEwMjA5MjY5NjYyNzNmOGUwNTA5NGE4MjQwMTdkNDg0M2UwNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuGvKCoEB+cMRDcsD+xZwkYMrb/t
c2F8HCN5iQMzJjvhxdwWvSBRjTjgk8d7N5JODgetKFUfxCklVIBzFd6NgTk6G+KT
6w8pcGsT5oYbuz1g/NWOjxQD+QgiItqong6hRkUeGlotUv3NnYlhJfocosHpUuZ9
YzWJKPs7xYPtAKCdZbICvssnhQ+/mZtgB6kqkbo+8cwa/M+XulsACcW+92ifSVOo
lvP1Stl3K9SQlZuN4jPhXLQe0w/HRnhFtGLyyD7VlKznrwKHFurm4E4T6j9MpOzK
ZA69uHeq0Gj2NxvApVGdVzs+TbstmRggdunV+Z8UDd4XOUP6v0mDH7a8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0QIJJpZic/jgUJSoJAF9SEPgShMB8GA1UdIwQY
MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt
M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4
LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyOgDV8U
7m83rlTTfNL+DecVg5ww0iUCSOHNRplBuwNL6SPbNUj8RsTSSCITI2DOgr/4DHFn
Xt7omIGdD2cHVmmpvMZg+IIt+Iq5VWxzp4mr15m150PfrQAGT5pp0/pI4YumCsKx
EJpjDYuFb0D0Wcd646S05xROdgZbM3ZlPxSGVhswZD2HtGbjcnzBpLe35Ld29alz
pjQC6Y+orB5npdFpcE+Gut6j8WCHsCxzpfzzpaBJaFRAFbG3klW8yZU/zoKGCQS9
Ots9TLisXRxGh+IAWuccpXTk9j7eZ7X8IQC8EvcINO+qWxKcpSmGEJanbKbOnY1z
UwjfzjAuhTFLsg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:02:41 2024 by rpki-client on console-ams.rpki-client.org