Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File:                     iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier:          bPHf7o1hHLsrwObehR+pqqjIh+H/mEGXgkyJDx3JTaY=
Subject key identifier:   02:05:BB:2F:2C:D9:EB:EE:46:5D:6B:00:7F:6F:E8:A4:88:F2:CF:64
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer:       /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial:       018F87ED4C567A3F1C920F392220281703D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number:          0B66
Signing time:             Fri 17 May 2024 19:00:26 +0000
Manifest this update:     Fri 17 May 2024 19:00:26 +0000
Manifest next update:     Sat 18 May 2024 19:00:26 +0000
Files and hashes:         1: J739Y66X3Xnbyg4ujBegTMjs2IU.roa (hash: tdLGW0yw8+fGRy4aUsaRqP8VkjUB+7KRh/6JzecDXCs=)
                          2: JdQdAl1yUmqgfmEy48jt775NI7E.roa (hash: w0J1Q6pHzJb6zlTlMKb5CicLKQxKhYbofHtbCWzF5hc=)
                          3: RAISDF8XiD52GdsvcjRxuuRxdUc.roa (hash: SJbaMr9n5q3O/d3FRzvj0ztnpB62wdMVdFLUxUlQkwA=)
                          4: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: SoTb4CVL3Q1IcOvIn39MotprzMHsgxmPBAEv4LHV9HQ=)
                          5: q-PjH1KT9kZP3WLc4rvVsvKuBmM.roa (hash: 3yxw3uJx6pIQjNiHjL8MY4/E1fhQG7OtTShKPth4wZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4c:56:7a:3f:1c:92:0f:39:22:20:28:17:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
        Validity
            Not Before: May 17 19:00:26 2024 GMT
            Not After : May 18 19:00:26 2024 GMT
        Subject: CN=0205bb2f2cd9ebee465d6b007f6fe8a488f2cf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:4c:08:db:dc:fa:25:51:54:8d:9c:50:08:
                    87:d5:8a:87:f7:43:52:9f:11:1d:20:15:fd:4c:8f:
                    e4:ab:20:c8:ff:a4:a9:a3:44:b4:20:a0:49:5b:29:
                    ae:7f:b8:72:13:5c:37:bd:85:56:26:9b:41:51:ed:
                    75:0c:d0:1c:ac:a1:69:98:3d:b3:83:ba:fe:0c:67:
                    d4:3a:3c:8d:73:1c:6c:93:d9:c9:0c:70:bd:8f:08:
                    e5:10:77:4f:1c:84:2f:8b:5c:ef:8b:32:ef:d7:54:
                    f6:a3:c5:c7:b7:27:28:1a:ab:31:13:0a:52:c3:11:
                    a1:ee:94:84:d4:63:ef:6a:72:4b:02:a2:78:1c:b9:
                    e6:51:a2:50:5e:51:67:8e:d6:3a:0a:e7:bd:e0:05:
                    3f:ca:53:15:43:bc:c7:70:f6:d0:4d:bf:96:63:1e:
                    66:04:fa:3f:57:d0:8a:e7:bb:c9:34:fd:fb:fc:68:
                    5d:d4:80:d4:bc:f7:d8:fe:e4:e3:22:23:7e:68:24:
                    b2:2d:ae:f9:02:6f:6d:1d:f4:c0:0f:30:dd:b9:26:
                    4c:b7:72:b1:05:0f:76:d6:52:43:f4:64:5a:d8:ae:
                    11:76:14:a6:fb:f2:70:bc:3b:4f:5d:30:05:0c:59:
                    0d:ed:c3:11:b8:72:d6:58:1e:52:d4:dc:da:44:0b:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:05:BB:2F:2C:D9:EB:EE:46:5D:6B:00:7F:6F:E8:A4:88:F2:CF:64
            X509v3 Authority Key Identifier:
                keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:0d:34:4d:b7:02:26:b5:0e:ac:8e:e6:37:95:d0:40:d9:
         db:36:2d:34:1f:33:e0:05:1e:a2:92:f9:15:2d:f8:37:bb:92:
         f0:cc:e9:38:9a:0e:47:42:cc:82:7a:19:db:32:d7:a6:24:bd:
         19:c2:83:0d:0d:8a:bd:8a:6b:02:c8:54:ba:f1:71:dd:9b:a5:
         2b:00:f4:e2:e0:7f:f3:95:4e:db:3d:3b:e0:3e:f8:3a:2f:2f:
         dc:13:ac:d4:37:ae:b9:3c:1b:2e:4a:15:e6:93:55:59:f6:59:
         a2:6a:a0:2f:dc:81:18:c2:cb:dd:9c:4d:26:62:c9:73:bb:07:
         05:d6:b4:8e:b0:06:dc:0d:5c:36:2d:7a:3e:94:b1:3d:c4:fb:
         2b:16:c7:54:3e:fb:03:d3:bb:a7:89:52:84:b1:9a:0c:85:96:
         69:a4:58:c0:da:9f:fe:23:71:70:36:e8:f2:43:81:4e:ec:2b:
         6c:c4:18:87:e3:25:e6:61:c4:f1:fa:2f:9a:90:62:31:e8:dc:
         4d:53:c6:64:5e:8a:d0:a9:f8:74:1a:3e:23:79:f2:5a:81:67:
         b2:10:b0:c4:a2:56:ca:8f:a5:9f:1e:dc:16:1d:6f:d1:d1:f8:
         04:7e:e1:3b:8d:3a:cb:69:e3:49:71:a3:24:13:54:c2:24:c9:
         54:16:54:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7UxWej8ckg85IiAoFwPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMmUwZDE4NGZmNTUzMzc1Yzg0N2MzOGQ0ZGZjZGNkZTEy
MTlmZDMwHhcNMjQwNTE3MTkwMDI2WhcNMjQwNTE4MTkwMDI2WjAzMTEwLwYDVQQD
EygwMjA1YmIyZjJjZDllYmVlNDY1ZDZiMDA3ZjZmZThhNDg4ZjJjZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LBMCNvc+iVRVI2cUAiH1YqH90NS
nxEdIBX9TI/kqyDI/6Spo0S0IKBJWymuf7hyE1w3vYVWJptBUe11DNAcrKFpmD2z
g7r+DGfUOjyNcxxsk9nJDHC9jwjlEHdPHIQvi1zvizLv11T2o8XHtycoGqsxEwpS
wxGh7pSE1GPvanJLAqJ4HLnmUaJQXlFnjtY6Cue94AU/ylMVQ7zHcPbQTb+WYx5m
BPo/V9CK57vJNP37/Ghd1IDUvPfY/uTjIiN+aCSyLa75Am9tHfTADzDduSZMt3Kx
BQ921lJD9GRa2K4RdhSm+/JwvDtPXTAFDFkN7cMRuHLWWB5S1NzaRAtUkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIFuy8s2evuRl1rAH9v6KSI8s9kMB8GA1UdIwQY
MBaAFIsuDRhP9VM3XIR8ONTfzc3hIZ/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmNkOGUtMTAzNC00YTc1LWEwNzAt
Njk5ZjNjZDg1MGZhLzEvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wZmNkOGUtMTAzNC00YTc1LWEwNzAtNjk5ZjNjZDg1MGZh
LzEvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7QNNE23
Aia1DqyO5jeV0EDZ2zYtNB8z4AUeopL5FS34N7uS8MzpOJoOR0LMgnoZ2zLXpiS9
GcKDDQ2KvYprAshUuvFx3ZulKwD04uB/85VO2z074D74Oi8v3BOs1DeuuTwbLkoV
5pNVWfZZomqgL9yBGMLL3ZxNJmLJc7sHBda0jrAG3A1cNi16PpSxPcT7KxbHVD77
A9O7p4lShLGaDIWWaaRYwNqf/iNxcDbo8kOBTuwrbMQYh+Ml5mHE8fovmpBiMejc
TVPGZF6K0Kn4dBo+I3nyWoFnshCwxKJWyo+lnx7cFh1v0dH4BH7hO406y2njSXGj
JBNUwiTJVBZUNQ==
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:43 2024 by rpki-client on console-fra.rpki-client.org