Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File:                     i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier:          MdTRXU2eoiNt6SZ9gyKfSJLvd+m8ePE2x/NYj6H9ZNs=
Subject key identifier:   BE:82:34:71:91:22:04:6B:B6:A2:F1:3A:0E:33:BF:48:7D:FB:F1:D4
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer:       /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial:       018F8410A6C887015D969B4C602F25B8D37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number:          0B81
Signing time:             Fri 17 May 2024 01:00:34 +0000
Manifest this update:     Fri 17 May 2024 01:00:34 +0000
Manifest next update:     Sat 18 May 2024 01:00:34 +0000
Files and hashes:         1: 1dR2R-7hlcf2EODtbBHqMUyzpQU.roa (hash: VRGbRCNqbZWvcwu+EGZRgdGzim90389vWdJj45CVHPg=)
                          2: 7bMPEq4rb3YMZjkp-diRNLSvU0g.roa (hash: v+mzn2/SkSpc6PzSLbqd2tHr3vpzxG52oOANIcYQzHU=)
                          3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: KovMA2gA8lED2zq2lB3YYaoYgdkZdWh8RzbPNvFrOh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:a6:c8:87:01:5d:96:9b:4c:60:2f:25:b8:d3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
        Validity
            Not Before: May 17 01:00:34 2024 GMT
            Not After : May 18 01:00:34 2024 GMT
        Subject: CN=be8234719122046bb6a2f13a0e33bf487dfbf1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:61:46:0b:7e:07:46:8d:c7:1d:5b:3f:aa:
                    c3:4f:2e:20:8a:e1:2e:f1:36:70:16:db:5e:6f:c4:
                    9a:01:fa:d8:df:38:dc:fc:58:fa:61:a6:3d:5e:18:
                    36:26:9b:29:0a:67:9c:1d:02:4a:26:17:2a:65:0a:
                    86:ba:04:a4:dd:0f:29:31:3d:52:11:62:f8:d8:89:
                    30:67:33:bf:cb:57:0b:64:15:38:49:8f:4a:e0:37:
                    8a:52:0b:94:b2:17:62:d9:4d:2a:ab:f6:46:7b:98:
                    dc:e7:be:30:71:eb:c7:70:78:f7:ac:63:57:83:ac:
                    4f:54:90:a7:d8:9c:3c:5c:52:d8:c8:9f:2e:1d:c0:
                    0f:a7:9b:57:73:37:82:8a:a2:2a:e5:ae:ca:db:2a:
                    5d:e0:fd:af:03:6b:7b:53:88:d5:9b:52:c9:82:e5:
                    d8:54:b0:9a:66:60:db:99:76:01:e8:de:a6:1b:9f:
                    65:34:f6:e9:77:30:bb:f7:91:ef:0c:5a:ea:63:1c:
                    c4:c2:b8:5e:0d:3d:96:a3:c6:a9:cf:60:69:f6:e2:
                    a7:eb:70:c6:43:bc:68:af:59:48:21:82:d1:5a:ce:
                    a1:83:70:17:e8:25:3b:04:b6:c5:63:8f:91:b0:30:
                    91:6f:a6:fa:1d:d6:0b:44:14:b9:78:f1:c1:f6:d1:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:82:34:71:91:22:04:6B:B6:A2:F1:3A:0E:33:BF:48:7D:FB:F1:D4
            X509v3 Authority Key Identifier:
                keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:59:8e:98:67:12:ad:86:ca:d6:f6:2c:07:63:2a:6e:a5:c6:
         d3:36:be:80:f1:47:69:00:98:23:7d:92:89:f3:d6:a0:c5:48:
         9c:97:19:be:1a:15:c5:c0:fd:f0:ab:40:44:80:6a:42:f7:15:
         e9:f5:31:47:cd:88:86:09:b2:61:81:25:57:b9:64:70:37:44:
         02:5e:a3:7a:a8:7c:26:d3:d2:4f:b5:0c:ba:5c:55:58:d1:f6:
         a7:03:f5:83:4c:f4:9a:3b:18:9a:57:89:26:e8:e9:26:ab:4b:
         3a:bd:03:b1:44:87:f8:4a:24:02:cb:60:1f:60:94:cb:fa:1c:
         ea:6f:a3:52:c3:d3:21:ce:e0:87:f6:80:62:09:38:c5:81:44:
         dd:1a:46:8f:46:f1:8e:d2:f1:f8:de:f6:76:98:a0:71:b5:a1:
         cb:6b:33:f0:93:8e:81:75:39:98:2c:d4:53:4c:b1:5e:1a:20:
         55:d7:d7:f0:67:fa:de:05:3f:34:6e:42:41:5a:39:0e:66:a6:
         f1:9d:06:99:6e:85:7d:74:78:be:ba:cc:bc:0d:ad:a4:90:6a:
         f0:cc:59:c5:97:08:3c:91:17:52:5e:12:f6:50:47:3c:37:31:
         f9:63:27:7c:e2:ff:b5:10:91:bf:79:36:bc:21:d4:67:56:58:
         4d:f4:d0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+EEKbIhwFdlptMYC8luNN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTFlMGExMDRiNWIzZGRmMWY1ZDA4ZTdhY2IyYjc5ZTBk
NTY2ZjkwHhcNMjQwNTE3MDEwMDM0WhcNMjQwNTE4MDEwMDM0WjAzMTEwLwYDVQQD
EyhiZTgyMzQ3MTkxMjIwNDZiYjZhMmYxM2EwZTMzYmY0ODdkZmJmMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMthRgt+B0aNxx1bP6rDTy4giuEu
8TZwFtteb8SaAfrY3zjc/Fj6YaY9Xhg2JpspCmecHQJKJhcqZQqGugSk3Q8pMT1S
EWL42IkwZzO/y1cLZBU4SY9K4DeKUguUshdi2U0qq/ZGe5jc574wcevHcHj3rGNX
g6xPVJCn2Jw8XFLYyJ8uHcAPp5tXczeCiqIq5a7K2ypd4P2vA2t7U4jVm1LJguXY
VLCaZmDbmXYB6N6mG59lNPbpdzC795HvDFrqYxzEwrheDT2Wo8apz2Bp9uKn63DG
Q7xor1lIIYLRWs6hg3AX6CU7BLbFY4+RsDCRb6b6HdYLRBS5ePHB9tG3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6CNHGRIgRrtqLxOg4zv0h9+/HUMB8GA1UdIwQY
MBaAFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYt
YThjNTc2MjI0YmEyLzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYtYThjNTc2MjI0YmEy
LzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVmOmGcS
rYbK1vYsB2MqbqXG0za+gPFHaQCYI32SifPWoMVInJcZvhoVxcD98KtARIBqQvcV
6fUxR82IhgmyYYElV7lkcDdEAl6jeqh8JtPST7UMulxVWNH2pwP1g0z0mjsYmleJ
JujpJqtLOr0DsUSH+EokAstgH2CUy/oc6m+jUsPTIc7gh/aAYgk4xYFE3RpGj0bx
jtLx+N72dpigcbWhy2sz8JOOgXU5mCzUU0yxXhogVdfX8Gf63gU/NG5CQVo5Dmam
8Z0GmW6FfXR4vrrMvA2tpJBq8MxZxZcIPJEXUl4S9lBHPDcx+WMnfOL/tRCRv3k2
vCHUZ1ZYTfTQag==
-----END CERTIFICATE-----
Generated at Fri May 17 10:27:13 2024 by rpki-client on console-fra.rpki-client.org