Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          fzbi/UGuU96S4l0c94BSv5HdXerb08xmzKjKpoTKkSI=
Subject key identifier:   09:85:C3:DC:B3:26:FA:15:B9:D1:1F:BC:67:8E:81:86:20:1B:0E:A7
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       018F73FB5F020C424A2FB61C04CBAD8D4F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          0C89
Signing time:             Mon 13 May 2024 22:03:24 +0000
Manifest this update:     Mon 13 May 2024 22:03:24 +0000
Manifest next update:     Tue 14 May 2024 22:03:24 +0000
Files and hashes:         1: 0OUhvkMdhQceiafLHceVf4yCmJs.roa (hash: hz+kUOK/dnx9M5x2qUk2wooLC5KdhplQomuCZdyAwn8=)
                          2: VqgMJd7Tn3SkIvnIbryzOAyps54.roa (hash: OFH+5GRrU0weYRgy/I9htpklIXgRIOd/5X43oHzUYyo=)
                          3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: Eq4+FitvvZVga/7gsxXx2zQ1Tee+Jjpj1TicdNtVzsc=)
                          4: xcSpljv4Vh2AzmFvsFfx4yBkINY.roa (hash: d4owc30OZmT3K3FSerjLKFrJZ7tNozpVa6f54QLvrYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 22:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:73:fb:5f:02:0c:42:4a:2f:b6:1c:04:cb:ad:8d:4f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: May 13 22:03:24 2024 GMT
            Not After : May 14 22:03:24 2024 GMT
        Subject: CN=0985c3dcb326fa15b9d11fbc678e8186201b0ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:ab:cf:e0:5a:3e:03:c7:87:f6:c9:f5:30:
                    b8:9b:96:de:d6:f5:44:62:ac:ce:d9:44:76:92:1a:
                    71:bc:81:89:86:b4:a2:5d:d0:bb:62:d4:ad:3f:e1:
                    7c:b1:e3:42:cc:83:e6:80:8a:05:55:0e:a8:02:1f:
                    65:7d:8b:96:83:3a:15:62:9f:a4:bf:20:d6:a7:d6:
                    97:e8:da:6e:a7:16:d4:d3:6b:f9:93:8e:a6:d0:7a:
                    5d:97:4a:a8:94:a5:89:1e:0d:4b:d2:13:d8:54:f7:
                    60:55:e3:7e:7f:7b:36:49:6f:36:c6:03:16:a9:7a:
                    57:1d:34:a6:12:81:04:87:5f:3e:ca:bd:46:4b:c2:
                    30:51:16:c5:4b:f8:3c:e7:24:c3:70:68:75:11:04:
                    c7:4a:59:49:39:b0:52:9f:dc:ab:83:55:3c:3d:fb:
                    4d:68:3b:de:55:d7:c0:9c:8c:a5:c7:c1:78:89:0f:
                    ed:9c:a8:94:25:52:43:95:92:28:2f:5b:93:cb:70:
                    61:b5:dd:a9:ba:d2:7f:d0:34:87:bd:39:30:29:db:
                    7c:a2:3a:9c:e8:b0:17:cf:ef:bc:76:55:ae:bb:33:
                    9f:eb:ee:65:08:b9:fa:ab:15:cb:c1:1e:d4:38:79:
                    d0:6b:95:62:7e:f6:7a:d6:04:f8:7f:cb:73:73:08:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:C3:DC:B3:26:FA:15:B9:D1:1F:BC:67:8E:81:86:20:1B:0E:A7
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:c7:04:47:40:e1:6e:1d:60:8c:1e:fb:d6:89:56:e6:b3:
         49:d3:de:6b:ee:c7:00:ed:6f:fa:ed:f1:1e:83:5a:6c:e4:a8:
         81:6d:b7:50:bd:ba:08:c2:dd:93:33:5a:55:f8:3c:6b:91:e8:
         b8:85:7a:d0:89:b4:95:c9:23:ff:92:a1:21:82:f0:00:d5:bc:
         2b:f6:6f:8c:1a:18:b1:55:47:72:fc:db:3f:b9:df:1f:1f:2d:
         e3:d4:5b:c8:cd:72:e3:b9:b9:cf:a5:0b:e9:bf:6c:5c:72:02:
         74:b6:86:7d:83:fb:83:ef:fb:6b:99:65:18:c5:38:50:02:64:
         da:25:c7:37:ce:17:3a:5e:fd:c3:da:08:81:78:fd:ba:78:1e:
         03:76:87:69:6e:61:59:f7:aa:3e:14:e4:d9:03:01:df:d8:8b:
         56:a6:89:cc:29:46:74:a3:76:f9:f4:12:9d:58:a0:76:26:6b:
         aa:8d:be:59:24:ec:47:5d:8a:cb:24:d7:15:5c:da:1e:8e:5c:
         34:00:38:4f:b3:94:fc:40:ed:84:7d:24:09:56:f8:b8:02:8f:
         b5:fc:26:6a:a4:a9:7e:90:df:9a:10:6e:96:88:99:05:3a:bb:
         b9:93:a6:4e:61:5c:72:e7:ff:28:14:4a:62:c9:6c:f1:58:9b:
         a8:bb:a9:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9z+18CDEJKL7YcBMutjU+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjQwNTEzMjIwMzI0WhcNMjQwNTE0MjIwMzI0WjAzMTEwLwYDVQQD
EygwOTg1YzNkY2IzMjZmYTE1YjlkMTFmYmM2NzhlODE4NjIwMWIwZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKOrz+BaPgPHh/bJ9TC4m5be1vVE
YqzO2UR2khpxvIGJhrSiXdC7YtStP+F8seNCzIPmgIoFVQ6oAh9lfYuWgzoVYp+k
vyDWp9aX6NpupxbU02v5k46m0Hpdl0qolKWJHg1L0hPYVPdgVeN+f3s2SW82xgMW
qXpXHTSmEoEEh18+yr1GS8IwURbFS/g85yTDcGh1EQTHSllJObBSn9yrg1U8PftN
aDveVdfAnIylx8F4iQ/tnKiUJVJDlZIoL1uTy3Bhtd2putJ/0DSHvTkwKdt8ojqc
6LAXz++8dlWuuzOf6+5lCLn6qxXLwR7UOHnQa5VifvZ61gT4f8tzcwibDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmFw9yzJvoVudEfvGeOgYYgGw6nMB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDvHBEdA
4W4dYIwe+9aJVuazSdPea+7HAO1v+u3xHoNabOSogW23UL26CMLdkzNaVfg8a5Ho
uIV60Im0lckj/5KhIYLwANW8K/ZvjBoYsVVHcvzbP7nfHx8t49RbyM1y47m5z6UL
6b9sXHICdLaGfYP7g+/7a5llGMU4UAJk2iXHN84XOl79w9oIgXj9ungeA3aHaW5h
WfeqPhTk2QMB39iLVqaJzClGdKN2+fQSnVigdiZrqo2+WSTsR12KyyTXFVzaHo5c
NAA4T7OU/EDthH0kCVb4uAKPtfwmaqSpfpDfmhBuloiZBTq7uZOmTmFccuf/KBRK
Ysls8VibqLupdQ==
-----END CERTIFICATE-----