Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File:                     _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier:          UQn0xltITX9ojhU9AC4snGy1d5F5MkMPMHxUfORCjOI=
Subject key identifier:   DB:A6:C3:47:A6:FE:FD:FF:52:2A:FA:BE:E2:21:03:B7:67:74:81:69
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer:       /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial:       018F0F8D9565D3CF1298BB0EFA3C2A1694F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number:          0943
Signing time:             Wed 24 Apr 2024 10:01:28 +0000
Manifest this update:     Wed 24 Apr 2024 10:01:28 +0000
Manifest next update:     Thu 25 Apr 2024 10:01:28 +0000
Files and hashes:         1: 0cuLgBJqnDCl0ZEhSym7CE-hkJY.roa (hash: RMYcuc/6ewboSx1hBSVkA13byL/vP8aZ+gA7Zgp4rNk=)
                          2: 3OG6r9zBHa9Bwhz63fOeuwA3LLc.roa (hash: RVy510cmCgIpbTHl/T4XnighX3T/MCXv2W4fIBnYvdE=)
                          3: 7LYicOgPqptnUsNjvWRlrz3QNys.roa (hash: 1h7RZDTmaIRonrdTaVOSq4Kj8NeVIVunHSU8m7HnM0Y=)
                          4: 9ID8eHI4aLXCiQ0RRq7kIzeDuyM.roa (hash: oiazI3X2HPaa2kO29mwCmS25ghWGH6Nc33H9KdkqyDQ=)
                          5: C9o21z6MCi5qGFVF76C3p20Du9w.roa (hash: JZjFzjxiNIlM+6fh74iyhOyaeOvvHHgn6PdgsmDMmzg=)
                          6: Pn-_WQURSDtJB_pZlGJMKi0HK7I.roa (hash: +YIvUYNPTcFm1n0KVObmztq2srPPab+S7N9LJmAqLi0=)
                          7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: oMEzkGdv1Cb2gp1YR/nNUO5xItioW8rYQkYtX86Q0Go=)
                          8: siT67ubj4bu_ArF1iMcz0toBuVw.roa (hash: TerXsHDDQUXX3cMgf7mR+E9V7up+3ApT/mNSrYIn8Wc=)
                          9: yOQNrNfqnu-zUPwseIlDnR9db6I.roa (hash: M4/IvWYWT3V9C0qv4qy17doGNXNBQ4Xqnwnw1suYfCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0f:8d:95:65:d3:cf:12:98:bb:0e:fa:3c:2a:16:94:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
        Validity
            Not Before: Apr 24 10:01:28 2024 GMT
            Not After : Apr 25 10:01:28 2024 GMT
        Subject: CN=dba6c347a6fefdff522afabee22103b767748169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:6b:a2:af:0d:66:4a:12:d2:da:06:cf:e5:
                    6e:b9:c8:99:67:c5:a5:9f:e9:a7:12:70:f6:e9:c2:
                    4e:b3:cf:99:43:94:c6:fa:05:42:2a:ab:2c:5e:1e:
                    85:d7:21:ef:19:08:fe:ed:94:f0:ec:a2:fc:05:cb:
                    06:da:b4:22:84:97:d5:c9:ac:a3:22:f9:12:e5:8f:
                    2d:5f:c2:16:3e:71:f1:1e:a4:66:ca:ce:91:c8:0e:
                    19:6f:e5:48:73:c3:e3:3a:4e:aa:11:b4:00:17:f7:
                    c0:01:27:20:4e:97:28:02:12:58:45:6c:a5:c5:13:
                    76:4d:8c:c2:66:95:7f:91:63:ba:02:78:ed:d8:e6:
                    0a:bd:81:3a:4d:16:2f:f9:c2:43:9e:1f:64:ea:b9:
                    14:8b:06:43:fd:ab:d8:1a:20:5e:9b:0a:fc:4a:10:
                    1b:76:21:16:21:50:66:18:55:65:c4:34:bf:69:ab:
                    65:a1:0b:f4:97:83:31:cb:59:92:26:a8:96:34:63:
                    d5:73:f9:6c:0c:82:98:81:d8:aa:30:6b:e9:6d:db:
                    06:bb:b7:8d:6c:0e:5f:d6:1b:d4:d8:0c:da:02:c5:
                    3f:98:b6:9b:d8:66:d7:1f:4f:91:f3:58:f5:be:30:
                    83:09:37:4e:55:62:cc:5e:66:71:59:c1:3f:64:a8:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:C3:47:A6:FE:FD:FF:52:2A:FA:BE:E2:21:03:B7:67:74:81:69
            X509v3 Authority Key Identifier:
                keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e4:a8:19:e4:5a:0e:5c:39:63:13:3b:8a:a4:9b:27:88:f2:
         4f:e9:f3:0c:ec:32:1b:bb:75:13:b7:1d:34:47:9c:ee:01:fa:
         2c:0a:82:60:40:87:33:b7:b1:e6:94:4b:70:e9:69:cf:f7:89:
         12:16:70:c4:43:c4:53:e8:da:29:1c:ec:f2:b2:0e:92:c4:0f:
         4a:a9:0e:ce:bd:13:b6:ea:d3:ed:a7:3a:82:be:98:66:10:d1:
         50:c9:1a:7b:76:0e:17:4b:d7:2d:16:b4:c6:61:ec:93:88:e2:
         91:3b:07:3a:cc:75:20:66:73:f3:c8:b1:fa:21:63:8f:e5:4f:
         e9:0d:7e:cb:d6:7b:09:b8:0e:af:b9:71:81:18:f5:92:88:fb:
         03:0a:0b:76:ca:0f:d5:98:bb:8f:46:26:eb:ba:56:67:4f:c4:
         2d:af:2a:7e:dd:21:38:63:1a:34:7a:6f:f5:7a:cd:4a:96:06:
         af:a8:35:aa:02:09:0d:26:bc:5e:03:b0:21:a3:f4:ae:59:18:
         6d:6a:02:39:ad:3b:c0:47:32:fe:b3:4b:8c:64:ce:ee:0e:f2:
         74:13:29:79:aa:3e:65:12:91:10:f5:8d:db:a7:9a:86:56:44:
         41:08:9a:ed:0c:a9:54:3a:97:e4:a3:fe:ad:9d:2a:c5:fb:30:
         ac:25:93:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8PjZVl088SmLsO+jwqFpT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0
NjExYWQwHhcNMjQwNDI0MTAwMTI4WhcNMjQwNDI1MTAwMTI4WjAzMTEwLwYDVQQD
EyhkYmE2YzM0N2E2ZmVmZGZmNTIyYWZhYmVlMjIxMDNiNzY3NzQ4MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/5roq8NZkoS0toGz+VuuciZZ8Wl
n+mnEnD26cJOs8+ZQ5TG+gVCKqssXh6F1yHvGQj+7ZTw7KL8BcsG2rQihJfVyayj
IvkS5Y8tX8IWPnHxHqRmys6RyA4Zb+VIc8PjOk6qEbQAF/fAAScgTpcoAhJYRWyl
xRN2TYzCZpV/kWO6Anjt2OYKvYE6TRYv+cJDnh9k6rkUiwZD/avYGiBemwr8ShAb
diEWIVBmGFVlxDS/aatloQv0l4Mxy1mSJqiWNGPVc/lsDIKYgdiqMGvpbdsGu7eN
bA5f1hvU2AzaAsU/mLab2GbXH0+R81j1vjCDCTdOVWLMXmZxWcE/ZKhzbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNumw0em/v3/Uir6vuIhA7dndIFpMB8GA1UdIwQY
MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct
YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj
LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOSoGeRa
Dlw5YxM7iqSbJ4jyT+nzDOwyG7t1E7cdNEec7gH6LAqCYECHM7ex5pRLcOlpz/eJ
EhZwxEPEU+jaKRzs8rIOksQPSqkOzr0TturT7ac6gr6YZhDRUMkae3YOF0vXLRa0
xmHsk4jikTsHOsx1IGZz88ix+iFjj+VP6Q1+y9Z7CbgOr7lxgRj1koj7AwoLdsoP
1Zi7j0Ym67pWZ0/ELa8qft0hOGMaNHpv9XrNSpYGr6g1qgIJDSa8XgOwIaP0rlkY
bWoCOa07wEcy/rNLjGTO7g7ydBMpeao+ZRKREPWN26eahlZEQQia7QypVDqX5KP+
rZ0qxfswrCWTkw==
-----END CERTIFICATE-----
Generated at Wed Apr 24 11:29:34 2024 by rpki-client on console-ams.rpki-client.org