Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File:                     pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier:          2ovFRTcKwxZWCA9GVSCzB8zggGBWVHdFd8lDHjGOvQE=
Subject key identifier:   21:2F:35:79:61:12:B3:05:23:28:83:DD:58:59:64:18:20:0E:BE:66
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer:       /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial:       018FB3B61454ED33FFCAE34FBACF3BAC473B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number:          0B7E
Signing time:             Sun 26 May 2024 07:03:25 +0000
Manifest this update:     Sun 26 May 2024 07:03:25 +0000
Manifest next update:     Mon 27 May 2024 07:03:25 +0000
Files and hashes:         1: MmiMwpeV_ik73TADPvmeD6M5xdA.roa (hash: hu2KyxNz/Nj15vcsZAthVv4rl6MIBGzIB3NuZ2ZAGNo=)
                          2: hvRji0srt2xzuGPCOIdVpgVYkIs.roa (hash: tHRTHRU2iKdBIAtq5oC+6kPNFfxNl7qOeHEyE2negQA=)
                          3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: VCu8hUD9veHL9vOZw4vSJf5ybQwiol5pm6oFvQikxjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b6:14:54:ed:33:ff:ca:e3:4f:ba:cf:3b:ac:47:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
        Validity
            Not Before: May 26 07:03:25 2024 GMT
            Not After : May 27 07:03:25 2024 GMT
        Subject: CN=212f35796112b305232883dd58596418200ebe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:f8:45:d4:29:db:ed:ee:9b:69:0e:c6:9c:
                    eb:b2:46:f4:cb:97:b7:8a:cb:c9:63:37:8a:e0:d1:
                    fc:3c:4e:d8:a1:0a:69:3b:cc:3e:dc:da:9d:21:b2:
                    6e:7b:04:66:be:bf:6e:ab:ad:fa:6e:b9:47:62:4a:
                    7a:d3:25:5a:95:33:d5:cc:a8:57:d8:bc:d3:5d:eb:
                    72:2a:06:f3:72:18:4d:9c:9a:f5:69:4f:ef:d4:0f:
                    13:32:6b:b7:0d:62:a9:ff:54:8a:3c:2b:0e:3c:55:
                    d7:6e:ee:c8:3a:58:12:9f:73:ed:1e:12:95:46:de:
                    5b:8d:03:b2:47:36:33:26:e6:73:25:76:fa:47:e9:
                    11:7b:a1:a5:40:bf:c5:43:71:c2:bd:c9:9e:ec:24:
                    8e:88:39:fc:63:2b:b8:83:1a:b6:04:26:31:a6:3c:
                    33:3b:d4:62:af:08:9f:22:17:34:49:51:d1:83:66:
                    e0:61:f5:5f:02:a3:03:f9:74:89:36:c3:4b:df:64:
                    dc:c7:7c:40:75:04:5b:fd:f5:da:f3:88:25:a6:75:
                    8d:6b:b4:92:24:63:68:4f:5e:f2:c8:30:9d:62:69:
                    b4:db:4c:05:24:1a:7f:8e:4f:22:9c:3c:18:72:9a:
                    62:da:3c:30:4f:32:78:56:61:7d:a0:d2:f6:ad:3f:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2F:35:79:61:12:B3:05:23:28:83:DD:58:59:64:18:20:0E:BE:66
            X509v3 Authority Key Identifier:
                keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ad:aa:8e:b0:b1:b8:e1:c7:95:c5:2c:48:83:69:c7:b2:b8:
         3f:ec:52:df:44:2f:23:ca:17:a7:c2:78:c5:cb:8d:7e:9b:7a:
         bc:cc:f5:3f:5a:08:02:bb:0e:b8:27:8a:38:27:f7:c0:03:f9:
         5e:2e:8b:af:c1:48:95:de:f9:7f:78:80:49:62:ef:a8:c3:fa:
         65:36:53:f9:9f:bb:90:ad:aa:40:29:4f:5c:5f:98:c3:3f:6e:
         6e:c6:23:67:e0:71:15:47:a9:fd:ea:a9:83:f7:28:95:51:a4:
         a6:4e:6d:2c:3a:fc:a0:0b:7d:f6:57:21:6e:2a:50:c8:d2:cf:
         12:f5:08:87:70:ad:17:63:c6:5d:74:41:94:e8:a7:bc:0d:ce:
         09:d5:9a:b7:d7:7d:7a:e3:19:8e:5a:9e:3b:97:20:2e:cd:ac:
         22:a8:48:a0:fd:98:c4:bf:3d:d7:cd:76:ec:19:18:c3:a4:08:
         aa:f2:61:1d:9f:13:ba:4a:64:33:ee:90:2c:61:1b:10:99:c7:
         dd:f3:a8:af:88:ec:04:81:11:ef:c5:b4:1e:fc:ab:b3:c7:11:
         b0:d8:2b:b5:90:f2:69:a5:0d:0b:e3:17:1f:d8:4d:d3:db:5a:
         54:a4:e6:4c:a8:31:4c:8e:12:cc:bb:24:87:a3:b2:68:50:80:
         a4:d3:07:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+zthRU7TP/yuNPus87rEc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjQwNTI2MDcwMzI1WhcNMjQwNTI3MDcwMzI1WjAzMTEwLwYDVQQD
EygyMTJmMzU3OTYxMTJiMzA1MjMyODgzZGQ1ODU5NjQxODIwMGViZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1L4RdQp2+3um2kOxpzrskb0y5e3
isvJYzeK4NH8PE7YoQppO8w+3NqdIbJuewRmvr9uq636brlHYkp60yValTPVzKhX
2LzTXetyKgbzchhNnJr1aU/v1A8TMmu3DWKp/1SKPCsOPFXXbu7IOlgSn3PtHhKV
Rt5bjQOyRzYzJuZzJXb6R+kRe6GlQL/FQ3HCvcme7CSOiDn8Yyu4gxq2BCYxpjwz
O9RirwifIhc0SVHRg2bgYfVfAqMD+XSJNsNL32Tcx3xAdQRb/fXa84glpnWNa7SS
JGNoT17yyDCdYmm020wFJBp/jk8inDwYcppi2jwwTzJ4VmF9oNL2rT8KCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEvNXlhErMFIyiD3VhZZBggDr5mMB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuq2qjrCx
uOHHlcUsSINpx7K4P+xS30QvI8oXp8J4xcuNfpt6vMz1P1oIArsOuCeKOCf3wAP5
Xi6Lr8FIld75f3iASWLvqMP6ZTZT+Z+7kK2qQClPXF+Ywz9ubsYjZ+BxFUep/eqp
g/colVGkpk5tLDr8oAt99lchbipQyNLPEvUIh3CtF2PGXXRBlOinvA3OCdWat9d9
euMZjlqeO5cgLs2sIqhIoP2YxL8918127BkYw6QIqvJhHZ8TukpkM+6QLGEbEJnH
3fOor4jsBIER78W0Hvyrs8cRsNgrtZDyaaUNC+MXH9hN09taVKTmTKgxTI4SzLsk
h6OyaFCApNMHLQ==
-----END CERTIFICATE-----
Generated at Sun May 26 14:41:41 2024 by rpki-client on console-fra.rpki-client.org