Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File:                     B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier:          PgFZ3BWUsSWwX3TRLIG7IpNAoceYMe/tsefhKHzYktE=
Subject key identifier:   87:8A:E8:FA:F0:3E:E2:CE:14:17:B3:A7:9D:30:F0:5A:5F:F1:C3:A8
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       018F4B6B33B4E38BE9ED0E94FFB4E4D5CE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number:          07FF
Signing time:             Mon 06 May 2024 01:01:07 +0000
Manifest this update:     Mon 06 May 2024 01:01:07 +0000
Manifest next update:     Tue 07 May 2024 01:01:07 +0000
Files and hashes:         1: 7gw9mllt_oJ6-R2iEFwHTPMRPcM.roa (hash: wQc1PyGipK01KkbxWOxGyce49OrkcWwX7x8UCdOWJ9M=)
                          2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: h/flyN+eSCd15isnRaXkLSFFgN9/iApB3gvJQS5DE8U=)
                          3: QlEiFonTWNbaGsFp1CMJPO5yOvA.roa (hash: hQDWvNb/Qa+7O6traNRHD/AmqTpbTeqS35Cp9YccRdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:33:b4:e3:8b:e9:ed:0e:94:ff:b4:e4:d5:ce:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: May  6 01:01:07 2024 GMT
            Not After : May  7 01:01:07 2024 GMT
        Subject: CN=878ae8faf03ee2ce1417b3a79d30f05a5ff1c3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:22:dc:8b:20:21:61:bd:e0:95:ae:2d:54:
                    87:12:c6:d4:81:8a:1a:fe:4e:94:98:71:28:73:21:
                    0f:cc:9c:20:cd:51:11:22:82:c5:e3:bd:4a:10:c2:
                    bf:0b:3e:5b:ef:f0:1f:f6:38:a0:71:21:cb:17:d6:
                    17:c3:79:4e:ee:0c:89:24:8c:60:e5:1a:5a:50:91:
                    41:b9:b4:8b:06:1a:a0:ed:e3:5f:e3:0e:65:56:dc:
                    6f:48:20:cf:ee:15:01:11:86:ce:72:60:5e:0e:90:
                    51:cc:16:0f:9d:46:2d:12:f2:b3:67:9c:16:12:70:
                    f9:8f:38:56:d7:b3:8b:7d:d6:94:58:27:b0:fe:61:
                    ed:81:40:c0:78:3c:74:c4:0b:0b:eb:38:7f:8c:c4:
                    62:ab:e2:43:c7:7e:b0:d0:a7:ef:e4:e6:cf:5e:95:
                    97:d6:84:b1:e1:0b:bc:23:dc:fe:9a:a7:3f:cb:6e:
                    db:75:f7:34:2a:b5:67:6f:32:8d:ea:42:b2:d8:f6:
                    a0:66:5b:94:dc:91:8f:02:97:4d:46:8e:21:a6:34:
                    00:1b:1a:85:99:a4:09:37:19:f9:14:ad:fc:f2:d5:
                    de:09:9d:72:6f:96:e0:9e:9f:e0:9c:4f:ff:f5:2e:
                    82:bf:a5:c4:db:cb:da:19:f0:a7:d0:8d:0e:08:c5:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:E8:FA:F0:3E:E2:CE:14:17:B3:A7:9D:30:F0:5A:5F:F1:C3:A8
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:b7:f3:b0:f0:2c:35:56:82:03:ca:52:fb:50:13:92:07:
         2a:0e:08:0e:c2:0b:95:5c:df:4b:5a:d2:80:01:31:fb:c3:3a:
         ce:b9:26:ce:33:f5:26:46:cf:b6:9a:13:a2:d4:e4:77:d4:84:
         7a:63:57:8e:5d:67:5a:78:f3:c6:1b:1c:1d:36:16:ad:9f:aa:
         7c:9e:61:53:cf:d4:e8:a1:9c:7e:77:c7:2b:7c:2a:6f:ed:70:
         d7:4b:cb:21:5f:78:25:5d:bb:b6:6f:21:16:74:bf:e9:93:fc:
         57:a8:da:88:0f:04:23:15:e4:22:4e:38:bb:c7:f1:99:06:b8:
         a6:43:49:b3:3b:38:66:19:41:b7:21:a9:03:f2:ba:37:84:a9:
         43:1c:3d:df:75:b2:88:93:30:a1:bc:eb:0d:ae:c7:57:1b:43:
         81:97:8e:e1:c8:c0:56:82:a5:26:19:05:68:9b:b8:f8:f1:cb:
         b4:1c:82:5b:28:5d:3b:1e:03:5c:98:17:52:c6:29:f5:f5:24:
         08:95:04:bd:86:2f:7e:8e:6f:d5:33:91:fc:49:c8:4d:ae:0c:
         5d:a3:d4:15:ca:9a:02:7f:5b:07:f4:e2:49:01:21:3a:b6:05:
         a4:5a:7c:07:0d:e6:be:21:2c:cc:16:ef:e7:94:dd:d3:45:7a:
         e5:bd:75:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9LazO044vp7Q6U/7Tk1c5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl
YjdlY2QwHhcNMjQwNTA2MDEwMTA3WhcNMjQwNTA3MDEwMTA3WjAzMTEwLwYDVQQD
Eyg4NzhhZThmYWYwM2VlMmNlMTQxN2IzYTc5ZDMwZjA1YTVmZjFjM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW0i3IsgIWG94JWuLVSHEsbUgYoa
/k6UmHEocyEPzJwgzVERIoLF471KEMK/Cz5b7/Af9jigcSHLF9YXw3lO7gyJJIxg
5RpaUJFBubSLBhqg7eNf4w5lVtxvSCDP7hUBEYbOcmBeDpBRzBYPnUYtEvKzZ5wW
EnD5jzhW17OLfdaUWCew/mHtgUDAeDx0xAsL6zh/jMRiq+JDx36w0Kfv5ObPXpWX
1oSx4Qu8I9z+mqc/y27bdfc0KrVnbzKN6kKy2PagZluU3JGPApdNRo4hpjQAGxqF
maQJNxn5FK388tXeCZ1yb5bgnp/gnE//9S6Cv6XE28vaGfCn0I0OCMUq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeK6PrwPuLOFBezp50w8Fpf8cOoMB8GA1UdIwQY
MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt
M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi
LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsK387Dw
LDVWggPKUvtQE5IHKg4IDsILlVzfS1rSgAEx+8M6zrkmzjP1JkbPtpoTotTkd9SE
emNXjl1nWnjzxhscHTYWrZ+qfJ5hU8/U6KGcfnfHK3wqb+1w10vLIV94JV27tm8h
FnS/6ZP8V6jaiA8EIxXkIk44u8fxmQa4pkNJszs4ZhlBtyGpA/K6N4SpQxw933Wy
iJMwobzrDa7HVxtDgZeO4cjAVoKlJhkFaJu4+PHLtByCWyhdOx4DXJgXUsYp9fUk
CJUEvYYvfo5v1TOR/EnITa4MXaPUFcqaAn9bB/TiSQEhOrYFpFp8Bw3mviEszBbv
55Td00V65b11HQ==
-----END CERTIFICATE-----
Generated at Mon May 6 04:06:26 2024 by rpki-client on console-ams.rpki-client.org