Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File:                     hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier:          xkK8YfRig5Q5I4v98NLOp8GXPNJ96XivKM3RCamhoxk=
Subject key identifier:   AD:36:2D:85:BB:5B:FD:C7:7D:0B:AF:81:B6:13:E9:AF:23:DA:C9:B3
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer:       /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial:       018F893842720005AC2A943465B5EDEC5ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number:          0D3A
Signing time:             Sat 18 May 2024 01:01:56 +0000
Manifest this update:     Sat 18 May 2024 01:01:56 +0000
Manifest next update:     Sun 19 May 2024 01:01:56 +0000
Files and hashes:         1: ERk6tJVz6rOriI4gbEnkD4maX3g.roa (hash: UyvLjYlV6wJ3eOFtSMG4PMozbIGw+rq7LpMy01RTUKo=)
                          2: Gp3k8iNCKBDzTxGnd4OrA1Nivns.roa (hash: /G4/Ux2Befme3uZEjl1Upznb7/XEehX2rp/+oEtG1E4=)
                          3: Lif1o17BgLmVrmPj_eMGvkxCSrA.roa (hash: hokRVCuAqOO1CZx6W57T7wrby2KE66xld/vUhOw6B0w=)
                          4: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: 6vgYWtr8hvfQ3fn2WlBk9t2d5KyR5mtDRukqmWTW7xM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:42:72:00:05:ac:2a:94:34:65:b5:ed:ec:5a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
        Validity
            Not Before: May 18 01:01:56 2024 GMT
            Not After : May 19 01:01:56 2024 GMT
        Subject: CN=ad362d85bb5bfdc77d0baf81b613e9af23dac9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:de:28:2e:44:48:19:a8:65:ff:ba:4f:20:
                    11:8b:e0:87:76:ad:0d:8a:4e:07:db:2d:91:3f:0f:
                    48:3a:81:52:d4:8b:c7:eb:a8:43:7f:95:4f:b9:a3:
                    d9:28:e6:f3:a7:73:a9:fd:15:4f:55:04:bb:4f:be:
                    6a:8d:7b:52:cf:52:b7:46:e8:c7:2e:bd:1f:64:68:
                    fe:00:ea:49:02:4d:09:c4:1b:d1:8f:d8:4f:71:9c:
                    4c:ed:9c:ec:f8:91:fa:44:3b:43:e6:46:fa:c8:fb:
                    99:fb:d8:d4:38:ce:bd:be:53:cb:4c:ca:24:9c:7e:
                    31:f1:d9:bb:53:f0:e9:76:ae:31:e7:72:f2:8f:0c:
                    06:4f:82:dd:13:ca:ef:e1:15:30:61:88:81:a7:e0:
                    f7:94:9c:f7:4a:08:05:c3:7c:a6:d5:20:63:c9:d5:
                    00:ac:cb:d9:7f:9e:f9:66:16:ca:2f:ee:03:6c:8d:
                    27:7c:54:bb:0c:7e:57:9c:e3:78:12:bb:d7:a3:e9:
                    22:bc:82:48:49:ba:30:5d:9f:ec:ef:dc:75:ea:cd:
                    5b:9a:4e:a6:56:1d:b3:68:3b:c4:e6:ae:27:0f:3c:
                    f0:a7:ea:46:e5:b5:d9:fb:e4:04:cf:40:55:98:6c:
                    b4:f4:28:52:7f:d4:bb:fa:80:31:00:22:ef:90:61:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:2D:85:BB:5B:FD:C7:7D:0B:AF:81:B6:13:E9:AF:23:DA:C9:B3
            X509v3 Authority Key Identifier:
                keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:be:a3:0c:c2:4a:45:4e:33:02:e6:4b:ea:34:9a:29:7b:
         fb:7c:c2:65:e6:19:54:dd:aa:7e:1d:ab:fb:02:35:f6:10:23:
         be:57:cf:f7:53:3b:d5:da:26:95:d5:0f:5d:a9:5c:03:62:12:
         6e:e1:8f:75:ed:d2:94:f1:18:3c:4c:73:f1:d9:ff:9e:82:1d:
         73:a6:e0:8a:d9:9c:c1:a7:e5:6b:70:ce:85:74:fe:b7:ab:52:
         81:03:48:70:22:c3:e2:1a:c2:9f:a6:75:d5:9c:1f:45:f9:02:
         f5:0b:8d:50:7b:f5:69:cd:17:19:3d:93:db:d8:0a:8d:0c:6e:
         8e:12:ad:6a:1b:8f:98:cf:93:92:34:5a:dd:88:2d:ba:71:b7:
         49:98:6a:6a:4c:23:e2:d7:2f:8c:0c:e7:d1:e1:2c:04:19:cf:
         48:f5:70:25:80:69:ff:ec:f2:8d:81:06:98:f4:28:e9:44:aa:
         46:e2:53:80:27:be:3e:31:07:42:63:82:b1:39:75:70:60:d2:
         26:6f:c2:e7:6e:59:28:9b:01:9f:37:64:e3:26:00:93:e4:08:
         15:b1:0d:59:f2:b2:7e:b1:f6:fe:23:cb:d7:37:15:7c:a2:32:
         01:cc:42:4f:c2:eb:96:b6:a2:38:ad:30:64:48:9e:b4:a9:8b:
         d7:6e:ee:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JOEJyAAWsKpQ0ZbXt7FrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk
MzA1NGIwHhcNMjQwNTE4MDEwMTU2WhcNMjQwNTE5MDEwMTU2WjAzMTEwLwYDVQQD
EyhhZDM2MmQ4NWJiNWJmZGM3N2QwYmFmODFiNjEzZTlhZjIzZGFjOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22jeKC5ESBmoZf+6TyARi+CHdq0N
ik4H2y2RPw9IOoFS1IvH66hDf5VPuaPZKObzp3Op/RVPVQS7T75qjXtSz1K3RujH
Lr0fZGj+AOpJAk0JxBvRj9hPcZxM7Zzs+JH6RDtD5kb6yPuZ+9jUOM69vlPLTMok
nH4x8dm7U/Dpdq4x53LyjwwGT4LdE8rv4RUwYYiBp+D3lJz3SggFw3ym1SBjydUA
rMvZf575ZhbKL+4DbI0nfFS7DH5XnON4ErvXo+kivIJISbowXZ/s79x16s1bmk6m
Vh2zaDvE5q4nDzzwp+pG5bXZ++QEz0BVmGy09ChSf9S7+oAxACLvkGG+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK02LYW7W/3HfQuvgbYT6a8j2smzMB8GA1UdIwQY
MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt
NGM5M2JlZTI3ZDU0LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0
LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzW+owzC
SkVOMwLmS+o0mil7+3zCZeYZVN2qfh2r+wI19hAjvlfP91M71domldUPXalcA2IS
buGPde3SlPEYPExz8dn/noIdc6bgitmcwafla3DOhXT+t6tSgQNIcCLD4hrCn6Z1
1ZwfRfkC9QuNUHv1ac0XGT2T29gKjQxujhKtahuPmM+TkjRa3YgtunG3SZhqakwj
4tcvjAzn0eEsBBnPSPVwJYBp/+zyjYEGmPQo6USqRuJTgCe+PjEHQmOCsTl1cGDS
Jm/C525ZKJsBnzdk4yYAk+QIFbENWfKyfrH2/iPL1zcVfKIyAcxCT8LrlraiOK0w
ZEietKmL127uSQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:17:37 2024 by rpki-client on console-ams.rpki-client.org