Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File:                     fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier:          Yz35iJ6WbE9H+POiztq22BSDcytoPd7m9QU5lgNDOTs=
Subject key identifier:   28:28:DE:58:68:CD:83:70:6E:26:8B:20:BC:D7:59:0B:27:FB:F7:3E
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer:       /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial:       018F88C8C711D4AFD25E3D5E0B867D2A5D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number:          0F36
Signing time:             Fri 17 May 2024 23:00:10 +0000
Manifest this update:     Fri 17 May 2024 23:00:10 +0000
Manifest next update:     Sat 18 May 2024 23:00:10 +0000
Files and hashes:         1: chR334qAJ6ib6ZbyYwfdIkxYu5w.roa (hash: p6GA3Gb1of4qLTEEHdup3bVSC5GS1b0mH1IBUG7/Jbo=)
                          2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: a176canmcdGWjHHPUIjNBxwE7RkyPcjknRn9oXWSQ18=)
                          3: iiJJfO1nYvqRhAwFuLfwvB8rszk.roa (hash: Ym2z9SC6P91Bgc00HDDuDs9n6A0Egef2ZwgjhOUlYm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:c7:11:d4:af:d2:5e:3d:5e:0b:86:7d:2a:5d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
        Validity
            Not Before: May 17 23:00:10 2024 GMT
            Not After : May 18 23:00:10 2024 GMT
        Subject: CN=2828de5868cd83706e268b20bcd7590b27fbf73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:5e:5f:8d:a3:0a:51:79:07:ce:4a:27:f3:
                    c0:de:e4:96:ef:f0:bd:09:b8:83:79:75:bb:5e:cd:
                    15:86:16:40:85:35:ec:b8:de:27:fa:e6:e5:5a:7e:
                    0d:b5:b2:31:aa:36:81:3b:12:83:26:6b:de:1d:a6:
                    ea:50:a1:fd:54:fd:72:7f:0f:89:c7:a3:64:b3:1b:
                    1a:65:cb:4c:a8:79:51:a5:81:79:91:3f:2a:d9:28:
                    63:29:d8:c1:e4:ae:27:e2:67:7b:42:f1:34:cc:56:
                    8c:49:72:99:0d:09:67:9a:77:20:2d:0f:3b:a6:07:
                    b6:8e:f7:8a:52:2e:c1:05:27:07:80:e0:59:89:e9:
                    24:d2:99:61:b8:b0:a8:60:f8:de:87:d4:4f:6e:4a:
                    f6:45:20:d6:76:dc:2f:f1:2c:c4:dc:f0:6e:17:3c:
                    95:02:06:5e:9a:81:07:b3:92:2c:4b:eb:bd:a2:fd:
                    71:40:ce:e7:19:8a:b3:47:5d:44:79:17:33:9b:98:
                    2c:37:bc:57:15:38:3a:a9:42:bb:36:dd:0e:bd:97:
                    03:0d:ed:92:c8:dc:41:f5:1c:27:19:f9:fc:f3:92:
                    2c:fd:d6:a2:4f:b6:8c:39:00:b6:4b:ab:0f:2d:0d:
                    6d:72:23:10:1c:f7:01:04:cc:f5:03:59:1e:02:08:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:28:DE:58:68:CD:83:70:6E:26:8B:20:BC:D7:59:0B:27:FB:F7:3E
            X509v3 Authority Key Identifier:
                keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:21:8e:57:ce:db:bc:ba:55:bd:83:dd:63:d5:f2:eb:39:
         ca:b4:9f:71:e9:20:e0:3a:a3:53:a6:79:d7:ba:83:69:14:47:
         af:81:e8:19:32:e3:97:35:19:cb:87:d6:b2:fd:35:35:4f:2c:
         dc:40:f1:ed:90:2c:43:b4:f1:83:73:dc:56:09:af:1e:cf:91:
         9c:20:17:df:3d:6b:43:76:0a:b5:d6:9f:82:a2:9d:35:a9:92:
         2b:e5:a2:d7:99:aa:1e:36:91:3d:de:52:85:06:fb:af:bb:28:
         ca:90:18:69:24:99:d6:16:c4:2c:fc:54:79:76:35:11:54:e6:
         01:0e:d2:61:13:7a:0c:49:69:ec:8f:8e:bd:63:27:d8:c7:ab:
         1c:ba:d6:2b:3b:e4:f5:12:8a:b7:46:f2:e8:8b:7e:f0:76:92:
         64:ac:e7:c7:62:75:03:db:b8:d4:26:17:4c:97:82:bf:ad:1b:
         53:74:7c:0a:3b:35:65:50:7b:b2:7e:d3:43:ce:f6:00:ce:e3:
         4f:83:f4:27:fd:0f:d6:44:89:9b:6c:95:b2:ec:bd:30:6a:a0:
         f1:1b:79:07:df:13:08:92:8b:1a:67:46:bf:77:f1:8d:5f:a0:
         00:78:75:c7:5d:67:f3:f5:be:d5:87:ee:b2:45:ef:89:eb:1b:
         1b:01:23:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IyMcR1K/SXj1eC4Z9Kl0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4
YTI5ZGYwHhcNMjQwNTE3MjMwMDEwWhcNMjQwNTE4MjMwMDEwWjAzMTEwLwYDVQQD
EygyODI4ZGU1ODY4Y2Q4MzcwNmUyNjhiMjBiY2Q3NTkwYjI3ZmJmNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFVeX42jClF5B85KJ/PA3uSW7/C9
CbiDeXW7Xs0VhhZAhTXsuN4n+ublWn4NtbIxqjaBOxKDJmveHabqUKH9VP1yfw+J
x6NksxsaZctMqHlRpYF5kT8q2ShjKdjB5K4n4md7QvE0zFaMSXKZDQlnmncgLQ87
pge2jveKUi7BBScHgOBZiekk0plhuLCoYPjeh9RPbkr2RSDWdtwv8SzE3PBuFzyV
AgZemoEHs5IsS+u9ov1xQM7nGYqzR11EeRczm5gsN7xXFTg6qUK7Nt0OvZcDDe2S
yNxB9RwnGfn885Is/daiT7aMOQC2S6sPLQ1tciMQHPcBBMz1A1keAghrvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgo3lhozYNwbiaLILzXWQsn+/c+MB8GA1UdIwQY
MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt
NDQ3NjE3YTRhNzQ0LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0
LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTshjlfO
27y6Vb2D3WPV8us5yrSfcekg4DqjU6Z517qDaRRHr4HoGTLjlzUZy4fWsv01NU8s
3EDx7ZAsQ7Txg3PcVgmvHs+RnCAX3z1rQ3YKtdafgqKdNamSK+Wi15mqHjaRPd5S
hQb7r7soypAYaSSZ1hbELPxUeXY1EVTmAQ7SYRN6DElp7I+OvWMn2MerHLrWKzvk
9RKKt0by6It+8HaSZKznx2J1A9u41CYXTJeCv60bU3R8Cjs1ZVB7sn7TQ872AM7j
T4P0J/0P1kSJm2yVsuy9MGqg8Rt5B98TCJKLGmdGv3fxjV+gAHh1x11n8/W+1Yfu
skXviesbGwEjBg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:02:59 2024 by rpki-client on console-fra.rpki-client.org