Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File:                     t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier:          hZo181aqK5aBu5QNtSmBB+ZmGbCtwOWa2YLrZBU00lc=
Subject key identifier:   02:7C:95:82:95:BD:D9:FF:AD:50:0C:44:C0:41:8C:0A:87:BC:24:76
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer:       /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial:       018F8749DE84148325F5CCACF35D9584C3DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number:          05C8
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: Ot4rDEZWlV0ANvCL_CQ4zMAPVnQ.roa (hash: 5c+isatC4cPn2lZvWrRx8IdQHRzfW5BlBzHYLXi+ISc=)
                          2: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: VMF/p67oCP/IVBNWuzDEQyZAk3muVoX4UyKDh69DIaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:de:84:14:83:25:f5:cc:ac:f3:5d:95:84:c3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=027c958295bdd9ffad500c44c0418c0a87bc2476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:04:ed:7a:aa:6a:fb:12:cd:7d:b1:b5:f1:
                    2c:3b:2b:fd:8f:08:95:a3:87:94:68:d1:e4:f2:a2:
                    f2:0e:64:0e:3e:14:e8:a2:99:fb:89:89:96:de:7b:
                    45:c2:31:f7:73:90:31:28:17:ba:3b:09:79:9b:c2:
                    40:d3:6e:8b:ec:03:d4:06:18:61:a0:a4:7b:fa:f2:
                    5e:f3:c1:d8:9a:a7:a3:0f:d7:71:80:a1:56:55:e7:
                    1d:50:a2:6f:dc:0e:a7:b2:f5:05:dd:39:b1:55:b9:
                    64:96:4e:c0:5b:3e:af:7b:1b:43:8e:d3:ed:82:c0:
                    e8:16:cc:13:d2:9f:c2:05:bd:72:8b:be:ab:05:47:
                    5e:36:69:fd:c7:8c:8f:ca:1a:70:f1:c5:23:99:76:
                    df:95:88:91:30:bc:60:0d:97:32:42:1d:c4:be:24:
                    fc:07:8c:53:eb:41:9b:57:f8:83:93:90:23:30:d5:
                    bf:b5:c8:bb:4a:02:77:c0:f8:61:87:8b:45:8f:6a:
                    66:19:64:d8:49:03:ae:93:87:b1:66:53:c7:e8:1b:
                    46:9c:0c:7b:41:8b:6b:92:05:7d:ec:e6:54:9f:16:
                    90:f5:d0:a0:a4:52:89:44:cb:36:0e:4a:2c:23:24:
                    06:ce:0d:ae:a2:11:9c:48:58:05:92:48:02:3a:58:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:95:82:95:BD:D9:FF:AD:50:0C:44:C0:41:8C:0A:87:BC:24:76
            X509v3 Authority Key Identifier:
                keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:53:00:8d:19:a7:09:c2:33:1c:0e:4d:ae:1e:fa:3a:62:
         2f:b4:51:43:94:28:ba:dd:c9:81:9f:1a:9a:e1:6a:d5:24:c4:
         75:8f:49:c1:06:f8:10:a6:9a:e6:b0:30:d3:48:de:dd:3f:4a:
         fd:6b:74:04:8c:af:50:02:07:32:24:e9:15:dc:0a:95:84:de:
         78:f6:61:5c:59:a4:fb:8d:2f:52:8a:f9:5e:48:8c:3d:f6:2b:
         22:74:19:fd:f2:d3:5c:ce:4c:89:a2:c2:47:4f:17:07:41:63:
         d9:8e:b8:a7:c9:83:3a:f2:9b:63:c1:d6:77:77:98:ee:46:6e:
         19:15:e4:78:6f:70:f7:79:76:c7:bb:8b:3d:f2:31:82:b9:e2:
         2d:28:c5:a3:a6:b6:41:62:a2:a2:30:12:0e:4a:ee:b9:d8:d7:
         e9:b5:13:d8:e0:e7:34:3d:63:e9:70:e8:02:2d:73:ef:da:ae:
         db:39:ca:43:56:dc:01:73:8e:8a:61:75:2f:c5:99:cd:10:9b:
         59:00:ad:d8:2d:0d:34:12:3a:5d:7f:7e:df:8e:a8:42:f9:33:
         dd:88:12:85:a6:0c:0e:c2:58:6b:e7:11:ca:5b:d5:0b:28:94:
         cd:4f:c1:56:4d:b0:18:68:94:ea:01:e6:33:19:83:29:d5:41:
         bb:b3:da:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSd6EFIMl9cys812VhMPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjY0NmRlNDE0MDcyZmMxYWI3NmIxYjJjOWUwOGI5YmQy
MWE4NDMwHhcNMjQwNTE3MTYwMTU2WhcNMjQwNTE4MTYwMTU2WjAzMTEwLwYDVQQD
EygwMjdjOTU4Mjk1YmRkOWZmYWQ1MDBjNDRjMDQxOGMwYTg3YmMyNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBEE7XqqavsSzX2xtfEsOyv9jwiV
o4eUaNHk8qLyDmQOPhToopn7iYmW3ntFwjH3c5AxKBe6Owl5m8JA026L7APUBhhh
oKR7+vJe88HYmqejD9dxgKFWVecdUKJv3A6nsvUF3TmxVblklk7AWz6vextDjtPt
gsDoFswT0p/CBb1yi76rBUdeNmn9x4yPyhpw8cUjmXbflYiRMLxgDZcyQh3EviT8
B4xT60GbV/iDk5AjMNW/tci7SgJ3wPhhh4tFj2pmGWTYSQOuk4exZlPH6BtGnAx7
QYtrkgV97OZUnxaQ9dCgpFKJRMs2DkosIyQGzg2uohGcSFgFkkgCOlhniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ8lYKVvdn/rVAMRMBBjAqHvCR2MB8GA1UdIwQY
MBaAFLf2Rt5BQHL8GrdrGyyeCLm9IahDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9aRzNrRkFjdndhdDJzYkxKNEl1YjBocUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMmY5ZmYtYzQ2MC00MGEyLWEzNTct
NzdlZjg3YTczZTEzLzEvdF9aRzNrRkFjdndhdDJzYkxKNEl1YjBocUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMmY5ZmYtYzQ2MC00MGEyLWEzNTctNzdlZjg3YTczZTEz
LzEvdF9aRzNrRkFjdndhdDJzYkxKNEl1YjBocUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqVTAI0Z
pwnCMxwOTa4e+jpiL7RRQ5Qout3JgZ8amuFq1STEdY9JwQb4EKaa5rAw00je3T9K
/Wt0BIyvUAIHMiTpFdwKlYTeePZhXFmk+40vUor5XkiMPfYrInQZ/fLTXM5MiaLC
R08XB0Fj2Y64p8mDOvKbY8HWd3eY7kZuGRXkeG9w93l2x7uLPfIxgrniLSjFo6a2
QWKiojASDkruudjX6bUT2ODnND1j6XDoAi1z79qu2znKQ1bcAXOOimF1L8WZzRCb
WQCt2C0NNBI6XX9+346oQvkz3YgShaYMDsJYa+cRylvVCyiUzU/BVk2wGGiU6gHm
MxmDKdVBu7PaeQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:09:17 2024 by rpki-client on console-ams.rpki-client.org