Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          81GMKRpssnm21UEpxFh/GRWc9XMYqSoOwkOaOBHSx3Y=
Subject key identifier:   28:C6:9B:10:62:EB:9E:A6:F9:3E:F0:70:83:A9:D1:18:DA:FC:FE:8D
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       018F874946B685546F621AF5D2E0C1439FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          0DBC
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: e_Cy_FEBdhWAyy5ZEgjDJ3GVdvI.roa (hash: CZDixfsjEs8LFh+CIfMnDEgDovOnDJGMJYterzkNBio=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: gDjMY5qahNtiJdyBNVM5aEtlguGd5DFHtOweDuXLu58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:46:b6:85:54:6f:62:1a:f5:d2:e0:c1:43:9f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=28c69b1062eb9ea6f93ef07083a9d118dafcfe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:f6:a8:10:4e:61:01:c7:13:eb:57:a2:34:
                    93:8c:d8:5d:c1:73:6a:6e:fc:eb:9d:cd:e7:33:a0:
                    8a:c4:d3:5b:32:27:38:92:67:b8:97:b1:ef:da:71:
                    98:15:7c:8c:a8:0d:e1:b9:a3:c7:36:f1:ae:4d:ce:
                    5f:29:8d:b7:9a:4a:6a:a2:dd:49:6e:6a:21:8c:36:
                    78:ef:bc:73:79:4f:6a:24:a0:ad:6d:be:f6:80:a4:
                    9d:58:66:8c:dc:86:bd:3d:0f:41:61:e8:42:13:45:
                    cd:41:04:f7:b0:1e:29:29:9d:49:87:c1:09:e2:cf:
                    5e:a6:de:56:1d:c1:1b:2f:d2:d6:79:ff:26:e9:cf:
                    c8:ca:07:c5:0d:2a:7a:f4:7c:0a:ec:67:7f:ba:de:
                    39:6d:63:46:fc:41:92:ff:89:6b:12:bb:b8:86:18:
                    21:42:a5:82:79:82:e9:a0:ef:37:22:a1:82:22:ef:
                    3e:9d:69:9a:19:62:92:45:c9:26:00:6f:13:d7:6c:
                    ee:2c:52:d8:59:f8:de:52:b3:fc:0f:f3:1c:f4:1e:
                    43:03:42:cf:c2:c7:ba:47:6b:54:56:a5:89:96:bd:
                    b0:8d:3f:54:d3:6a:b6:52:08:b9:95:ba:4b:43:15:
                    69:26:7e:5f:34:be:17:16:d0:e4:9f:b6:b3:b1:b1:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C6:9B:10:62:EB:9E:A6:F9:3E:F0:70:83:A9:D1:18:DA:FC:FE:8D
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:3d:00:70:8a:44:ee:57:b1:70:e3:15:e6:17:9c:57:43:
         00:dc:ad:9f:8d:cf:b4:10:20:15:f5:42:0e:01:6e:d9:5f:a1:
         b2:3a:25:12:33:8d:46:3f:83:f5:e6:ba:39:60:f9:5d:55:3b:
         3e:7c:6e:ec:5f:b0:7d:5b:02:90:91:b6:4d:46:73:54:12:8a:
         37:cf:72:b1:9d:fc:52:d8:8b:62:97:40:25:89:97:b1:70:3f:
         3f:b4:af:1e:d9:fa:fc:4e:c7:2e:1f:d3:2f:0c:88:c9:a7:e9:
         1e:a8:4f:5d:fb:32:a8:ec:94:92:f3:a3:83:3f:75:4a:d5:1a:
         25:9b:63:94:53:02:0e:32:86:b9:5f:43:fa:b9:0d:cc:35:c8:
         56:3d:14:a3:57:4e:f5:a8:8a:8e:23:e0:4d:d6:a9:1b:db:e8:
         2b:f7:87:3c:6a:5a:14:34:e5:4f:a6:71:fd:20:ee:3c:55:03:
         6d:e5:18:c2:46:27:f0:6e:a7:10:87:3c:a0:c9:1c:27:7c:06:
         fd:41:55:df:7d:77:d6:c1:ea:e1:5b:6b:bf:f6:8e:87:a7:c5:
         05:a3:c2:59:32:1d:39:f6:a4:6e:d2:e4:eb:0e:72:9d:e2:72:
         02:45:8f:0c:00:bd:45:66:db:98:5e:f2:42:ff:83:eb:69:4e:
         65:b7:b9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSUa2hVRvYhr10uDBQ5/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTgzYTA3ZTZkYjhiYzQ5NGM4OGRmYmQxMzE3YmE4MTBk
MmQyN2EwHhcNMjQwNTE3MTYwMTE3WhcNMjQwNTE4MTYwMTE3WjAzMTEwLwYDVQQD
EygyOGM2OWIxMDYyZWI5ZWE2ZjkzZWYwNzA4M2E5ZDExOGRhZmNmZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rL2qBBOYQHHE+tXojSTjNhdwXNq
bvzrnc3nM6CKxNNbMic4kme4l7Hv2nGYFXyMqA3huaPHNvGuTc5fKY23mkpqot1J
bmohjDZ477xzeU9qJKCtbb72gKSdWGaM3Ia9PQ9BYehCE0XNQQT3sB4pKZ1Jh8EJ
4s9ept5WHcEbL9LWef8m6c/IygfFDSp69HwK7Gd/ut45bWNG/EGS/4lrEru4hhgh
QqWCeYLpoO83IqGCIu8+nWmaGWKSRckmAG8T12zuLFLYWfjeUrP8D/Mc9B5DA0LP
wse6R2tUVqWJlr2wjT9U02q2Ugi5lbpLQxVpJn5fNL4XFtDkn7azsbE7BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjGmxBi656m+T7wcIOp0Rja/P6NMB8GA1UdIwQY
MBaAFI2YOgfm24vElMiN+9Exe6gQ0tJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQt
ZGU5N2U5MTQxZmVkLzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQtZGU5N2U5MTQxZmVk
LzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbY9AHCK
RO5XsXDjFeYXnFdDANytn43PtBAgFfVCDgFu2V+hsjolEjONRj+D9ea6OWD5XVU7
Pnxu7F+wfVsCkJG2TUZzVBKKN89ysZ38UtiLYpdAJYmXsXA/P7SvHtn6/E7HLh/T
LwyIyafpHqhPXfsyqOyUkvOjgz91StUaJZtjlFMCDjKGuV9D+rkNzDXIVj0Uo1dO
9aiKjiPgTdapG9voK/eHPGpaFDTlT6Zx/SDuPFUDbeUYwkYn8G6nEIc8oMkcJ3wG
/UFV33131sHq4Vtrv/aOh6fFBaPCWTIdOfakbtLk6w5yneJyAkWPDAC9RWbbmF7y
Qv+D62lOZbe5BQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:33:33 2024 by rpki-client on console-fra.rpki-client.org