Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          WYsglJvcrPlbFM5lsLyiobs7pNldw/jGZ8j1O1A0gVU=
Subject key identifier:   F1:C3:C8:C7:A7:93:28:FC:55:13:80:D6:F7:8D:78:CD:13:87:78:E5
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       018F874953F8FAA84E80A5F46819D5832CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          0F91
Signing time:             Fri 17 May 2024 16:01:20 +0000
Manifest this update:     Fri 17 May 2024 16:01:20 +0000
Manifest next update:     Sat 18 May 2024 16:01:20 +0000
Files and hashes:         1: i8GvaR3gptFHvmvUaqFBBfjK1ig.roa (hash: rGktInduqJOxqSb0GxwB81MW6MRFBQWr39gsdA1IjEg=)
                          2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: HhMInJOd1+NugyDmvgYESf0zauI9AHwPNMXmOBcNPR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:53:f8:fa:a8:4e:80:a5:f4:68:19:d5:83:2c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: May 17 16:01:20 2024 GMT
            Not After : May 18 16:01:20 2024 GMT
        Subject: CN=f1c3c8c7a79328fc551380d6f78d78cd138778e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:39:74:79:09:65:13:7d:5f:6d:2a:ea:92:
                    1d:7f:69:a9:6e:8d:4d:f5:a9:bf:55:5a:99:9e:32:
                    c6:71:12:a8:5a:38:96:18:98:c5:90:2b:94:e4:99:
                    db:0c:4d:3a:be:5e:3f:5e:bf:4a:fc:8d:7e:46:29:
                    84:e6:4d:07:a8:d5:87:6b:69:3d:ca:55:9d:3f:ad:
                    16:cb:25:a1:65:bf:c0:4d:08:2e:53:92:42:fb:21:
                    8f:8c:63:f4:5c:bf:fc:b2:9e:b5:79:9b:20:bc:12:
                    ab:f8:80:cf:62:09:e7:37:07:c5:9a:14:93:aa:b3:
                    61:66:c6:5a:68:03:5e:55:84:56:4f:fc:55:b1:22:
                    9c:7e:07:3c:98:e4:82:76:8d:da:5d:c2:b6:70:14:
                    48:44:70:35:05:7a:c0:bb:d6:72:98:0f:f9:3b:68:
                    b1:17:0f:3e:94:e2:fe:25:07:ed:6e:f8:a8:ac:30:
                    46:c2:d8:bc:d2:8d:97:62:d7:27:32:86:c2:af:9b:
                    8b:5c:c9:e0:c9:f1:31:d8:2d:16:de:00:6c:66:3c:
                    ae:eb:ca:7e:4a:8f:36:d8:53:a9:5a:77:18:39:89:
                    1e:0d:48:95:f0:de:4b:8a:0a:fd:87:2d:71:36:76:
                    4b:08:d3:4e:82:2f:96:25:0c:ac:c0:34:a6:dc:99:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C3:C8:C7:A7:93:28:FC:55:13:80:D6:F7:8D:78:CD:13:87:78:E5
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:08:36:c5:3c:72:f0:70:e9:2e:5c:48:77:1f:77:4d:07:
         92:34:54:dc:61:10:ed:71:ec:fb:41:12:67:17:50:15:91:cd:
         6a:38:e5:2e:bc:36:2b:da:37:c6:bb:e2:98:34:ca:b9:bd:66:
         38:18:38:e6:ce:70:26:15:f9:c5:28:47:ed:54:ef:ee:94:dc:
         5f:09:c3:92:90:27:92:dd:e9:84:59:d3:e9:30:2d:14:3d:9d:
         fa:80:42:30:a6:c4:89:ad:cc:77:42:71:58:c0:1f:7b:f0:07:
         84:3a:5a:49:00:dd:86:76:5c:de:94:83:1e:55:39:45:5d:92:
         6c:a2:dc:82:7a:ae:94:f7:9c:19:1b:ea:35:dd:7e:20:82:5d:
         1a:1c:49:54:2c:e1:c7:e6:48:78:2d:f1:49:59:66:d4:2c:20:
         db:a8:dc:79:21:6a:8a:32:7e:38:7b:c6:13:bb:5f:da:f6:ef:
         24:84:bb:9b:3b:dd:04:9f:b3:d0:f6:94:4b:60:99:f2:93:2b:
         b8:44:33:b7:3b:76:5f:67:f1:a5:91:eb:68:09:4a:09:bb:f5:
         02:b0:7b:a0:06:cd:be:b4:6d:e8:1e:1c:93:e9:60:91:50:c9:
         0b:a7:65:c2:cd:e5:0a:4f:9a:02:c3:24:eb:c1:aa:79:f1:50:
         ad:2c:af:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSVP4+qhOgKX0aBnVgyzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw
ZWIxMjkwHhcNMjQwNTE3MTYwMTIwWhcNMjQwNTE4MTYwMTIwWjAzMTEwLwYDVQQD
EyhmMWMzYzhjN2E3OTMyOGZjNTUxMzgwZDZmNzhkNzhjZDEzODc3OGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklY5dHkJZRN9X20q6pIdf2mpbo1N
9am/VVqZnjLGcRKoWjiWGJjFkCuU5JnbDE06vl4/Xr9K/I1+RimE5k0HqNWHa2k9
ylWdP60WyyWhZb/ATQguU5JC+yGPjGP0XL/8sp61eZsgvBKr+IDPYgnnNwfFmhST
qrNhZsZaaANeVYRWT/xVsSKcfgc8mOSCdo3aXcK2cBRIRHA1BXrAu9ZymA/5O2ix
Fw8+lOL+JQftbviorDBGwti80o2XYtcnMobCr5uLXMngyfEx2C0W3gBsZjyu68p+
So822FOpWncYOYkeDUiV8N5Ligr9hy1xNnZLCNNOgi+WJQyswDSm3JnsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHDyMenkyj8VROA1veNeM0Th3jlMB8GA1UdIwQY
MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt
OTg0NDE2MDdiMjI4LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4
LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeMINsU8
cvBw6S5cSHcfd00HkjRU3GEQ7XHs+0ESZxdQFZHNajjlLrw2K9o3xrvimDTKub1m
OBg45s5wJhX5xShH7VTv7pTcXwnDkpAnkt3phFnT6TAtFD2d+oBCMKbEia3Md0Jx
WMAfe/AHhDpaSQDdhnZc3pSDHlU5RV2SbKLcgnqulPecGRvqNd1+IIJdGhxJVCzh
x+ZIeC3xSVlm1Cwg26jceSFqijJ+OHvGE7tf2vbvJIS7mzvdBJ+z0PaUS2CZ8pMr
uEQztzt2X2fxpZHraAlKCbv1ArB7oAbNvrRt6B4ck+lgkVDJC6dlws3lCk+aAsMk
68GqefFQrSyvOw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:10:05 2024 by rpki-client on console-ams.rpki-client.org