Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File:                     is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier:          +1lHgB1mrsc/GhDjVmqMM504VPNS0SwAS1vrXWB4hyk=
Subject key identifier:   87:88:0D:31:D6:B1:C9:AD:DA:15:F7:C2:05:CB:2E:40:28:41:46:DE
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer:       /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial:       018F8749508866CDB83CCBDEF56BB23DA198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number:          0219
Signing time:             Fri 17 May 2024 16:01:19 +0000
Manifest this update:     Fri 17 May 2024 16:01:19 +0000
Manifest next update:     Sat 18 May 2024 16:01:19 +0000
Files and hashes:         1: TuQthIy-yG26vd5YqBW0vF8467o.roa (hash: 7pDHbjg1TSjk/pcExNah4XWkIVB3hbiVFv7lvjIWSfk=)
                          2: gGN8DGM9_0Gm8BEp2388b8jQp5E.roa (hash: B9SV+ptEiA0I4SlejzjRXn4FRXZEQoOgksLFAcJAtXo=)
                          3: hsn4xu1bETPWA1iHrPdmWR0n-Ww.roa (hash: rCUWaDcPTPOQM1D+e6lVe+1Ki1hSADu8X95ciJ+clhs=)
                          4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: txvkihNyiv88laXTUb0QFaSQH06upfEz5s4x8Irpx+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:50:88:66:cd:b8:3c:cb:de:f5:6b:b2:3d:a1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
        Validity
            Not Before: May 17 16:01:19 2024 GMT
            Not After : May 18 16:01:19 2024 GMT
        Subject: CN=87880d31d6b1c9adda15f7c205cb2e40284146de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:3c:c7:e2:53:8f:43:df:db:10:12:ce:c1:
                    7a:5d:90:a7:33:6c:02:8a:93:12:5b:f3:58:89:8f:
                    a9:9c:d0:36:13:a4:c7:41:db:82:5e:e3:10:a4:4c:
                    4c:be:a7:e2:79:22:af:4b:e7:36:fc:ea:f4:05:f9:
                    74:a9:ed:13:78:c7:a8:e2:94:78:24:23:48:92:be:
                    a8:9d:f6:35:59:d6:b4:44:ff:04:9b:3d:3b:3b:51:
                    cb:1d:e6:90:1f:88:9a:c1:38:31:96:92:cb:ee:64:
                    b5:1e:4e:78:8e:97:a7:02:6f:8d:e3:0f:68:95:68:
                    1d:2a:83:3c:b2:32:d6:06:46:60:21:c0:c8:89:ff:
                    da:5b:4e:3b:3e:be:3a:22:35:82:e3:6b:8e:ca:bd:
                    46:fc:b5:41:95:43:36:e1:9f:f8:21:8e:30:a4:fb:
                    4e:7c:fa:be:60:1a:52:6d:1a:ae:c0:a9:6e:cf:06:
                    0a:f3:85:b1:62:a3:84:4c:18:d5:e4:d7:26:0b:11:
                    d6:72:3d:db:7b:3b:2f:0f:b9:63:8b:1b:0b:84:d9:
                    c0:c1:44:44:0e:8e:a7:0e:0e:ad:bc:df:d9:ad:30:
                    fa:0e:46:a9:f2:e4:8d:70:09:a7:3e:f9:a5:58:d8:
                    a3:3d:2c:3c:17:67:43:a8:00:1e:67:a0:f9:0c:dd:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:88:0D:31:D6:B1:C9:AD:DA:15:F7:C2:05:CB:2E:40:28:41:46:DE
            X509v3 Authority Key Identifier:
                keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:23:46:11:66:e0:23:00:b0:a5:34:9f:33:60:9e:83:49:
         55:db:12:54:8b:e8:16:3a:18:df:ab:d5:88:cf:3d:c3:9e:53:
         92:12:e4:ec:78:68:72:9a:83:8a:a9:fb:d6:7c:d6:1a:3c:1f:
         1f:eb:24:72:c4:17:fd:de:09:33:37:76:51:eb:39:13:31:f9:
         95:e8:b6:14:4f:29:f5:e6:ac:8d:6e:f4:70:af:56:8c:88:bc:
         1d:37:e3:21:cb:16:18:01:6e:da:fe:2d:e1:82:da:18:ee:37:
         ec:51:6b:3a:bd:7c:3e:86:6c:7e:18:f7:e9:36:46:7c:d9:f4:
         13:77:11:ee:bd:37:33:b8:b4:90:08:bd:a5:a5:5c:4a:b4:57:
         76:d4:f0:e0:75:3a:c5:ef:6d:8b:ca:c1:b4:ae:63:c2:f0:55:
         07:42:02:20:5b:65:57:d3:0b:f2:1b:c7:77:09:20:0a:8b:36:
         0c:34:c3:5b:0b:9d:b0:05:c8:da:c5:1f:9b:5d:80:98:77:c8:
         3f:b2:9b:ee:43:87:ca:6e:e4:9a:20:f1:5b:b4:e5:28:f1:ca:
         04:c4:03:93:b4:e4:b8:14:48:04:b2:f3:88:20:25:77:f8:24:
         50:60:f3:a9:22:74:f0:c1:70:0f:03:92:a5:56:b4:a5:63:66:
         0f:54:92:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSVCIZs24PMve9WuyPaGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi
ZGQwMDYwHhcNMjQwNTE3MTYwMTE5WhcNMjQwNTE4MTYwMTE5WjAzMTEwLwYDVQQD
Eyg4Nzg4MGQzMWQ2YjFjOWFkZGExNWY3YzIwNWNiMmU0MDI4NDE0NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8I8x+JTj0Pf2xASzsF6XZCnM2wC
ipMSW/NYiY+pnNA2E6THQduCXuMQpExMvqfieSKvS+c2/Or0Bfl0qe0TeMeo4pR4
JCNIkr6onfY1Wda0RP8Emz07O1HLHeaQH4iawTgxlpLL7mS1Hk54jpenAm+N4w9o
lWgdKoM8sjLWBkZgIcDIif/aW047Pr46IjWC42uOyr1G/LVBlUM24Z/4IY4wpPtO
fPq+YBpSbRquwKluzwYK84WxYqOETBjV5NcmCxHWcj3bezsvD7ljixsLhNnAwURE
Do6nDg6tvN/ZrTD6Dkap8uSNcAmnPvmlWNijPSw8F2dDqAAeZ6D5DN2VfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeIDTHWscmt2hX3wgXLLkAoQUbeMB8GA1UdIwQY
MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt
Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj
LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMojRhFm
4CMAsKU0nzNgnoNJVdsSVIvoFjoY36vViM89w55TkhLk7HhocpqDiqn71nzWGjwf
H+skcsQX/d4JMzd2Ues5EzH5lei2FE8p9easjW70cK9WjIi8HTfjIcsWGAFu2v4t
4YLaGO437FFrOr18PoZsfhj36TZGfNn0E3cR7r03M7i0kAi9paVcSrRXdtTw4HU6
xe9ti8rBtK5jwvBVB0ICIFtlV9ML8hvHdwkgCos2DDTDWwudsAXI2sUfm12AmHfI
P7Kb7kOHym7kmiDxW7TlKPHKBMQDk7TkuBRIBLLziCAld/gkUGDzqSJ08MFwDwOS
pVa0pWNmD1SSrA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:35:02 2024 by rpki-client on console-fra.rpki-client.org