Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File:                     uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier:          7UDQMoowC2y7VHamII4DynuluEG2qgPsoJyp5h640HY=
Subject key identifier:   BF:F8:88:F5:0A:44:A6:A7:33:38:B1:DE:74:E2:33:D2:61:51:16:C0
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer:       /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial:       018F874A1C8929086A33A6726C0934B5191D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number:          06C1
Signing time:             Fri 17 May 2024 16:02:12 +0000
Manifest this update:     Fri 17 May 2024 16:02:12 +0000
Manifest next update:     Sat 18 May 2024 16:02:12 +0000
Files and hashes:         1: sUmFdFcwlOa_HG1O6ppc3IwwE5Q.roa (hash: 4mXHrvZJm6I8e1xKXIKt9bIN4b3em/AlpaHizBimvJs=)
                          2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: vCGUb2DZT7ZbzaWbiPhXui7RtoieNb5UzHTcEil3eck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1c:89:29:08:6a:33:a6:72:6c:09:34:b5:19:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
        Validity
            Not Before: May 17 16:02:12 2024 GMT
            Not After : May 18 16:02:12 2024 GMT
        Subject: CN=bff888f50a44a6a73338b1de74e233d2615116c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:fd:ab:64:38:15:94:66:15:f1:2a:53:cd:
                    b8:c0:2a:d6:b7:8f:fe:1d:86:28:8a:03:7f:8a:0c:
                    c9:68:6b:59:f5:b4:d0:25:77:e0:0f:0d:49:1b:99:
                    83:cc:a4:9e:a0:b8:cb:e2:8f:a5:42:2c:2c:c1:d7:
                    86:45:70:64:7c:c2:e2:79:6c:f9:ac:c6:d2:85:d5:
                    4f:0e:f9:c5:46:fa:52:a5:0c:a2:c0:a5:8b:df:83:
                    22:6c:dd:bc:a9:6c:37:cc:81:11:76:48:86:eb:94:
                    01:56:60:bc:f4:82:c6:93:9c:0f:d3:ff:2d:a9:f1:
                    d0:4a:27:8f:64:6f:29:7a:bb:4a:46:a3:1b:3c:66:
                    ee:44:ae:14:ce:93:5d:b0:fc:01:22:04:d8:82:96:
                    76:0e:91:e4:57:79:0d:d3:5b:cb:26:27:62:6e:72:
                    38:8d:75:77:e8:1d:34:b9:de:32:e1:80:0b:a5:27:
                    bd:da:0e:e7:87:3a:4e:a3:0f:6f:2f:69:d1:f1:89:
                    0e:7f:c9:de:18:55:9e:fa:19:70:ba:c8:5c:d1:70:
                    8b:2e:9a:31:44:17:cc:70:67:db:03:ea:e2:ec:e7:
                    c4:19:5a:51:a1:39:87:03:d8:bb:7c:68:29:40:2f:
                    36:0b:bd:27:1d:43:81:0f:f3:b6:8d:ca:15:c8:f8:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:88:F5:0A:44:A6:A7:33:38:B1:DE:74:E2:33:D2:61:51:16:C0
            X509v3 Authority Key Identifier:
                keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:f5:d2:eb:c0:9e:a6:63:04:34:3e:b5:7b:91:e3:cb:ae:
         3e:b0:21:da:5e:3e:a4:99:41:41:00:37:03:cf:7f:0f:6d:d8:
         0b:81:8f:4c:ef:b4:86:6e:c4:58:bd:b1:25:9f:ba:da:b3:60:
         ff:7e:ca:39:e1:a3:04:9c:17:b2:22:b5:69:c0:c0:e4:37:14:
         bb:b2:b4:26:80:d9:50:af:48:1f:54:77:a4:55:6f:83:7f:3e:
         32:b4:fa:ef:bd:37:48:91:21:c3:b5:85:83:65:eb:fb:65:01:
         c2:38:83:ea:a5:01:8f:fb:7a:a6:9f:39:3a:bd:11:09:99:08:
         53:90:1d:14:76:62:0c:ab:7d:ff:f6:dd:83:85:99:e0:f8:e3:
         9f:62:11:b9:dc:21:25:20:4f:3f:1c:5c:e5:b6:d5:24:62:08:
         7e:18:d9:b4:9e:b9:98:1d:36:4c:fd:fd:dc:16:4f:70:27:89:
         5d:9e:0b:5e:50:1a:42:4f:59:07:ab:c5:7b:fe:a8:8c:a0:aa:
         b4:6e:05:d9:13:f7:0b:55:79:82:31:3d:02:cd:30:37:a6:50:
         c2:39:d4:54:9c:64:6b:6a:93:32:e7:17:5a:92:7c:cd:6b:78:
         2c:6b:09:93:3d:a3:3f:f5:3d:f7:95:69:36:f4:a7:14:57:72:
         74:4e:50:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HShyJKQhqM6ZybAk0tRkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDY5OTAxNGE1NTUyNzNlZDNhYmIxNzA4NmFhZTNmMDJm
ZjlhMGYwHhcNMjQwNTE3MTYwMjEyWhcNMjQwNTE4MTYwMjEyWjAzMTEwLwYDVQQD
EyhiZmY4ODhmNTBhNDRhNmE3MzMzOGIxZGU3NGUyMzNkMjYxNTExNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywn9q2Q4FZRmFfEqU824wCrWt4/+
HYYoigN/igzJaGtZ9bTQJXfgDw1JG5mDzKSeoLjL4o+lQiwswdeGRXBkfMLieWz5
rMbShdVPDvnFRvpSpQyiwKWL34MibN28qWw3zIERdkiG65QBVmC89ILGk5wP0/8t
qfHQSiePZG8pertKRqMbPGbuRK4UzpNdsPwBIgTYgpZ2DpHkV3kN01vLJidibnI4
jXV36B00ud4y4YALpSe92g7nhzpOow9vL2nR8YkOf8neGFWe+hlwushc0XCLLpox
RBfMcGfbA+ri7OfEGVpRoTmHA9i7fGgpQC82C70nHUOBD/O2jcoVyPhQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/4iPUKRKanMzix3nTiM9JhURbAMB8GA1UdIwQY
MBaAFLjWmQFKVVJz7Tq7Fwhqrj8C/5oPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUt
YjJkNzlhZTQ5NjQ2LzEvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMDRiYWUtMmM5YS00YmViLTkwMzUtYjJkNzlhZTQ5NjQ2
LzEvdU5hWkFVcFZVblB0T3JzWENHcXVQd0xfbWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5b10uvA
nqZjBDQ+tXuR48uuPrAh2l4+pJlBQQA3A89/D23YC4GPTO+0hm7EWL2xJZ+62rNg
/37KOeGjBJwXsiK1acDA5DcUu7K0JoDZUK9IH1R3pFVvg38+MrT67703SJEhw7WF
g2Xr+2UBwjiD6qUBj/t6pp85Or0RCZkIU5AdFHZiDKt9//bdg4WZ4Pjjn2IRudwh
JSBPPxxc5bbVJGIIfhjZtJ65mB02TP393BZPcCeJXZ4LXlAaQk9ZB6vFe/6ojKCq
tG4F2RP3C1V5gjE9As0wN6ZQwjnUVJxka2qTMucXWpJ8zWt4LGsJkz2jP/U995Vp
NvSnFFdydE5QKA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:35:56 2024 by rpki-client on console-fra.rpki-client.org