Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File:                     mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier:          ZkV6MMEpnGd3SlSZnj/1HQcP5yBr0hXPbmXyXiy5840=
Subject key identifier:   23:2F:93:10:36:56:D7:57:FF:8B:0E:C3:3B:25:7D:52:AB:87:33:38
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer:       /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial:       018F87ECFE3D9BD9A43CF23EBB8471D37D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number:          0262
Signing time:             Fri 17 May 2024 19:00:06 +0000
Manifest this update:     Fri 17 May 2024 19:00:06 +0000
Manifest next update:     Sat 18 May 2024 19:00:06 +0000
Files and hashes:         1: U7c0yVdX9TF3tgOyzCMYNDcN3P0.roa (hash: Z60B6fLqt06u6AobWD2OY21xYUMmbYuT9Lmb3FXHC08=)
                          2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: VwMIFSlImC6TYia9Ru4rtlVWd/bkBVJhWmToCyEA+BM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fe:3d:9b:d9:a4:3c:f2:3e:bb:84:71:d3:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
        Validity
            Not Before: May 17 19:00:06 2024 GMT
            Not After : May 18 19:00:06 2024 GMT
        Subject: CN=232f93103656d757ff8b0ec33b257d52ab873338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b1:f3:6b:16:65:69:02:76:8c:b7:86:05:93:
                    ac:6e:f4:f0:ac:39:b4:08:67:de:ae:10:30:75:4e:
                    e1:20:bc:cb:29:59:05:96:71:85:20:7d:68:2f:91:
                    85:75:69:07:6d:6d:8a:23:c7:9c:a7:e2:2d:07:2b:
                    dc:cc:d6:ca:ae:f7:a5:1f:36:e3:69:a6:94:1c:80:
                    cd:0c:e5:0e:63:74:3f:87:4f:25:45:ed:c6:fd:3a:
                    a7:24:c5:b2:c1:c2:e8:33:82:dd:de:43:4d:ad:42:
                    5e:82:c2:0e:74:2f:b8:be:74:83:8a:f8:72:a5:c9:
                    57:23:97:72:4d:cc:ea:bd:a8:18:35:3d:3b:a6:e2:
                    e1:3d:39:cf:cd:13:8d:8d:1d:2f:ce:fd:ab:4d:5a:
                    3e:d4:9e:d3:9c:ed:1f:58:4f:fd:8d:fe:c1:df:af:
                    d1:3b:dd:48:89:1f:f9:5c:be:61:17:bf:11:68:0b:
                    94:c1:d7:76:ce:65:8b:fc:bf:de:15:00:66:e1:7d:
                    70:d6:87:3e:14:62:bc:82:98:b1:81:e3:c4:ed:ad:
                    b2:e2:3d:f1:15:9d:30:86:e4:5d:3a:89:c8:be:37:
                    e6:7b:70:71:1d:72:b5:ea:db:a6:c1:0e:ae:09:ce:
                    77:db:08:cc:bd:7b:30:9d:87:22:36:48:fd:b0:43:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:93:10:36:56:D7:57:FF:8B:0E:C3:3B:25:7D:52:AB:87:33:38
            X509v3 Authority Key Identifier:
                keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:a6:66:7c:95:0d:59:21:29:02:99:fc:bd:58:46:17:eb:
         28:ca:8e:ea:d7:ad:30:27:cd:cb:09:dc:48:b8:9d:2c:b4:91:
         72:58:0c:f5:03:fb:43:fa:08:d6:cd:65:ad:0f:f0:22:f1:8f:
         b7:cb:83:23:44:e0:4c:9b:35:cf:12:df:45:e2:d2:64:db:83:
         0c:50:7a:7a:1c:2a:ca:52:8a:e6:c4:7b:c9:2e:aa:af:41:40:
         78:d2:58:b8:58:09:3d:e4:e1:cd:56:84:a2:b7:98:04:70:39:
         3e:36:c4:0b:27:58:ae:cb:59:94:0b:52:e7:0c:fa:ba:5c:23:
         f3:83:29:c2:95:8b:ce:19:45:98:e7:cd:7e:71:d6:a6:68:c7:
         11:09:f8:f6:fc:80:4a:0f:b8:b3:11:f5:06:aa:eb:49:ae:93:
         c6:5c:a0:42:c7:1c:f0:33:5e:82:f3:9b:39:8a:79:f6:c7:82:
         d1:56:92:d9:e9:85:ab:10:99:83:18:0a:04:dd:ad:ba:d8:75:
         6c:42:c2:cd:08:92:f2:e4:58:52:87:4b:0a:0f:01:f9:69:5f:
         71:01:79:c0:88:44:fd:20:db:5c:25:9d:9c:69:ff:28:48:25:
         bc:a5:b4:18:79:b8:6e:63:53:91:6f:d5:e8:1a:27:d9:b3:7b:
         d7:92:2d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7P49m9mkPPI+u4Rx031CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjJmNGIwMjI0NmU2MDRlMjM3ZjM3OTQ1YTM4MmJmYWRh
MTI3N2YwHhcNMjQwNTE3MTkwMDA2WhcNMjQwNTE4MTkwMDA2WjAzMTEwLwYDVQQD
EygyMzJmOTMxMDM2NTZkNzU3ZmY4YjBlYzMzYjI1N2Q1MmFiODczMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47HzaxZlaQJ2jLeGBZOsbvTwrDm0
CGferhAwdU7hILzLKVkFlnGFIH1oL5GFdWkHbW2KI8ecp+ItByvczNbKrvelHzbj
aaaUHIDNDOUOY3Q/h08lRe3G/TqnJMWywcLoM4Ld3kNNrUJegsIOdC+4vnSDivhy
pclXI5dyTczqvagYNT07puLhPTnPzRONjR0vzv2rTVo+1J7TnO0fWE/9jf7B36/R
O91IiR/5XL5hF78RaAuUwdd2zmWL/L/eFQBm4X1w1oc+FGK8gpixgePE7a2y4j3x
FZ0whuRdOonIvjfme3BxHXK16tumwQ6uCc532wjMvXswnYciNkj9sEOesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMvkxA2VtdX/4sOwzslfVKrhzM4MB8GA1UdIwQY
MBaAFJny9LAiRuYE4jfzeUWjgr+toSd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTct
NmY0ZDgxODk0MWE4LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTctNmY0ZDgxODk0MWE4
LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABz2mZnyV
DVkhKQKZ/L1YRhfrKMqO6tetMCfNywncSLidLLSRclgM9QP7Q/oI1s1lrQ/wIvGP
t8uDI0TgTJs1zxLfReLSZNuDDFB6ehwqylKK5sR7yS6qr0FAeNJYuFgJPeThzVaE
oreYBHA5PjbECydYrstZlAtS5wz6ulwj84MpwpWLzhlFmOfNfnHWpmjHEQn49vyA
Sg+4sxH1BqrrSa6TxlygQscc8DNegvObOYp59seC0VaS2emFqxCZgxgKBN2tuth1
bELCzQiS8uRYUodLCg8B+WlfcQF5wIhE/SDbXCWdnGn/KEglvKW0GHm4bmNTkW/V
6Bon2bN715ItVw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:09:20 2024 by rpki-client on console-ams.rpki-client.org