Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.mft
File:                     g8sJFB2uuzIC2HmlYDHuL8MM0xI.mft (raw, json)
Hash identifier:          Vq4LKhE4seMkeuZtT9ZEDgpqDteFYOETxi0jnamvzVM=
Subject key identifier:   E9:66:2F:42:C4:B0:83:51:D6:4A:28:3B:FD:50:A6:C6:C5:4B:4D:78
Authority key identifier: 83:CB:09:14:1D:AE:BB:32:02:D8:79:A5:60:31:EE:2F:C3:0C:D3:12
Certificate issuer:       /CN=83cb09141daebb3202d879a56031ee2fc30cd312
Certificate serial:       018F88921EB5AE997939A53E47411710D0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:28 +0000
Manifest this update:     Fri 17 May 2024 22:00:28 +0000
Manifest next update:     Sat 18 May 2024 22:00:28 +0000
Files and hashes:         1: FsbyRZ_usL2ewynpXMPjwoJNTCQ.roa (hash: BytzhVoQQFno61aV8oa4az/qq6RH/xa/L37Nr8UaRjw=)
                          2: g8sJFB2uuzIC2HmlYDHuL8MM0xI.crl (hash: InreviXjQUqJ+NO+134tUYJKr8ZIpvSyuIiiwuGS05o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:1e:b5:ae:99:79:39:a5:3e:47:41:17:10:d0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83cb09141daebb3202d879a56031ee2fc30cd312
        Validity
            Not Before: May 17 22:00:28 2024 GMT
            Not After : May 18 22:00:28 2024 GMT
        Subject: CN=e9662f42c4b08351d64a283bfd50a6c6c54b4d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:d4:0d:54:06:16:0b:eb:af:a5:d7:82:68:
                    3e:5c:f7:2e:c9:d6:68:73:98:24:f7:66:8f:f8:64:
                    6a:4a:4d:e9:30:8b:b3:79:d5:a2:62:6c:98:76:88:
                    67:85:ec:a4:d4:cf:94:a7:72:4c:83:ee:60:55:5a:
                    dd:a0:03:b5:e9:f8:eb:f5:79:d9:21:4b:6d:3c:dc:
                    a5:b4:05:3b:c9:fb:06:98:dd:93:b0:91:0b:d5:e4:
                    72:dc:0c:f2:8b:3b:9f:c6:7a:62:df:1d:b7:50:3f:
                    18:9a:c4:f1:b1:02:6a:67:8c:5a:84:19:a0:ca:f4:
                    7c:71:12:e6:e9:4f:26:19:ae:0e:bd:de:54:a8:db:
                    8b:01:90:d0:f3:b5:31:63:87:10:2e:24:6b:5e:b1:
                    57:fd:d2:52:08:8e:16:e0:ce:a4:96:4e:4c:d3:b8:
                    4c:91:3b:12:63:8e:e5:4c:5e:9a:40:32:7e:2d:45:
                    8f:36:d8:df:b5:26:09:1e:06:f6:b7:c7:ec:b7:09:
                    f5:df:01:fd:bf:2e:2a:b3:a4:18:32:2f:62:a6:e7:
                    04:55:72:f0:3d:7f:85:3d:89:ec:af:4a:8f:1d:3e:
                    0c:d5:2e:51:11:5c:25:41:2b:fe:ea:0a:b6:fd:57:
                    f6:80:60:52:22:ed:e5:88:6f:7e:96:a6:fd:e2:b9:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:2F:42:C4:B0:83:51:D6:4A:28:3B:FD:50:A6:C6:C5:4B:4D:78
            X509v3 Authority Key Identifier:
                keyid:83:CB:09:14:1D:AE:BB:32:02:D8:79:A5:60:31:EE:2F:C3:0C:D3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:96:1b:93:ca:28:35:54:3e:ab:86:5f:36:2c:f9:1f:b8:
         b3:ae:17:79:b1:bb:9c:a1:6f:a8:d3:7b:e8:9d:b6:5d:0c:09:
         e5:dc:1d:1d:b4:22:2e:4d:2a:32:c0:41:bb:47:61:f6:84:d3:
         c7:0a:9a:33:09:8d:58:59:04:04:9e:86:d2:92:b5:7c:81:fd:
         5b:6c:cd:ef:42:1b:70:9e:a6:25:f0:23:e0:15:89:25:44:88:
         9f:57:b8:5e:76:9d:89:1e:24:63:6a:a8:7e:b1:05:24:76:88:
         ca:19:ca:a9:16:70:e8:06:71:6a:e7:d5:ba:c0:cc:ea:73:5d:
         67:56:d5:75:3a:db:68:58:0d:4c:5a:7c:01:dc:f0:9f:6e:25:
         df:97:15:27:45:0d:fe:9a:90:70:88:e6:a2:a0:2c:99:2d:31:
         32:b9:7c:68:fe:60:99:95:55:ca:74:99:4b:d6:04:d8:54:ea:
         93:2a:c8:a0:b9:7e:c4:b4:40:0f:7c:77:37:f8:38:10:a5:3d:
         3c:00:9f:3c:8a:a6:4e:f1:52:a5:bd:93:b3:01:9f:e3:1a:ba:
         be:3e:39:06:4a:ff:9a:32:3c:9c:dd:7b:09:f7:65:ea:b7:c1:
         32:35:01:76:27:40:c0:a5:48:49:2c:99:b6:eb:1c:c3:cd:fa:
         07:48:89:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikh61rpl5OaU+R0EXENDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzY2IwOTE0MWRhZWJiMzIwMmQ4NzlhNTYwMzFlZTJmYzMw
Y2QzMTIwHhcNMjQwNTE3MjIwMDI4WhcNMjQwNTE4MjIwMDI4WjAzMTEwLwYDVQQD
EyhlOTY2MmY0MmM0YjA4MzUxZDY0YTI4M2JmZDUwYTZjNmM1NGI0ZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7jUDVQGFgvrr6XXgmg+XPcuydZo
c5gk92aP+GRqSk3pMIuzedWiYmyYdohnheyk1M+Up3JMg+5gVVrdoAO16fjr9XnZ
IUttPNyltAU7yfsGmN2TsJEL1eRy3Azyizufxnpi3x23UD8YmsTxsQJqZ4xahBmg
yvR8cRLm6U8mGa4Ovd5UqNuLAZDQ87UxY4cQLiRrXrFX/dJSCI4W4M6klk5M07hM
kTsSY47lTF6aQDJ+LUWPNtjftSYJHgb2t8fstwn13wH9vy4qs6QYMi9ipucEVXLw
PX+FPYnsr0qPHT4M1S5REVwlQSv+6gq2/Vf2gGBSIu3liG9+lqb94rmQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlmL0LEsINR1kooO/1QpsbFS014MB8GA1UdIwQY
MBaAFIPLCRQdrrsyAth5pWAx7i/DDNMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhzSkZCMnV1eklDMkhtbFlESHVMOE1NMHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yNTYwMmYtNWZkOC00N2U4LThiNTAt
NDI3MTE2Yzg1ODhkLzEvZzhzSkZCMnV1eklDMkhtbFlESHVMOE1NMHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yNTYwMmYtNWZkOC00N2U4LThiNTAtNDI3MTE2Yzg1ODhk
LzEvZzhzSkZCMnV1eklDMkhtbFlESHVMOE1NMHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+GWG5PK
KDVUPquGXzYs+R+4s64XebG7nKFvqNN76J22XQwJ5dwdHbQiLk0qMsBBu0dh9oTT
xwqaMwmNWFkEBJ6G0pK1fIH9W2zN70IbcJ6mJfAj4BWJJUSIn1e4XnadiR4kY2qo
frEFJHaIyhnKqRZw6AZxaufVusDM6nNdZ1bVdTrbaFgNTFp8Adzwn24l35cVJ0UN
/pqQcIjmoqAsmS0xMrl8aP5gmZVVynSZS9YE2FTqkyrIoLl+xLRAD3x3N/g4EKU9
PACfPIqmTvFSpb2TswGf4xq6vj45Bkr/mjI8nN17Cfdl6rfBMjUBdidAwKVISSyZ
tuscw836B0iJkg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:54:30 2024 by rpki-client on console-fra.rpki-client.org