Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File:                     9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier:          sC2GPo6uKzG3Nx9LeWuO12pl226bfJ25naCPY7tl8Fg=
Subject key identifier:   8F:D9:E4:8D:AD:1F:C8:33:B2:8B:9A:B7:1C:FD:A3:13:CC:D9:C2:B1
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer:       /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial:       018F3B53D10216B269999237ED7C0763DB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number:          0DD9
Signing time:             Thu 02 May 2024 22:01:39 +0000
Manifest this update:     Thu 02 May 2024 22:01:39 +0000
Manifest next update:     Fri 03 May 2024 22:01:39 +0000
Files and hashes:         1: 1mIx-hqokud1VyuWUH1QgNSJmqU.roa (hash: Migoks/HgrVeST5e1+hZIHYtlgkHmmGB1vUDKZMj7fk=)
                          2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: KQuuQHsdQmarr+H3Ynf++Yy8oVWBpAmqX3yv2Yy88qw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:d1:02:16:b2:69:99:92:37:ed:7c:07:63:db:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
        Validity
            Not Before: May  2 22:01:39 2024 GMT
            Not After : May  3 22:01:39 2024 GMT
        Subject: CN=8fd9e48dad1fc833b28b9ab71cfda313ccd9c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:dc:13:16:27:c2:e9:e4:5b:cd:d5:03:63:
                    20:c5:07:a5:45:f1:e4:62:23:de:11:3d:cd:6a:fc:
                    21:ee:29:e5:fa:c6:b9:75:8e:ec:3e:53:ff:83:53:
                    3b:ad:c9:69:16:da:c8:c1:41:23:8d:87:39:a3:17:
                    4f:d2:20:aa:29:50:0d:a7:c0:c4:b6:63:42:81:e3:
                    fb:98:9b:c6:d0:ae:3f:c5:94:ea:c0:f4:5f:0e:9e:
                    be:0d:ff:7c:f0:cc:9a:96:cd:1c:37:e8:9a:78:43:
                    0e:20:8a:63:5c:5e:3c:27:8f:1a:af:d6:d2:c9:7e:
                    6f:42:3c:ef:d6:bf:b3:7d:61:13:8f:10:8e:cd:57:
                    3f:57:54:f5:a9:9a:eb:29:a9:4b:43:21:b5:2c:b2:
                    2e:42:29:eb:3d:75:13:bc:1f:cd:19:f4:74:f1:19:
                    ac:ad:55:9f:8b:22:3e:8b:1a:09:ca:c9:cd:c6:f9:
                    b8:be:ac:42:27:58:62:96:a0:7b:d9:49:dc:cd:8e:
                    06:7c:12:94:de:b4:19:ee:37:0b:39:ea:86:35:dc:
                    a9:2b:c2:27:56:2a:d2:d5:e4:09:fb:03:51:f9:7d:
                    32:c8:a2:45:b6:a1:6d:fe:70:6f:18:d5:e5:85:20:
                    7b:94:56:a9:3f:4f:64:45:d7:a0:fa:b2:07:95:f3:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:E4:8D:AD:1F:C8:33:B2:8B:9A:B7:1C:FD:A3:13:CC:D9:C2:B1
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:2f:f0:b5:57:af:39:32:ef:ea:25:52:17:f5:b1:be:5a:
         3b:9a:b6:90:16:65:30:38:31:ae:a0:d0:90:a8:a2:f1:d2:7f:
         d6:36:05:9e:7a:29:dd:bb:d9:53:60:03:75:31:ca:87:bf:b1:
         bf:cb:f7:cf:dd:30:a7:f1:3e:63:85:8f:5c:ed:c6:2e:99:0c:
         91:bb:da:63:14:45:65:a2:9a:40:27:55:9a:c7:db:fc:4d:c1:
         2c:f1:3b:a0:cb:f9:53:5d:47:45:f7:8a:7a:b3:29:d2:46:48:
         8a:af:ae:73:1c:39:d6:6e:5a:94:14:00:43:e5:dc:f2:bc:3f:
         83:9b:00:2f:88:8b:c9:c2:a1:4b:86:d3:da:aa:0f:20:42:30:
         2a:f2:47:32:93:0e:3c:42:b2:32:88:f4:d8:96:2c:1f:a4:d2:
         62:e4:bf:cd:86:f4:92:da:37:f8:ed:44:87:19:95:de:89:0e:
         78:77:a4:f2:23:c9:f2:6e:3d:a8:32:69:80:77:0c:24:bd:2b:
         a3:07:e0:a0:d1:db:25:a8:40:90:2d:6e:30:fa:e7:07:2e:ab:
         c9:bc:f7:1c:e6:48:d6:d2:7d:d8:c4:fc:64:39:97:ea:cc:48:
         01:3e:93:9f:04:b6:27:57:f5:d0:90:b6:b6:2c:04:14:e9:15:
         6c:96:ac:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87U9ECFrJpmZI37XwHY9s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjQwNTAyMjIwMTM5WhcNMjQwNTAzMjIwMTM5WjAzMTEwLwYDVQQD
Eyg4ZmQ5ZTQ4ZGFkMWZjODMzYjI4YjlhYjcxY2ZkYTMxM2NjZDljMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozLcExYnwunkW83VA2MgxQelRfHk
YiPeET3Navwh7inl+sa5dY7sPlP/g1M7rclpFtrIwUEjjYc5oxdP0iCqKVANp8DE
tmNCgeP7mJvG0K4/xZTqwPRfDp6+Df988Myals0cN+iaeEMOIIpjXF48J48ar9bS
yX5vQjzv1r+zfWETjxCOzVc/V1T1qZrrKalLQyG1LLIuQinrPXUTvB/NGfR08Rms
rVWfiyI+ixoJysnNxvm4vqxCJ1hilqB72UnczY4GfBKU3rQZ7jcLOeqGNdypK8In
VirS1eQJ+wNR+X0yyKJFtqFt/nBvGNXlhSB7lFapP09kRdeg+rIHlfPaZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/Z5I2tH8gzsouatxz9oxPM2cKxMB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFIv8LVX
rzky7+olUhf1sb5aO5q2kBZlMDgxrqDQkKii8dJ/1jYFnnop3bvZU2ADdTHKh7+x
v8v3z90wp/E+Y4WPXO3GLpkMkbvaYxRFZaKaQCdVmsfb/E3BLPE7oMv5U11HRfeK
erMp0kZIiq+ucxw51m5alBQAQ+Xc8rw/g5sAL4iLycKhS4bT2qoPIEIwKvJHMpMO
PEKyMoj02JYsH6TSYuS/zYb0kto3+O1EhxmV3okOeHek8iPJ8m49qDJpgHcMJL0r
owfgoNHbJahAkC1uMPrnBy6rybz3HOZI1tJ92MT8ZDmX6sxIAT6TnwS2J1f10JC2
tiwEFOkVbJasJA==
-----END CERTIFICATE-----
Generated at Fri May 3 01:24:42 2024 by rpki-client on console-ams.rpki-client.org