Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
File:                     W8qreqGscUP4vII8c0sWc6CbuIA.mft (raw, json)
Hash identifier:          pekTp6qWDh2PT69J7CpnpYnxW/kQnYniqLrfiTE6MAQ=
Subject key identifier:   DF:40:0C:7B:F7:F1:7A:41:1C:C2:5E:9B:64:F4:82:D7:46:67:13:56
Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
Certificate issuer:       /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Certificate serial:       018F8635DE8353AD94CC61A8298F2FE646BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
Manifest number:          0EB2
Signing time:             Fri 17 May 2024 11:00:28 +0000
Manifest this update:     Fri 17 May 2024 11:00:28 +0000
Manifest next update:     Sat 18 May 2024 11:00:28 +0000
Files and hashes:         1: H2Gl6r-sx_kg92CD30cIG3tuPCg.roa (hash: UpJiZQRPZY2HIWJEh4M6veBeH/0oK+GHY3P3ZwMxnD0=)
                          2: W8qreqGscUP4vII8c0sWc6CbuIA.crl (hash: wM93/IZsclEQXvbdnMqVgLhEBXlydZZcSsHtYezeKAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:de:83:53:ad:94:cc:61:a8:29:8f:2f:e6:46:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
        Validity
            Not Before: May 17 11:00:28 2024 GMT
            Not After : May 18 11:00:28 2024 GMT
        Subject: CN=df400c7bf7f17a411cc25e9b64f482d746671356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:7f:07:9b:93:43:99:0a:e2:b5:8e:ca:40:
                    1f:da:fb:52:cd:1b:3e:75:62:f1:1e:f3:c9:62:66:
                    59:a2:c6:1e:60:09:45:dd:76:0a:80:15:1d:55:ec:
                    16:52:25:50:e7:97:ad:aa:41:e4:4d:57:7b:d5:53:
                    e5:e3:5d:d8:35:1e:41:cd:83:c3:fb:c5:20:d5:cf:
                    4a:bc:66:eb:3e:4e:bc:f8:c1:f6:31:cc:11:55:03:
                    ea:cc:87:12:d4:47:62:28:75:38:35:e6:6e:ff:6a:
                    8f:94:b0:c5:59:a7:c3:aa:97:60:65:ec:c8:16:bc:
                    73:36:0c:15:2e:5e:27:57:6e:5d:8f:c6:12:a5:47:
                    a7:2a:ff:ec:d8:cc:9d:70:3d:d0:22:6f:12:4b:82:
                    9a:4c:f3:89:bd:13:a1:6e:1c:41:ae:09:32:d0:e4:
                    35:20:36:9d:70:41:49:c7:53:f7:e1:83:38:ad:43:
                    c1:4c:61:c8:78:8f:8f:42:bb:29:4f:9c:94:88:57:
                    90:e5:48:84:11:d1:32:ad:c1:58:96:47:6c:31:fb:
                    44:9f:8c:1a:34:15:9b:fd:50:a4:5b:8d:c5:95:1b:
                    a6:1d:cf:d0:a7:98:fd:84:ef:86:fb:cb:39:a7:3c:
                    1a:cf:4d:7f:5a:19:b0:30:f9:17:ac:b5:65:62:fe:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:40:0C:7B:F7:F1:7A:41:1C:C2:5E:9B:64:F4:82:D7:46:67:13:56
            X509v3 Authority Key Identifier:
                keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:ec:3e:63:10:7d:55:b5:32:4b:12:2d:61:93:2d:5a:7d:
         62:cc:d5:d2:b2:0a:cd:02:9d:c3:e8:2d:5a:48:8b:f4:31:2a:
         7f:58:ee:dc:ae:93:cb:32:a9:eb:02:7d:ef:f6:71:70:b1:41:
         9c:99:79:81:c1:f5:8a:bb:47:92:7a:bb:03:ba:75:9f:78:3b:
         4f:7d:1b:52:f0:90:cd:f9:b9:06:e2:18:20:33:c0:b6:2d:eb:
         be:f5:87:d2:10:d6:9a:6a:9a:99:65:ae:f5:52:73:83:ae:96:
         3b:15:e9:8a:f4:59:19:91:f3:96:6a:24:b4:32:bd:de:1f:96:
         99:ba:38:38:6d:5c:10:20:9e:cf:ac:50:1f:7d:a9:5d:45:af:
         8e:e6:d9:21:de:d1:f6:ed:39:4c:01:f2:84:19:79:ed:77:65:
         ec:cc:f1:cc:0f:22:1d:99:26:37:e2:00:c5:3b:5b:fa:a9:6d:
         cd:bb:82:75:c8:a1:bc:0a:d4:6d:ec:0c:a5:8c:ac:3f:2a:53:
         0a:aa:70:c3:05:76:2b:b1:ab:7a:8b:23:f7:23:4c:e7:41:b4:
         6b:f2:fd:2e:02:f1:d5:81:0b:b8:af:02:7f:c2:ca:0d:8a:34:
         a6:44:dc:bf:2c:2e:2b:80:5f:e9:7e:c9:0d:28:58:b1:fd:84:
         b1:f0:d8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNd6DU62UzGGoKY8v5ka8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViY2FhYjdhYTFhYzcxNDNmOGJjODIzYzczNGIxNjczYTA5
YmI4ODAwHhcNMjQwNTE3MTEwMDI4WhcNMjQwNTE4MTEwMDI4WjAzMTEwLwYDVQQD
EyhkZjQwMGM3YmY3ZjE3YTQxMWNjMjVlOWI2NGY0ODJkNzQ2NjcxMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAZ/B5uTQ5kK4rWOykAf2vtSzRs+
dWLxHvPJYmZZosYeYAlF3XYKgBUdVewWUiVQ55etqkHkTVd71VPl413YNR5BzYPD
+8Ug1c9KvGbrPk68+MH2McwRVQPqzIcS1EdiKHU4NeZu/2qPlLDFWafDqpdgZezI
FrxzNgwVLl4nV25dj8YSpUenKv/s2MydcD3QIm8SS4KaTPOJvROhbhxBrgky0OQ1
IDadcEFJx1P34YM4rUPBTGHIeI+PQrspT5yUiFeQ5UiEEdEyrcFYlkdsMftEn4wa
NBWb/VCkW43FlRumHc/Qp5j9hO+G+8s5pzwaz01/WhmwMPkXrLVlYv5EwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9ADHv38XpBHMJem2T0gtdGZxNWMB8GA1UdIwQY
MBaAFFvKq3qhrHFD+LyCPHNLFnOgm7iAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWIt
M2QxZTBlZTRiNjUxLzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWItM2QxZTBlZTRiNjUx
LzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjzsPmMQ
fVW1MksSLWGTLVp9YszV0rIKzQKdw+gtWkiL9DEqf1ju3K6TyzKp6wJ97/ZxcLFB
nJl5gcH1irtHknq7A7p1n3g7T30bUvCQzfm5BuIYIDPAti3rvvWH0hDWmmqamWWu
9VJzg66WOxXpivRZGZHzlmoktDK93h+Wmbo4OG1cECCez6xQH32pXUWvjubZId7R
9u05TAHyhBl57Xdl7MzxzA8iHZkmN+IAxTtb+qltzbuCdcihvArUbewMpYysPypT
CqpwwwV2K7Greosj9yNM50G0a/L9LgLx1YELuK8Cf8LKDYo0pkTcvywuK4Bf6X7J
DShYsf2EsfDYsQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:37:28 2024 by rpki-client on console-fra.rpki-client.org