Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          VybS98qIEoSSYOGDVq5V3ejINlEj3vI1UckMQMKf1dQ=
Subject key identifier:   86:DA:C3:02:40:B0:9D:A3:11:A9:CE:8F:A0:52:33:1C:90:F0:1E:54
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       018F5B833929A0A03468A088B23E01975E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          0EA8
Signing time:             Thu 09 May 2024 04:01:17 +0000
Manifest this update:     Thu 09 May 2024 04:01:17 +0000
Manifest next update:     Fri 10 May 2024 04:01:17 +0000
Files and hashes:         1: TiLCFd1Yd1T8XvoRu2zvGFTgdtM.roa (hash: pR6X/4lKqbLD+0l8Wb9hqItHZd4n3YBYBbuizEoqpcY=)
                          2: gEu9xhTFANh5RWJwlIu_DMaL7dQ.roa (hash: AI+L2qUnXYZashwlD4StU24hup1SQ5CfdSJsgxfIgCg=)
                          3: iaXJ_u2DVKwl831-maG2U9ABlPE.roa (hash: eTQCLLEaLGv6ktHB6hlnJL6AA7MuxU5yu7dVNLjsXXA=)
                          4: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: gVmJNP11g69DPC9MkqbXZYcOhIWqNkxfv0Tn22XtAYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5b:83:39:29:a0:a0:34:68:a0:88:b2:3e:01:97:5e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: May  9 04:01:17 2024 GMT
            Not After : May 10 04:01:17 2024 GMT
        Subject: CN=86dac30240b09da311a9ce8fa052331c90f01e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:20:30:b0:5c:df:74:c7:c6:fe:22:b2:64:
                    a9:24:e0:89:10:a9:31:34:b5:d2:91:04:7e:62:ea:
                    a8:50:ce:cb:67:66:ba:44:fb:6c:0f:ad:40:e4:bf:
                    ed:db:a0:4f:02:e5:42:db:f8:c8:e3:78:b0:de:6c:
                    59:af:9f:82:ac:9a:50:8b:3b:55:00:47:aa:49:af:
                    72:28:19:67:1a:6c:53:2d:a8:9a:60:31:07:7a:1f:
                    e3:eb:ad:48:fb:5f:b1:5e:00:a1:f8:2e:d8:99:b9:
                    b3:ea:06:67:36:32:3b:b5:3a:02:d3:40:4a:cd:3b:
                    9d:c0:de:05:4c:d7:14:dc:58:61:ab:a2:6d:46:cd:
                    12:49:1c:4b:07:04:a1:7c:78:af:e6:b5:c9:40:b7:
                    4a:d3:1e:8a:16:eb:3a:df:48:b1:8e:9b:e6:10:fc:
                    e1:96:f8:21:a1:5d:a2:08:e9:cd:8a:0a:d6:52:7d:
                    ce:82:f5:54:48:1d:ed:b2:66:15:57:89:d1:cd:26:
                    29:18:da:d7:98:2d:38:19:df:eb:b4:6d:ca:a7:dc:
                    9e:e9:1c:87:4b:b7:dd:74:80:07:88:80:69:81:a2:
                    a5:11:fa:3f:b9:36:24:1e:e2:9f:6b:ec:12:b8:c4:
                    35:17:1d:7e:26:6a:37:34:72:da:05:a8:d5:7d:ac:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DA:C3:02:40:B0:9D:A3:11:A9:CE:8F:A0:52:33:1C:90:F0:1E:54
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:50:07:a3:b0:33:9b:21:49:fb:be:be:11:c9:97:73:9f:1c:
         ce:61:35:45:f8:df:7b:0e:73:36:b0:4b:38:ee:bc:b1:b2:0b:
         28:19:66:7b:c9:62:89:f7:e1:49:61:e2:d7:93:a5:bd:71:77:
         ec:9b:9b:35:86:95:e7:b1:db:83:f6:ca:57:fb:be:81:ff:88:
         66:a5:e3:45:a1:04:90:b3:34:7b:0c:d5:6a:20:cc:43:de:2e:
         72:7d:78:7d:23:aa:b5:5d:9f:3a:97:f1:e1:99:7b:a8:2b:0c:
         4e:67:7f:60:69:1c:60:80:a6:ee:7f:b4:60:3f:bd:8d:0d:50:
         cd:d3:07:c9:71:f2:2c:2a:c7:ae:f9:2d:4f:02:d5:70:f3:de:
         8f:e3:7d:ae:38:6a:b7:2a:05:29:7c:53:aa:14:8f:f2:16:7e:
         c6:9f:12:46:d5:bd:a2:75:88:65:aa:f3:1e:61:38:3e:cf:29:
         08:d6:46:13:08:50:7b:05:d2:d1:8d:c4:4c:2d:75:a9:27:a8:
         25:f0:65:8b:19:11:bf:0f:b1:97:3d:f6:c5:05:fc:99:e6:7a:
         f6:3d:b1:d9:ec:40:12:b0:fc:35:d4:61:d1:f6:31:d1:79:fc:
         9c:26:6f:8c:d0:55:08:9f:34:4a:55:da:17:17:3a:bd:eb:bc:
         50:4d:d9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9bgzkpoKA0aKCIsj4Bl15zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjQwNTA5MDQwMTE3WhcNMjQwNTEwMDQwMTE3WjAzMTEwLwYDVQQD
Eyg4NmRhYzMwMjQwYjA5ZGEzMTFhOWNlOGZhMDUyMzMxYzkwZjAxZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ogMLBc33THxv4ismSpJOCJEKkx
NLXSkQR+YuqoUM7LZ2a6RPtsD61A5L/t26BPAuVC2/jI43iw3mxZr5+CrJpQiztV
AEeqSa9yKBlnGmxTLaiaYDEHeh/j661I+1+xXgCh+C7Ymbmz6gZnNjI7tToC00BK
zTudwN4FTNcU3Fhhq6JtRs0SSRxLBwShfHiv5rXJQLdK0x6KFus630ixjpvmEPzh
lvghoV2iCOnNigrWUn3OgvVUSB3tsmYVV4nRzSYpGNrXmC04Gd/rtG3Kp9ye6RyH
S7fddIAHiIBpgaKlEfo/uTYkHuKfa+wSuMQ1Fx1+Jmo3NHLaBajVfaye0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbawwJAsJ2jEanOj6BSMxyQ8B5UMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFAHo7Az
myFJ+76+EcmXc58czmE1Rfjfew5zNrBLOO68sbILKBlme8liiffhSWHi15OlvXF3
7JubNYaV57Hbg/bKV/u+gf+IZqXjRaEEkLM0ewzVaiDMQ94ucn14fSOqtV2fOpfx
4Zl7qCsMTmd/YGkcYICm7n+0YD+9jQ1QzdMHyXHyLCrHrvktTwLVcPPej+N9rjhq
tyoFKXxTqhSP8hZ+xp8SRtW9onWIZarzHmE4Ps8pCNZGEwhQewXS0Y3ETC11qSeo
JfBlixkRvw+xlz32xQX8meZ69j2x2exAErD8NdRh0fYx0Xn8nCZvjNBVCJ80SlXa
Fxc6veu8UE3Zeg==
-----END CERTIFICATE-----
Generated at Thu May 9 05:55:30 2024 by rpki-client on console-ams.rpki-client.org