Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          rXfovw3EJtqPwpSUSo/h1TW4n3HU9pNjHTIanOYo41I=
Subject key identifier:   A8:A5:68:60:25:DB:25:4B:A6:47:E9:12:80:80:F8:16:B0:09:E0:E7
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       018F8823FFC7E14E6C46F04401906EA9FE79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          1186
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: 0IRXch5xrrymMlZRrLL9p8N1T8s.roa (hash: XwUArmz80Z2+gw5eaoBDvNOJyGQpQlf8BxfeRsllcgw=)
                          2: 0IeTzmJpmWKZc6xvxa4RlAmm0rI.roa (hash: exXD7RfrRpSX/Uur6huQ59W/6TI/6ineX+S84OjGr/k=)
                          3: IgzCQvY9BfdX_PNz7GdTvDXaAQM.roa (hash: QQ1tAF1gXPo11EWRq9Ik/x7mxCepKz+Xw2RUEEvVRDw=)
                          4: JxN8aFVykcA-39CGItS6YlnUJ5o.roa (hash: m2bFYD3CJSZqj8xisMrB71iYAunnSfsJx/hUNW1cUjY=)
                          5: YqbCfbjfBbQY7aiSewNCscdQdgY.roa (hash: Y+/2NfmHz0hITKTKf7ajHO278OF3qroahj/vgxfDBAw=)
                          6: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: fOoR2pBxuw190i0SIq8Tvsaor3DhxLgdncqicCX/x8E=)
                          7: x4PnlupFTtlXun3V7bBaO7KWIGM.roa (hash: pm0pdKJVpq+6BkbabE1HetYHidWqEqctUcgBNhXrjKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:ff:c7:e1:4e:6c:46:f0:44:01:90:6e:a9:fe:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=a8a5686025db254ba647e9128080f816b009e0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:a2:90:64:c3:32:90:c9:79:18:2b:06:6f:
                    44:53:20:c7:4a:3f:e6:e0:9e:71:06:6f:ea:8e:c8:
                    54:40:2d:e1:84:d4:23:1b:82:3d:a3:0c:16:d3:32:
                    07:25:8c:5a:e5:89:a0:2a:c0:5d:a6:77:24:66:c3:
                    ff:79:d8:53:11:0f:93:7e:b2:38:5a:98:13:fb:3e:
                    b5:b0:2c:56:c4:60:d7:5a:d1:20:72:c0:ad:ea:ee:
                    e3:e2:86:49:6a:30:5c:76:9a:f7:d6:f5:ec:8b:6b:
                    86:05:25:4d:7a:31:6c:cd:70:eb:d2:fc:9e:90:8e:
                    25:c5:76:9b:9c:46:36:35:95:e4:b1:ae:ba:b2:37:
                    da:d5:99:9a:e8:b0:9b:72:91:dd:6d:7d:65:10:ce:
                    ea:f4:e6:cf:de:e8:c0:27:68:64:7d:9e:c4:08:ad:
                    df:78:91:c9:6b:fa:7f:08:aa:07:4b:83:74:04:d3:
                    c2:ec:f0:9b:92:77:dc:59:7c:86:48:ea:3e:ba:8b:
                    58:da:28:e2:a0:40:f1:09:5f:e3:8a:49:18:94:34:
                    19:cb:8f:b1:1d:76:23:c3:41:9e:43:2b:24:a7:f4:
                    50:bf:9b:bf:ac:67:d7:28:8e:d7:32:08:9c:0d:a6:
                    9d:d9:bc:bf:a9:a6:2f:a3:44:30:40:a5:b7:a1:87:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A5:68:60:25:DB:25:4B:A6:47:E9:12:80:80:F8:16:B0:09:E0:E7
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ed:ca:0a:71:b3:25:d8:de:ea:85:e5:07:d7:57:27:3e:d1:
         7a:6a:3c:b4:f8:78:9c:52:a7:6f:a3:1b:cf:cc:95:88:5f:49:
         39:ac:58:e3:f0:72:9c:36:a5:09:48:41:6a:8f:8a:51:3f:d3:
         a4:b2:97:a4:0f:71:1b:d3:dd:ad:43:87:be:4e:b2:30:c3:6e:
         78:4b:8e:e4:ac:9e:40:b7:42:fd:f9:46:f0:f8:e2:f5:27:30:
         c6:af:6c:9d:15:6c:88:aa:91:19:99:d5:d2:91:e6:6b:8e:1a:
         d3:63:ea:b9:8e:3c:56:a7:0a:74:a1:b6:de:5a:91:57:f4:e5:
         cc:91:e8:89:be:72:68:17:6a:29:85:5f:04:4a:33:3e:83:d8:
         11:a8:64:9a:f3:51:63:6d:47:16:42:79:75:0d:e5:8a:a1:1d:
         43:b3:23:ec:c8:e8:8b:bc:71:7d:d8:85:3e:78:2c:d9:49:ec:
         de:7c:89:2b:af:55:ac:1b:f3:0c:b0:73:68:34:e2:67:ce:24:
         1a:c0:d1:3f:13:9b:80:f0:ee:35:bc:d1:ea:a1:20:c6:dd:b1:
         ef:65:6b:5b:db:5b:6f:ff:b4:40:ef:66:57:76:92:2f:a0:87:
         a1:fa:81:36:38:c6:a3:84:36:57:cf:f7:c7:c9:dd:61:13:6a:
         fd:23:5e:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II//H4U5sRvBEAZBuqf55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjQwNTE3MjAwMDExWhcNMjQwNTE4MjAwMDExWjAzMTEwLwYDVQQD
EyhhOGE1Njg2MDI1ZGIyNTRiYTY0N2U5MTI4MDgwZjgxNmIwMDllMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKKikGTDMpDJeRgrBm9EUyDHSj/m
4J5xBm/qjshUQC3hhNQjG4I9owwW0zIHJYxa5YmgKsBdpnckZsP/edhTEQ+TfrI4
WpgT+z61sCxWxGDXWtEgcsCt6u7j4oZJajBcdpr31vXsi2uGBSVNejFszXDr0vye
kI4lxXabnEY2NZXksa66sjfa1Zma6LCbcpHdbX1lEM7q9ObP3ujAJ2hkfZ7ECK3f
eJHJa/p/CKoHS4N0BNPC7PCbknfcWXyGSOo+uotY2ijioEDxCV/jikkYlDQZy4+x
HXYjw0GeQyskp/RQv5u/rGfXKI7XMgicDaad2by/qaYvo0QwQKW3oYezHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKilaGAl2yVLpkfpEoCA+BawCeDnMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqu3KCnGz
Jdje6oXlB9dXJz7Remo8tPh4nFKnb6Mbz8yViF9JOaxY4/BynDalCUhBao+KUT/T
pLKXpA9xG9PdrUOHvk6yMMNueEuO5KyeQLdC/flG8Pji9Scwxq9snRVsiKqRGZnV
0pHma44a02PquY48VqcKdKG23lqRV/TlzJHoib5yaBdqKYVfBEozPoPYEahkmvNR
Y21HFkJ5dQ3liqEdQ7Mj7Mjoi7xxfdiFPngs2Uns3nyJK69VrBvzDLBzaDTiZ84k
GsDRPxObgPDuNbzR6qEgxt2x72VrW9tbb/+0QO9mV3aSL6CHofqBNjjGo4Q2V8/3
x8ndYRNq/SNe/A==
-----END CERTIFICATE-----
Generated at Fri May 17 21:01:30 2024 by rpki-client on console-fra.rpki-client.org