Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
File:                     bss_s76ozI4249p9nEcEm_xv-xQ.mft (raw, json)
Hash identifier:          QOcFpLRVX1jwALyrLPn3vxi/1htTah0T2Kx+fgO6+jA=
Subject key identifier:   61:B3:98:AE:93:D8:B7:51:D2:8E:B6:B9:A0:2E:EB:8D:C4:E7:BE:91
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Certificate issuer:       /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial:       018F8749C819710BAA9B91B8DECEDCDBCFCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:01:50 +0000
Manifest this update:     Fri 17 May 2024 16:01:50 +0000
Manifest next update:     Sat 18 May 2024 16:01:50 +0000
Files and hashes:         1: 1ffGi8YZYZjM0LTAmQ0mF7JOG80.roa (hash: Gj9aNpA2NGkLcQmQXjf4RVLt8+Z2sZgCcTlVw3h89uA=)
                          2: 4u6__k1J6QjYFgg9L-jMwtPUcM4.roa (hash: FU/ttt+OsafLEcAmmHsjKyW4pS36bgL1aiYUASSTVB8=)
                          3: 6bBGc2KjC72Elt_3014E5z9r2K0.roa (hash: /C/JmZJgKUNjt8zv9Dhxvt9cKz1TGxrw4XPz6dly2DA=)
                          4: Jets4GFTC9FOTixDIMjE7i4eK30.roa (hash: ndu0crd+O0Tz75oYp9h+E0BHRU0q39rMuCU6Ymz4tOE=)
                          5: bss_s76ozI4249p9nEcEm_xv-xQ.crl (hash: i0DA4NWRkaOWDc4qB2y70oJXIPfw4rSItCmVbJraxUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c8:19:71:0b:aa:9b:91:b8:de:ce:dc:db:cf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
        Validity
            Not Before: May 17 16:01:50 2024 GMT
            Not After : May 18 16:01:50 2024 GMT
        Subject: CN=61b398ae93d8b751d28eb6b9a02eeb8dc4e7be91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:07:15:36:f5:05:3f:87:5e:74:45:1d:c0:
                    7b:e8:5f:0a:80:5d:24:84:e0:f8:68:9a:67:c7:03:
                    82:9a:ca:a1:c3:7b:93:6f:cc:4e:8c:1f:0f:75:c0:
                    38:88:b7:10:f2:bd:61:fe:ea:df:44:80:72:a7:fc:
                    7b:f0:dd:71:d2:33:23:b8:3a:80:1a:19:f7:74:1a:
                    06:0d:d9:75:0b:c0:af:32:89:47:4c:c6:19:38:47:
                    1d:73:93:54:6f:19:01:e4:7f:9c:8d:74:86:06:3f:
                    87:e3:ad:5c:02:0e:23:ba:11:d4:33:a0:97:15:ba:
                    1a:24:30:ad:f1:23:b4:3a:78:79:99:87:83:87:36:
                    bb:3a:de:46:d2:e0:d0:a8:0a:25:d7:78:e4:39:c0:
                    30:df:8b:58:25:90:f4:96:ae:e5:82:03:3b:24:8a:
                    56:08:f8:9c:6f:eb:3a:73:e8:8f:c8:cc:77:71:d7:
                    99:57:46:b1:73:15:a6:90:8d:a4:77:5a:30:3c:8d:
                    80:17:c5:2c:68:2a:93:e9:ea:bd:af:12:05:1c:f2:
                    59:1b:43:e3:9d:17:97:0d:13:af:bf:08:74:3a:2b:
                    38:fb:12:4f:76:4b:d0:7f:b5:64:4e:50:fe:82:67:
                    b4:4b:0a:46:e3:08:66:65:21:38:1f:26:3d:d5:c3:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:98:AE:93:D8:B7:51:D2:8E:B6:B9:A0:2E:EB:8D:C4:E7:BE:91
            X509v3 Authority Key Identifier:
                keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:06:fa:23:44:35:9e:3d:dc:68:08:a9:a4:91:05:b0:ef:
         92:4a:65:ac:27:a8:84:5f:34:7f:47:17:4d:11:97:dd:d7:ea:
         65:17:b0:b2:27:fc:a5:0c:ca:14:db:34:a2:0a:c0:ea:ee:25:
         36:50:65:1b:2a:54:40:71:01:5d:8d:4a:b7:77:f2:c7:ec:8b:
         97:21:99:6c:81:18:f0:da:55:fc:2e:b8:49:2e:f5:5c:de:64:
         5e:d1:10:8c:0b:5f:95:ff:4d:cf:23:be:1e:0c:17:d2:21:51:
         f8:cd:02:20:e0:0d:1c:f1:db:1d:5a:cc:d2:ec:aa:64:78:a2:
         1c:32:1e:48:2f:4f:37:7b:82:52:d2:cf:c0:25:91:1e:54:17:
         08:8e:77:62:e1:8c:59:c1:9f:74:bc:51:5d:2d:6d:b4:7a:53:
         81:dd:ce:07:12:e7:38:48:3e:31:25:1a:3f:f8:9c:ab:cb:29:
         ee:90:64:62:9a:03:6b:f8:9b:6f:03:c7:5b:eb:55:f8:1b:16:
         fe:56:08:15:99:eb:ca:fc:37:68:33:a8:69:ec:1a:69:28:d5:
         ec:f3:b3:5c:c4:c9:31:7b:6c:79:64:92:59:17:44:7c:2b:34:
         24:2f:95:b4:b9:05:b9:cc:f2:58:3d:da:ca:c2:1d:f5:26:2a:
         07:f9:c0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HScgZcQuqm5G43s7c28/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlY2IzZmIzYmVhOGNjOGUzNmUzZGE3ZDljNDcwNDliZmM2
ZmZiMTQwHhcNMjQwNTE3MTYwMTUwWhcNMjQwNTE4MTYwMTUwWjAzMTEwLwYDVQQD
Eyg2MWIzOThhZTkzZDhiNzUxZDI4ZWI2YjlhMDJlZWI4ZGM0ZTdiZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+YHFTb1BT+HXnRFHcB76F8KgF0k
hOD4aJpnxwOCmsqhw3uTb8xOjB8PdcA4iLcQ8r1h/urfRIByp/x78N1x0jMjuDqA
Ghn3dBoGDdl1C8CvMolHTMYZOEcdc5NUbxkB5H+cjXSGBj+H461cAg4juhHUM6CX
FboaJDCt8SO0Onh5mYeDhza7Ot5G0uDQqAol13jkOcAw34tYJZD0lq7lggM7JIpW
CPicb+s6c+iPyMx3cdeZV0axcxWmkI2kd1owPI2AF8UsaCqT6eq9rxIFHPJZG0Pj
nReXDROvvwh0Ois4+xJPdkvQf7VkTlD+gme0SwpG4whmZSE4HyY91cPwAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGzmK6T2LdR0o62uaAu643E576RMB8GA1UdIwQY
MBaAFG7LP7O+qMyONuPafZxHBJv8b/sUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUt
YTM3MGY0YmEyZDJiLzEvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUtYTM3MGY0YmEyZDJi
LzEvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtcG+iNE
NZ493GgIqaSRBbDvkkplrCeohF80f0cXTRGX3dfqZRewsif8pQzKFNs0ogrA6u4l
NlBlGypUQHEBXY1Kt3fyx+yLlyGZbIEY8NpV/C64SS71XN5kXtEQjAtflf9NzyO+
HgwX0iFR+M0CIOANHPHbHVrM0uyqZHiiHDIeSC9PN3uCUtLPwCWRHlQXCI53YuGM
WcGfdLxRXS1ttHpTgd3OBxLnOEg+MSUaP/icq8sp7pBkYpoDa/ibbwPHW+tV+BsW
/lYIFZnryvw3aDOoaewaaSjV7POzXMTJMXtseWSSWRdEfCs0JC+VtLkFuczyWD3a
ysId9SYqB/nABQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:09 2024 by rpki-client on console-fra.rpki-client.org