Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File:                     jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier:          J8hWxRSBf8e8/3GF6FtAvz/swzEDUTRNKP6OCo5F33s=
Subject key identifier:   2B:DB:1F:10:DD:9B:FB:D0:44:C8:EA:0A:5C:B9:B1:6E:0D:F0:DD:4C
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer:       /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial:       018F8749F6C9D27C913E20B53F4A227ED4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number:          1043
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: Ts3wtr-rCcy6IqyPjdSp-BU3Nh0.roa (hash: gPpiPZlppP/3rZKM5lVDFw45q0yIQyKVEUTdxCH5U6A=)
                          2: eT2dkT46FAQRUzoD-jRH7HUDmOg.roa (hash: kbJKb5T6mad55lxQS3mXagHyDhJ9IMPaoeWaZUwCokc=)
                          3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: Tcfdjfm3z5uROjp5J2hEC5mK2WOzSx/rzrnzxg6JlZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f6:c9:d2:7c:91:3e:20:b5:3f:4a:22:7e:d4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=2bdb1f10dd9bfbd044c8ea0a5cb9b16e0df0dd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:8a:fa:fb:8d:a3:ba:d0:e8:12:25:4f:5e:
                    81:e1:a5:0f:15:2f:ce:d3:28:8e:14:f0:f3:2e:95:
                    34:13:83:99:37:29:54:3f:bf:3b:17:a5:56:a0:df:
                    ba:68:90:f4:d9:23:de:bc:14:ba:51:8e:cf:08:24:
                    c4:ab:d7:30:93:41:0e:aa:46:da:47:17:0c:4c:bd:
                    c6:34:fb:16:1a:a9:fa:b5:67:3f:7b:61:8c:d4:28:
                    90:da:19:23:9a:ee:46:b6:11:1d:c3:9e:c5:90:a9:
                    1e:20:80:9c:72:07:ca:6b:aa:31:3a:70:e1:4f:14:
                    d8:04:bb:06:c3:9f:a2:58:0c:b1:99:91:92:0d:e9:
                    8d:96:6a:d0:14:3b:3e:7e:0e:09:fb:70:89:4f:a3:
                    62:4c:a5:d0:bc:fa:fb:50:76:63:e3:dd:94:04:63:
                    ae:ed:58:db:74:68:54:e9:c8:a0:8c:fa:6b:38:3a:
                    f8:5b:77:e5:de:e3:12:57:20:b7:e9:2b:a3:05:76:
                    e7:e0:ae:9e:95:6d:ee:6b:80:f0:7f:2a:0e:ad:5b:
                    79:25:3f:87:0d:ec:49:fa:d6:fd:4b:ab:6a:65:6b:
                    66:fd:87:e5:eb:5b:49:44:58:0e:9b:f0:96:1a:a0:
                    ee:6b:da:e7:94:de:7c:66:b6:f6:33:fc:3f:18:55:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:1F:10:DD:9B:FB:D0:44:C8:EA:0A:5C:B9:B1:6E:0D:F0:DD:4C
            X509v3 Authority Key Identifier:
                keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:dc:77:7c:92:88:dc:d5:33:3a:4b:af:6c:79:ad:8a:ed:04:
         df:b4:bc:7d:2f:b1:8f:db:e0:6a:16:5c:2b:5c:e8:13:73:0e:
         ae:25:2c:66:ac:2f:a0:e8:3e:3a:c2:95:a2:22:ed:a5:84:a4:
         28:3f:0e:cc:bf:c2:a4:74:c0:2d:f3:4f:ac:78:8d:ce:2b:18:
         19:3f:92:db:84:41:7b:a4:7a:3f:17:33:57:5b:61:e9:48:f7:
         27:40:70:94:eb:44:6d:01:4c:42:fa:2d:96:fe:50:6e:1c:72:
         2b:d4:6d:b2:81:99:c1:da:34:47:4d:5f:de:f3:4a:76:dc:7a:
         75:55:34:ac:fb:f6:87:9b:25:04:63:13:ba:2d:0d:c0:3b:76:
         24:e1:75:38:19:0d:d2:6a:ba:24:a6:9c:ff:05:fd:a7:10:5d:
         33:f5:2e:92:f7:ac:f8:13:82:47:be:3c:45:04:9c:ab:e1:bf:
         c6:26:4d:1a:49:8f:62:db:58:23:4c:93:2e:c4:95:b7:6b:22:
         91:4f:dd:2b:da:3b:d5:b7:01:74:32:48:d1:1d:e4:bd:ef:4e:
         6d:58:1f:70:85:0c:1e:d8:48:91:3d:5f:a9:06:a4:cd:a6:cd:
         d7:dd:cb:5a:d1:e8:94:d2:20:34:a2:4a:87:63:0e:ea:43:3e:
         9c:ad:af:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSfbJ0nyRPiC1P0oiftSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzJhNmU1N2VjODFjYzVjYjQzYmI1MDM3NDliMzYwZjJi
MDVjM2IwHhcNMjQwNTE3MTYwMjAyWhcNMjQwNTE4MTYwMjAyWjAzMTEwLwYDVQQD
EygyYmRiMWYxMGRkOWJmYmQwNDRjOGVhMGE1Y2I5YjE2ZTBkZjBkZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx6K+vuNo7rQ6BIlT16B4aUPFS/O
0yiOFPDzLpU0E4OZNylUP787F6VWoN+6aJD02SPevBS6UY7PCCTEq9cwk0EOqkba
RxcMTL3GNPsWGqn6tWc/e2GM1CiQ2hkjmu5GthEdw57FkKkeIICccgfKa6oxOnDh
TxTYBLsGw5+iWAyxmZGSDemNlmrQFDs+fg4J+3CJT6NiTKXQvPr7UHZj492UBGOu
7VjbdGhU6cigjPprODr4W3fl3uMSVyC36SujBXbn4K6elW3ua4DwfyoOrVt5JT+H
DexJ+tb9S6tqZWtm/Yfl61tJRFgOm/CWGqDua9rnlN58Zrb2M/w/GFVceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvbHxDdm/vQRMjqCly5sW4N8N1MMB8GA1UdIwQY
MBaAFIwypuV+yBzFy0O7UDdJs2DysFw7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2Et
Yzc0M2Q3YzBiYjIyLzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2EtYzc0M2Q3YzBiYjIy
LzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydx3fJKI
3NUzOkuvbHmtiu0E37S8fS+xj9vgahZcK1zoE3MOriUsZqwvoOg+OsKVoiLtpYSk
KD8OzL/CpHTALfNPrHiNzisYGT+S24RBe6R6PxczV1th6Uj3J0BwlOtEbQFMQvot
lv5QbhxyK9RtsoGZwdo0R01f3vNKdtx6dVU0rPv2h5slBGMTui0NwDt2JOF1OBkN
0mq6JKac/wX9pxBdM/Uukves+BOCR748RQScq+G/xiZNGkmPYttYI0yTLsSVt2si
kU/dK9o71bcBdDJI0R3kve9ObVgfcIUMHthIkT1fqQakzabN193LWtHolNIgNKJK
h2MO6kM+nK2vGw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:19:11 2024 by rpki-client on console-ams.rpki-client.org