Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
File:                     CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json)
Hash identifier:          SJg13uTE+QwAbu4HRjHsJhLMhdM2Q4dMHOhBzqljQWo=
Subject key identifier:   97:54:F4:52:C8:0F:51:B2:39:8F:D5:E3:2E:E5:53:0C:2F:6D:E4:D2
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       018F4C108F1B0F0C58BACE6C7D57598AD8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
Manifest number:          115C
Signing time:             Mon 06 May 2024 04:01:44 +0000
Manifest this update:     Mon 06 May 2024 04:01:44 +0000
Manifest next update:     Tue 07 May 2024 04:01:44 +0000
Files and hashes:         1: 0IDMGijA2mHs25og4Qe3XRz2VWk.roa (hash: QnTNxThbbNMNeSHruvEOPciVREXFye3i5JvrmQWiCpI=)
                          2: 0rIrMXMh37xcUhUrrGQ91dOpdCU.roa (hash: +sKNNcmm4irnwP0lKbHwGcEqI5C7cv32RozayTClmj8=)
                          3: 6Y2p32yEpoumy9czEC_atV_jpwg.roa (hash: o13SOdb7f+dtM+e1ffaGMXvs8tR6Mkt+CUQwYfhSC+E=)
                          4: APf-C-jpbEODqhNVaDUbPbopHdU.roa (hash: Q3jHPVVPrkr2BsBIlj7CX900hVNTBVJ1EBCbK6ID+pE=)
                          5: CHO8vqYhRbnIgCpKvlhHJ3x3jE0.roa (hash: hCsjpnZAY6b4J5ENViGyb3IEvlRYLE3u94JILaVey44=)
                          6: CfPD2Ywe52SwwYIKigoFO4bkGqI.roa (hash: Lgv9brbbWb+EXuaGn/gL5ezQANJVuMnXmFWwfvw/Egs=)
                          7: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: caxnrZIw5RCqeeFlq11/HqgefgfTgWXPmbtL+FyFeRQ=)
                          8: U-oC6f9ImQxX8lCdCCMzcMkvZvw.roa (hash: PXs5eOl/iiqTDJulz/y7Eaf15yF3ArjOHEF5+Djqcqg=)
                          9: V3NmOzfzBSIWdnmQArs4ibM5_0s.roa (hash: dd0bVDwlNTy4OYSLDDUrO/C9cP4mUDCqni1H7migrY4=)
                          10: sRMhEW0dD1HTVmNX5BI1R-xwQZA.roa (hash: weA9cq7xtqRgVZKqI3pg16TzmzLLN4ubF0AtYTO4Fho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:8f:1b:0f:0c:58:ba:ce:6c:7d:57:59:8a:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: May  6 04:01:44 2024 GMT
            Not After : May  7 04:01:44 2024 GMT
        Subject: CN=9754f452c80f51b2398fd5e32ee5530c2f6de4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:8d:be:ba:a3:57:82:a7:34:e6:4a:9e:ec:
                    19:c9:c3:33:8b:d0:c7:3d:42:bd:10:72:74:9a:8f:
                    62:48:dd:75:f8:bb:29:dd:1e:e5:70:f8:7a:4a:76:
                    8c:4c:ca:b2:08:9a:a9:63:71:47:bb:c1:8e:53:58:
                    15:6a:9e:77:8b:18:f7:ee:7e:cf:99:23:2a:a3:59:
                    61:86:d3:c1:4a:7f:33:5b:e7:03:88:a8:07:98:9c:
                    f9:63:3c:1c:f6:42:15:6d:5d:4d:d5:bc:21:c6:94:
                    0a:4e:7c:5f:db:ea:79:a6:94:92:0c:f6:f6:e4:ea:
                    e0:1a:87:0a:02:ec:81:44:3e:cd:d8:54:05:0b:50:
                    84:f6:79:2e:e5:94:17:2f:3e:09:1f:70:ab:5e:00:
                    68:30:06:7f:96:f4:15:19:15:87:0a:6b:ff:72:29:
                    cb:38:77:f0:dc:3f:d1:9e:d8:5a:1b:41:cd:6f:6f:
                    a0:3b:45:6f:53:4c:25:4f:30:50:fb:84:8d:73:dc:
                    84:aa:e7:df:27:2b:62:ae:9e:14:f1:b2:8a:36:05:
                    a2:30:f1:64:3b:af:e5:d8:ac:52:77:3e:72:72:d8:
                    83:29:b3:b9:32:d3:65:0c:bf:d7:b7:f9:75:75:60:
                    35:65:8a:b4:02:59:ac:d0:4b:03:2e:ae:85:ea:02:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:54:F4:52:C8:0F:51:B2:39:8F:D5:E3:2E:E5:53:0C:2F:6D:E4:D2
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:60:2d:97:dd:4e:93:e4:d2:b7:0c:bf:db:68:70:dc:8a:
         2c:f1:1a:fa:1c:49:c6:9c:ce:e5:c8:ce:ae:2f:a0:6e:f3:77:
         48:1d:74:9e:01:42:23:c3:02:f4:c6:03:84:c5:e1:0b:7d:84:
         e4:4a:8a:24:7f:a4:03:f3:3d:e2:b0:fd:af:97:e2:2a:85:db:
         1c:06:c9:97:b3:f9:5b:8c:6a:d5:79:ea:e7:d4:6b:d3:6f:cc:
         ac:f9:3c:d0:d6:07:75:66:de:cb:44:91:09:76:ed:e1:0c:67:
         56:2a:29:dc:b4:ba:7c:9c:9c:74:da:68:ed:a9:1e:86:bd:9d:
         97:0b:42:5d:1c:57:1d:c7:ef:1f:ef:b4:cf:94:52:31:0b:3a:
         74:98:d3:84:83:52:f0:be:d5:b2:e0:c7:c4:c4:61:47:d1:78:
         a6:8d:4c:1e:74:9f:a7:8a:98:4e:11:59:f3:d0:c2:95:a3:23:
         b4:67:5c:8a:e6:d3:fc:37:ed:a2:4f:be:4c:01:a6:15:8b:50:
         b6:8e:21:f8:ec:49:e7:c0:29:88:9c:92:59:3c:f3:f4:84:15:
         56:64:2a:23:49:83:d2:b9:b7:2e:f6:0d:1b:37:09:b1:e4:59:
         0c:68:87:23:ac:07:73:18:7d:a5:0e:64:e9:1c:75:b5:f8:e7:
         f2:c0:fb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MEI8bDwxYus5sfVdZiti1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2
MDkwZjEwHhcNMjQwNTA2MDQwMTQ0WhcNMjQwNTA3MDQwMTQ0WjAzMTEwLwYDVQQD
Eyg5NzU0ZjQ1MmM4MGY1MWIyMzk4ZmQ1ZTMyZWU1NTMwYzJmNmRlNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwmNvrqjV4KnNOZKnuwZycMzi9DH
PUK9EHJ0mo9iSN11+Lsp3R7lcPh6SnaMTMqyCJqpY3FHu8GOU1gVap53ixj37n7P
mSMqo1lhhtPBSn8zW+cDiKgHmJz5Yzwc9kIVbV1N1bwhxpQKTnxf2+p5ppSSDPb2
5OrgGocKAuyBRD7N2FQFC1CE9nku5ZQXLz4JH3CrXgBoMAZ/lvQVGRWHCmv/cinL
OHfw3D/RnthaG0HNb2+gO0VvU0wlTzBQ+4SNc9yEquffJytirp4U8bKKNgWiMPFk
O6/l2KxSdz5yctiDKbO5MtNlDL/Xt/l1dWA1ZYq0Alms0EsDLq6F6gL3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdU9FLID1GyOY/V4y7lUwwvbeTSMB8GA1UdIwQY
MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt
ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2
LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5lgLZfd
TpPk0rcMv9tocNyKLPEa+hxJxpzO5cjOri+gbvN3SB10ngFCI8MC9MYDhMXhC32E
5EqKJH+kA/M94rD9r5fiKoXbHAbJl7P5W4xq1Xnq59Rr02/MrPk80NYHdWbey0SR
CXbt4QxnViop3LS6fJycdNpo7akehr2dlwtCXRxXHcfvH++0z5RSMQs6dJjThINS
8L7VsuDHxMRhR9F4po1MHnSfp4qYThFZ89DClaMjtGdciubT/Dftok++TAGmFYtQ
to4h+OxJ58ApiJySWTzz9IQVVmQqI0mD0rm3LvYNGzcJseRZDGiHI6wHcxh9pQ5k
6Rx1tfjn8sD7Pw==
-----END CERTIFICATE-----
Generated at Mon May 6 10:55:50 2024 by rpki-client on console-ams.rpki-client.org