Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File:                     0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier:          MFNrZbTSz/Z+zOUcfzo51JpUdm3IAEnaoOXX4Gctx6I=
Subject key identifier:   33:41:B9:E7:89:31:18:78:2B:4C:43:A7:9F:62:28:34:0B:09:A2:21
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer:       /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial:       018F46B3186D288205678DCAFB5AD57F3AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number:          0762
Signing time:             Sun 05 May 2024 03:01:33 +0000
Manifest this update:     Sun 05 May 2024 03:01:33 +0000
Manifest next update:     Mon 06 May 2024 03:01:33 +0000
Files and hashes:         1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: qMWlAoQKjcJ/Qe1pw7sRp4uuItVGArrA08Dk9WLGzP8=)
                          2: PPGaCqZQ_QQkLSvRRFbRHsQw30A.roa (hash: ceGf1oE6s24qvqlD8ZtyRWnXzCn1240WNvc6YnJS8YY=)
                          3: _i5G6N8rn3TTCFbvLl3j5u8PbaE.roa (hash: z/TMijo2O3ngc3QzuqgIG/C26GaTBVavJmQpfTEfYDo=)
                          4: iiHavQKXUy6JmviBClir8d1T0QU.roa (hash: lbWkG2Wmme7UktR8dD01ehE8hfeUSbexySVHZ3Oym3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b3:18:6d:28:82:05:67:8d:ca:fb:5a:d5:7f:3a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
        Validity
            Not Before: May  5 03:01:33 2024 GMT
            Not After : May  6 03:01:33 2024 GMT
        Subject: CN=3341b9e7893118782b4c43a79f6228340b09a221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:64:97:8a:76:ba:df:65:af:ae:7a:92:fa:
                    65:31:52:2c:11:0b:fc:f3:c1:9a:43:8e:89:65:fb:
                    22:fe:eb:8b:75:4f:8b:f9:2a:8d:55:c9:a3:39:d2:
                    00:b3:7b:44:95:8a:01:09:18:56:a8:05:c2:fa:2e:
                    37:46:93:d7:13:5f:c0:71:39:21:c2:64:53:1b:87:
                    88:14:b8:21:07:9e:d1:85:9f:4e:72:31:c9:0c:08:
                    e6:e7:55:8a:a8:43:73:b2:f9:0a:88:88:66:3d:c4:
                    27:85:0a:c0:6e:d6:27:84:28:28:a8:56:1f:d9:74:
                    5b:3b:49:0c:a6:c5:1b:8d:f1:2a:c4:17:25:a9:6f:
                    0f:02:86:3d:a9:77:ca:35:75:1e:be:7f:6c:fb:12:
                    a0:18:ae:da:4b:51:ab:f3:0c:d2:14:bb:7e:50:f4:
                    32:9b:86:98:79:19:4d:46:16:40:ee:15:e5:3a:23:
                    5c:99:fa:67:31:86:e2:10:fb:84:05:6d:50:52:97:
                    b7:78:69:e0:7e:4f:2b:c3:10:0f:81:71:c9:bf:49:
                    62:0e:80:52:dd:8f:94:65:88:89:c0:a3:f9:ba:52:
                    82:ba:71:44:37:6f:f4:62:27:eb:dd:2b:81:23:af:
                    20:7c:66:63:af:92:a1:0b:1c:4f:f4:e8:d0:bd:22:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:B9:E7:89:31:18:78:2B:4C:43:A7:9F:62:28:34:0B:09:A2:21
            X509v3 Authority Key Identifier:
                keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:f8:66:96:72:28:99:05:05:c1:e1:d3:a5:39:aa:97:ef:
         50:e7:1b:b6:f0:a1:ff:7e:2a:7f:b8:59:28:0c:54:ef:e3:12:
         4f:3a:c8:6e:d3:14:26:6c:10:60:cb:af:c2:c5:e3:8e:33:45:
         9f:ed:74:2b:6b:75:9c:bc:24:7e:ce:f9:40:3d:12:38:a2:76:
         de:33:06:b1:3b:7f:ed:a3:73:41:38:98:90:e7:85:ab:56:10:
         7f:e1:1d:74:01:b3:f9:ec:c7:2e:75:0b:7e:ca:40:b5:ce:0a:
         00:bc:52:a6:9b:85:cd:8f:52:61:4c:6b:2e:ec:6a:9d:8c:c7:
         47:4d:e0:bb:95:c0:78:48:75:cf:9e:3c:5d:26:94:af:90:58:
         ba:00:f4:ea:21:98:8d:54:53:86:54:4c:96:eb:b5:91:7d:b4:
         e2:5c:cd:27:2e:17:e5:5c:39:d4:2a:78:a4:e8:1b:78:3a:43:
         3a:ac:7e:b4:02:43:04:3f:e4:bc:04:56:02:ae:55:95:ef:96:
         d7:cc:b1:00:70:af:cc:ec:05:f1:c0:b9:79:03:3b:a5:2c:9c:
         30:79:5f:9f:97:af:c1:13:08:80:07:c7:23:98:53:55:96:fc:
         70:50:61:33:10:6e:1c:01:3c:f1:31:ed:49:db:22:e5:76:ae:
         73:66:5e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GsxhtKIIFZ43K+1rVfzrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZmQzNDM2ZDdhMTlhNzM0M2ZhODAwZDg3YTAxYWYxODNk
YTMxOGIwHhcNMjQwNTA1MDMwMTMzWhcNMjQwNTA2MDMwMTMzWjAzMTEwLwYDVQQD
EygzMzQxYjllNzg5MzExODc4MmI0YzQzYTc5ZjYyMjgzNDBiMDlhMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8dkl4p2ut9lr656kvplMVIsEQv8
88GaQ46JZfsi/uuLdU+L+SqNVcmjOdIAs3tElYoBCRhWqAXC+i43RpPXE1/AcTkh
wmRTG4eIFLghB57RhZ9OcjHJDAjm51WKqENzsvkKiIhmPcQnhQrAbtYnhCgoqFYf
2XRbO0kMpsUbjfEqxBclqW8PAoY9qXfKNXUevn9s+xKgGK7aS1Gr8wzSFLt+UPQy
m4aYeRlNRhZA7hXlOiNcmfpnMYbiEPuEBW1QUpe3eGngfk8rwxAPgXHJv0liDoBS
3Y+UZYiJwKP5ulKCunFEN2/0Yifr3SuBI68gfGZjr5KhCxxP9OjQvSKcHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNBueeJMRh4K0xDp59iKDQLCaIhMB8GA1UdIwQY
MBaAFNH9NDbXoZpzQ/qADYegGvGD2jGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMt
MzlhNjZjYmUxZTRkLzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMtMzlhNjZjYmUxZTRk
LzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSb4ZpZy
KJkFBcHh06U5qpfvUOcbtvCh/34qf7hZKAxU7+MSTzrIbtMUJmwQYMuvwsXjjjNF
n+10K2t1nLwkfs75QD0SOKJ23jMGsTt/7aNzQTiYkOeFq1YQf+EddAGz+ezHLnUL
fspAtc4KALxSppuFzY9SYUxrLuxqnYzHR03gu5XAeEh1z548XSaUr5BYugD06iGY
jVRThlRMluu1kX204lzNJy4X5Vw51Cp4pOgbeDpDOqx+tAJDBD/kvARWAq5Vle+W
18yxAHCvzOwF8cC5eQM7pSycMHlfn5evwRMIgAfHI5hTVZb8cFBhMxBuHAE88THt
Sdsi5Xauc2ZeEg==
-----END CERTIFICATE-----
Generated at Sun May 5 03:51:47 2024 by rpki-client on console-fra.rpki-client.org