Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft
File:                     tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft (raw, json)
Hash identifier:          P+b7cNpTFFwgU8U8Sc512NVWFOAz6pEmk+0juLrcADE=
Subject key identifier:   50:2E:BE:6F:AD:86:D2:54:D5:88:1E:09:84:27:2F:0A:1E:84:95:8E
Authority key identifier: B5:38:C7:29:5B:CD:47:4B:82:9E:4E:47:EE:BC:B0:E0:93:CE:52:3A
Certificate issuer:       /CN=b538c7295bcd474b829e4e47eebcb0e093ce523a
Certificate serial:       018F8749E19377610A9269DF021A96B7F928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTjHKVvNR0uCnk5H7ryw4JPOUjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft
Manifest number:          08B1
Signing time:             Fri 17 May 2024 16:01:57 +0000
Manifest this update:     Fri 17 May 2024 16:01:57 +0000
Manifest next update:     Sat 18 May 2024 16:01:57 +0000
Files and hashes:         1: OiRuCXbD-8kN9gb8lSfwwuM1yGc.roa (hash: 6W4wNyVlpDEjUx/pG+UbJCstA7rUpuIEYaM1acYNCwE=)
                          2: tTjHKVvNR0uCnk5H7ryw4JPOUjo.crl (hash: LiSTZBfD7RgxwQB/AohWPYQuG7WaNGgunXpBbcUTvm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTjHKVvNR0uCnk5H7ryw4JPOUjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e1:93:77:61:0a:92:69:df:02:1a:96:b7:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b538c7295bcd474b829e4e47eebcb0e093ce523a
        Validity
            Not Before: May 17 16:01:57 2024 GMT
            Not After : May 18 16:01:57 2024 GMT
        Subject: CN=502ebe6fad86d254d5881e0984272f0a1e84958e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:ce:b1:b7:d3:84:72:75:1b:4e:61:cd:cd:
                    0b:2d:d9:3d:e3:49:e0:30:70:30:43:f5:2e:ba:9e:
                    e6:2f:75:d7:b2:69:91:98:1b:1a:71:3f:21:04:01:
                    cd:fb:19:b0:4c:9f:59:d0:61:72:5c:3a:6f:f0:30:
                    df:f7:a4:b7:2d:8f:f1:1a:42:21:66:fa:34:18:69:
                    14:dd:a4:c2:ca:a6:76:ef:33:18:10:81:24:57:fa:
                    b9:78:2e:8f:c4:0b:ff:ae:c8:e2:ce:2c:95:50:da:
                    44:a9:6c:e5:7e:b8:8b:cd:23:1b:79:77:6a:69:e2:
                    c4:cb:86:20:68:af:6c:6c:61:b1:90:80:b5:20:fb:
                    df:96:51:78:89:99:de:71:e7:a2:fa:26:ca:af:66:
                    13:4a:8b:a5:9f:6e:47:e6:b7:4b:e2:77:b4:5b:e9:
                    21:0c:9f:77:4d:5b:46:65:5a:62:6a:05:5c:4b:c3:
                    ce:f2:0e:5d:ce:30:3d:8e:8e:cb:23:8f:14:1b:3b:
                    e0:9c:ff:77:a3:ea:f3:fa:22:98:4e:70:94:c5:2d:
                    34:8e:9a:02:b0:0d:b7:fb:d2:0b:44:19:9a:a7:72:
                    a6:11:b6:2b:f8:a4:3c:50:5b:10:b3:6c:cf:34:09:
                    58:b7:8c:5d:fa:8d:f6:f3:42:1b:39:ba:97:02:c1:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2E:BE:6F:AD:86:D2:54:D5:88:1E:09:84:27:2F:0A:1E:84:95:8E
            X509v3 Authority Key Identifier:
                keyid:B5:38:C7:29:5B:CD:47:4B:82:9E:4E:47:EE:BC:B0:E0:93:CE:52:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTjHKVvNR0uCnk5H7ryw4JPOUjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:02:94:cd:1e:fa:5e:48:8d:9d:6d:5d:6a:c5:5c:56:73:
         68:4a:48:9c:97:fd:03:c2:61:63:1a:7e:ae:01:05:90:fd:95:
         af:a6:81:4e:ad:3d:bd:ad:f5:ca:2f:cc:cc:59:a6:c8:d8:1e:
         3d:be:46:cf:9d:a9:ed:39:cd:ee:ef:bf:b2:21:23:9f:03:40:
         aa:1f:e0:95:28:12:56:1d:9d:b0:ed:e8:1f:64:f9:23:86:86:
         dd:65:bf:79:78:23:aa:a3:ab:e8:b7:2a:3b:33:ea:c2:b3:78:
         b5:ae:1b:24:a6:ac:db:14:3a:f1:01:b7:6d:25:b7:db:75:93:
         c9:e5:96:ce:c2:f4:8f:95:f1:d9:b1:06:12:1f:f3:20:ae:0f:
         37:63:58:00:9b:43:7d:b9:7b:38:0d:a6:6e:b1:8f:e3:51:cc:
         38:cf:1c:60:ea:6a:36:08:22:27:1b:63:ae:13:2f:05:f4:56:
         fc:c9:02:0b:8e:82:ae:b7:f6:01:96:05:ff:70:22:e8:d5:29:
         9c:39:7d:e9:76:11:a7:66:43:43:a7:d8:c4:6d:cd:f5:72:a8:
         6b:7f:23:17:83:ad:1e:ac:05:5f:05:16:27:d8:43:34:da:97:
         e3:ed:16:f7:62:2c:eb:3e:65:16:d2:dd:b6:ad:19:78:23:78:
         be:dc:59:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSeGTd2EKkmnfAhqWt/koMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzhjNzI5NWJjZDQ3NGI4MjllNGU0N2VlYmNiMGUwOTNj
ZTUyM2EwHhcNMjQwNTE3MTYwMTU3WhcNMjQwNTE4MTYwMTU3WjAzMTEwLwYDVQQD
Eyg1MDJlYmU2ZmFkODZkMjU0ZDU4ODFlMDk4NDI3MmYwYTFlODQ5NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk93OsbfThHJ1G05hzc0LLdk940ng
MHAwQ/Uuup7mL3XXsmmRmBsacT8hBAHN+xmwTJ9Z0GFyXDpv8DDf96S3LY/xGkIh
Zvo0GGkU3aTCyqZ27zMYEIEkV/q5eC6PxAv/rsjiziyVUNpEqWzlfriLzSMbeXdq
aeLEy4YgaK9sbGGxkIC1IPvfllF4iZneceei+ibKr2YTSouln25H5rdL4ne0W+kh
DJ93TVtGZVpiagVcS8PO8g5dzjA9jo7LI48UGzvgnP93o+rz+iKYTnCUxS00jpoC
sA23+9ILRBmap3KmEbYr+KQ8UFsQs2zPNAlYt4xd+o3280IbObqXAsEdPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAuvm+thtJU1YgeCYQnLwoehJWOMB8GA1UdIwQY
MBaAFLU4xylbzUdLgp5OR+68sOCTzlI6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRqSEtWdk5SMHVDbms1SDdyeXc0SlBPVWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYmY3NzItOTM5Ni00MTAxLWIzZTgt
NDNmOWFiNjczNGVjLzEvdFRqSEtWdk5SMHVDbms1SDdyeXc0SlBPVWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYmY3NzItOTM5Ni00MTAxLWIzZTgtNDNmOWFiNjczNGVj
LzEvdFRqSEtWdk5SMHVDbms1SDdyeXc0SlBPVWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUakClM0e
+l5IjZ1tXWrFXFZzaEpInJf9A8JhYxp+rgEFkP2Vr6aBTq09va31yi/MzFmmyNge
Pb5Gz52p7TnN7u+/siEjnwNAqh/glSgSVh2dsO3oH2T5I4aG3WW/eXgjqqOr6Lcq
OzPqwrN4ta4bJKas2xQ68QG3bSW323WTyeWWzsL0j5Xx2bEGEh/zIK4PN2NYAJtD
fbl7OA2mbrGP41HMOM8cYOpqNggiJxtjrhMvBfRW/MkCC46Crrf2AZYF/3Ai6NUp
nDl96XYRp2ZDQ6fYxG3N9XKoa38jF4OtHqwFXwUWJ9hDNNqX4+0W92Is6z5lFtLd
tq0ZeCN4vtxZEQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:09:08 2024 by rpki-client on console-ams.rpki-client.org