Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File:                     cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier:          iSajLbXsC8uNyVbX7VYebEiPu9U8gN+oiEQ4JqqGbvw=
Subject key identifier:   3D:5D:36:BC:4B:AB:F4:41:0A:69:6F:DE:43:CF:98:9C:60:C8:3A:69
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer:       /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial:       018F874B00408F38816049C1210E7478F963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number:          0CCB
Signing time:             Fri 17 May 2024 16:03:10 +0000
Manifest this update:     Fri 17 May 2024 16:03:10 +0000
Manifest next update:     Sat 18 May 2024 16:03:10 +0000
Files and hashes:         1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: 9sHwStg/f+GgFigFF1VMyNEEW78Q4Hdi5S8VQMWij+I=)
                          2: kciSu88GvDJGnPARDEeP3b7U1II.roa (hash: 8SoNY/l5Fl5qUGwnGVzJT0g2z1g+GN3pmMsr1T9h17A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:00:40:8f:38:81:60:49:c1:21:0e:74:78:f9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
        Validity
            Not Before: May 17 16:03:10 2024 GMT
            Not After : May 18 16:03:10 2024 GMT
        Subject: CN=3d5d36bc4babf4410a696fde43cf989c60c83a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:e1:e8:7a:97:66:5d:c5:cb:dd:20:d5:84:
                    b3:2b:c2:4d:ba:a4:4e:aa:52:45:2d:87:e3:8c:f6:
                    a9:44:a9:f9:a8:ef:7e:5a:1d:b1:bd:3b:f6:fc:7d:
                    4a:b5:d3:1b:25:50:19:04:c0:48:3d:73:c2:41:79:
                    6b:d7:9e:dd:dd:ce:df:b9:2b:09:7f:86:ef:4f:f5:
                    36:fc:ac:5a:95:a6:0e:97:e0:2c:d3:d8:52:21:a5:
                    db:93:7c:42:09:94:24:61:b6:1a:73:ff:2e:91:34:
                    b0:3f:39:8f:c7:ce:ed:59:b2:28:d3:1e:4b:80:eb:
                    16:87:a9:e7:ac:39:81:dc:ec:dd:e6:04:a8:9b:13:
                    d4:bd:4a:95:e5:2b:0b:c8:c1:78:31:68:82:b2:2b:
                    c6:47:ba:00:47:a4:b9:80:c1:36:e9:2f:0d:15:90:
                    df:05:46:a3:e4:b8:47:1b:da:b9:62:27:01:d2:2c:
                    a9:2a:11:78:75:41:10:f1:0e:3e:47:de:f9:e6:bc:
                    96:67:fa:24:dc:d4:54:2a:82:84:a9:dd:0e:9f:da:
                    72:c3:95:a0:54:6f:56:ec:f5:bc:9f:fa:f2:b9:54:
                    83:af:c1:51:b7:d2:11:b8:e6:81:78:27:74:6d:61:
                    e2:f7:35:30:fe:70:40:4e:a5:b1:c1:0a:8e:bb:89:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:36:BC:4B:AB:F4:41:0A:69:6F:DE:43:CF:98:9C:60:C8:3A:69
            X509v3 Authority Key Identifier:
                keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f3:49:49:8d:1b:0e:cc:88:29:52:4a:dc:11:ca:7e:fe:0a:
         7d:0d:be:ba:04:d1:61:2a:43:e0:af:97:5f:8a:71:92:de:0a:
         cf:29:c3:19:4d:20:81:88:ec:ad:ca:76:37:88:de:56:f1:0b:
         a0:e6:41:f8:62:2e:27:5b:02:5d:8e:70:52:80:f3:f3:ae:ec:
         0e:ab:f9:6a:cf:0c:e0:7e:12:62:29:19:66:b0:72:6a:39:70:
         f9:4f:87:94:f9:e7:97:bc:c2:6b:1f:98:e3:ee:cd:33:97:af:
         6e:5a:ae:c0:db:7a:de:58:c5:66:65:f8:88:6f:0c:7b:b7:0c:
         47:d0:7d:b1:2c:b8:a1:df:e2:27:7b:8f:f7:61:f9:33:b0:2f:
         f8:9b:bb:1f:40:f0:31:bd:f4:e9:46:5d:e0:d9:25:bb:65:31:
         f3:2e:f2:4e:40:67:82:7e:87:ae:9f:85:83:94:8c:da:29:01:
         8d:c1:3a:a1:34:e4:49:3c:6b:5b:a5:19:da:4b:8b:ab:c8:e2:
         82:c4:f3:2f:29:fe:6c:76:a5:ab:58:7e:3a:ac:42:f5:72:d6:
         86:e9:c8:b5:d3:9d:b1:a2:d2:25:fe:cc:a2:c1:73:bc:4c:6c:
         68:72:fe:ac:67:a9:3e:d7:2d:fd:d9:77:17:25:4f:12:0a:5d:
         cf:73:57:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSwBAjziBYEnBIQ50ePljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj
NTNiMDUwHhcNMjQwNTE3MTYwMzEwWhcNMjQwNTE4MTYwMzEwWjAzMTEwLwYDVQQD
EygzZDVkMzZiYzRiYWJmNDQxMGE2OTZmZGU0M2NmOTg5YzYwYzgzYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8zh6HqXZl3Fy90g1YSzK8JNuqRO
qlJFLYfjjPapRKn5qO9+Wh2xvTv2/H1KtdMbJVAZBMBIPXPCQXlr157d3c7fuSsJ
f4bvT/U2/KxalaYOl+As09hSIaXbk3xCCZQkYbYac/8ukTSwPzmPx87tWbIo0x5L
gOsWh6nnrDmB3Ozd5gSomxPUvUqV5SsLyMF4MWiCsivGR7oAR6S5gME26S8NFZDf
BUaj5LhHG9q5YicB0iypKhF4dUEQ8Q4+R9755ryWZ/ok3NRUKoKEqd0On9pyw5Wg
VG9W7PW8n/ryuVSDr8FRt9IRuOaBeCd0bWHi9zUw/nBATqWxwQqOu4lXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1dNrxLq/RBCmlv3kPPmJxgyDppMB8GA1UdIwQY
MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt
NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy
LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/NJSY0b
DsyIKVJK3BHKfv4KfQ2+ugTRYSpD4K+XX4pxkt4KzynDGU0ggYjsrcp2N4jeVvEL
oOZB+GIuJ1sCXY5wUoDz867sDqv5as8M4H4SYikZZrByajlw+U+HlPnnl7zCax+Y
4+7NM5evblquwNt63ljFZmX4iG8Me7cMR9B9sSy4od/iJ3uP92H5M7Av+Ju7H0Dw
Mb306UZd4Nklu2Ux8y7yTkBngn6Hrp+Fg5SM2ikBjcE6oTTkSTxrW6UZ2kuLq8ji
gsTzLyn+bHalq1h+OqxC9XLWhunItdOdsaLSJf7MosFzvExsaHL+rGepPtct/dl3
FyVPEgpdz3NX8w==
-----END CERTIFICATE-----