Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File:                     xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier:          dOammh0LK/g2bXQluqgtfQ9RYDjVpnZoTTLrdG4JmVQ=
Subject key identifier:   8B:F9:EF:62:96:5A:AB:50:8C:52:CB:C7:74:EC:1D:57:C6:58:86:75
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer:       /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial:       018F86A41FBE7A346CE15152B50CB87C3BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number:          0AA3
Signing time:             Fri 17 May 2024 13:00:53 +0000
Manifest this update:     Fri 17 May 2024 13:00:53 +0000
Manifest next update:     Sat 18 May 2024 13:00:53 +0000
Files and hashes:         1: KJHrEEqrk_rT9bdqg9opfybeMKE.roa (hash: uEci5BLUc+eTanY+xeAGHkZt+qrkLHv1Lc9W1d1hF1A=)
                          2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: 89v7cxE2CXgrVUuNCD677Sq6GMAZxBWH2Gm4Bq+CeYA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:1f:be:7a:34:6c:e1:51:52:b5:0c:b8:7c:3b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
        Validity
            Not Before: May 17 13:00:53 2024 GMT
            Not After : May 18 13:00:53 2024 GMT
        Subject: CN=8bf9ef62965aab508c52cbc774ec1d57c6588675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b8:77:b7:ee:fc:f6:67:46:dc:4d:0d:cc:a1:
                    f3:af:38:aa:5b:cc:00:35:41:72:bf:14:49:9b:08:
                    e7:19:05:39:be:ef:42:48:c7:f4:bf:42:c4:8b:5e:
                    f1:67:6a:8e:95:cf:4a:a8:0d:be:d8:c4:02:ce:78:
                    82:35:9f:89:91:de:53:59:08:7f:6d:80:33:77:e8:
                    e4:ed:4a:dc:ff:c1:f9:49:55:3d:85:0a:12:23:77:
                    03:72:81:de:11:cd:a0:e5:9f:83:2c:84:3e:44:17:
                    38:2e:a4:2c:79:15:09:91:91:c7:cc:7c:af:49:ba:
                    04:ad:16:bd:23:31:60:47:76:c5:fe:2d:38:02:11:
                    2b:92:e5:65:ba:58:a1:10:44:83:9b:00:ec:3c:75:
                    65:13:a5:82:cf:0f:83:5e:db:f5:16:34:20:7c:7b:
                    42:68:35:91:55:ac:69:a6:bf:36:c7:60:dd:e3:ce:
                    39:83:30:1b:66:58:69:11:6b:a3:06:6b:81:a1:11:
                    8b:cc:9d:71:98:f4:f9:86:44:de:f3:c9:5f:f0:9f:
                    f2:2e:ef:bc:0c:75:c0:5d:d5:4d:02:bb:57:5e:01:
                    10:c0:dd:f7:5a:b9:e2:02:a0:c8:6c:64:bc:3a:69:
                    ee:7a:c5:77:0c:40:5b:73:6d:f0:89:ad:b3:32:c8:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:EF:62:96:5A:AB:50:8C:52:CB:C7:74:EC:1D:57:C6:58:86:75
            X509v3 Authority Key Identifier:
                keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:ff:62:09:30:2b:48:0d:6a:b6:93:42:19:cb:fa:f9:d7:
         14:54:64:fe:f6:28:01:4c:55:90:05:b1:cb:b3:3a:53:85:5c:
         04:be:60:e9:06:b4:c5:09:42:00:a3:24:79:b2:8d:8a:5a:1c:
         cd:45:71:94:7a:a8:64:ff:cf:11:4c:dd:9c:5d:0d:dd:0e:7e:
         e0:d6:6c:f7:6b:38:81:d9:4d:df:ea:d7:d7:55:f0:40:24:56:
         7e:e8:d5:a3:59:bf:cb:bb:c3:af:eb:4b:82:cf:61:ed:21:d9:
         34:a0:fd:ba:bf:ec:11:21:a2:54:98:df:ab:3b:1d:06:59:4e:
         b3:ad:fb:5b:f8:63:9f:b7:5b:04:c3:25:43:20:72:f0:05:d1:
         10:c8:2b:16:ce:bd:5e:38:2d:20:f8:ed:c5:76:83:d9:c3:09:
         dd:fc:97:4e:e9:1d:88:a5:39:4d:16:58:e8:16:c7:1d:79:aa:
         e9:4f:60:ee:21:17:be:68:83:b0:35:9c:ba:ef:93:45:02:ce:
         cb:04:21:19:c2:d3:88:aa:90:f4:ca:6a:68:cf:0f:8f:a7:74:
         14:9a:58:e2:37:41:74:5d:a8:a1:81:3a:91:74:75:68:8a:b4:
         66:99:3f:7b:2b:8f:ca:f9:00:02:f5:5b:ae:36:79:54:15:52:
         73:88:6b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GpB++ejRs4VFStQy4fDvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODdiOWNkYTc1NjAzZWIwZDllMzc3MTY3YmY3ZTBjOGU0
NDA0MDMwHhcNMjQwNTE3MTMwMDUzWhcNMjQwNTE4MTMwMDUzWjAzMTEwLwYDVQQD
Eyg4YmY5ZWY2Mjk2NWFhYjUwOGM1MmNiYzc3NGVjMWQ1N2M2NTg4Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorh3t+789mdG3E0NzKHzrziqW8wA
NUFyvxRJmwjnGQU5vu9CSMf0v0LEi17xZ2qOlc9KqA2+2MQCzniCNZ+Jkd5TWQh/
bYAzd+jk7Urc/8H5SVU9hQoSI3cDcoHeEc2g5Z+DLIQ+RBc4LqQseRUJkZHHzHyv
SboErRa9IzFgR3bF/i04AhErkuVlulihEESDmwDsPHVlE6WCzw+DXtv1FjQgfHtC
aDWRVaxppr82x2Dd4845gzAbZlhpEWujBmuBoRGLzJ1xmPT5hkTe88lf8J/yLu+8
DHXAXdVNArtXXgEQwN33WrniAqDIbGS8OmnuesV3DEBbc23wia2zMsi9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv572KWWqtQjFLLx3TsHVfGWIZ1MB8GA1UdIwQY
MBaAFMWHuc2nVgPrDZ43cWe/fgyORAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUt
ZTc1M2NmNzY4YzE0LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUtZTc1M2NmNzY4YzE0
LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC7/Ygkw
K0gNaraTQhnL+vnXFFRk/vYoAUxVkAWxy7M6U4VcBL5g6Qa0xQlCAKMkebKNiloc
zUVxlHqoZP/PEUzdnF0N3Q5+4NZs92s4gdlN3+rX11XwQCRWfujVo1m/y7vDr+tL
gs9h7SHZNKD9ur/sESGiVJjfqzsdBllOs637W/hjn7dbBMMlQyBy8AXREMgrFs69
XjgtIPjtxXaD2cMJ3fyXTukdiKU5TRZY6BbHHXmq6U9g7iEXvmiDsDWcuu+TRQLO
ywQhGcLTiKqQ9MpqaM8Pj6d0FJpY4jdBdF2ooYE6kXR1aIq0Zpk/eyuPyvkAAvVb
rjZ5VBVSc4hrbw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:46:58 2024 by rpki-client on console-fra.rpki-client.org