Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File:                     hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier:          992+d+IE0zf6e+z9oYm715sSU+rLDRpJS+UyFaTIeLs=
Subject key identifier:   25:D5:29:C2:B9:1D:9C:7A:96:2C:C8:5B:C9:C7:53:96:B4:04:50:4F
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer:       /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial:       018F874AB8972B156453C7D645A57E0C78E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number:          09F9
Signing time:             Fri 17 May 2024 16:02:52 +0000
Manifest this update:     Fri 17 May 2024 16:02:52 +0000
Manifest next update:     Sat 18 May 2024 16:02:52 +0000
Files and hashes:         1: Zo8ERzX9y6TGIwHrGRkqQZa2jKg.roa (hash: dIqMv5ttUNk3zenowgSDrnwSOYxqrsH2GGyNYGLHYh0=)
                          2: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: j3jQfTVV0ohCpqM8et+vh4AanZKPcnzmQXdCtmX2g60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b8:97:2b:15:64:53:c7:d6:45:a5:7e:0c:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
        Validity
            Not Before: May 17 16:02:52 2024 GMT
            Not After : May 18 16:02:52 2024 GMT
        Subject: CN=25d529c2b91d9c7a962cc85bc9c75396b404504f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:35:5b:53:c2:8a:19:01:33:8a:1e:d4:c3:
                    c2:2d:4f:7d:a6:d9:45:36:12:fc:8b:c8:86:f0:25:
                    5a:9a:3c:0f:97:91:15:73:ea:c7:e9:b4:01:2e:1a:
                    9c:10:3e:be:65:b5:85:c7:30:d0:52:92:a2:08:62:
                    c7:cd:a9:4e:c2:4b:0d:d5:88:cf:23:0b:77:7f:74:
                    1d:4d:99:49:92:45:1b:a7:ea:75:ee:70:f1:21:16:
                    fb:71:a9:b2:f0:db:2f:72:94:fa:ef:7c:37:55:8a:
                    6c:ff:8b:3b:3c:01:12:1f:73:2d:5e:39:23:54:05:
                    51:c1:77:76:44:0c:8a:e3:f6:a4:71:18:3f:c3:47:
                    97:73:24:76:5a:46:d1:2e:34:83:1c:04:65:bd:62:
                    8c:7d:84:22:69:fa:25:be:86:28:5e:cf:ee:b6:9d:
                    26:3e:6d:60:79:72:3c:97:0f:2c:31:24:e6:71:a1:
                    84:22:82:ab:12:71:dd:26:26:f2:06:7a:f1:84:85:
                    de:9f:8c:5d:35:6b:3a:3f:b6:16:5d:6d:03:45:b9:
                    92:3f:34:63:2e:d9:e7:49:7a:d2:79:14:57:05:c2:
                    89:17:8f:86:b4:ab:a7:40:8c:4a:ff:cb:67:17:60:
                    37:cb:70:44:df:00:21:be:17:38:08:98:5f:17:f5:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:29:C2:B9:1D:9C:7A:96:2C:C8:5B:C9:C7:53:96:B4:04:50:4F
            X509v3 Authority Key Identifier:
                keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3a:da:6d:2a:a1:58:07:b6:dd:a8:9b:99:41:5a:ef:75:dd:
         d3:d1:a5:91:6a:dd:84:db:71:f7:78:e1:0d:0b:90:17:b1:4d:
         be:82:e3:85:18:6b:f9:41:da:3c:c4:61:0d:11:4c:70:7f:ff:
         f7:b9:58:2f:57:6b:f2:df:76:18:fd:ed:5f:b5:d5:6e:f2:c1:
         46:ab:7f:3b:4c:42:8f:2f:c4:88:19:c0:70:fe:ed:47:69:e8:
         6d:30:d2:1a:a2:4c:60:5b:b1:0f:1c:69:f7:90:31:f3:dd:87:
         aa:1d:7d:a8:1a:70:2d:ab:1a:4e:32:6f:3a:f3:32:61:50:29:
         40:05:68:88:55:35:73:c5:47:2f:77:11:31:22:23:e5:bd:d1:
         7b:a6:dc:0e:90:d6:d7:39:7d:67:37:a6:89:37:5b:9d:c8:86:
         7f:95:79:c1:a7:0d:eb:6d:49:98:d0:b6:5f:9d:a3:3c:44:b8:
         ef:92:78:c4:43:bb:f2:88:de:ea:8b:d5:b8:bc:fd:53:7e:7d:
         94:df:9a:7f:47:c1:ab:0f:88:5f:bd:a5:0e:c0:34:a7:10:d9:
         ee:81:47:ca:71:67:6c:23:74:a3:79:12:c3:1f:2e:8c:6c:83:
         b4:bb:0d:97:de:2e:37:dd:ab:22:45:77:20:27:0f:ca:fa:78:
         b0:36:e5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSriXKxVkU8fWRaV+DHjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGJiN2FhMzkwOGM5OThkZTNjNDJmN2UxODQ5NTM4YjA1
OTI2MTcwHhcNMjQwNTE3MTYwMjUyWhcNMjQwNTE4MTYwMjUyWjAzMTEwLwYDVQQD
EygyNWQ1MjljMmI5MWQ5YzdhOTYyY2M4NWJjOWM3NTM5NmI0MDQ1MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8o1W1PCihkBM4oe1MPCLU99ptlF
NhL8i8iG8CVamjwPl5EVc+rH6bQBLhqcED6+ZbWFxzDQUpKiCGLHzalOwksN1YjP
Iwt3f3QdTZlJkkUbp+p17nDxIRb7camy8NsvcpT673w3VYps/4s7PAESH3MtXjkj
VAVRwXd2RAyK4/akcRg/w0eXcyR2WkbRLjSDHARlvWKMfYQiafolvoYoXs/utp0m
Pm1geXI8lw8sMSTmcaGEIoKrEnHdJibyBnrxhIXen4xdNWs6P7YWXW0DRbmSPzRj
LtnnSXrSeRRXBcKJF4+GtKunQIxK/8tnF2A3y3BE3wAhvhc4CJhfF/Vv1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXVKcK5HZx6lizIW8nHU5a0BFBPMB8GA1UdIwQY
MBaAFIVLt6o5CMmY3jxC9+GElTiwWSYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et
NjRlNTJiOWRkOGQxLzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx
LzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDrabSqh
WAe23aibmUFa73Xd09GlkWrdhNtx93jhDQuQF7FNvoLjhRhr+UHaPMRhDRFMcH//
97lYL1dr8t92GP3tX7XVbvLBRqt/O0xCjy/EiBnAcP7tR2nobTDSGqJMYFuxDxxp
95Ax892Hqh19qBpwLasaTjJvOvMyYVApQAVoiFU1c8VHL3cRMSIj5b3Re6bcDpDW
1zl9ZzemiTdbnciGf5V5wacN621JmNC2X52jPES475J4xEO78oje6ovVuLz9U359
lN+af0fBqw+IX72lDsA0pxDZ7oFHynFnbCN0o3kSwx8ujGyDtLsNl94uN92rIkV3
ICcPyvp4sDblwQ==
-----END CERTIFICATE-----
Generated at Fri May 17 19:04:09 2024 by rpki-client on console-fra.rpki-client.org