Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File:                     _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier:          rYHjkQkuBGtToohcUdLBi79KS1y2pU/WP+Ix/4KfnBw=
Subject key identifier:   DF:1D:2A:21:DD:21:34:C7:AA:AC:A7:23:C1:D5:E3:02:D6:63:E6:42
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer:       /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial:       018F874994F560846E6F0C4D2B61D40311B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number:          08B1
Signing time:             Fri 17 May 2024 16:01:37 +0000
Manifest this update:     Fri 17 May 2024 16:01:37 +0000
Manifest next update:     Sat 18 May 2024 16:01:37 +0000
Files and hashes:         1: 1-SxgM-XZml2g2QfUmkiz1GeqxlQ.roa (hash: +UaiY1UJcfYsrliyl4rrpX92CDuTKXqo2eYQEKMvwO0=)
                          2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: hB/sf1HA9HY5gMUO7mO27sOtg54uIeNPAjohqmH1sIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:94:f5:60:84:6e:6f:0c:4d:2b:61:d4:03:11:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
        Validity
            Not Before: May 17 16:01:37 2024 GMT
            Not After : May 18 16:01:37 2024 GMT
        Subject: CN=df1d2a21dd2134c7aaaca723c1d5e302d663e642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:12:2d:56:ff:7a:40:49:24:1c:97:85:85:
                    08:83:4f:35:bd:3a:9a:50:b7:8b:62:c7:4c:43:f2:
                    a7:bc:1b:93:a5:fb:f2:6c:56:f1:88:02:e2:65:70:
                    09:b3:5e:54:87:cd:af:49:81:db:86:6a:a5:4e:27:
                    3c:86:1a:c9:8b:39:46:c1:ec:ef:32:a4:aa:3b:12:
                    bf:f7:26:ca:45:51:e1:07:84:3f:5b:18:98:bb:da:
                    23:1c:03:68:69:02:cc:34:8e:2e:d2:f7:8e:b6:05:
                    d7:95:a2:be:16:bf:d2:c6:28:ff:b5:5f:ff:1b:6f:
                    d9:5e:53:af:e7:ac:7e:41:37:3d:29:4c:37:5b:46:
                    6b:e4:5f:ff:65:9c:75:9a:5d:12:88:e5:ae:8f:d6:
                    e3:ba:29:5e:8c:ca:d3:06:8e:87:61:36:f3:3b:9c:
                    74:f9:35:19:c4:80:27:31:f1:f9:a2:99:a2:ed:89:
                    5b:39:29:d1:e2:00:cb:e1:b8:73:ae:a5:84:04:38:
                    e6:1b:33:30:9d:3b:b0:b9:9f:2e:a9:4a:90:b8:90:
                    ad:5f:92:03:af:fc:36:85:33:5e:70:ec:56:21:ca:
                    85:8a:96:cd:bf:00:71:d7:f1:be:64:e1:33:15:af:
                    62:9d:68:f6:5e:24:67:f7:67:d9:14:89:ec:53:8e:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1D:2A:21:DD:21:34:C7:AA:AC:A7:23:C1:D5:E3:02:D6:63:E6:42
            X509v3 Authority Key Identifier:
                keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:39:09:b7:5c:5b:84:e9:00:75:f3:a3:e9:0e:8f:d8:2c:
         7a:a4:93:10:51:d3:fa:96:43:19:5c:a6:9c:82:be:75:96:5b:
         88:20:69:4a:b2:b2:08:29:bd:cb:4f:f7:85:96:cb:03:58:fa:
         da:9b:ca:8d:fe:f1:8c:bb:db:01:f9:3f:eb:1e:9a:ea:00:7e:
         87:ea:3d:e2:ea:33:1f:cc:32:17:ec:e4:cb:1e:44:0d:6f:67:
         ec:52:0b:dc:91:22:60:ae:a5:98:40:91:bd:88:5d:c5:68:51:
         f3:64:b1:fe:8f:7b:03:88:60:69:6e:d0:65:55:9f:bf:35:96:
         f2:b6:77:07:8a:79:ba:c8:bb:83:d0:5e:e2:7a:c8:0b:51:a7:
         b0:9e:4e:53:5e:c2:8e:00:fc:b1:17:03:48:2c:9b:db:83:04:
         e7:6b:66:f2:6f:e9:19:b2:36:7d:1c:9d:5e:fd:57:2a:01:09:
         44:ea:ce:7a:68:b5:79:fc:37:0e:02:d2:ba:f4:29:fb:dc:1e:
         3f:94:8d:9a:a7:93:de:45:c9:c8:a6:55:78:63:67:fe:83:4b:
         6f:d2:78:14:d8:64:ab:92:10:f9:98:2c:4e:d9:a3:a4:da:c6:
         34:7a:9a:04:0c:70:f6:e9:dd:bf:17:dc:df:41:65:b5:7a:49:
         61:86:f5:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZT1YIRubwxNK2HUAxG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi
NmI3ZjMwHhcNMjQwNTE3MTYwMTM3WhcNMjQwNTE4MTYwMTM3WjAzMTEwLwYDVQQD
EyhkZjFkMmEyMWRkMjEzNGM3YWFhY2E3MjNjMWQ1ZTMwMmQ2NjNlNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDgSLVb/ekBJJByXhYUIg081vTqa
ULeLYsdMQ/KnvBuTpfvybFbxiALiZXAJs15Uh82vSYHbhmqlTic8hhrJizlGwezv
MqSqOxK/9ybKRVHhB4Q/WxiYu9ojHANoaQLMNI4u0veOtgXXlaK+Fr/Sxij/tV//
G2/ZXlOv56x+QTc9KUw3W0Zr5F//ZZx1ml0SiOWuj9bjuilejMrTBo6HYTbzO5x0
+TUZxIAnMfH5opmi7YlbOSnR4gDL4bhzrqWEBDjmGzMwnTuwuZ8uqUqQuJCtX5ID
r/w2hTNecOxWIcqFipbNvwBx1/G+ZOEzFa9inWj2XiRn92fZFInsU47pIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8dKiHdITTHqqynI8HV4wLWY+ZCMB8GA1UdIwQY
MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt
OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl
LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFE5Cbdc
W4TpAHXzo+kOj9gseqSTEFHT+pZDGVymnIK+dZZbiCBpSrKyCCm9y0/3hZbLA1j6
2pvKjf7xjLvbAfk/6x6a6gB+h+o94uozH8wyF+zkyx5EDW9n7FIL3JEiYK6lmECR
vYhdxWhR82Sx/o97A4hgaW7QZVWfvzWW8rZ3B4p5usi7g9Be4nrIC1GnsJ5OU17C
jgD8sRcDSCyb24ME52tm8m/pGbI2fRydXv1XKgEJROrOemi1efw3DgLSuvQp+9we
P5SNmqeT3kXJyKZVeGNn/oNLb9J4FNhkq5IQ+ZgsTtmjpNrGNHqaBAxw9undvxfc
30FltXpJYYb13w==
-----END CERTIFICATE-----
Generated at Fri May 17 19:06:26 2024 by rpki-client on console-fra.rpki-client.org