Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File:                     MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier:          jxrRHMcZuAIfeWLvmCJ7qty3eoKoOJIqdFN62UaEvl4=
Subject key identifier:   43:AE:80:F4:09:06:F7:F7:78:7C:A3:29:DF:4D:8F:1E:31:7F:FF:32
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer:       /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial:       018F885B66A34C55C298DB7F6A6D732E7C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number:          08D4
Signing time:             Fri 17 May 2024 21:00:42 +0000
Manifest this update:     Fri 17 May 2024 21:00:42 +0000
Manifest next update:     Sat 18 May 2024 21:00:42 +0000
Files and hashes:         1: CCWb6pHp-nju5OsEguas3eMhbms.roa (hash: LMD1X6jAM9qvtIZ8c8rIem7jc3OFu2CAq9bMhHATZKY=)
                          2: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: t/rM5dZrT/Wd0vbQO28dX57nhdDmgts2J7oyHZIFNTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:66:a3:4c:55:c2:98:db:7f:6a:6d:73:2e:7c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
        Validity
            Not Before: May 17 21:00:42 2024 GMT
            Not After : May 18 21:00:42 2024 GMT
        Subject: CN=43ae80f40906f7f7787ca329df4d8f1e317fff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:d1:c6:48:97:ea:3a:6e:90:8f:31:24:44:
                    52:63:6e:f2:9c:06:14:a3:0c:01:88:a3:8a:f9:27:
                    78:dd:96:63:4f:8b:95:4a:e6:ca:eb:c9:d2:05:ed:
                    76:c0:11:98:98:44:d9:ab:92:eb:11:dd:af:40:4a:
                    47:dd:58:ec:b9:08:91:1c:1c:b4:f1:96:fe:69:7b:
                    8a:95:a1:16:28:0e:e8:58:be:0a:de:53:60:fb:47:
                    74:a8:16:f6:1e:d2:a1:5b:9e:55:a0:5f:25:c8:53:
                    45:06:9e:06:a3:71:2e:05:9a:5e:dd:c7:9e:e8:cb:
                    0b:3d:4b:76:6b:66:2c:62:24:bb:05:07:4b:ab:6f:
                    66:14:fd:3a:5d:aa:35:e4:47:15:d0:a6:59:a2:5f:
                    be:c0:db:61:b2:41:e7:99:8c:93:f2:b8:57:8d:f6:
                    1e:a8:66:f1:c2:76:06:26:0e:a5:32:f3:16:65:c2:
                    e5:26:16:50:d4:d8:f4:07:84:09:04:09:f5:79:e0:
                    8a:2d:ef:77:52:ef:50:49:87:af:ea:34:9a:14:1b:
                    27:4a:ae:4d:c2:be:09:e8:8b:e9:65:5e:75:85:55:
                    9d:48:6d:38:78:09:46:7a:56:fb:4c:3f:c9:61:27:
                    91:e1:90:ec:8e:0e:a2:18:c4:58:3f:3b:26:ba:97:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:80:F4:09:06:F7:F7:78:7C:A3:29:DF:4D:8F:1E:31:7F:FF:32
            X509v3 Authority Key Identifier:
                keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:58:37:0e:41:ed:b0:9c:85:23:3f:a0:d6:e2:23:78:25:
         ca:83:7c:d3:07:27:c9:28:50:a0:81:b5:c5:8f:d5:24:e4:db:
         48:22:a1:c1:57:17:d3:96:8a:1b:10:e8:31:99:70:e9:ce:bb:
         50:66:5a:3b:9d:fe:0c:92:2a:4f:9b:c0:47:d1:bf:e5:34:f2:
         26:ed:6c:6f:05:aa:2a:19:44:bb:43:c9:59:35:26:ab:ae:da:
         e3:ca:01:94:56:06:5c:9d:7e:1e:e8:74:a4:fd:c5:14:bf:89:
         c5:f2:5b:91:bc:80:5b:d2:46:60:96:c0:8d:2a:1e:85:7b:b6:
         3f:37:be:6e:79:35:0d:a5:9d:b5:2c:c1:8c:f0:55:64:9f:8f:
         fc:0f:6e:f2:11:44:57:1d:cf:c2:4a:60:f6:6a:49:4f:0d:1b:
         92:e5:65:ce:d5:00:2c:5f:45:73:f4:85:d6:e6:9d:b9:80:f5:
         ca:9a:ed:e1:35:60:18:81:52:23:06:f1:c6:12:23:b5:3a:57:
         cc:d9:61:ab:2c:b0:b0:30:67:a3:58:70:8d:81:1d:39:c6:f7:
         07:28:1f:78:cb:93:a0:45:4b:8d:3e:b9:6d:46:de:a0:7e:30:
         a4:14:74:99:7f:91:22:fc:82:ae:ca:93:f4:38:85:7b:56:cd:
         34:7c:5b:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW2ajTFXCmNt/am1zLnwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMzE2Y2Q0ODgxNTYyZGEzYmYzOTI1YjQ5MThiNmUxMWQ3
NjUxNGMwHhcNMjQwNTE3MjEwMDQyWhcNMjQwNTE4MjEwMDQyWjAzMTEwLwYDVQQD
Eyg0M2FlODBmNDA5MDZmN2Y3Nzg3Y2EzMjlkZjRkOGYxZTMxN2ZmZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutHRxkiX6jpukI8xJERSY27ynAYU
owwBiKOK+Sd43ZZjT4uVSubK68nSBe12wBGYmETZq5LrEd2vQEpH3VjsuQiRHBy0
8Zb+aXuKlaEWKA7oWL4K3lNg+0d0qBb2HtKhW55VoF8lyFNFBp4Go3EuBZpe3cee
6MsLPUt2a2YsYiS7BQdLq29mFP06Xao15EcV0KZZol++wNthskHnmYyT8rhXjfYe
qGbxwnYGJg6lMvMWZcLlJhZQ1Nj0B4QJBAn1eeCKLe93Uu9QSYev6jSaFBsnSq5N
wr4J6IvpZV51hVWdSG04eAlGelb7TD/JYSeR4ZDsjg6iGMRYPzsmupfVIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOugPQJBvf3eHyjKd9Njx4xf/8yMB8GA1UdIwQY
MBaAFDIxbNSIFWLaO/OSW0kYtuEddlFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2Yt
MjYyZGE4ODNjOGUyLzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2YtMjYyZGE4ODNjOGUy
LzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgFYNw5B
7bCchSM/oNbiI3glyoN80wcnyShQoIG1xY/VJOTbSCKhwVcX05aKGxDoMZlw6c67
UGZaO53+DJIqT5vAR9G/5TTyJu1sbwWqKhlEu0PJWTUmq67a48oBlFYGXJ1+Huh0
pP3FFL+JxfJbkbyAW9JGYJbAjSoehXu2Pze+bnk1DaWdtSzBjPBVZJ+P/A9u8hFE
Vx3Pwkpg9mpJTw0bkuVlztUALF9Fc/SF1uaduYD1yprt4TVgGIFSIwbxxhIjtTpX
zNlhqyywsDBno1hwjYEdOcb3BygfeMuToEVLjT65bUbeoH4wpBR0mX+RIvyCrsqT
9DiFe1bNNHxbqw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:44:59 2024 by rpki-client on console-fra.rpki-client.org