Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
File:                     9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft (raw, json)
Hash identifier:          tIvvxAR8IEnirrqdxvwgWwyqQ7/5AmaX+w7SjEa1/Ho=
Subject key identifier:   E8:ED:90:30:24:43:CA:68:2E:88:3D:CB:85:F3:85:5F:D1:CD:AA:9B
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Certificate issuer:       /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial:       018F3C2F08345B0BA5EB7E2DC8BA182EDE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
Manifest number:          06C5
Signing time:             Fri 03 May 2024 02:01:06 +0000
Manifest this update:     Fri 03 May 2024 02:01:06 +0000
Manifest next update:     Sat 04 May 2024 02:01:06 +0000
Files and hashes:         1: 4pZDfLtTMsuZu9B01GQAPGaFf_w.roa (hash: Jrmbo91ut29s5OUL1zxZu0vF8ezQ/eJyH1hMEP3PDno=)
                          2: 8DuHm80r0j-l07U9AOFJEHxcXr4.roa (hash: nP9XjzOTdf8erJhsN29NIMlosMr7K4+XuusvYYpMKkQ=)
                          3: 8ssogR7nMUn5efygmsx6N4WdAe8.roa (hash: U3nJDP4e5EaeW899bYoThwxmq9UZWF+MGDX5jfg4+Cs=)
                          4: 9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl (hash: pdYRzYxEch3bugPzwC4MlbLiNduZmREuNstNi9K0Tsc=)
                          5: omWB9hPSfJqYq8YufHlUgI8aUWY.roa (hash: on6rgqS8fjjA4mGZBUT0Jen0hmEvcEs8P1kH7F/85g0=)
                          6: sMdzy8LAFreZjyO4_DZjNB7rus4.roa (hash: jaIWA5qELfpwLwgw+ZqEt2FBDx43bmq5JkiHHnmsPsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:2f:08:34:5b:0b:a5:eb:7e:2d:c8:ba:18:2e:de:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
        Validity
            Not Before: May  3 02:01:06 2024 GMT
            Not After : May  4 02:01:06 2024 GMT
        Subject: CN=e8ed90302443ca682e883dcb85f3855fd1cdaa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bc:97:ea:39:43:05:96:5f:96:20:f2:c2:14:
                    54:4e:8a:8c:9f:bb:99:25:ff:3d:80:4f:c2:86:f5:
                    da:a5:25:1c:8a:23:73:b4:94:59:ab:1e:4b:9f:32:
                    25:26:92:4f:61:1c:c6:67:d7:7c:d2:15:0b:4e:0e:
                    fa:1f:d1:02:4d:ef:73:27:1b:19:4c:59:a1:a8:40:
                    a2:e6:65:66:27:cb:60:90:81:ab:ca:42:19:0e:dc:
                    23:3e:2e:d2:59:07:02:24:de:e0:54:dc:52:2a:7d:
                    d3:8e:0d:58:a0:5b:ed:4f:29:b2:c1:b6:58:d2:ba:
                    c9:8d:57:f6:aa:d8:f1:98:2e:1a:5f:5c:ba:78:51:
                    84:39:0c:e4:61:ce:10:fa:a7:81:40:07:12:67:81:
                    d9:21:c3:ca:c4:83:bf:69:f1:3a:7c:aa:d1:65:0e:
                    ce:65:da:27:36:ee:93:7e:f5:aa:fb:08:1d:fe:23:
                    e1:d8:51:4f:27:91:24:c6:5f:b3:1e:44:74:70:a1:
                    e8:01:8e:9b:9c:7e:9f:3b:80:45:77:bc:3f:9b:42:
                    bc:e7:d8:3a:fc:e8:b3:9e:22:a5:90:3f:99:a4:1f:
                    d1:59:fb:28:5b:41:d6:ef:9c:c7:30:00:06:f1:13:
                    b6:da:14:2c:52:4c:bc:52:7a:13:60:48:0d:b4:c3:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:ED:90:30:24:43:CA:68:2E:88:3D:CB:85:F3:85:5F:D1:CD:AA:9B
            X509v3 Authority Key Identifier:
                keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:87:c6:75:ea:c8:6c:17:6f:b6:64:2f:c9:2c:86:2c:b3:fc:
         03:3b:3d:d6:cb:4c:36:4a:04:eb:5e:c7:63:ff:6e:b3:78:9c:
         37:7c:3d:2f:e3:ab:42:6e:5c:d2:85:1e:8e:4f:92:d3:45:5f:
         ca:d4:59:3c:cf:ac:fc:23:72:75:b6:fb:61:4f:bd:d2:91:76:
         da:e8:0a:35:0e:2e:23:e4:bd:aa:5d:97:f8:aa:b6:2b:c5:75:
         85:c7:8f:eb:7a:d7:09:b2:21:12:df:b2:ab:d2:66:54:26:8b:
         93:2d:b2:40:53:d6:fe:2c:af:be:5c:c2:8b:18:6e:07:6b:9c:
         dc:45:54:24:c9:84:c3:6f:56:24:fa:9e:d4:11:76:9b:d5:bb:
         83:d3:c6:5a:9f:04:df:94:e8:52:7f:90:b8:2a:e4:8c:62:4b:
         97:b1:4c:b3:f5:0c:a0:2b:d0:93:1d:dd:dd:97:9f:fe:87:78:
         d6:17:90:0d:ff:43:dd:8b:82:bf:db:d0:be:5b:d0:38:42:e5:
         ac:6a:82:09:24:79:7c:38:91:13:fc:5b:de:58:db:58:01:e0:
         4a:43:92:e1:3c:07:22:c0:4b:8e:d5:24:b5:ab:5e:3f:d2:51:
         a1:31:65:1c:fd:f4:a8:53:63:4f:03:4b:d4:5c:10:1b:4c:c1:
         e1:a9:c9:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88Lwg0Wwul634tyLoYLt44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MTM3YzU5N2QxZTMwY2I3NTYxOGU1MWY0MmI3Zjc5ZWQ1
ZmZjODgwHhcNMjQwNTAzMDIwMTA2WhcNMjQwNTA0MDIwMTA2WjAzMTEwLwYDVQQD
EyhlOGVkOTAzMDI0NDNjYTY4MmU4ODNkY2I4NWYzODU1ZmQxY2RhYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6byX6jlDBZZfliDywhRUToqMn7uZ
Jf89gE/ChvXapSUciiNztJRZqx5LnzIlJpJPYRzGZ9d80hULTg76H9ECTe9zJxsZ
TFmhqECi5mVmJ8tgkIGrykIZDtwjPi7SWQcCJN7gVNxSKn3Tjg1YoFvtTymywbZY
0rrJjVf2qtjxmC4aX1y6eFGEOQzkYc4Q+qeBQAcSZ4HZIcPKxIO/afE6fKrRZQ7O
ZdonNu6TfvWq+wgd/iPh2FFPJ5Ekxl+zHkR0cKHoAY6bnH6fO4BFd7w/m0K859g6
/OizniKlkD+ZpB/RWfsoW0HW75zHMAAG8RO22hQsUky8UnoTYEgNtMNHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjtkDAkQ8poLog9y4XzhV/RzaqbMB8GA1UdIwQY
MBaAFPYTfFl9HjDLdWGOUfQrf3ntX/yIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWhOOFdYMGVNTXQxWVk1UjlDdF9lZTFmX0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wZjFmOWYtNWE1MS00YmQ2LWJmMzAt
MzlhMjQzODhhNWU4LzEvOWhOOFdYMGVNTXQxWVk1UjlDdF9lZTFmX0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wZjFmOWYtNWE1MS00YmQ2LWJmMzAtMzlhMjQzODhhNWU4
LzEvOWhOOFdYMGVNTXQxWVk1UjlDdF9lZTFmX0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlofGderI
bBdvtmQvySyGLLP8Azs91stMNkoE617HY/9us3icN3w9L+OrQm5c0oUejk+S00Vf
ytRZPM+s/CNydbb7YU+90pF22ugKNQ4uI+S9ql2X+Kq2K8V1hceP63rXCbIhEt+y
q9JmVCaLky2yQFPW/iyvvlzCixhuB2uc3EVUJMmEw29WJPqe1BF2m9W7g9PGWp8E
35ToUn+QuCrkjGJLl7FMs/UMoCvQkx3d3Zef/od41heQDf9D3YuCv9vQvlvQOELl
rGqCCSR5fDiRE/xb3ljbWAHgSkOS4TwHIsBLjtUktateP9JRoTFlHP30qFNjTwNL
1FwQG0zB4anJTQ==
-----END CERTIFICATE-----
Generated at Fri May 3 05:38:42 2024 by rpki-client on console-fra.rpki-client.org