Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File:                     8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier:          8aIBm+bbN4HZ+qMqAf1GLEo1SvpSudn07DEOJnAr9dU=
Subject key identifier:   99:64:F1:0E:8D:86:0E:84:7E:00:B6:AB:05:BF:A9:81:29:13:28:C8
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer:       /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial:       0191FB22FC324C7FA3A18B6D35E2C2EC765E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number:          8D
Signing time:             Mon 16 Sep 2024 14:00:59 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:59 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:59 +0000
Files and hashes:         1: 7bI6poPDNtqTF5jHatPO7ALtCCs.roa (hash: HUF4tOhgQi4WGgzGImmdT4Dn+Hb1KorR++Sj8TUxrfU=)
                          2: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: ySkok6ovV4Nh9lfyWaCDhe6A/1sskYv/oOgSTaRXzbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:fc:32:4c:7f:a3:a1:8b:6d:35:e2:c2:ec:76:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
        Validity
            Not Before: Sep 16 14:00:59 2024 GMT
            Not After : Sep 17 14:00:59 2024 GMT
        Subject: CN=9964f10e8d860e847e00b6ab05bfa981291328c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:c6:60:d7:b7:05:7a:b3:80:2e:98:16:b0:
                    c4:87:20:36:51:9a:8e:db:9a:bd:94:b8:09:bc:93:
                    7d:ae:51:15:7a:90:6f:5e:68:f2:4d:25:a8:70:40:
                    13:96:85:20:2e:80:e7:2d:88:f4:cd:22:59:33:e4:
                    c5:1d:bb:12:79:c3:99:2b:87:cb:89:9a:0d:3c:63:
                    54:0d:b7:78:70:83:12:72:06:34:6b:f6:28:85:e6:
                    e1:59:af:9d:82:85:09:c6:19:a3:42:a5:87:b3:ae:
                    ff:8e:2f:a0:be:d0:e8:de:4a:27:d1:51:7f:0e:6d:
                    ac:5d:e7:06:2a:ca:c0:76:ff:31:a9:df:05:6a:92:
                    79:2f:c8:5a:2c:ba:4d:e7:1c:e7:d8:cb:9f:bc:12:
                    8c:0e:28:df:02:dd:ae:bf:2d:c2:54:53:cc:34:a3:
                    71:d5:62:3b:57:8c:0f:44:0b:29:6a:a3:70:c4:6f:
                    99:b5:51:b5:fe:51:59:9c:31:27:48:51:00:70:b4:
                    0b:e1:1f:d7:02:4c:6c:56:86:d2:74:b7:ba:3d:2b:
                    3c:74:0b:dc:d0:eb:34:98:de:de:ca:cd:4a:4e:ad:
                    17:79:b5:34:0f:71:3f:d3:5b:cf:66:f8:6c:0b:81:
                    53:5a:68:68:a4:ba:d6:04:e3:9a:ca:32:00:c1:9c:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:F1:0E:8D:86:0E:84:7E:00:B6:AB:05:BF:A9:81:29:13:28:C8
            X509v3 Authority Key Identifier:
                keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:c1:a6:94:3d:ae:9d:54:64:3e:6e:3b:05:7d:0c:c3:2d:
         28:71:be:bc:47:48:e5:b3:fe:eb:0b:9e:c5:7c:0d:b6:8a:e1:
         ef:b5:96:43:8f:e1:2a:5d:e2:b6:a4:c7:61:88:fc:f1:3d:6c:
         f4:01:63:c2:55:4a:e0:4f:d2:af:a6:f4:b3:54:92:ae:65:63:
         f6:b5:e4:71:ca:08:b0:d3:a0:c6:c8:2e:9f:ea:4a:79:58:6e:
         9e:a5:53:60:1a:a3:36:7f:25:e1:13:87:20:f3:2c:fc:2d:d1:
         1c:22:85:d7:1e:cd:28:aa:f4:c6:2b:cf:e1:da:5c:90:75:a0:
         32:76:2d:3f:fc:4b:12:53:24:92:fc:6e:e0:08:8f:5c:e0:ca:
         7a:e4:5c:30:00:15:27:b5:b4:2d:c2:b5:27:b1:49:69:f5:b1:
         75:d9:65:54:0c:fc:cb:b2:9f:1a:c6:da:c5:f0:50:b4:05:71:
         38:6b:cd:13:77:40:3d:4f:30:48:b7:a3:14:56:c1:c0:92:de:
         04:c0:a8:ed:49:69:76:27:41:c6:12:00:30:22:6c:bb:97:a8:
         af:d4:ac:e4:49:46:81:25:cb:6a:14:f8:2e:d5:7f:c5:53:f8:
         5a:2f:ed:b0:cd:f8:c2:54:a2:f2:1c:b3:63:0a:f6:ca:50:ad:
         72:cf:16:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7IvwyTH+joYttNeLC7HZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh
NzYwNTcwHhcNMjQwOTE2MTQwMDU5WhcNMjQwOTE3MTQwMDU5WjAzMTEwLwYDVQQD
Eyg5OTY0ZjEwZThkODYwZTg0N2UwMGI2YWIwNWJmYTk4MTI5MTMyOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcXGYNe3BXqzgC6YFrDEhyA2UZqO
25q9lLgJvJN9rlEVepBvXmjyTSWocEATloUgLoDnLYj0zSJZM+TFHbsSecOZK4fL
iZoNPGNUDbd4cIMScgY0a/YohebhWa+dgoUJxhmjQqWHs67/ji+gvtDo3kon0VF/
Dm2sXecGKsrAdv8xqd8FapJ5L8haLLpN5xzn2MufvBKMDijfAt2uvy3CVFPMNKNx
1WI7V4wPRAspaqNwxG+ZtVG1/lFZnDEnSFEAcLQL4R/XAkxsVobSdLe6PSs8dAvc
0Os0mN7eys1KTq0XebU0D3E/01vPZvhsC4FTWmhopLrWBOOayjIAwZxI6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlk8Q6Nhg6EfgC2qwW/qYEpEyjIMB8GA1UdIwQY
MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt
YzQ1ZjhlMjUxMjQ4LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4
LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/DBppQ9
rp1UZD5uOwV9DMMtKHG+vEdI5bP+6wuexXwNtorh77WWQ4/hKl3itqTHYYj88T1s
9AFjwlVK4E/Sr6b0s1SSrmVj9rXkccoIsNOgxsgun+pKeVhunqVTYBqjNn8l4ROH
IPMs/C3RHCKF1x7NKKr0xivP4dpckHWgMnYtP/xLElMkkvxu4AiPXODKeuRcMAAV
J7W0LcK1J7FJafWxddllVAz8y7KfGsbaxfBQtAVxOGvNE3dAPU8wSLejFFbBwJLe
BMCo7UlpdidBxhIAMCJsu5eor9Ss5ElGgSXLahT4LtV/xVP4Wi/tsM34wlSi8hyz
Ywr2ylCtcs8W+Q==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:33:31 2024 by rpki-client on console-ams.rpki-client.org