Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File:                     jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier:          gCj8NTCgzNqn9eLeEy1p7WoQwBuLv8GCB/c12EYkOMk=
Subject key identifier:   34:31:1B:2C:9E:17:32:12:C9:48:2B:3A:6B:C0:14:2B:A7:AF:8B:22
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer:       /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial:       018F8749087EC69D2FECAC8522E56C57AF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number:          081F
Signing time:             Fri 17 May 2024 16:01:01 +0000
Manifest this update:     Fri 17 May 2024 16:01:01 +0000
Manifest next update:     Sat 18 May 2024 16:01:01 +0000
Files and hashes:         1: 2c2AgHpGt8fDyotDjvhpSOqR-G0.roa (hash: l7cb4Rc5liz06vITxqBo2Ktwj7Yo0uZx1DIJfHT8zCo=)
                          2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: MwLSdQvzjVf1q84qfHx0Q7HRIIaJRPEX7ZfoIwBnPEw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:08:7e:c6:9d:2f:ec:ac:85:22:e5:6c:57:af:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
        Validity
            Not Before: May 17 16:01:01 2024 GMT
            Not After : May 18 16:01:01 2024 GMT
        Subject: CN=34311b2c9e173212c9482b3a6bc0142ba7af8b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:40:59:5e:05:2c:ed:7b:66:76:5b:14:eb:
                    62:95:6c:25:c2:c0:00:1c:b4:73:2e:1b:76:b4:e0:
                    23:da:ed:4b:e2:d6:2f:ed:09:f2:99:3e:b9:40:89:
                    7f:8d:1c:38:41:b5:e1:a9:ab:6b:ee:3c:32:d0:f9:
                    a8:bf:53:8f:09:0e:18:11:91:f8:6c:ef:1f:58:47:
                    f5:86:eb:01:e3:7c:b7:21:0a:36:44:c6:b3:3d:4f:
                    d9:95:ca:5d:5d:f3:7c:fc:ee:3d:79:cc:50:f4:84:
                    51:13:8b:17:a7:bc:e1:1f:6e:41:c0:53:26:f3:2d:
                    46:44:81:50:43:7b:9f:80:9a:22:81:c7:49:a1:8e:
                    97:5c:63:8f:e1:7a:3b:78:9d:52:5d:1a:bf:1b:d3:
                    ac:6b:a9:f5:c2:79:55:9c:df:06:f2:36:73:0d:92:
                    a1:f8:c0:ab:11:fa:b8:b9:d9:6b:06:7a:b5:6d:01:
                    4c:6e:91:8d:18:5c:79:11:09:8d:f3:8f:51:3c:11:
                    be:f8:0b:be:7b:21:28:5b:ea:02:21:4e:15:2b:c0:
                    b4:7c:53:f7:fa:ec:53:c6:91:a6:60:f0:a0:6a:e6:
                    7f:e6:28:3f:9d:a6:d7:9e:7a:1c:92:aa:55:f8:c8:
                    11:7b:f3:67:82:c9:19:3b:d2:60:b2:ab:e9:c2:4d:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:31:1B:2C:9E:17:32:12:C9:48:2B:3A:6B:C0:14:2B:A7:AF:8B:22
            X509v3 Authority Key Identifier:
                keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:89:e2:fe:69:ae:1e:bf:6c:be:34:03:d0:88:7b:bd:be:
         48:da:a1:d9:ac:79:e0:d8:98:22:06:39:dc:1d:2b:87:13:5e:
         ea:39:59:98:ea:a0:5a:e9:10:75:e3:93:31:be:62:9f:ec:5d:
         b3:73:1f:47:81:10:f7:21:95:b4:fe:08:1f:35:ad:22:4f:28:
         3a:c3:36:0e:c6:37:b3:6e:74:26:82:fb:df:b1:df:e2:d1:c4:
         b8:d6:cb:19:27:f3:c9:77:b0:70:6b:1b:9a:28:ba:72:84:c2:
         19:60:1c:cc:dc:38:74:76:30:8e:6d:9c:b0:0f:a5:d0:9a:06:
         3b:6c:6d:5b:63:42:05:61:e4:2f:56:23:a6:f5:8e:38:a7:2e:
         0d:f4:d8:55:99:d6:e8:29:7a:35:b0:2e:fd:bd:9f:9a:3c:64:
         12:0d:2b:bd:e1:86:f0:b3:b6:1a:fc:49:6f:c3:70:9e:8d:e4:
         bd:93:60:a1:75:04:40:24:d9:27:04:74:7d:28:1c:65:d8:2f:
         f5:bb:3d:94:32:4b:1a:59:bb:f5:84:0d:6d:ec:01:56:7a:01:
         32:b2:86:a6:e0:df:a8:06:c7:10:40:73:ae:28:6d:7f:9c:51:
         81:49:50:d6:e4:8c:28:2f:a5:4d:45:d7:96:dd:15:fa:ab:56:
         bd:39:15:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSQh+xp0v7KyFIuVsV691MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy
NzFmMjQwHhcNMjQwNTE3MTYwMTAxWhcNMjQwNTE4MTYwMTAxWjAzMTEwLwYDVQQD
EygzNDMxMWIyYzllMTczMjEyYzk0ODJiM2E2YmMwMTQyYmE3YWY4YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fpAWV4FLO17ZnZbFOtilWwlwsAA
HLRzLht2tOAj2u1L4tYv7QnymT65QIl/jRw4QbXhqatr7jwy0Pmov1OPCQ4YEZH4
bO8fWEf1husB43y3IQo2RMazPU/ZlcpdXfN8/O49ecxQ9IRRE4sXp7zhH25BwFMm
8y1GRIFQQ3ufgJoigcdJoY6XXGOP4Xo7eJ1SXRq/G9Osa6n1wnlVnN8G8jZzDZKh
+MCrEfq4udlrBnq1bQFMbpGNGFx5EQmN849RPBG++Au+eyEoW+oCIU4VK8C0fFP3
+uxTxpGmYPCgauZ/5ig/nabXnnockqpV+MgRe/NngskZO9Jgsqvpwk1QGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQxGyyeFzISyUgrOmvAFCunr4siMB8GA1UdIwQY
MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt
NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2
LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbeJ4v5p
rh6/bL40A9CIe72+SNqh2ax54NiYIgY53B0rhxNe6jlZmOqgWukQdeOTMb5in+xd
s3MfR4EQ9yGVtP4IHzWtIk8oOsM2DsY3s250JoL737Hf4tHEuNbLGSfzyXewcGsb
mii6coTCGWAczNw4dHYwjm2csA+l0JoGO2xtW2NCBWHkL1YjpvWOOKcuDfTYVZnW
6Cl6NbAu/b2fmjxkEg0rveGG8LO2GvxJb8Nwno3kvZNgoXUEQCTZJwR0fSgcZdgv
9bs9lDJLGlm79YQNbewBVnoBMrKGpuDfqAbHEEBzrihtf5xRgUlQ1uSMKC+lTUXX
lt0V+qtWvTkVuw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:48:34 2024 by rpki-client on console-ams.rpki-client.org