Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
File:                     8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json)
Hash identifier:          Xzr3hxV/lyLwVvvTyM/Pec0CJ4Crw/WsIvhWUUg7Q6w=
Subject key identifier:   FD:66:CB:A9:BD:47:F4:A0:29:16:A4:98:1B:DC:42:2E:A7:81:62:95
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Certificate issuer:       /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial:       018F40E78723F4268690F9C7407292D78FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 00:01:06 +0000
Manifest this update:     Sat 04 May 2024 00:01:06 +0000
Manifest next update:     Sun 05 May 2024 00:01:06 +0000
Files and hashes:         1: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: KXi1jsGm+LthNwYn8E1YKX9xrqKBuv+ZR+Z7bAHA+v0=)
                          2: 9DLNUmRJ_3LuIchOkWxxnu5rqUQ.roa (hash: 2NAkMtrKhgbuVSV77slRSdAGaE+4wTFFMBjT5FDbS5A=)
                          3: GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa (hash: 6T6xIROgbi+b8XC+4EEJJIPICJxGus4uRH04Wdh50zo=)
                          4: M9fLJNPxdFy9gk7L0uBraRV2p7w.roa (hash: U4S6Bnr07HQ0HigUdzRskkza9s5/6j39lFR6hUMpRBA=)
                          5: O84Y9YaCdkkzJLyBgWQ2h--28Wo.roa (hash: m/RLM6vw2MOJJFaottelv3TFN7g+HcPRlTVzgS2IsdI=)
                          6: V0bC84UZrL-KrmpAYM6t-as_lDc.roa (hash: LXF7XW5xRIH8rZd2i3wKcz+h1I/cI2StjwZQhji5JyA=)
                          7: csf4knCgnaEDLjkdXAYPqD-fPhc.roa (hash: B8Wiv2MqZ+S5as4zGH51Ukw80QLxGlpqbtdIijvXl/g=)
                          8: nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa (hash: wpwGV7RtBawwydLdzKFrCNUGFH9Ekl4Zc9Dbnr5awNQ=)
                          9: ysdND1ustZzaDsp0dR-QZ5DPLdY.roa (hash: tqcET9dCrJYnpDkN2rJWlYKEE/Doo7WJmCPmTaa+rVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:e7:87:23:f4:26:86:90:f9:c7:40:72:92:d7:8f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Validity
            Not Before: May  4 00:01:06 2024 GMT
            Not After : May  5 00:01:06 2024 GMT
        Subject: CN=fd66cba9bd47f4a02916a4981bdc422ea7816295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:bf:6f:88:f0:65:e3:7f:bf:cb:49:ce:0c:
                    e3:3c:dd:f2:6e:df:16:e7:35:e0:ee:92:bf:8d:9c:
                    5d:6a:cc:55:fc:94:87:cf:3c:61:d6:d9:63:53:2a:
                    0b:ca:39:8b:9e:67:35:e4:f4:97:f6:74:44:95:2b:
                    74:35:07:80:ed:bf:25:b3:04:7e:95:7c:5a:ed:79:
                    39:f6:96:7a:7d:39:e3:82:59:9e:38:ca:a1:e6:ed:
                    70:ef:f6:29:dd:5f:8f:6e:2a:6e:2e:38:56:29:61:
                    99:5c:7c:b5:81:ac:9e:39:47:84:83:76:e0:39:ea:
                    23:4f:a9:b6:35:ab:24:26:d7:51:a8:0e:4e:57:96:
                    5b:42:68:df:30:a6:37:6e:52:03:8c:7f:79:07:19:
                    65:39:6c:fa:50:36:ba:55:63:1f:25:5f:4c:b5:34:
                    bb:51:bd:83:db:cc:98:1d:d8:e5:57:b5:c2:13:45:
                    92:0b:2a:76:3b:d8:28:c8:dc:c2:e3:a2:37:28:b7:
                    c6:e4:90:88:f4:89:cb:67:d2:ca:1b:3b:3e:64:de:
                    c8:38:15:fa:78:28:4c:99:7e:6d:5a:f7:be:e0:70:
                    da:7a:06:79:62:c3:11:11:89:bf:b0:06:0e:d0:20:
                    5f:7f:11:fb:98:fa:66:3b:8c:c8:2d:a9:30:eb:19:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:CB:A9:BD:47:F4:A0:29:16:A4:98:1B:DC:42:2E:A7:81:62:95
            X509v3 Authority Key Identifier:
                keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:26:b3:d0:27:bb:bb:c2:ea:45:d1:66:78:6b:bf:31:ec:73:
         fd:76:fe:77:01:b8:04:6a:80:c8:0b:d0:9e:cc:16:35:2c:a5:
         d5:84:04:d6:33:cf:dd:50:a8:20:ca:21:5b:d6:78:7e:3e:e9:
         5f:80:7d:9d:42:ad:6d:c7:2a:d8:36:34:fb:58:d3:34:2e:d4:
         97:5b:21:3b:44:d4:d5:d4:16:e0:bd:b5:f8:2a:75:c5:a5:7e:
         3a:0f:9f:9e:73:ed:96:99:c8:78:f5:d6:dc:25:a7:55:1a:ef:
         08:b2:ce:f3:e9:8f:f7:ff:8b:00:9b:aa:cb:93:ca:3e:b4:21:
         50:9a:7a:4b:7c:76:ce:2c:b5:88:78:52:17:1f:92:19:02:6b:
         47:12:e9:d0:e6:8e:80:f6:20:1d:95:9c:8d:cd:0d:0d:23:66:
         f7:b4:95:3f:de:43:81:43:96:18:51:fc:56:30:05:3d:6d:bc:
         42:29:6d:90:6f:eb:e6:f2:dc:8a:14:6b:63:4c:21:4c:5b:7f:
         76:de:f5:52:dd:72:c8:ac:3c:59:48:8e:99:65:42:f4:8a:0e:
         24:6d:7d:96:d7:c6:2c:2f:09:48:c7:83:b9:28:50:7b:4f:6f:
         c5:8b:78:94:f9:6f:2d:90:80:72:7e:47:c0:8b:72:eb:41:7f:
         ee:86:28:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9A54cj9CaGkPnHQHKS14/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1
MjYxNDMwHhcNMjQwNTA0MDAwMTA2WhcNMjQwNTA1MDAwMTA2WjAzMTEwLwYDVQQD
EyhmZDY2Y2JhOWJkNDdmNGEwMjkxNmE0OTgxYmRjNDIyZWE3ODE2Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPK/b4jwZeN/v8tJzgzjPN3ybt8W
5zXg7pK/jZxdasxV/JSHzzxh1tljUyoLyjmLnmc15PSX9nRElSt0NQeA7b8lswR+
lXxa7Xk59pZ6fTnjglmeOMqh5u1w7/Yp3V+PbipuLjhWKWGZXHy1gayeOUeEg3bg
OeojT6m2NaskJtdRqA5OV5ZbQmjfMKY3blIDjH95BxllOWz6UDa6VWMfJV9MtTS7
Ub2D28yYHdjlV7XCE0WSCyp2O9goyNzC46I3KLfG5JCI9InLZ9LKGzs+ZN7IOBX6
eChMmX5tWve+4HDaegZ5YsMREYm/sAYO0CBffxH7mPpmO4zILakw6xntFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1my6m9R/SgKRakmBvcQi6ngWKVMB8GA1UdIwQY
MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt
ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw
LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSaz0Ce7
u8LqRdFmeGu/Mexz/Xb+dwG4BGqAyAvQnswWNSyl1YQE1jPP3VCoIMohW9Z4fj7p
X4B9nUKtbccq2DY0+1jTNC7Ul1shO0TU1dQW4L21+Cp1xaV+Og+fnnPtlpnIePXW
3CWnVRrvCLLO8+mP9/+LAJuqy5PKPrQhUJp6S3x2ziy1iHhSFx+SGQJrRxLp0OaO
gPYgHZWcjc0NDSNm97SVP95DgUOWGFH8VjAFPW28QiltkG/r5vLcihRrY0whTFt/
dt71Ut1yyKw8WUiOmWVC9IoOJG19ltfGLC8JSMeDuShQe09vxYt4lPlvLZCAcn5H
wIty60F/7oYoyg==
-----END CERTIFICATE-----
Generated at Sat May 4 03:13:02 2024 by rpki-client on console-fra.rpki-client.org