Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File:                     gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier:          hYFd3MDeWTyg1TpAZ/Xvy+8z5YbStsXITKvlSKNYjJ0=
Subject key identifier:   A6:1E:E3:81:5E:06:36:C4:00:1F:81:F7:43:2C:68:86:CC:DE:3C:62
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer:       /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial:       018F8749BF4E4E867438634C8945A651F167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number:          0C24
Signing time:             Fri 17 May 2024 16:01:48 +0000
Manifest this update:     Fri 17 May 2024 16:01:48 +0000
Manifest next update:     Sat 18 May 2024 16:01:48 +0000
Files and hashes:         1: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: ToybwP2T4+SKfY+voAPtjfevTVWevZFP2oaFlCVlXto=)
                          2: lyYn0kodN-NkNeH7PccGIVanJCs.roa (hash: GugN+9DdQ4NJFR0vdsaSBJVES475C5yhf7tRrRejnk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bf:4e:4e:86:74:38:63:4c:89:45:a6:51:f1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
        Validity
            Not Before: May 17 16:01:48 2024 GMT
            Not After : May 18 16:01:48 2024 GMT
        Subject: CN=a61ee3815e0636c4001f81f7432c6886ccde3c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:f7:7c:82:cb:6e:21:d2:12:ce:56:bb:fb:
                    fd:1f:f0:65:a5:b5:27:83:b4:61:fa:a6:06:1d:7e:
                    4c:28:f7:db:35:94:8b:03:d6:77:92:e3:d7:c6:95:
                    03:d5:3b:9f:0d:d4:2e:65:c5:3f:f1:80:cc:d5:ae:
                    7e:01:ae:9f:a5:d7:15:e6:65:16:8c:68:b4:1f:30:
                    01:d5:a9:f7:13:7c:39:dc:59:ed:e4:2f:b3:b3:ae:
                    44:69:39:76:d0:65:92:1c:a5:c6:35:a1:85:b4:fa:
                    02:25:24:d2:31:b4:b7:bc:5a:76:16:2d:68:7b:90:
                    f8:3a:1a:98:62:c2:e0:14:f1:e8:80:36:e1:bc:42:
                    73:c5:68:ea:2e:f2:01:e6:3b:9b:e6:89:fd:f7:29:
                    12:9f:fe:fc:3b:84:fb:cc:f3:38:20:fc:06:18:ff:
                    4a:1a:e0:47:33:28:60:31:85:0f:a1:c6:ce:ce:36:
                    99:45:f9:23:b3:35:a0:85:2d:65:09:a9:a7:d4:fe:
                    f5:2f:6b:a9:ae:fb:dc:cb:9f:23:a2:a3:89:28:02:
                    58:33:4d:30:99:6d:35:85:52:2c:66:8d:57:e6:b4:
                    ac:3b:46:43:ab:41:de:ad:f7:21:b7:b6:b6:23:ed:
                    88:07:80:d9:b4:7f:44:6a:2f:58:cd:42:d8:af:ec:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:E3:81:5E:06:36:C4:00:1F:81:F7:43:2C:68:86:CC:DE:3C:62
            X509v3 Authority Key Identifier:
                keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:54:f3:af:4d:ed:f7:9f:54:fc:c0:07:96:2a:61:27:85:
         d2:b7:40:ec:60:b8:b9:eb:77:43:8e:6c:76:a9:69:0e:39:f1:
         18:4c:85:d1:28:bc:d5:38:25:65:2c:d0:31:bd:cb:47:b1:12:
         40:8b:6f:70:03:46:3a:9b:19:20:f9:d3:f8:b6:cb:fd:0f:f3:
         90:45:1b:54:df:9a:2e:22:f4:27:58:4b:e2:99:6f:0f:9f:9c:
         6f:26:07:19:ca:09:18:8c:3e:64:12:14:cb:82:08:c9:0a:8e:
         86:21:a3:f7:4b:7f:2b:e5:91:b7:3b:fb:52:8a:73:bb:4f:b6:
         fa:65:bd:fe:58:50:e4:27:c9:3f:d4:b4:91:f0:9b:f9:14:0e:
         f3:e6:d8:5e:c4:01:bd:a2:fc:2a:81:29:3e:5f:5e:f3:31:5b:
         43:7b:2a:9d:e0:51:ea:75:77:08:b7:5b:96:eb:6c:fc:68:d2:
         cb:6e:6e:88:11:50:a7:ca:dc:7b:86:da:12:ba:c4:ac:c5:d5:
         fd:61:8a:bc:44:ba:23:7e:bb:c7:1a:ae:5b:ff:22:85:6b:0b:
         c7:5a:1b:82:13:9b:70:16:1b:cb:11:b4:ee:1b:5f:0c:c0:fb:
         71:d8:ab:2e:1e:da:2c:02:e7:a3:eb:5c:51:e1:35:fe:bb:d9:
         6e:38:da:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSb9OToZ0OGNMiUWmUfFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz
YTBiZjkwHhcNMjQwNTE3MTYwMTQ4WhcNMjQwNTE4MTYwMTQ4WjAzMTEwLwYDVQQD
EyhhNjFlZTM4MTVlMDYzNmM0MDAxZjgxZjc0MzJjNjg4NmNjZGUzYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowv3fILLbiHSEs5Wu/v9H/BlpbUn
g7Rh+qYGHX5MKPfbNZSLA9Z3kuPXxpUD1TufDdQuZcU/8YDM1a5+Aa6fpdcV5mUW
jGi0HzAB1an3E3w53Fnt5C+zs65EaTl20GWSHKXGNaGFtPoCJSTSMbS3vFp2Fi1o
e5D4OhqYYsLgFPHogDbhvEJzxWjqLvIB5jub5on99ykSn/78O4T7zPM4IPwGGP9K
GuBHMyhgMYUPocbOzjaZRfkjszWghS1lCamn1P71L2uprvvcy58joqOJKAJYM00w
mW01hVIsZo1X5rSsO0ZDq0Herfcht7a2I+2IB4DZtH9Eai9YzULYr+wjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYe44FeBjbEAB+B90MsaIbM3jxiMB8GA1UdIwQY
MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt
YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2
LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFhU869N
7fefVPzAB5YqYSeF0rdA7GC4uet3Q45sdqlpDjnxGEyF0Si81TglZSzQMb3LR7ES
QItvcANGOpsZIPnT+LbL/Q/zkEUbVN+aLiL0J1hL4plvD5+cbyYHGcoJGIw+ZBIU
y4IIyQqOhiGj90t/K+WRtzv7Uopzu0+2+mW9/lhQ5CfJP9S0kfCb+RQO8+bYXsQB
vaL8KoEpPl9e8zFbQ3sqneBR6nV3CLdbluts/GjSy25uiBFQp8rce4baErrErMXV
/WGKvES6I367xxquW/8ihWsLx1obghObcBYbyxG07htfDMD7cdirLh7aLALno+tc
UeE1/rvZbjjaZw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:48:59 2024 by rpki-client on console-ams.rpki-client.org