Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File:                     v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier:          ppyol55aFzIadnE6w4pMCyIX7yYGzn/RtHaZT7zeeKQ=
Subject key identifier:   41:2F:52:F6:49:70:DA:5D:26:8F:0F:E8:70:B6:A4:1F:C5:81:E0:6E
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer:       /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial:       018F8823EA9142052F3971862B77216DE962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 20:00:06 +0000
Manifest this update:     Fri 17 May 2024 20:00:06 +0000
Manifest next update:     Sat 18 May 2024 20:00:06 +0000
Files and hashes:         1: 6IpkFG0LzhZHdGzZzQPyWOotQYk.roa (hash: cEuV+d53DqWbnLdaA4fygeFbrMAeziTI1UQ23kP6BoY=)
                          2: guQTixey6alHiygZ1vz05gReRlc.roa (hash: MQ3HXkur67eEG3T6s3OpuLZMhQg/UL0EEHXsdrkUCtg=)
                          3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: xQwyPabjp77FYgYhTOqOY1QhzBt9C5zTO3AXnueu+ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:ea:91:42:05:2f:39:71:86:2b:77:21:6d:e9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
        Validity
            Not Before: May 17 20:00:06 2024 GMT
            Not After : May 18 20:00:06 2024 GMT
        Subject: CN=412f52f64970da5d268f0fe870b6a41fc581e06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:77:d9:c4:a9:e8:8a:f6:24:dc:99:85:b9:
                    3c:9a:f1:24:c9:22:fb:85:b5:24:80:1d:cd:1c:3b:
                    bb:6a:1a:18:49:f2:2f:51:eb:14:6b:09:4b:8e:f2:
                    99:29:81:31:70:2e:ec:66:7f:f4:b8:c5:33:ee:33:
                    42:1a:d1:02:fe:b1:37:5a:ec:74:f4:8d:6d:80:62:
                    62:7f:1d:a4:0c:8d:5f:f0:bf:48:3a:fe:04:e3:43:
                    82:70:1f:b8:12:3f:7d:6f:ea:35:26:24:36:fc:a1:
                    49:4a:89:7f:73:20:f3:78:ae:af:3b:3f:77:e4:4e:
                    a3:ea:7d:3b:18:2d:e3:fe:79:ec:81:f3:8e:d4:8f:
                    56:f3:08:e9:e0:46:bf:68:b8:9f:1e:03:ab:dc:cd:
                    89:44:85:62:b6:9d:9e:0f:da:b2:86:17:1e:b2:86:
                    98:01:f9:f0:13:d4:da:34:86:88:72:bd:40:8e:ba:
                    13:a7:b8:b4:3e:e2:4f:ab:29:7a:c3:93:1e:a0:7b:
                    d9:19:9e:0a:42:3d:00:2d:c4:0a:34:79:68:5b:df:
                    12:1e:0f:23:86:15:ee:fb:5d:e0:2e:7d:52:74:a2:
                    54:eb:74:d8:32:9b:c4:7a:a3:c9:7e:f6:45:19:7d:
                    2c:ab:9a:83:7d:7d:08:0a:24:a4:fb:3b:54:cf:00:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:52:F6:49:70:DA:5D:26:8F:0F:E8:70:B6:A4:1F:C5:81:E0:6E
            X509v3 Authority Key Identifier:
                keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:35:0e:72:1c:55:17:00:d8:a0:ae:3f:f1:10:8b:d9:78:c5:
         b3:0b:53:66:32:19:c7:ad:84:30:99:e9:cd:9c:3c:64:13:91:
         0d:55:1b:78:af:dd:1b:28:03:ed:64:3f:27:c2:3c:aa:08:3c:
         26:63:32:be:ba:d1:8d:ad:85:cb:c5:06:a7:ac:9a:5b:ef:07:
         ae:32:97:73:e0:8f:3e:8f:62:90:30:e9:a3:ad:5d:4b:f8:62:
         62:3a:95:52:dc:1c:2d:a8:2d:78:12:d4:62:f7:68:53:cd:90:
         bf:dc:7b:39:6a:ea:ff:a2:31:3a:17:61:00:e9:b4:76:29:f0:
         60:66:72:01:6e:86:f1:91:af:6b:ad:cf:e7:a9:fe:20:e4:58:
         03:3a:a2:88:d7:11:8f:88:f4:9e:ef:2a:a2:29:ca:55:a2:ff:
         8a:f3:41:67:69:d8:4b:61:17:3d:35:a7:40:d9:dd:cf:71:67:
         3c:9b:fa:4c:ec:1f:7e:52:b0:ed:83:b3:5b:8e:44:fd:e0:49:
         84:3c:5d:5c:3b:2b:21:b5:04:a2:73:58:81:0d:a0:7a:ca:fe:
         0c:c6:07:1d:87:57:9f:dd:d1:03:89:dc:27:da:05:91:f0:3c:
         ba:c0:97:f6:fc:89:ea:69:c7:26:ec:f4:ed:65:12:e7:93:ca:
         83:43:39:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II+qRQgUvOXGGK3chbeliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm
YWM1ZWEwHhcNMjQwNTE3MjAwMDA2WhcNMjQwNTE4MjAwMDA2WjAzMTEwLwYDVQQD
Eyg0MTJmNTJmNjQ5NzBkYTVkMjY4ZjBmZTg3MGI2YTQxZmM1ODFlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsJ32cSp6Ir2JNyZhbk8mvEkySL7
hbUkgB3NHDu7ahoYSfIvUesUawlLjvKZKYExcC7sZn/0uMUz7jNCGtEC/rE3Wux0
9I1tgGJifx2kDI1f8L9IOv4E40OCcB+4Ej99b+o1JiQ2/KFJSol/cyDzeK6vOz93
5E6j6n07GC3j/nnsgfOO1I9W8wjp4Ea/aLifHgOr3M2JRIVitp2eD9qyhhcesoaY
AfnwE9TaNIaIcr1AjroTp7i0PuJPqyl6w5MeoHvZGZ4KQj0ALcQKNHloW98SHg8j
hhXu+13gLn1SdKJU63TYMpvEeqPJfvZFGX0sq5qDfX0ICiSk+ztUzwALhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEvUvZJcNpdJo8P6HC2pB/FgeBuMB8GA1UdIwQY
MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt
ZWE1N2NiZTM2ODExLzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx
LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTUOchxV
FwDYoK4/8RCL2XjFswtTZjIZx62EMJnpzZw8ZBORDVUbeK/dGygD7WQ/J8I8qgg8
JmMyvrrRja2Fy8UGp6yaW+8HrjKXc+CPPo9ikDDpo61dS/hiYjqVUtwcLagteBLU
YvdoU82Qv9x7OWrq/6IxOhdhAOm0dinwYGZyAW6G8ZGva63P56n+IORYAzqiiNcR
j4j0nu8qoinKVaL/ivNBZ2nYS2EXPTWnQNndz3FnPJv6TOwfflKw7YOzW45E/eBJ
hDxdXDsrIbUEonNYgQ2gesr+DMYHHYdXn93RA4ncJ9oFkfA8usCX9vyJ6mnHJuz0
7WUS55PKg0M5HQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:35:52 2024 by rpki-client on console-ams.rpki-client.org