Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File:                     8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier:          LYldy1mSmwoDwJdAOHWoUb35x1T+fJmDfVhKHTYrKH8=
Subject key identifier:   9A:C9:56:68:39:13:3E:13:CF:9E:84:66:FA:17:3D:D1:73:37:E3:27
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer:       /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial:       018F43B35D10DA6C15112D9E04DFB24E67E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number:          0DC8
Signing time:             Sat 04 May 2024 13:02:59 +0000
Manifest this update:     Sat 04 May 2024 13:02:59 +0000
Manifest next update:     Sun 05 May 2024 13:02:59 +0000
Files and hashes:         1: 0DOBYWfrnTp9aoH6PPZ6oSIu2Zw.roa (hash: R1WNGZclLbvVy8+tzA6RupLniLa9FgZr42sN8SAf/4Y=)
                          2: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: 5+ekTjm1zVABQjIP5CsPO9tK6sZS/9eUjatp7L0vFPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:5d:10:da:6c:15:11:2d:9e:04:df:b2:4e:67:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
        Validity
            Not Before: May  4 13:02:59 2024 GMT
            Not After : May  5 13:02:59 2024 GMT
        Subject: CN=9ac9566839133e13cf9e8466fa173dd17337e327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:82:74:80:26:4f:c3:3e:32:e7:57:91:b5:
                    33:9e:94:ee:24:26:af:77:fc:0a:6c:40:65:cd:14:
                    5a:55:26:bb:04:17:4a:55:ba:67:d3:ff:30:1f:58:
                    59:a8:dc:12:ad:14:fd:31:f6:29:00:00:40:0d:d3:
                    8d:d3:3f:f4:77:86:30:2e:83:ca:1f:ae:45:cc:40:
                    28:4f:17:e3:29:b8:20:38:a0:e5:d1:b4:f0:7b:74:
                    19:9a:e1:39:9c:c7:b4:35:84:81:58:8a:1e:ca:b6:
                    48:8f:56:48:4f:11:02:91:f4:a2:44:84:e3:ad:74:
                    e1:4a:f8:79:a7:0b:88:d5:67:49:fe:6d:41:e7:32:
                    85:65:c4:c0:e8:c3:94:0e:14:2f:c5:03:aa:a2:4f:
                    7f:a1:8c:b4:fb:f5:05:32:e8:da:d5:35:14:b9:58:
                    18:af:2d:72:3a:79:ea:87:46:e1:ef:a9:02:ba:fe:
                    00:2a:6f:f3:04:e0:bc:49:a4:07:c8:a6:a9:0e:17:
                    c6:37:61:7a:4c:b6:96:2a:de:e3:c6:e6:af:3e:fd:
                    82:8a:66:a7:bc:00:c8:2b:1a:9a:cf:ec:95:d4:27:
                    49:61:d1:c3:ba:d3:47:0e:bb:d5:81:e0:16:50:08:
                    f0:f2:91:2b:05:5b:3f:a6:72:33:0a:31:ca:08:ac:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:56:68:39:13:3E:13:CF:9E:84:66:FA:17:3D:D1:73:37:E3:27
            X509v3 Authority Key Identifier:
                keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:b2:80:0e:54:f7:40:9f:a9:2e:ce:48:5b:f2:fa:7c:db:
         a9:eb:36:1b:70:73:73:d6:19:84:29:91:fc:84:09:48:6e:50:
         09:1a:2f:ec:4c:92:d3:dd:9e:68:f0:db:e0:24:15:97:02:2d:
         fe:3b:86:be:5b:43:fc:c1:38:15:a3:ca:70:da:34:93:15:79:
         2c:90:3f:9e:eb:40:b0:e5:d9:da:54:74:2d:80:ab:69:53:e9:
         a6:25:eb:9c:5e:62:eb:64:ce:dd:74:40:cb:9b:ca:0c:6b:bd:
         13:37:10:a6:85:f7:18:d5:df:1c:3f:18:a7:89:c6:d3:1f:8d:
         23:ed:f0:af:b3:b5:6e:25:c4:df:86:9c:f7:db:67:b6:63:13:
         11:f9:33:62:17:df:c6:f2:11:6c:df:d7:b3:ab:33:e5:47:cb:
         f1:c8:88:12:4c:f8:56:c8:7b:3f:01:72:1e:76:4e:b0:e2:63:
         b2:05:3a:d4:b6:cd:e6:bd:0b:42:da:a3:1d:bd:64:85:73:f8:
         66:96:98:ee:45:ff:c6:0a:bc:1c:c4:07:c3:ba:39:c1:1c:17:
         ff:91:53:dd:6f:42:2f:0f:16:f5:5b:0c:d5:99:b7:e8:f1:ca:
         62:d5:27:91:75:eb:2c:08:0f:26:52:ff:9a:37:ea:26:3c:3f:
         b0:df:34:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Ds10Q2mwVES2eBN+yTmfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjQwNTA0MTMwMjU5WhcNMjQwNTA1MTMwMjU5WjAzMTEwLwYDVQQD
Eyg5YWM5NTY2ODM5MTMzZTEzY2Y5ZTg0NjZmYTE3M2RkMTczMzdlMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3OCdIAmT8M+MudXkbUznpTuJCav
d/wKbEBlzRRaVSa7BBdKVbpn0/8wH1hZqNwSrRT9MfYpAABADdON0z/0d4YwLoPK
H65FzEAoTxfjKbggOKDl0bTwe3QZmuE5nMe0NYSBWIoeyrZIj1ZITxECkfSiRITj
rXThSvh5pwuI1WdJ/m1B5zKFZcTA6MOUDhQvxQOqok9/oYy0+/UFMuja1TUUuVgY
ry1yOnnqh0bh76kCuv4AKm/zBOC8SaQHyKapDhfGN2F6TLaWKt7jxuavPv2Ciman
vADIKxqaz+yV1CdJYdHDutNHDrvVgeAWUAjw8pErBVs/pnIzCjHKCKzKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrJVmg5Ez4Tz56EZvoXPdFzN+MnMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjqygA5U
90CfqS7OSFvy+nzbqes2G3Bzc9YZhCmR/IQJSG5QCRov7EyS092eaPDb4CQVlwIt
/juGvltD/ME4FaPKcNo0kxV5LJA/nutAsOXZ2lR0LYCraVPppiXrnF5i62TO3XRA
y5vKDGu9EzcQpoX3GNXfHD8Yp4nG0x+NI+3wr7O1biXE34ac99tntmMTEfkzYhff
xvIRbN/Xs6sz5UfL8ciIEkz4Vsh7PwFyHnZOsOJjsgU61LbN5r0LQtqjHb1khXP4
ZpaY7kX/xgq8HMQHw7o5wRwX/5FT3W9CLw8W9VsM1Zm36PHKYtUnkXXrLAgPJlL/
mjfqJjw/sN80vQ==
-----END CERTIFICATE-----
Generated at Sat May 4 13:58:14 2024 by rpki-client on console-ams.rpki-client.org