Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
File:                     _gyfMOO0bVC40b95udHbhPJRNLo.mft (raw, json)
Hash identifier:          oRQcavxbBzK9y/7Ynqz/NblmCyg2J9Ek5qe8lD5izlE=
Subject key identifier:   56:26:AB:34:8D:61:64:D8:1E:A4:28:E3:09:56:3F:34:DB:39:12:4E
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       018F73FAEAD215B071AEE63EFE70D27CF2A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
Manifest number:          08A9
Signing time:             Mon 13 May 2024 22:02:54 +0000
Manifest this update:     Mon 13 May 2024 22:02:54 +0000
Manifest next update:     Tue 14 May 2024 22:02:54 +0000
Files and hashes:         1: NXGee85ErSqoPHit0HbEI9RiTXA.roa (hash: mrQojEodQoPywO1DCX1hNHlcS314pUQ+hShQlzfdTpc=)
                          2: XXKSMBfdtj4wckKpZqtviuU7xFg.roa (hash: AnVa68j0ow0iry2rgLMUfSnCOuwaBZQrrfYMJBvfaO0=)
                          3: _gyfMOO0bVC40b95udHbhPJRNLo.crl (hash: 4eoYZIa1+KICNFpAkqtq5pouRGS72qBdey7j7LZXsxg=)
                          4: ne7u7zrQx9h3GyUCTzVtTKZz5yc.roa (hash: 3jTE7nHCoy0u9yFZiKr5iAaof29Zj8WJDdeH8FAjGpc=)
                          5: s8LVsFvaOxwp2E4b-2DaV_21w1I.roa (hash: P95qrYxWkT8pnUh8iTszvyQhE+gKTkiqgI76lRaKS6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 20:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:73:fa:ea:d2:15:b0:71:ae:e6:3e:fe:70:d2:7c:f2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: May 13 22:02:54 2024 GMT
            Not After : May 14 22:02:54 2024 GMT
        Subject: CN=5626ab348d6164d81ea428e309563f34db39124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:32:4d:f8:c7:4e:5f:93:3a:8d:66:5b:90:
                    16:91:ce:46:a3:f9:1c:8c:00:53:45:ca:89:64:f3:
                    72:4d:a1:db:82:74:e2:bf:63:2b:aa:4f:5a:ee:5a:
                    0e:c0:b9:68:60:a5:09:c5:44:43:d3:ee:af:82:8b:
                    f9:95:1a:da:29:7c:e3:d3:2b:5f:13:18:bd:16:a9:
                    3b:c1:df:38:db:e6:d3:1a:a3:9a:dc:1a:b7:46:b7:
                    a1:67:d5:60:3c:02:fa:5d:2b:d4:e0:73:19:80:bc:
                    78:9f:87:c6:c7:c7:8d:bb:e0:8a:d1:68:50:b8:08:
                    be:dd:72:d0:c9:8a:b8:c5:de:f3:22:95:13:a9:50:
                    fa:02:3b:3d:a9:2d:e6:6a:67:62:90:4e:86:54:15:
                    77:ea:26:04:f6:13:cf:be:29:a6:bf:a6:84:65:aa:
                    f3:31:06:12:36:2d:e1:ca:20:6e:d5:b1:a1:14:0a:
                    f7:5b:f6:bd:66:38:f7:9b:55:6f:4e:1e:24:9f:4e:
                    47:85:13:02:c8:58:0d:d8:b1:06:58:21:7a:21:ae:
                    0c:bd:07:a9:75:2c:ac:6f:3f:29:97:bb:06:14:92:
                    fc:a7:8d:20:99:1a:07:40:a9:2f:44:d6:c2:ed:e0:
                    68:2c:ae:f1:0d:af:bf:cf:25:03:88:a1:dc:83:0c:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:AB:34:8D:61:64:D8:1E:A4:28:E3:09:56:3F:34:DB:39:12:4E
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:66:44:0f:90:c3:3c:9d:8c:cb:3e:9d:e6:89:1c:9d:a0:
         a5:f2:70:e2:26:02:84:bc:54:a1:36:17:b6:76:4f:31:a0:54:
         f5:65:a4:88:53:b6:7a:e5:c4:22:ce:3f:26:69:fa:3f:c9:33:
         92:31:a8:5d:7a:5b:bb:79:c4:8c:e4:8a:62:50:f6:cd:19:f4:
         68:db:00:dd:37:47:de:bd:68:f7:31:04:7a:70:b1:5e:30:a0:
         bc:7c:a5:1e:80:8e:17:79:5a:cf:32:da:eb:64:21:2e:4c:dd:
         17:77:8e:b2:a7:db:3b:f7:01:f1:61:eb:35:bc:cb:8a:1d:9f:
         d3:3e:fb:0b:04:a1:fb:14:6d:cd:e0:2d:c5:ff:fd:89:4e:d0:
         b9:fd:e8:04:dd:10:27:06:8d:9d:ac:76:b6:7d:c0:56:dc:30:
         de:d1:61:7b:cc:37:1d:c7:fe:f9:7b:fa:9a:41:ed:d9:62:35:
         50:31:d9:3e:91:46:2e:c9:b1:45:31:51:02:63:99:df:dd:dc:
         4d:50:bf:a0:e3:2a:16:e9:e5:6f:e8:24:6b:79:d9:14:da:1a:
         18:d4:03:c1:47:14:ec:0d:79:8f:49:79:8d:b2:15:ec:c7:b2:
         21:fd:db:3d:2b:27:ba:2d:a4:5d:e6:8d:6a:a8:e9:6e:d6:56:
         a1:3e:67:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9z+urSFbBxruY+/nDSfPKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGM5ZjMwZTNiNDZkNTBiOGQxYmY3OWI5ZDFkYjg0ZjI1
MTM0YmEwHhcNMjQwNTEzMjIwMjU0WhcNMjQwNTE0MjIwMjU0WjAzMTEwLwYDVQQD
Eyg1NjI2YWIzNDhkNjE2NGQ4MWVhNDI4ZTMwOTU2M2YzNGRiMzkxMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq28yTfjHTl+TOo1mW5AWkc5Go/kc
jABTRcqJZPNyTaHbgnTiv2Mrqk9a7loOwLloYKUJxURD0+6vgov5lRraKXzj0ytf
Exi9Fqk7wd842+bTGqOa3Bq3RrehZ9VgPAL6XSvU4HMZgLx4n4fGx8eNu+CK0WhQ
uAi+3XLQyYq4xd7zIpUTqVD6Ajs9qS3mamdikE6GVBV36iYE9hPPvimmv6aEZarz
MQYSNi3hyiBu1bGhFAr3W/a9Zjj3m1VvTh4kn05HhRMCyFgN2LEGWCF6Ia4MvQep
dSysbz8pl7sGFJL8p40gmRoHQKkvRNbC7eBoLK7xDa+/zyUDiKHcgwyvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYmqzSNYWTYHqQo4wlWPzTbORJOMB8GA1UdIwQY
MBaAFP4MnzDjtG1QuNG/ebnR24TyUTS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iOWVkNmMtZThjNS00MzFlLWIxODgt
ZjUyMDBmNTQ5Mzc3LzEvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iOWVkNmMtZThjNS00MzFlLWIxODgtZjUyMDBmNTQ5Mzc3
LzEvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7pmRA+Q
wzydjMs+neaJHJ2gpfJw4iYChLxUoTYXtnZPMaBU9WWkiFO2euXEIs4/Jmn6P8kz
kjGoXXpbu3nEjOSKYlD2zRn0aNsA3TdH3r1o9zEEenCxXjCgvHylHoCOF3lazzLa
62QhLkzdF3eOsqfbO/cB8WHrNbzLih2f0z77CwSh+xRtzeAtxf/9iU7Quf3oBN0Q
JwaNnax2tn3AVtww3tFhe8w3Hcf++Xv6mkHt2WI1UDHZPpFGLsmxRTFRAmOZ393c
TVC/oOMqFunlb+gka3nZFNoaGNQDwUcU7A15j0l5jbIV7MeyIf3bPSsnui2kXeaN
aqjpbtZWoT5n9A==
-----END CERTIFICATE-----
Generated at Tue May 14 00:18:27 2024 by rpki-client on console-fra.rpki-client.org