Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File:                     DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier:          Sz9gkxxeW/JS7Jr58nhgGp0vPwcbyrnvpiwTYWE4yxM=
Subject key identifier:   0B:20:51:5B:D0:CF:FF:50:3E:96:1B:BA:5D:1F:38:27:09:61:A4:B3
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer:       /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial:       018F855AA79FFD581377EAEE0260F28A8C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number:          0E9C
Signing time:             Fri 17 May 2024 07:01:01 +0000
Manifest this update:     Fri 17 May 2024 07:01:01 +0000
Manifest next update:     Sat 18 May 2024 07:01:01 +0000
Files and hashes:         1: 7JGLMJvOQV4BCEl1Xx9cTQ2ogpE.roa (hash: 43zXcDmNz4YBNXaJUmAUgPGOfaCNR/jtltw7UpnbCd8=)
                          2: D9BLhIfmqa8OCufrtdqVPl-5CfY.roa (hash: w8VdN5QFPE2EMzTeRsLzND7s6yg7r9WdHbblQO5pHgo=)
                          3: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: sgIqid+xodbkjzh3Lj3zjDAxD8+pe5P3EG9YR7X9Yos=)
                          4: PLz0b7H8QhLchnAyIsgD9vZtSfk.roa (hash: c3eyHFOdVQCFcmi2xW1WTx4+AIaGOJYSOsN9lOilS2E=)
                          5: _E5tmu8uDDG11Vaz-kEKBtkeXxI.roa (hash: TItjzbcsZxOhyX++ZHEimfREGrSSh5iPiEqYzcY1yYI=)
                          6: hL8rFsA7Xt9JE1Mk2jgDrqE1p1U.roa (hash: SymCSEoIR/lhNKYQYzUkl4+iURHrSUsUMkJNMM2FeDw=)
                          7: sldKW6VOM3Iq688A_CcRObQBSDw.roa (hash: mGXuCrVT2lJRa/zpheg4IxqphdmWhIf/NvxLlHFcteE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:a7:9f:fd:58:13:77:ea:ee:02:60:f2:8a:8c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
        Validity
            Not Before: May 17 07:01:01 2024 GMT
            Not After : May 18 07:01:01 2024 GMT
        Subject: CN=0b20515bd0cfff503e961bba5d1f38270961a4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:eb:90:cf:68:51:36:5b:47:12:18:21:fc:
                    6a:3c:99:05:f6:8e:26:d3:ed:a2:e7:93:92:99:49:
                    c7:b0:05:ce:00:ac:79:6e:71:63:67:d3:95:58:70:
                    12:8d:cf:36:f6:dc:b2:d4:b8:7d:76:29:46:b7:63:
                    cc:db:fc:df:44:cb:d5:4f:62:23:cc:67:9f:e2:76:
                    31:57:f0:67:b4:4f:a5:92:c1:f5:7e:e5:94:12:13:
                    9c:37:8d:29:47:ae:93:5c:bd:22:4c:10:e0:f0:59:
                    8f:20:74:2e:3d:91:e8:77:31:7c:dc:39:cd:39:f5:
                    8d:f4:bf:58:4f:62:5c:c2:d9:c2:51:29:99:c6:61:
                    20:2d:c3:54:fd:4b:24:f8:4e:e2:46:8a:3a:22:e1:
                    1a:68:f8:1e:2e:75:58:c9:a2:8e:3e:97:e7:d1:30:
                    20:ad:46:16:4f:3b:a5:d1:60:64:45:ca:70:1a:52:
                    91:6e:db:da:68:f7:a5:4c:43:c2:d0:78:61:bb:26:
                    71:14:dc:12:13:cd:de:6e:eb:11:f9:ca:83:4f:43:
                    e9:9c:69:6f:fe:50:c2:33:a6:06:cc:81:92:cd:f9:
                    32:72:87:66:ef:67:6e:eb:54:ec:65:3e:d3:51:cd:
                    e4:42:af:52:14:1f:db:df:fe:1b:34:03:ad:41:80:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:51:5B:D0:CF:FF:50:3E:96:1B:BA:5D:1F:38:27:09:61:A4:B3
            X509v3 Authority Key Identifier:
                keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1f:1a:c4:2a:46:60:cf:0c:23:6d:65:4e:43:e0:8a:e8:1a:
         d9:bc:52:07:9d:2f:28:fc:3b:7e:e1:38:52:f9:2c:68:9b:b1:
         2c:21:19:04:40:64:eb:b9:23:b3:cf:e8:26:71:7b:9b:77:e4:
         ab:1c:c5:9e:46:31:6b:e9:ca:0b:07:b0:54:7b:fe:c2:b2:9d:
         3c:ee:06:9c:9d:61:16:18:21:dd:df:7e:02:73:67:9e:8c:f6:
         4b:fe:fb:d6:49:e5:52:54:32:66:d4:8d:37:90:2b:ab:25:cc:
         46:be:a7:f1:3b:82:10:80:0d:09:cb:e9:2c:dd:bc:f9:d1:07:
         c4:55:37:a3:da:4c:2f:82:2a:42:89:d6:17:75:84:a8:f2:c7:
         69:43:3a:48:08:d3:83:8c:64:d1:77:c6:9e:2a:c8:d4:81:b1:
         33:e8:0f:d3:33:72:af:66:2b:8b:e9:a6:16:f6:76:34:ce:bb:
         6e:cc:3c:d5:38:4c:7a:2a:c8:2e:e1:91:a5:d9:9f:90:d9:e7:
         aa:f1:d7:36:5a:ae:c3:02:79:ce:c5:54:5f:e7:a8:61:fe:c1:
         f2:7c:ea:b6:87:2d:23:a8:cb:b7:7c:0d:52:60:d7:f0:3a:00:
         b7:09:04:fb:bd:c9:9a:5d:aa:f6:85:c6:f0:2a:e9:f5:04:f3:
         36:f8:a8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FWqef/VgTd+ruAmDyioxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzE2MWU2MjJmNjNjMGRiODU2OGQ4Y2I0YzRkN2MwZDk4
MDgzNDYwHhcNMjQwNTE3MDcwMTAxWhcNMjQwNTE4MDcwMTAxWjAzMTEwLwYDVQQD
EygwYjIwNTE1YmQwY2ZmZjUwM2U5NjFiYmE1ZDFmMzgyNzA5NjFhNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb7rkM9oUTZbRxIYIfxqPJkF9o4m
0+2i55OSmUnHsAXOAKx5bnFjZ9OVWHASjc829tyy1Lh9dilGt2PM2/zfRMvVT2Ij
zGef4nYxV/BntE+lksH1fuWUEhOcN40pR66TXL0iTBDg8FmPIHQuPZHodzF83DnN
OfWN9L9YT2JcwtnCUSmZxmEgLcNU/Usk+E7iRoo6IuEaaPgeLnVYyaKOPpfn0TAg
rUYWTzul0WBkRcpwGlKRbtvaaPelTEPC0HhhuyZxFNwSE83ebusR+cqDT0PpnGlv
/lDCM6YGzIGSzfkycodm72du61TsZT7TUc3kQq9SFB/b3/4bNAOtQYAXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsgUVvQz/9QPpYbul0fOCcJYaSzMB8GA1UdIwQY
MBaAFAxxYeYi9jwNuFaNjLTE18DZgINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAt
YjE1ZTNmMDllMDFiLzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAtYjE1ZTNmMDllMDFi
LzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB8axCpG
YM8MI21lTkPgiuga2bxSB50vKPw7fuE4UvksaJuxLCEZBEBk67kjs8/oJnF7m3fk
qxzFnkYxa+nKCwewVHv+wrKdPO4GnJ1hFhgh3d9+AnNnnoz2S/771knlUlQyZtSN
N5ArqyXMRr6n8TuCEIANCcvpLN28+dEHxFU3o9pML4IqQonWF3WEqPLHaUM6SAjT
g4xk0XfGnirI1IGxM+gP0zNyr2Yri+mmFvZ2NM67bsw81ThMeirILuGRpdmfkNnn
qvHXNlquwwJ5zsVUX+eoYf7B8nzqtoctI6jLt3wNUmDX8DoAtwkE+73Jml2q9oXG
8Crp9QTzNvioUw==
-----END CERTIFICATE-----
Generated at Fri May 17 09:56:23 2024 by rpki-client on console-ams.rpki-client.org