Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
File:                     vHBHR5L1CD5iXyTW1XqrctZXIp4.mft (raw, json)
Hash identifier:          gZHrzals/sU/Sh3FLN9jB7BGH6vtxg9QDk02L2rzKss=
Subject key identifier:   E8:C4:71:BB:DA:B4:DF:12:A2:4B:F5:BF:46:13:BF:0A:7D:B1:4A:B8
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Certificate issuer:       /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial:       018F117B9A895F4A4532B07753C5ABC39ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
Manifest number:          0B5F
Signing time:             Wed 24 Apr 2024 19:01:04 +0000
Manifest this update:     Wed 24 Apr 2024 19:01:04 +0000
Manifest next update:     Thu 25 Apr 2024 19:01:04 +0000
Files and hashes:         1: GY2oZrtglfTkAGfhiGVH6OhdFsI.roa (hash: 99i9mYdyhOWi4HmmHb+dXMMBBgrRYRqP//RDsY72X1w=)
                          2: vHBHR5L1CD5iXyTW1XqrctZXIp4.crl (hash: ueFdz51bb4itrXEz0jKPy+FU67qrXn3Btonk5opkFj8=)
                          3: y-_obQTBjyJNGhvahNorf2-Ya2k.roa (hash: ntAhUj6SbADn2M42I2XZFKdiyEY94SHmSfNz1XzQc+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:11:7b:9a:89:5f:4a:45:32:b0:77:53:c5:ab:c3:9a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
        Validity
            Not Before: Apr 24 19:01:04 2024 GMT
            Not After : Apr 25 19:01:04 2024 GMT
        Subject: CN=e8c471bbdab4df12a24bf5bf4613bf0a7db14ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:24:4e:c2:13:38:44:76:4c:55:3f:68:8f:
                    d3:7d:0d:56:20:dd:72:15:ae:d0:ee:18:0f:4d:a9:
                    b0:05:ba:c0:73:b3:7b:14:f5:26:47:da:8e:38:9d:
                    82:bd:bb:0b:06:9c:d4:d6:89:3a:bb:8a:a1:06:90:
                    c9:0e:e4:e5:88:18:66:48:2a:b9:f3:9a:1a:08:30:
                    6a:b7:7d:34:b2:17:88:af:45:39:c4:1f:b4:bd:79:
                    ff:61:7d:6d:cd:be:2e:2a:3f:f6:c5:ba:4a:cb:8f:
                    4d:b0:97:e9:20:b4:40:da:8d:8c:45:3b:cf:ff:8b:
                    4e:bf:e9:65:65:05:64:5e:18:7c:0d:5c:88:11:9d:
                    c2:e6:ae:82:62:aa:b1:a9:ab:e4:87:7c:13:b8:7e:
                    d7:c1:b0:4b:f7:c9:c9:8b:bb:81:87:ac:5b:70:e0:
                    e2:1f:16:b3:f5:a8:9c:2d:e5:2f:3c:70:ef:40:91:
                    6f:53:5e:ec:9b:fb:33:38:cf:d0:ac:d8:d8:4e:e8:
                    1d:ea:05:b8:a7:f1:03:47:d1:d4:a0:ed:90:4a:42:
                    f5:eb:94:c1:8f:35:0c:de:10:b2:5c:71:ef:44:28:
                    40:2a:32:ee:70:cd:db:47:d4:1e:25:67:4f:84:17:
                    78:93:2c:c0:51:69:bd:1f:96:b5:ea:56:d1:26:e1:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:71:BB:DA:B4:DF:12:A2:4B:F5:BF:46:13:BF:0A:7D:B1:4A:B8
            X509v3 Authority Key Identifier:
                keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:b6:38:80:ea:c3:bf:c4:e0:2a:01:6e:23:7d:14:d2:f1:
         3b:64:6a:2d:19:05:51:77:de:cc:e9:89:ba:47:76:8d:16:df:
         e7:f0:53:8a:6e:bf:5c:37:d2:07:c8:91:85:5f:15:b2:2a:39:
         5b:db:03:5b:36:f3:6c:63:17:bc:59:10:71:51:6d:5c:b6:16:
         8f:40:22:0c:41:36:72:17:b7:6c:ff:00:16:c7:1d:c8:7c:c5:
         71:a2:24:65:ef:eb:da:dc:da:b6:0f:b0:ac:6a:35:a8:dc:0d:
         2e:01:10:fd:4e:e6:12:83:ec:50:1a:88:2f:28:4d:d3:72:a6:
         50:ad:88:59:58:8b:c6:10:4c:c9:e9:a0:64:5e:30:03:2c:a7:
         d5:7f:63:5c:0e:e9:98:f2:a2:87:1b:11:f2:ff:32:fb:f5:fe:
         d2:a8:d1:db:a5:f9:23:d8:c7:87:d4:3b:24:39:30:54:9d:cc:
         00:29:5b:11:31:69:a8:ac:f8:4b:07:87:74:a7:e0:17:52:a5:
         5c:9c:53:5b:21:23:9a:a1:46:45:12:73:9b:b1:4f:85:c1:9e:
         01:c0:58:e8:b1:a5:09:7a:94:72:ad:5a:dc:63:c5:05:fe:28:
         50:df:e7:fd:83:c1:37:f5:f2:c1:8b:7d:ec:b9:60:15:2a:32:
         27:6f:52:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8Re5qJX0pFMrB3U8Wrw5rNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNzA0NzQ3OTJmNTA4M2U2MjVmMjRkNmQ1N2FhYjcyZDY1
NzIyOWUwHhcNMjQwNDI0MTkwMTA0WhcNMjQwNDI1MTkwMTA0WjAzMTEwLwYDVQQD
EyhlOGM0NzFiYmRhYjRkZjEyYTI0YmY1YmY0NjEzYmYwYTdkYjE0YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuckkTsITOER2TFU/aI/TfQ1WIN1y
Fa7Q7hgPTamwBbrAc7N7FPUmR9qOOJ2CvbsLBpzU1ok6u4qhBpDJDuTliBhmSCq5
85oaCDBqt300sheIr0U5xB+0vXn/YX1tzb4uKj/2xbpKy49NsJfpILRA2o2MRTvP
/4tOv+llZQVkXhh8DVyIEZ3C5q6CYqqxqavkh3wTuH7XwbBL98nJi7uBh6xbcODi
Hxaz9aicLeUvPHDvQJFvU17sm/szOM/QrNjYTugd6gW4p/EDR9HUoO2QSkL165TB
jzUM3hCyXHHvRChAKjLucM3bR9QeJWdPhBd4kyzAUWm9H5a16lbRJuF2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjEcbvatN8Sokv1v0YTvwp9sUq4MB8GA1UdIwQY
MBaAFLxwR0eS9Qg+Yl8k1tV6q3LWVyKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYjZhNmMtYzg3ZS00YzZkLWJiMGEt
YmJjODAyN2YwYTNhLzEvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYjZhNmMtYzg3ZS00YzZkLWJiMGEtYmJjODAyN2YwYTNh
LzEvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtW2OIDq
w7/E4CoBbiN9FNLxO2RqLRkFUXfezOmJukd2jRbf5/BTim6/XDfSB8iRhV8Vsio5
W9sDWzbzbGMXvFkQcVFtXLYWj0AiDEE2che3bP8AFscdyHzFcaIkZe/r2tzatg+w
rGo1qNwNLgEQ/U7mEoPsUBqILyhN03KmUK2IWViLxhBMyemgZF4wAyyn1X9jXA7p
mPKihxsR8v8y+/X+0qjR26X5I9jHh9Q7JDkwVJ3MAClbETFpqKz4SweHdKfgF1Kl
XJxTWyEjmqFGRRJzm7FPhcGeAcBY6LGlCXqUcq1a3GPFBf4oUN/n/YPBN/XywYt9
7LlgFSoyJ29Smw==
-----END CERTIFICATE-----
Generated at Wed Apr 24 23:39:46 2024 by rpki-client on console-fra.rpki-client.org