Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File:                     dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier:          B9eok+Owohwom3KMhbfuPHBZZkVwK8lPZodEb6RZ+co=
Subject key identifier:   10:53:48:0D:1C:96:D5:24:52:2F:B4:62:96:35:94:35:BE:6E:9E:92
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer:       /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial:       018F8937F69057808F2989BE01BF15420A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number:          0E8F
Signing time:             Sat 18 May 2024 01:01:37 +0000
Manifest this update:     Sat 18 May 2024 01:01:37 +0000
Manifest next update:     Sun 19 May 2024 01:01:37 +0000
Files and hashes:         1: cmtBdOCILkEpeMQ7nTtedr-YqAw.roa (hash: kTdG4fUvrCgfxX5To7+gyq5P7Zn1jeDSWBCTvCz7GNo=)
                          2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: iGpaFYi1QLWo+RmoqDOz13UWsitQ8N8gdtT6IluNJsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:f6:90:57:80:8f:29:89:be:01:bf:15:42:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
        Validity
            Not Before: May 18 01:01:37 2024 GMT
            Not After : May 19 01:01:37 2024 GMT
        Subject: CN=1053480d1c96d524522fb46296359435be6e9e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:43:83:8b:80:f7:25:a9:3f:88:f8:b6:15:
                    12:1d:9c:84:4a:a2:79:ed:e6:cf:b6:33:72:02:a4:
                    4c:57:fa:b4:95:bd:a0:7e:17:cc:e1:14:e5:6e:97:
                    b9:2f:a7:bd:41:81:aa:b5:b9:72:f7:77:1a:75:96:
                    ca:cf:ac:53:a9:34:f8:87:28:c0:fa:03:50:3e:5f:
                    d6:35:dd:b2:c9:4c:0f:a0:92:07:5d:84:e7:45:58:
                    4f:80:c1:49:11:67:c8:b9:af:84:fd:6b:99:b0:b3:
                    05:64:e6:87:3f:db:ae:34:2d:34:d3:0b:7f:56:48:
                    c3:7a:c2:f6:fb:1d:21:7f:84:53:d0:84:cd:68:91:
                    29:e3:76:f3:d1:da:6a:b0:30:38:21:83:5a:ba:6a:
                    2a:37:72:2e:ba:23:48:b8:7c:32:39:b6:aa:ad:64:
                    4c:05:ba:b0:e7:e3:ce:0e:dd:f7:aa:08:dd:2e:40:
                    dd:b5:6f:df:74:e4:ca:8d:24:5c:dc:5a:26:ec:f6:
                    6f:4a:65:a3:79:a2:90:83:f7:ed:05:7e:e0:bf:84:
                    b6:62:19:c6:6a:75:f9:00:13:51:26:63:e8:32:a2:
                    72:e4:af:b2:87:85:be:9d:d8:f0:8e:6c:d7:d0:38:
                    1c:e4:54:ba:eb:9e:b1:d5:91:92:d8:76:f5:ec:c2:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:53:48:0D:1C:96:D5:24:52:2F:B4:62:96:35:94:35:BE:6E:9E:92
            X509v3 Authority Key Identifier:
                keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:34:a5:ef:bf:13:df:38:d3:40:ea:4d:9f:a1:9b:bc:22:b1:
         eb:41:ce:1a:58:29:06:b5:b0:17:3e:24:de:c0:b0:5e:b9:81:
         c6:e5:a5:1b:f9:c0:96:50:c2:42:aa:ce:53:de:47:3b:04:7a:
         1e:22:c3:c8:cc:b1:66:ed:19:64:49:b0:27:3c:86:64:ca:5f:
         81:c1:ab:18:44:15:da:c7:e5:ff:1f:bd:00:9f:e3:b8:31:7c:
         db:db:d6:c4:5f:df:69:5d:aa:65:e7:2e:71:82:e0:14:b3:f3:
         ed:8d:73:73:54:33:aa:0a:a4:25:28:d2:04:91:cd:24:1b:67:
         6d:63:80:0a:8c:fd:cd:e3:d2:1c:35:1a:dd:6a:b0:63:fc:ca:
         f8:19:95:ae:63:5c:7e:24:fc:0f:ec:e1:9c:70:83:4b:a0:dc:
         b0:ee:9d:4f:57:8a:d2:d5:50:95:e8:35:85:7d:ac:75:a7:a6:
         cb:94:f5:08:55:8b:47:ae:8a:ce:67:46:56:47:a2:64:19:fb:
         a7:21:cb:8b:82:3c:26:74:d9:17:72:bc:d5:21:22:dd:a1:86:
         bf:d6:67:01:23:80:93:7d:4e:df:a8:2d:b1:8a:20:20:12:8b:
         ff:5c:4f:1b:96:c9:c0:0f:f1:2e:f1:9c:a8:89:e1:98:3c:31:
         e7:b2:65:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN/aQV4CPKYm+Ab8VQgo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2
YmU4NjAwHhcNMjQwNTE4MDEwMTM3WhcNMjQwNTE5MDEwMTM3WjAzMTEwLwYDVQQD
EygxMDUzNDgwZDFjOTZkNTI0NTIyZmI0NjI5NjM1OTQzNWJlNmU5ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+lDg4uA9yWpP4j4thUSHZyESqJ5
7ebPtjNyAqRMV/q0lb2gfhfM4RTlbpe5L6e9QYGqtbly93cadZbKz6xTqTT4hyjA
+gNQPl/WNd2yyUwPoJIHXYTnRVhPgMFJEWfIua+E/WuZsLMFZOaHP9uuNC000wt/
VkjDesL2+x0hf4RT0ITNaJEp43bz0dpqsDA4IYNaumoqN3IuuiNIuHwyObaqrWRM
Bbqw5+PODt33qgjdLkDdtW/fdOTKjSRc3Fom7PZvSmWjeaKQg/ftBX7gv4S2YhnG
anX5ABNRJmPoMqJy5K+yh4W+ndjwjmzX0Dgc5FS6656x1ZGS2Hb17MLAnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBTSA0cltUkUi+0YpY1lDW+bp6SMB8GA1UdIwQY
MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt
Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1
LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzSl778T
3zjTQOpNn6GbvCKx60HOGlgpBrWwFz4k3sCwXrmBxuWlG/nAllDCQqrOU95HOwR6
HiLDyMyxZu0ZZEmwJzyGZMpfgcGrGEQV2sfl/x+9AJ/juDF829vWxF/faV2qZecu
cYLgFLPz7Y1zc1QzqgqkJSjSBJHNJBtnbWOACoz9zePSHDUa3WqwY/zK+BmVrmNc
fiT8D+zhnHCDS6DcsO6dT1eK0tVQleg1hX2sdaemy5T1CFWLR66KzmdGVkeiZBn7
pyHLi4I8JnTZF3K81SEi3aGGv9ZnASOAk31O36gtsYogIBKL/1xPG5bJwA/xLvGc
qInhmDwx57Jl7g==
-----END CERTIFICATE-----
Generated at Sat May 18 02:50:37 2024 by rpki-client on console-fra.rpki-client.org