Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
File:                     uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json)
Hash identifier:          nLF7+HEHFOoDmbS1tz6OXaw1zAfCD0uaCYIMyKqvgtQ=
Subject key identifier:   C8:52:35:CB:FB:5D:89:01:B7:B8:9B:85:B8:C2:37:8F:3D:CD:BF:D3
Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
Certificate issuer:       /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Certificate serial:       018F8748BAD1A18C024690C14EE900CA6602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
Manifest number:          0F47
Signing time:             Fri 17 May 2024 16:00:41 +0000
Manifest this update:     Fri 17 May 2024 16:00:41 +0000
Manifest next update:     Sat 18 May 2024 16:00:41 +0000
Files and hashes:         1: Y5j5d5OVl9L_q5sHEHlQ9vFrXtM.roa (hash: JU3c2y5f3SHhLFiRCpp8UTDRVxLCVO99MK7ccKFzVZo=)
                          2: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: zkHmy45YB9bwryuQmKGeCiRmFdKROL6OepyaMN3vD1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ba:d1:a1:8c:02:46:90:c1:4e:e9:00:ca:66:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
        Validity
            Not Before: May 17 16:00:41 2024 GMT
            Not After : May 18 16:00:41 2024 GMT
        Subject: CN=c85235cbfb5d8901b7b89b85b8c2378f3dcdbfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:25:5f:e5:ff:ba:34:3b:ea:64:2d:d8:ca:
                    ac:a3:c9:e3:75:91:a4:0f:f0:10:1e:07:05:9c:49:
                    0a:50:bf:8f:7d:27:42:44:a2:d5:dc:d5:5f:bd:ac:
                    e2:b2:4a:6e:76:1f:e6:59:88:83:be:2f:a4:01:70:
                    40:b6:c0:78:6f:39:25:06:c8:2a:1f:da:85:7a:81:
                    e5:ee:19:9b:0e:1b:b7:6e:80:e5:02:0b:91:b8:01:
                    dd:6c:6a:0c:ef:28:d6:ea:41:8e:e7:9f:09:29:7a:
                    b7:a7:f2:3e:3a:63:48:86:e1:22:7d:4b:2d:e5:71:
                    b7:db:2a:9f:ee:38:c2:05:2e:50:16:64:f7:27:9e:
                    05:0b:eb:62:c5:34:b0:d2:5e:e0:0b:67:cb:2b:a7:
                    4f:11:e3:53:a6:85:8f:81:4c:6b:61:ae:08:1c:86:
                    3b:e2:64:5d:b4:5f:59:75:49:77:5a:55:33:eb:f8:
                    6f:94:22:d2:b8:6b:0a:d2:74:b9:9c:7d:9e:7c:59:
                    8b:dc:5d:35:93:45:ff:92:77:6d:94:96:0c:69:21:
                    bd:88:31:83:1a:64:b7:06:ae:05:7c:c0:f5:a3:87:
                    ca:40:6a:b3:3d:25:69:9e:3b:6e:6a:0b:8d:4a:74:
                    cf:60:b3:3d:6f:fa:7c:31:64:e4:79:0c:66:db:7c:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:52:35:CB:FB:5D:89:01:B7:B8:9B:85:B8:C2:37:8F:3D:CD:BF:D3
            X509v3 Authority Key Identifier:
                keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:a4:d9:79:51:03:89:48:5f:75:80:c0:7b:a4:ed:c7:40:
         bf:0e:1f:60:c8:83:d4:94:c6:f0:b2:32:83:5d:c7:7b:99:0e:
         04:fd:85:1e:fb:66:65:3c:b3:7c:5e:c0:3b:e6:5b:d2:07:2e:
         ed:50:cc:87:b6:62:cb:ce:0c:7b:b6:4e:1a:66:c0:e7:86:54:
         a2:40:50:06:93:b5:88:7e:69:8b:dc:e9:63:9b:4c:4b:19:1b:
         59:48:30:b2:cb:94:78:03:f2:c9:21:86:37:36:04:0f:af:12:
         45:94:c7:d9:4e:d6:61:d5:90:51:4b:93:2b:8e:4f:8f:38:9f:
         11:fa:e5:9d:ca:f4:29:5a:70:aa:4c:5b:24:78:f6:be:00:cd:
         b6:cd:7f:2f:6b:42:fc:ef:33:a2:74:18:0f:7e:6d:f4:8b:b3:
         08:c6:30:65:76:1c:6a:ef:2d:0c:41:0c:ad:2e:e6:38:fd:f4:
         d3:72:6f:42:71:1e:ba:72:8e:06:6f:da:7f:ee:8b:cf:f0:06:
         82:9e:9c:54:71:1d:02:e0:47:82:d4:9e:d9:1b:d6:82:59:f6:
         ac:23:77:de:03:21:15:ae:b2:3d:b7:17:13:cd:f4:b5:51:9f:
         34:5e:46:24:2c:be:2f:fd:06:ec:d3:25:10:4c:79:43:5c:16:
         5b:25:ab:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSLrRoYwCRpDBTukAymYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWIwM2UyMjg3NWJiMDcwYjFiN2M1OGVhZGEyZTRiYjFh
YWJlN2YwHhcNMjQwNTE3MTYwMDQxWhcNMjQwNTE4MTYwMDQxWjAzMTEwLwYDVQQD
EyhjODUyMzVjYmZiNWQ4OTAxYjdiODliODViOGMyMzc4ZjNkY2RiZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNslX+X/ujQ76mQt2Mqso8njdZGk
D/AQHgcFnEkKUL+PfSdCRKLV3NVfvaziskpudh/mWYiDvi+kAXBAtsB4bzklBsgq
H9qFeoHl7hmbDhu3boDlAguRuAHdbGoM7yjW6kGO558JKXq3p/I+OmNIhuEifUst
5XG32yqf7jjCBS5QFmT3J54FC+tixTSw0l7gC2fLK6dPEeNTpoWPgUxrYa4IHIY7
4mRdtF9ZdUl3WlUz6/hvlCLSuGsK0nS5nH2efFmL3F01k0X/kndtlJYMaSG9iDGD
GmS3Bq4FfMD1o4fKQGqzPSVpnjtuaguNSnTPYLM9b/p8MWTkeQxm23zhKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhSNcv7XYkBt7ibhbjCN489zb/TMB8GA1UdIwQY
MBaAFLgbA+IodbsHCxt8WOraLkuxqr5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUt
YWQyNTY2NDMwNTJiLzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUtYWQyNTY2NDMwNTJi
LzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebKk2XlR
A4lIX3WAwHuk7cdAvw4fYMiD1JTG8LIyg13He5kOBP2FHvtmZTyzfF7AO+Zb0gcu
7VDMh7Ziy84Me7ZOGmbA54ZUokBQBpO1iH5pi9zpY5tMSxkbWUgwssuUeAPyySGG
NzYED68SRZTH2U7WYdWQUUuTK45PjzifEfrlncr0KVpwqkxbJHj2vgDNts1/L2tC
/O8zonQYD35t9IuzCMYwZXYcau8tDEEMrS7mOP3003JvQnEeunKOBm/af+6Lz/AG
gp6cVHEdAuBHgtSe2RvWgln2rCN33gMhFa6yPbcXE830tVGfNF5GJCy+L/0G7NMl
EEx5Q1wWWyWr0g==
-----END CERTIFICATE-----
Generated at Sat May 18 00:37:35 2024 by rpki-client on console-fra.rpki-client.org