Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File:                     JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier:          07S3l7GmZhEQq+nn/2A3XF9O47On90B6i008hlOLF4c=
Subject key identifier:   58:F0:44:CB:64:91:0E:F7:0D:FE:10:C5:B7:DE:A2:21:2C:FC:6C:E6
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       018F90F1DAB34821168B828E7CE22F48C3F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number:          1042
Signing time:             Sun 19 May 2024 13:02:00 +0000
Manifest this update:     Sun 19 May 2024 13:02:00 +0000
Manifest next update:     Mon 20 May 2024 13:02:00 +0000
Files and hashes:         1: 3LR0FE0Ix8edE_JFQ7BjwlnJshc.roa (hash: hXfYXxAaqY3XL+D4qw5Z+nqV1L/lAIY2DGY2NdL0pbw=)
                          2: 80-bvR7xaLNhoFQ79M7PNy2xA7E.roa (hash: Sp38tF9SDEC7VF/ireARdMx9CT1to3aySetzveDoZdM=)
                          3: IFD_xFWsmE9C9xldkfaBOpT07r4.roa (hash: CcXMHfeY2SnjnDcYI9R1oDzwpKZD/uHDTmj/Ue5j0U8=)
                          4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: dYvJqMAQEqxUIuQOLKWAOS2a4B5eQLqw20oYm254mbs=)
                          5: OgI4INc6MMsig7q-HMAjkDOmFyo.roa (hash: 5+v55jvCkfEPMhNkvCFk+EKDwPVIX5Xf3BvqqiN2f0g=)
                          6: kD3iBu9EXHSRWPzBrVPQmGeM3_8.roa (hash: Lx2mEprcccx64ZlCOVKeg7Me4Rl87KsXtr4ObOxqt7g=)
                          7: w88GnLgGxSqx0uez0kXsHQN7UYU.roa (hash: 1Tz2vHqmuWyA55C1HMS+GGbUytbn+ncfo64pHIXy0ds=)
                          8: zvdRMGPMRcKYTHMEowW6INu-Kmg.roa (hash: FdktyFpuO4kADrw4+jj8W2kk0ECEF1/Ly1o1KaNpUOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f1:da:b3:48:21:16:8b:82:8e:7c:e2:2f:48:c3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: May 19 13:02:00 2024 GMT
            Not After : May 20 13:02:00 2024 GMT
        Subject: CN=58f044cb64910ef70dfe10c5b7dea2212cfc6ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:26:de:8f:46:5f:ff:9c:43:91:36:9a:58:
                    ca:9d:82:36:b8:fd:ca:d2:63:8a:06:8d:6c:3a:92:
                    85:7c:68:00:e3:f1:c7:a7:8d:87:e2:41:f0:4f:77:
                    a0:1e:8c:8d:37:16:f3:3f:ee:83:e2:ab:38:53:39:
                    f0:61:f7:f0:95:2c:1b:79:12:0c:61:af:43:69:50:
                    11:2c:ed:f2:06:23:6b:0f:44:29:69:2d:67:32:aa:
                    3f:60:62:c5:fa:32:a9:0c:8d:9d:41:73:41:07:89:
                    f1:da:50:dc:77:e3:63:7d:22:ec:70:cf:a2:3a:d0:
                    2d:68:0c:4a:5d:de:db:f7:29:e0:8b:bf:b7:7e:86:
                    9f:06:eb:b1:5b:f5:de:2f:a2:67:30:81:77:5c:87:
                    07:70:5d:9f:68:39:4e:a9:93:55:75:81:24:b7:bd:
                    21:f9:91:3c:63:31:8f:0a:4c:ac:f7:fa:51:fc:3f:
                    0b:44:0b:cf:79:2e:9d:61:6f:68:dc:47:54:c1:d8:
                    53:5d:51:86:e7:ff:27:8d:84:ab:a5:0d:4d:55:6a:
                    e4:2b:54:82:97:c8:73:1b:73:1a:d6:b5:94:15:da:
                    fd:a5:79:d9:bc:13:fb:7d:f0:66:bd:39:06:fd:ee:
                    63:cd:a0:ae:23:a7:90:ce:ee:e0:53:89:31:31:8d:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:44:CB:64:91:0E:F7:0D:FE:10:C5:B7:DE:A2:21:2C:FC:6C:E6
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:38:e6:1b:22:ac:8e:d4:46:2d:f1:a3:4a:f2:39:fa:6f:9d:
         b6:75:13:59:0b:09:1f:15:19:47:3f:ba:37:37:51:f0:46:ef:
         15:c7:27:93:4c:da:05:94:da:30:5e:ba:c7:84:0c:58:83:af:
         18:33:3f:a1:31:4c:ac:57:a5:43:01:14:e5:22:65:28:73:8c:
         f8:4c:9e:2d:f2:29:ab:57:96:86:ff:37:69:8e:58:6f:cb:45:
         c9:18:be:f3:73:aa:29:b3:2e:d1:81:b6:41:13:ce:ee:8f:87:
         7a:46:18:3b:21:9a:67:22:c9:dc:1b:01:8a:25:74:03:fb:85:
         dc:86:d5:76:2b:04:c9:91:1e:16:97:93:52:b7:54:d5:02:a7:
         49:94:28:33:de:14:8c:b6:6a:62:a4:46:fb:97:dd:39:39:8a:
         d2:ef:87:1a:92:ef:0a:0d:a9:11:ca:e6:37:74:fb:c5:87:01:
         bd:d6:5e:4f:61:0b:64:20:d0:c9:3b:e1:f2:49:44:cf:8a:fc:
         af:35:1d:00:7d:81:76:00:9e:c6:73:fa:40:7e:b9:a2:40:00:
         5d:63:14:49:a0:eb:63:ae:2c:74:23:07:c4:da:2f:7f:b0:aa:
         88:4f:f6:96:fc:6a:42:7a:f4:70:bb:6b:ac:cd:1d:2e:96:d0:
         8d:d9:4b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Q8dqzSCEWi4KOfOIvSMP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjQwNTE5MTMwMjAwWhcNMjQwNTIwMTMwMjAwWjAzMTEwLwYDVQQD
Eyg1OGYwNDRjYjY0OTEwZWY3MGRmZTEwYzViN2RlYTIyMTJjZmM2Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMcm3o9GX/+cQ5E2mljKnYI2uP3K
0mOKBo1sOpKFfGgA4/HHp42H4kHwT3egHoyNNxbzP+6D4qs4UznwYffwlSwbeRIM
Ya9DaVARLO3yBiNrD0QpaS1nMqo/YGLF+jKpDI2dQXNBB4nx2lDcd+NjfSLscM+i
OtAtaAxKXd7b9yngi7+3foafBuuxW/XeL6JnMIF3XIcHcF2faDlOqZNVdYEkt70h
+ZE8YzGPCkys9/pR/D8LRAvPeS6dYW9o3EdUwdhTXVGG5/8njYSrpQ1NVWrkK1SC
l8hzG3Ma1rWUFdr9pXnZvBP7ffBmvTkG/e5jzaCuI6eQzu7gU4kxMY2TJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjwRMtkkQ73Df4QxbfeoiEs/GzmMB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzjmGyKs
jtRGLfGjSvI5+m+dtnUTWQsJHxUZRz+6NzdR8EbvFccnk0zaBZTaMF66x4QMWIOv
GDM/oTFMrFelQwEU5SJlKHOM+EyeLfIpq1eWhv83aY5Yb8tFyRi+83OqKbMu0YG2
QRPO7o+HekYYOyGaZyLJ3BsBiiV0A/uF3IbVdisEyZEeFpeTUrdU1QKnSZQoM94U
jLZqYqRG+5fdOTmK0u+HGpLvCg2pEcrmN3T7xYcBvdZeT2ELZCDQyTvh8klEz4r8
rzUdAH2BdgCexnP6QH65okAAXWMUSaDrY64sdCMHxNovf7CqiE/2lvxqQnr0cLtr
rM0dLpbQjdlLNw==
-----END CERTIFICATE-----
Generated at Sun May 19 15:50:00 2024 by rpki-client on console-ams.rpki-client.org