Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File:                     d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier:          7iqHwoGKNeVbEjMQPlufGrYl4+xbsIP2SdJKfQSlwTA=
Subject key identifier:   9E:5F:66:AD:4E:36:E6:D3:2A:32:83:7E:8E:3D:D6:4A:96:F5:30:C9
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer:       /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial:       018F85C83FE5E97C437979847DAE7D848355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number:          0D9D
Signing time:             Fri 17 May 2024 09:00:44 +0000
Manifest this update:     Fri 17 May 2024 09:00:44 +0000
Manifest next update:     Sat 18 May 2024 09:00:44 +0000
Files and hashes:         1: OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa (hash: LJC/RrSECoNqowsXs03UcOteY4G71Po9yCm7BzQtUyw=)
                          2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: Qk3B3C97QDGOLj1aN0QjBX40rSMcBgKGfQll6cKBgMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 09:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c8:3f:e5:e9:7c:43:79:79:84:7d:ae:7d:84:83:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
        Validity
            Not Before: May 17 09:00:44 2024 GMT
            Not After : May 18 09:00:44 2024 GMT
        Subject: CN=9e5f66ad4e36e6d32a32837e8e3dd64a96f530c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:53:63:b1:67:cc:ff:95:5a:ca:d9:fa:10:
                    af:82:89:4f:2c:20:ea:b1:53:64:81:cc:bf:94:ee:
                    4d:ec:49:df:54:78:aa:9d:49:6d:ea:96:6a:f8:5e:
                    be:4d:1a:5d:8d:bd:f9:93:9b:01:f7:d4:c3:0e:59:
                    42:ae:58:9e:32:ce:cf:23:ec:b9:62:a9:f3:ac:50:
                    5c:ee:94:e4:b5:13:10:d6:65:6f:a5:88:7a:c9:0b:
                    a7:d6:4f:d7:6b:70:15:6b:58:32:f0:22:ae:08:99:
                    52:48:e3:8c:7f:f3:de:c6:94:88:84:15:fe:68:b3:
                    aa:24:8a:70:da:53:5d:0f:ae:d6:0f:a1:ed:b6:dd:
                    e7:31:e6:2c:10:e9:d5:36:25:68:21:e8:79:ed:7a:
                    10:3b:d0:d5:b5:a7:16:a7:4d:51:4b:07:85:dd:72:
                    39:96:2c:77:d4:64:5c:12:2f:c6:d3:2d:a0:2f:1b:
                    24:46:97:ff:a2:ba:a4:60:d3:96:5e:fa:7f:6e:bc:
                    50:67:e1:0c:28:85:e5:04:3e:cb:cf:13:ca:c4:50:
                    4c:55:28:4c:bb:cc:f5:ed:13:35:33:26:37:19:d8:
                    ea:74:4e:d2:a2:98:07:7d:ab:85:50:36:34:9a:e9:
                    f1:d4:6a:cd:55:bb:7d:76:ab:d5:52:6d:e2:81:69:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5F:66:AD:4E:36:E6:D3:2A:32:83:7E:8E:3D:D6:4A:96:F5:30:C9
            X509v3 Authority Key Identifier:
                keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:17:65:fc:c7:78:87:53:c7:4b:8a:16:85:ad:bf:de:86:99:
         32:85:74:10:c0:8f:6c:42:f2:16:e9:9e:ee:c3:e5:e5:10:90:
         23:28:46:d7:07:ac:e6:3f:fe:ff:b5:9c:4f:be:a1:38:d9:48:
         e1:e8:26:4f:76:77:42:2f:ab:46:65:13:c6:e5:22:48:8c:84:
         38:0f:66:36:09:69:ee:9f:d4:80:91:fc:82:d1:3e:8c:02:21:
         e6:45:ce:d3:53:2a:c9:e8:b0:6a:01:e1:75:57:03:06:bc:26:
         83:c3:d0:84:7e:90:b1:de:2a:0d:03:b6:38:2c:bf:7a:fc:b0:
         78:fb:2d:2e:0d:e7:3b:e7:36:5c:e5:3d:c6:53:29:b2:b3:f5:
         77:85:24:f6:3f:a1:5d:a8:69:2b:1d:cf:e1:3a:5f:69:02:8a:
         41:d3:9f:e4:07:fa:ba:89:4b:58:ed:61:b4:8f:d2:ae:ef:9d:
         b1:f1:d1:47:a2:ec:19:1d:17:2c:22:24:95:99:90:ca:ef:6a:
         26:02:bc:eb:64:91:e9:95:21:70:97:75:af:21:d9:74:a8:8a:
         7e:4b:16:30:49:ee:d2:29:ba:f7:61:d3:c4:8c:e1:b1:7c:5c:
         7f:13:c1:42:19:01:68:b5:8d:e2:4d:a3:af:1c:b4:70:3b:fd:
         d7:09:92:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FyD/l6XxDeXmEfa59hINVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx
MTEyYjYwHhcNMjQwNTE3MDkwMDQ0WhcNMjQwNTE4MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg5ZTVmNjZhZDRlMzZlNmQzMmEzMjgzN2U4ZTNkZDY0YTk2ZjUzMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/9TY7FnzP+VWsrZ+hCvgolPLCDq
sVNkgcy/lO5N7EnfVHiqnUlt6pZq+F6+TRpdjb35k5sB99TDDllCrlieMs7PI+y5
YqnzrFBc7pTktRMQ1mVvpYh6yQun1k/Xa3AVa1gy8CKuCJlSSOOMf/PexpSIhBX+
aLOqJIpw2lNdD67WD6Httt3nMeYsEOnVNiVoIeh57XoQO9DVtacWp01RSweF3XI5
lix31GRcEi/G0y2gLxskRpf/orqkYNOWXvp/brxQZ+EMKIXlBD7LzxPKxFBMVShM
u8z17RM1MyY3GdjqdE7SopgHfauFUDY0munx1GrNVbt9dqvVUm3igWnVtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5fZq1ONubTKjKDfo491kqW9TDJMB8GA1UdIwQY
MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt
NWNjNGRlZDlhN2QyLzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy
LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchdl/Md4
h1PHS4oWha2/3oaZMoV0EMCPbELyFume7sPl5RCQIyhG1wes5j/+/7WcT76hONlI
4egmT3Z3Qi+rRmUTxuUiSIyEOA9mNglp7p/UgJH8gtE+jAIh5kXO01MqyeiwagHh
dVcDBrwmg8PQhH6Qsd4qDQO2OCy/evywePstLg3nO+c2XOU9xlMpsrP1d4Uk9j+h
XahpKx3P4TpfaQKKQdOf5Af6uolLWO1htI/Sru+dsfHRR6LsGR0XLCIklZmQyu9q
JgK862SR6ZUhcJd1ryHZdKiKfksWMEnu0im692HTxIzhsXxcfxPBQhkBaLWN4k2j
rxy0cDv91wmSZg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:21:07 2024 by rpki-client on console-fra.rpki-client.org