Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          m7W2CM3bTOuHtLbMeyc0T0B8vVaXlfGr4N/MV8I2O1E=
Subject key identifier:   E6:01:AD:8C:DB:B9:D0:C6:41:21:69:6D:BF:B0:FE:BB:9F:6C:1F:32
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       018F96F23A34435D2ED78C46341550722ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          115D
Signing time:             Mon 20 May 2024 17:00:08 +0000
Manifest this update:     Mon 20 May 2024 17:00:08 +0000
Manifest next update:     Tue 21 May 2024 17:00:08 +0000
Files and hashes:         1: 5Z2IK8N4wn4Bvk3wRmJrwjywZl4.roa (hash: lfJRJmGAy9vzErGTOq6UyqQCY8qB3ETj5n3ulE1MSPc=)
                          2: QZ3FkpxrDySkftNaoeTeMYc8hEk.roa (hash: rNLBjO4jAhNE8Tal/tLtFL5Xumjt4OE5q0zsBfvMezg=)
                          3: VY_I-jnZ5FCsfaI58ygsn2y3NFI.roa (hash: 6Gl3wwSR8frdXu3wYdpfIbk9igfvlCW34Jm7lAKNY+U=)
                          4: WNWGusTjgMZTNhfIVDqYpqvjZuA.roa (hash: UKLb//TrsEXCWFXoflJVCjxQxtvXiET2PlXFpGD8gso=)
                          5: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: ub/+rJtBKO7ytKOC8k7e9kPA53OZ0SYEq4rGewHESeg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:f2:3a:34:43:5d:2e:d7:8c:46:34:15:50:72:2e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: May 20 17:00:08 2024 GMT
            Not After : May 21 17:00:08 2024 GMT
        Subject: CN=e601ad8cdbb9d0c64121696dbfb0febb9f6c1f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:47:58:c1:82:ea:f3:91:9c:c8:c5:a4:89:
                    44:d6:24:a4:4f:a6:06:0e:d9:dc:cb:26:f3:36:61:
                    2d:e6:9f:c3:54:9a:a4:96:e8:c7:1c:f9:5d:61:7a:
                    77:da:3d:c0:6f:24:32:63:86:b1:be:3d:27:7c:8b:
                    86:4d:bb:93:71:61:a0:af:57:32:d5:fc:d7:ed:3d:
                    68:4e:c4:d9:d2:4c:66:b6:cf:e2:bd:30:c3:0f:0a:
                    d7:ee:40:bc:a8:db:9a:07:72:56:33:da:39:e1:fd:
                    8c:0a:3e:30:19:db:70:60:9c:fd:9a:70:59:a0:ed:
                    65:cb:d9:d7:b1:eb:fe:8f:e1:5d:b9:cd:bb:14:4f:
                    70:dd:0b:15:46:37:52:80:bc:95:36:72:14:cb:b3:
                    1f:01:90:06:1c:3d:24:f7:44:fc:de:30:71:6b:9f:
                    c6:8b:01:7f:63:e7:ce:32:8b:1b:ec:39:9e:da:8f:
                    fa:08:bf:0b:8c:c6:34:53:af:48:be:e8:23:11:8c:
                    b8:82:1c:a7:7e:14:4a:58:f7:64:be:d9:ef:58:eb:
                    31:a0:39:58:6d:31:c5:89:f8:67:13:38:8e:af:2c:
                    37:89:8c:b0:79:eb:04:8d:07:62:d4:8e:f2:57:fa:
                    e2:21:e9:28:97:a2:a2:47:f4:99:6b:95:e9:1d:30:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:AD:8C:DB:B9:D0:C6:41:21:69:6D:BF:B0:FE:BB:9F:6C:1F:32
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:0a:cf:71:53:78:81:5d:6d:49:2c:0e:c5:d3:cf:ed:04:66:
         e7:ad:69:9d:3e:bd:65:49:ef:a9:8f:16:dc:13:cf:89:10:2c:
         ce:d1:3c:1a:ba:ec:5f:7d:2b:bd:ae:e1:b0:88:c5:54:b2:88:
         e9:f2:c6:da:b1:98:56:a2:48:57:e3:40:bc:e8:98:5a:85:bd:
         79:42:00:cd:ca:72:14:8e:b7:56:61:7d:e3:a9:79:f1:41:9d:
         35:4e:ee:a9:be:0a:36:9a:4f:63:6a:71:88:76:02:ab:0d:8c:
         5d:43:52:2f:a2:51:4d:10:4b:18:89:f6:f0:48:fa:05:b1:97:
         74:ff:38:83:70:93:f3:4b:e3:93:80:5c:95:9a:68:be:1b:5e:
         1e:03:a4:02:8a:63:8b:78:57:b2:a0:47:b1:a5:52:7b:70:74:
         0b:73:ea:d9:eb:4a:c0:e8:8a:c7:22:1e:6a:2f:c9:76:c2:2d:
         dd:79:c0:6e:96:cc:17:25:11:84:c2:65:10:4d:8b:87:be:10:
         dd:36:6c:81:27:09:a9:9d:07:91:a1:5d:ed:48:12:3f:d8:5d:
         9a:50:ca:ef:c9:19:43:c6:f3:a2:d9:ba:be:de:49:91:8f:7f:
         f6:04:fe:4d:bd:70:29:b9:1a:31:ed:27:5b:b2:42:95:05:f2:
         3d:e6:d4:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+W8jo0Q10u14xGNBVQci7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4
YzY4YzYwHhcNMjQwNTIwMTcwMDA4WhcNMjQwNTIxMTcwMDA4WjAzMTEwLwYDVQQD
EyhlNjAxYWQ4Y2RiYjlkMGM2NDEyMTY5NmRiZmIwZmViYjlmNmMxZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9HWMGC6vORnMjFpIlE1iSkT6YG
DtncyybzNmEt5p/DVJqklujHHPldYXp32j3AbyQyY4axvj0nfIuGTbuTcWGgr1cy
1fzX7T1oTsTZ0kxmts/ivTDDDwrX7kC8qNuaB3JWM9o54f2MCj4wGdtwYJz9mnBZ
oO1ly9nXsev+j+Fduc27FE9w3QsVRjdSgLyVNnIUy7MfAZAGHD0k90T83jBxa5/G
iwF/Y+fOMosb7Dme2o/6CL8LjMY0U69IvugjEYy4ghynfhRKWPdkvtnvWOsxoDlY
bTHFifhnEziOryw3iYyweesEjQdi1I7yV/riIekol6KiR/SZa5XpHTBurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYBrYzbudDGQSFpbb+w/rufbB8yMB8GA1UdIwQY
MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt
MDE1NzdhOTI3ZmE5LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5
LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQrPcVN4
gV1tSSwOxdPP7QRm561pnT69ZUnvqY8W3BPPiRAsztE8GrrsX30rva7hsIjFVLKI
6fLG2rGYVqJIV+NAvOiYWoW9eUIAzcpyFI63VmF946l58UGdNU7uqb4KNppPY2px
iHYCqw2MXUNSL6JRTRBLGIn28Ej6BbGXdP84g3CT80vjk4BclZpovhteHgOkAopj
i3hXsqBHsaVSe3B0C3Pq2etKwOiKxyIeai/JdsIt3XnAbpbMFyURhMJlEE2Lh74Q
3TZsgScJqZ0HkaFd7UgSP9hdmlDK78kZQ8bzotm6vt5JkY9/9gT+Tb1wKbkaMe0n
W7JClQXyPebUJA==
-----END CERTIFICATE-----
Generated at Mon May 20 20:08:26 2024 by rpki-client on console-ams.rpki-client.org