Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File:                     mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier:          s7JdIayBsMclkEab+goSMd6i8emsa8aZeZw8P7kBbuc=
Subject key identifier:   48:9F:D8:5C:51:45:CC:F6:9C:7B:44:7B:B2:78:D3:B5:69:1B:01:0A
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer:       /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial:       018F8BCA366CC02BA7EAC0986F165810F406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number:          026B
Signing time:             Sat 18 May 2024 13:00:36 +0000
Manifest this update:     Sat 18 May 2024 13:00:36 +0000
Manifest next update:     Sun 19 May 2024 13:00:36 +0000
Files and hashes:         1: 6fH3TVwaivkx9_5c6cIs1Li5VfE.roa (hash: eUqAkCIJ7ZoEVolWLao4oQVstQJ8zPMPnad3YIlph/4=)
                          2: FnnMqjYBcfSotGYxsm0skgZFnd4.roa (hash: iEAwGjam1cAyA33L4MgVAWpWSOoYGN7e5K/QHe4H8L4=)
                          3: bEeqMQNoQJ6qCtW7oDnAsal5Y4Q.roa (hash: Lm6h0giBLIk835O7bd+cvHrcXhlCLh7W2Q+/8X9xH+Y=)
                          4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: 6EX3m8OLlfufty5ZbNFJOnzkxA+tjuEhjQRTsrco7mo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:ca:36:6c:c0:2b:a7:ea:c0:98:6f:16:58:10:f4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
        Validity
            Not Before: May 18 13:00:36 2024 GMT
            Not After : May 19 13:00:36 2024 GMT
        Subject: CN=489fd85c5145ccf69c7b447bb278d3b5691b010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b1:e6:82:a8:e0:3b:af:a7:f3:f2:a0:4a:72:
                    16:53:4f:3d:72:4c:ba:f1:59:df:b4:ef:43:26:f6:
                    0e:21:17:38:69:0b:91:e6:fb:dd:a4:3a:db:0e:3b:
                    8e:06:63:96:f6:49:19:5b:87:20:94:3b:08:11:f2:
                    f6:59:15:3d:44:5c:44:2c:7a:6b:44:59:0b:9a:fa:
                    78:e8:9c:08:5c:8f:b9:48:74:c9:68:59:1c:ad:c3:
                    bb:38:ba:25:58:64:36:87:26:b9:e1:78:e5:a2:22:
                    6c:3e:81:a1:51:83:36:77:31:5a:df:07:12:95:83:
                    ab:dc:07:e1:f4:ce:1d:b6:ee:a4:23:ec:93:92:2c:
                    21:46:cc:42:d1:ab:1d:62:be:b5:06:bd:82:85:58:
                    52:71:db:af:4b:74:45:67:57:7e:97:85:dd:5d:ec:
                    db:6c:dc:41:50:6a:11:c3:d1:85:8e:b6:f3:95:4f:
                    b8:5e:92:7b:85:49:28:f7:57:8f:6e:cd:bb:21:bf:
                    5e:80:98:84:8f:f3:52:18:56:32:99:96:ee:71:c5:
                    90:c4:fb:be:76:6a:8e:29:c2:48:bf:a4:f5:b9:42:
                    ab:b1:57:77:4a:db:ff:03:e2:e2:04:1b:45:9e:f5:
                    e7:25:26:44:75:70:d5:e2:af:48:02:15:22:a8:69:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:D8:5C:51:45:CC:F6:9C:7B:44:7B:B2:78:D3:B5:69:1B:01:0A
            X509v3 Authority Key Identifier:
                keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:f5:e9:68:ec:2b:01:1b:a4:0d:81:f6:80:f9:f8:17:11:
         16:c4:1f:d6:3b:5c:92:53:08:23:fe:b1:07:89:93:bf:a2:4a:
         04:b3:39:83:4d:ff:4b:d8:e7:ef:7e:af:17:b3:9f:41:ca:86:
         54:94:46:e4:e1:19:75:2b:2f:46:a7:57:24:f8:d6:b4:11:e1:
         5a:0b:db:7c:a8:05:2c:07:1e:55:4e:21:54:f3:6d:0b:7b:0f:
         07:15:28:1b:0b:75:3e:cb:fe:20:af:a4:0b:a0:08:0b:3f:cc:
         a8:49:26:4a:c8:dd:1a:42:65:fe:c3:d1:33:0e:33:03:de:fb:
         bb:36:d9:95:fe:35:fe:e9:74:47:20:45:73:19:c4:08:8e:b9:
         4f:81:64:e2:74:66:ed:9e:7b:71:e7:e7:52:0a:10:79:a1:b4:
         9a:94:be:d2:90:aa:e6:fa:d6:73:a1:f4:8f:d6:23:f5:66:0f:
         a7:24:e6:41:6e:64:f0:df:91:d6:68:6c:9e:32:e2:ea:99:34:
         9f:a1:77:12:a2:79:0c:ea:12:cb:8e:43:80:97:3e:b9:92:29:
         b6:e5:5a:a7:0d:fc:aa:aa:f1:58:49:c7:b0:81:42:ba:21:ff:
         db:65:c1:ba:0a:30:f2:e1:90:b0:91:09:b2:26:3b:d8:46:ab:
         16:7d:40:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+LyjZswCun6sCYbxZYEPQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi
ZTg2OGUwHhcNMjQwNTE4MTMwMDM2WhcNMjQwNTE5MTMwMDM2WjAzMTEwLwYDVQQD
Eyg0ODlmZDg1YzUxNDVjY2Y2OWM3YjQ0N2JiMjc4ZDNiNTY5MWIwMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLHmgqjgO6+n8/KgSnIWU089cky6
8VnftO9DJvYOIRc4aQuR5vvdpDrbDjuOBmOW9kkZW4cglDsIEfL2WRU9RFxELHpr
RFkLmvp46JwIXI+5SHTJaFkcrcO7OLolWGQ2hya54XjloiJsPoGhUYM2dzFa3wcS
lYOr3Afh9M4dtu6kI+yTkiwhRsxC0asdYr61Br2ChVhScduvS3RFZ1d+l4XdXezb
bNxBUGoRw9GFjrbzlU+4XpJ7hUko91ePbs27Ib9egJiEj/NSGFYymZbuccWQxPu+
dmqOKcJIv6T1uUKrsVd3Stv/A+LiBBtFnvXnJSZEdXDV4q9IAhUiqGkizQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEif2FxRRcz2nHtEe7J407VpGwEKMB8GA1UdIwQY
MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt
NTNmNTc1MDRlZjM1LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1
LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6316Wjs
KwEbpA2B9oD5+BcRFsQf1jtcklMII/6xB4mTv6JKBLM5g03/S9jn736vF7OfQcqG
VJRG5OEZdSsvRqdXJPjWtBHhWgvbfKgFLAceVU4hVPNtC3sPBxUoGwt1Psv+IK+k
C6AICz/MqEkmSsjdGkJl/sPRMw4zA977uzbZlf41/ul0RyBFcxnECI65T4Fk4nRm
7Z57cefnUgoQeaG0mpS+0pCq5vrWc6H0j9Yj9WYPpyTmQW5k8N+R1mhsnjLi6pk0
n6F3EqJ5DOoSy45DgJc+uZIptuVapw38qqrxWEnHsIFCuiH/22XBugow8uGQsJEJ
siY72EarFn1Asg==
-----END CERTIFICATE-----
Generated at Sat May 18 13:39:50 2024 by rpki-client on console-fra.rpki-client.org