Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft
File:                     hyB28YjqSmzl93Z_cxdt1KeTlBs.mft (raw, json)
Hash identifier:          DQQxECWH7X15D4Y8A5+UCu379w7UqL6kUB7dArn3RwM=
Subject key identifier:   8B:E6:9E:7A:B2:09:3A:7C:B2:E0:37:6E:60:4A:64:BD:6E:F2:0B:D1
Authority key identifier: 87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B
Certificate issuer:       /CN=872076f188ea4a6ce5f7767f73176dd4a793941b
Certificate serial:       018FA0668883C3AD3E08ACF66253BE63658A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft
Manifest number:          042B
Signing time:             Wed 22 May 2024 13:03:45 +0000
Manifest this update:     Wed 22 May 2024 13:03:45 +0000
Manifest next update:     Thu 23 May 2024 13:03:45 +0000
Files and hashes:         1: LmrVdvCEqGKvraou1EURCluAFkg.roa (hash: hjdK7yzOivFCFfJWjm/R+s/UDubSTKy3EHaVUixllZA=)
                          2: hyB28YjqSmzl93Z_cxdt1KeTlBs.crl (hash: OTDlMnMBm7aP/ftBvJCpiG6j0JXyZ7DFMrBKwnEyaXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a0:66:88:83:c3:ad:3e:08:ac:f6:62:53:be:63:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872076f188ea4a6ce5f7767f73176dd4a793941b
        Validity
            Not Before: May 22 13:03:45 2024 GMT
            Not After : May 23 13:03:45 2024 GMT
        Subject: CN=8be69e7ab2093a7cb2e0376e604a64bd6ef20bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:72:40:61:5c:29:4c:a8:fb:c0:f9:e5:d2:
                    78:e3:3a:51:38:c5:fb:f4:94:59:1c:ea:7c:f3:b4:
                    3b:25:b5:f9:ab:0d:a9:55:b6:0a:dd:da:22:62:5d:
                    a9:77:8d:e3:5b:af:05:4e:e1:80:2f:55:c0:48:f0:
                    5f:81:af:e5:72:7d:08:c0:dc:c7:38:c2:87:a0:a1:
                    7c:e4:11:9b:a6:07:e8:7e:bd:e8:54:ca:ee:e1:4e:
                    15:d1:4c:df:c0:d3:14:dd:ca:2f:48:e1:9c:8e:03:
                    a0:c9:f5:e5:48:99:5d:65:9c:96:a1:78:32:94:c4:
                    ce:00:b5:b1:c0:5c:cb:2a:65:d0:8e:15:b1:b2:cc:
                    c1:12:fc:ba:de:8a:9e:dc:5b:ce:33:b0:92:e3:4b:
                    cd:05:7a:cd:70:8c:31:e8:c7:98:5c:36:11:2a:a1:
                    83:21:70:7a:61:3e:f2:44:98:28:0d:a0:4e:05:91:
                    91:a5:f2:92:d6:3e:46:c6:4d:9f:be:52:b1:dc:ad:
                    98:13:0e:01:d4:53:f9:08:dc:92:68:97:5f:ad:74:
                    46:15:15:77:d2:12:72:6c:3b:7e:50:8a:70:71:93:
                    6c:f5:71:a3:d5:77:f9:1d:ea:23:0f:51:ac:2f:d2:
                    bb:16:37:52:37:3a:d2:57:a4:25:30:03:89:82:bd:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:9E:7A:B2:09:3A:7C:B2:E0:37:6E:60:4A:64:BD:6E:F2:0B:D1
            X509v3 Authority Key Identifier:
                keyid:87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:98:56:4f:6a:f6:d0:e1:80:c8:4f:01:59:19:4c:31:ca:
         b4:98:ea:77:62:42:1a:c1:b8:7d:54:a2:25:4d:a8:cd:22:fe:
         c8:96:8c:e1:b5:3a:68:e3:90:34:d5:e2:0c:0c:ff:21:29:89:
         25:82:19:5c:da:01:21:ea:15:db:a9:99:83:c2:ee:20:35:7a:
         36:2a:21:94:90:e2:c5:28:4f:dc:6d:6d:37:88:c7:b0:79:a5:
         75:83:10:f5:dd:b3:76:f6:f8:65:ed:00:40:3e:2c:df:f8:d7:
         e9:a5:21:d5:38:5c:01:5b:c4:85:d2:c9:fa:47:c3:34:7f:f7:
         dc:12:b5:66:eb:a5:11:1f:8a:00:f4:c4:a5:ea:bf:47:15:90:
         24:57:40:c0:ed:6e:98:f0:b6:3c:97:f8:f0:7f:8d:55:3a:ab:
         8a:a6:26:8f:17:a0:57:a5:c3:33:16:30:7f:62:f9:b4:a4:b3:
         41:b4:42:c7:67:a7:a1:fb:bd:1c:af:bc:4b:c6:eb:6e:0f:fa:
         56:7b:aa:b0:db:c6:8b:e1:2f:f1:53:b9:0f:7a:50:92:6a:f1:
         7b:f2:cc:39:9a:3e:7d:1d:6f:ff:a1:b5:d1:68:21:74:2a:f0:
         20:b9:63:f8:7b:b6:2a:ae:fe:11:a8:ad:30:4d:5d:6f:f7:1b:
         5a:61:38:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+gZoiDw60+CKz2YlO+Y2WKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjA3NmYxODhlYTRhNmNlNWY3NzY3ZjczMTc2ZGQ0YTc5
Mzk0MWIwHhcNMjQwNTIyMTMwMzQ1WhcNMjQwNTIzMTMwMzQ1WjAzMTEwLwYDVQQD
Eyg4YmU2OWU3YWIyMDkzYTdjYjJlMDM3NmU2MDRhNjRiZDZlZjIwYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthFyQGFcKUyo+8D55dJ44zpROMX7
9JRZHOp887Q7JbX5qw2pVbYK3doiYl2pd43jW68FTuGAL1XASPBfga/lcn0IwNzH
OMKHoKF85BGbpgfofr3oVMru4U4V0UzfwNMU3covSOGcjgOgyfXlSJldZZyWoXgy
lMTOALWxwFzLKmXQjhWxsszBEvy63oqe3FvOM7CS40vNBXrNcIwx6MeYXDYRKqGD
IXB6YT7yRJgoDaBOBZGRpfKS1j5Gxk2fvlKx3K2YEw4B1FP5CNySaJdfrXRGFRV3
0hJybDt+UIpwcZNs9XGj1Xf5HeojD1GsL9K7FjdSNzrSV6QlMAOJgr35RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvmnnqyCTp8suA3bmBKZL1u8gvRMB8GA1UdIwQY
MBaAFIcgdvGI6kps5fd2f3MXbdSnk5QbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlCMjhZanFTbXpsOTNaX2N4ZHQxS2VUbEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMDM4Y2QtMzk3NS00ODkzLTk0ZjYt
M2U1NThhYzI0NjVlLzEvaHlCMjhZanFTbXpsOTNaX2N4ZHQxS2VUbEJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMDM4Y2QtMzk3NS00ODkzLTk0ZjYtM2U1NThhYzI0NjVl
LzEvaHlCMjhZanFTbXpsOTNaX2N4ZHQxS2VUbEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaCYVk9q
9tDhgMhPAVkZTDHKtJjqd2JCGsG4fVSiJU2ozSL+yJaM4bU6aOOQNNXiDAz/ISmJ
JYIZXNoBIeoV26mZg8LuIDV6NiohlJDixShP3G1tN4jHsHmldYMQ9d2zdvb4Ze0A
QD4s3/jX6aUh1ThcAVvEhdLJ+kfDNH/33BK1ZuulER+KAPTEpeq/RxWQJFdAwO1u
mPC2PJf48H+NVTqriqYmjxegV6XDMxYwf2L5tKSzQbRCx2enofu9HK+8S8brbg/6
VnuqsNvGi+Ev8VO5D3pQkmrxe/LMOZo+fR1v/6G10WghdCrwILlj+Hu2Kq7+Eait
ME1db/cbWmE4Mg==
-----END CERTIFICATE-----
Generated at Wed May 22 15:00:00 2024 by rpki-client on console-fra.rpki-client.org