Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          nyZBiZ5/L522tQcn+J8TMO3BMzJC9fJR/G5bUFKlI8g=
Subject key identifier:   F4:0C:C4:3F:FE:16:1A:B6:B1:D4:A8:46:94:D0:AC:81:A1:7F:88:10
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       018F8DEF79A22F0EA6032C17DD5DA6E6F636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          1186
Signing time:             Sat 18 May 2024 23:00:32 +0000
Manifest this update:     Sat 18 May 2024 23:00:32 +0000
Manifest next update:     Sun 19 May 2024 23:00:32 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: m7Lg4mEHnSDhXPCsT1T5ZXQDnSYkm1X1KRGcYGgieDw=)
                          2: PnbCsSNznRRluDBSBy4v2MzxIYM.roa (hash: fIa5ZMZSV5RjWOp8V2cbGfywfjHHa5cxoXympH6gqE8=)
                          3: fgA8eG8OiiUwOlpIAfVqbyFIGUo.roa (hash: QVenHOakNN7iaPQuosh7/Do740EZOWuf7xHyLzedZ4A=)
                          4: kdT3CWNf0iL3GwkkPlfxY3Bbydc.roa (hash: QNIgV4InOsH44bcL0rILLHN85HUzOrBdPfOUMs+Bz6Q=)
                          5: qZgq5PEruZKDXlqWF1xLZ6Y5UKs.roa (hash: 8A4ep0EEhUT4nPG2srtH0UdmXwR5nnzVhFIc5NbOWEs=)
                          6: zD0j8OiV2NvUAuYsWx_KiPhwiAc.roa (hash: QCIUxLhfAXS4VKNcKKZcAlOFpNWNCTKnA4v7BQ/4wp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:79:a2:2f:0e:a6:03:2c:17:dd:5d:a6:e6:f6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: May 18 23:00:32 2024 GMT
            Not After : May 19 23:00:32 2024 GMT
        Subject: CN=f40cc43ffe161ab6b1d4a84694d0ac81a17f8810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:2e:09:a6:81:89:0a:96:35:18:1a:9d:eb:
                    dc:97:b0:00:04:f8:a5:21:fd:b5:2f:a6:c7:44:5a:
                    18:10:16:86:e0:7e:a6:7d:aa:22:fb:09:a5:1f:1d:
                    8a:c4:b0:2c:ba:47:3d:90:dc:b6:3c:da:f5:8c:ea:
                    18:44:3e:ce:c5:2e:af:ba:c7:e3:7d:d8:16:a9:74:
                    32:f7:6a:11:53:96:d4:45:88:fe:07:a7:43:f0:c8:
                    19:89:1b:d3:78:b3:95:f7:43:5d:c0:d8:cc:8b:f1:
                    b8:b4:7f:83:56:aa:b6:65:7a:f3:aa:e1:84:6b:92:
                    f4:00:5a:bd:0d:99:5d:55:14:4d:99:89:3c:81:73:
                    63:fd:55:6f:e2:b9:58:63:9a:c3:4d:31:e1:66:d0:
                    c3:1e:86:d4:f9:f0:3b:09:90:18:43:5d:d6:ff:e8:
                    4c:af:aa:74:0e:23:c8:fe:9b:4e:49:c0:ae:62:d7:
                    23:0e:ff:72:df:57:9c:ea:b2:7f:fe:8b:87:a1:d2:
                    74:e0:84:1a:7a:34:e5:91:3a:cf:98:0a:ec:65:bd:
                    ec:ee:33:1d:ab:c6:f2:9c:fb:20:0c:ff:df:1b:f4:
                    21:58:98:60:55:df:d3:0d:e3:2f:f7:18:2f:f0:13:
                    a3:14:c7:cd:6e:df:2d:c9:e7:55:0f:ac:ce:17:a9:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:C4:3F:FE:16:1A:B6:B1:D4:A8:46:94:D0:AC:81:A1:7F:88:10
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fb:e5:25:92:d6:6d:33:b7:70:44:78:7f:02:35:70:ff:de:
         44:78:ab:76:20:31:d9:f4:85:3e:bf:d9:9e:51:92:4b:18:9f:
         a9:a8:d2:0e:bd:18:bf:51:c4:54:e0:45:40:a8:4c:27:3e:30:
         d0:8d:33:2d:f3:ac:1d:d5:9c:a8:d2:e5:8e:ae:47:fe:69:7a:
         0f:9f:d8:f0:5d:97:ed:81:f5:9a:9e:c2:66:0d:7f:1d:50:2d:
         b7:6d:e3:37:07:f5:68:13:7f:d3:31:83:15:1f:75:a2:75:3d:
         6e:aa:78:6d:3a:6f:e7:16:c7:df:20:02:9c:e1:b7:88:b3:d5:
         aa:67:c1:4a:31:68:11:65:50:a8:9b:18:14:54:65:f1:ba:63:
         f6:70:ef:9f:13:f7:29:86:59:a8:69:6e:83:cc:11:7c:5b:84:
         9d:81:59:25:04:38:03:12:a3:fb:dd:f7:90:9b:99:2e:0e:1f:
         5a:22:70:75:23:b4:ae:dc:18:4c:ee:06:96:ef:6f:2a:1e:85:
         c9:a5:b5:98:74:c4:84:fe:27:9a:ad:04:c4:40:36:cc:bf:62:
         19:f0:44:67:2e:2b:30:1e:34:59:7c:7d:88:c4:bf:67:02:54:
         28:01:37:81:9d:4f:44:4b:8a:14:51:56:4b:47:11:43:92:4f:
         a5:76:43:5b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY+N73miLw6mAywX3V2m5vY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjQwNTE4MjMwMDMyWhcNMjQwNTE5MjMwMDMyWjAzMTEwLwYDVQQD
EyhmNDBjYzQzZmZlMTYxYWI2YjFkNGE4NDY5NGQwYWM4MWExN2Y4ODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynwuCaaBiQqWNRganevcl7AABPil
If21L6bHRFoYEBaG4H6mfaoi+wmlHx2KxLAsukc9kNy2PNr1jOoYRD7OxS6vusfj
fdgWqXQy92oRU5bURYj+B6dD8MgZiRvTeLOV90NdwNjMi/G4tH+DVqq2ZXrzquGE
a5L0AFq9DZldVRRNmYk8gXNj/VVv4rlYY5rDTTHhZtDDHobU+fA7CZAYQ13W/+hM
r6p0DiPI/ptOScCuYtcjDv9y31ec6rJ//ouHodJ04IQaejTlkTrPmArsZb3s7jMd
q8bynPsgDP/fG/QhWJhgVd/TDeMv9xgv8BOjFMfNbt8tyedVD6zOF6mlGwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPQMxD/+Fhq2sdSoRpTQrIGhf4gQMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvvl
JZLWbTO3cER4fwI1cP/eRHirdiAx2fSFPr/ZnlGSSxifqajSDr0Yv1HEVOBFQKhM
Jz4w0I0zLfOsHdWcqNLljq5H/ml6D5/Y8F2X7YH1mp7CZg1/HVAtt23jNwf1aBN/
0zGDFR91onU9bqp4bTpv5xbH3yACnOG3iLPVqmfBSjFoEWVQqJsYFFRl8bpj9nDv
nxP3KYZZqGlug8wRfFuEnYFZJQQ4AxKj+933kJuZLg4fWiJwdSO0rtwYTO4Glu9v
Kh6FyaW1mHTEhP4nmq0ExEA2zL9iGfBEZy4rMB40WXx9iMS/ZwJUKAE3gZ1PREuK
FFFWS0cRQ5JPpXZDWw==
-----END CERTIFICATE-----
Generated at Sun May 19 05:57:38 2024 by rpki-client on console-fra.rpki-client.org