Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File:                     zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier:          ft+MVkaVhNfXYk4qNJ7MVI8Bk3KqpZgxGsfxCWYY6BY=
Subject key identifier:   E9:36:32:BF:6B:09:C1:65:B6:55:BA:85:C9:B4:35:D2:D2:17:4D:2A
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer:       /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial:       018F8B25D39A08D7AD5E20DD4FF4CE8A4C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number:          05DE
Signing time:             Sat 18 May 2024 10:01:03 +0000
Manifest this update:     Sat 18 May 2024 10:01:03 +0000
Manifest next update:     Sun 19 May 2024 10:01:03 +0000
Files and hashes:         1: wAWdT2b-Mo0p43eH13Oc9Nb-vXI.roa (hash: saFKoBQJKoTjCE1VttiJGx/rV5j5vAfPADVNJLNG2CI=)
                          2: wCnljZVm6ObMHpXp7IzD8ioTc_k.roa (hash: Kgho8j1ime9o41D3pl2F4T8Y8+mgzpAMna7Q+M21J/U=)
                          3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: pYe/9mR7Drkp7PY256oGSh1THWBGSjL+cUSVYUvWZFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:25:d3:9a:08:d7:ad:5e:20:dd:4f:f4:ce:8a:4c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
        Validity
            Not Before: May 18 10:01:03 2024 GMT
            Not After : May 19 10:01:03 2024 GMT
        Subject: CN=e93632bf6b09c165b655ba85c9b435d2d2174d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:b8:3b:ed:fd:21:70:30:3c:4d:8f:10:a1:
                    d4:ce:be:6b:b9:fb:8b:c7:3b:af:03:b0:6f:7c:89:
                    95:a7:e5:b0:93:9e:59:e7:9d:3b:18:e6:1b:03:81:
                    32:7a:a7:a0:21:a3:ac:c8:64:73:4c:2b:96:a9:9f:
                    56:2d:9d:f1:72:25:db:cf:be:f8:9a:23:cb:8f:3b:
                    4a:a0:ad:5d:61:25:34:d7:75:b5:61:74:fb:35:92:
                    e4:f0:66:8a:77:ad:e8:81:f1:4e:66:64:ea:bd:ae:
                    8b:3b:c3:4c:46:51:5a:f2:4e:80:fe:a1:4d:c8:13:
                    97:b7:83:7f:ef:16:34:8b:58:a4:34:9c:b5:25:3e:
                    cb:a7:c5:c3:2e:4e:ab:91:f3:97:92:ac:73:cd:cc:
                    a3:ac:90:bf:b1:64:78:b5:f1:1b:da:62:e6:ad:c9:
                    2a:eb:03:99:6d:9c:99:43:83:46:c8:f2:08:d5:f7:
                    1b:c9:78:a0:47:58:08:6f:5d:e3:04:f1:4c:e4:e9:
                    06:2b:4f:9a:69:89:bb:2d:f1:43:6f:9d:85:3e:a9:
                    0a:b1:71:dc:cf:9b:c2:93:20:43:41:fe:04:a5:ef:
                    a2:22:63:03:19:01:ff:96:3a:08:d0:4c:7a:5d:a1:
                    cc:25:83:12:32:a1:48:9b:45:90:da:61:32:bd:c4:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:32:BF:6B:09:C1:65:B6:55:BA:85:C9:B4:35:D2:D2:17:4D:2A
            X509v3 Authority Key Identifier:
                keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:05:fe:7a:aa:76:b9:18:d3:1c:78:a2:20:3c:14:32:a3:
         8d:b5:15:03:27:0c:4a:db:3a:4f:82:49:7c:6b:0d:ab:f1:bc:
         53:16:e7:78:d1:4d:72:b9:7b:fb:5a:c4:e0:68:93:4d:60:07:
         c2:e2:38:a7:84:a5:d4:a7:7b:47:fa:29:6c:27:78:36:a6:ad:
         9f:de:98:48:e3:ca:7b:92:a6:6e:5c:86:0b:2a:06:20:ed:77:
         45:4a:ac:33:8c:ed:1b:78:7c:d8:d3:58:98:4c:d6:c5:ab:2a:
         b4:4c:3e:41:6d:32:6e:ab:4c:39:f9:b7:ed:b9:fa:e0:4f:a5:
         d4:27:5c:59:96:99:61:fd:86:36:28:b1:21:39:2f:e2:1a:f3:
         b3:0f:91:06:c4:bb:06:12:cb:f3:a0:22:bb:a2:48:0b:99:87:
         0f:a1:84:33:ba:8f:1d:97:97:97:83:58:5b:2b:0b:08:3d:12:
         07:85:60:e9:85:af:81:1a:ee:22:45:b7:d0:7b:1c:f6:44:6d:
         23:38:ba:1e:02:5a:4b:4c:fa:75:d3:a3:98:25:85:e2:17:83:
         3f:8d:5e:a7:85:0f:7b:5d:3e:92:12:56:ba:41:40:81:84:c7:
         41:a4:2e:c1:50:4b:da:79:20:ce:7a:7a:ba:66:f0:83:5f:8a:
         9a:3a:1f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+LJdOaCNetXiDdT/TOikyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjQwNTE4MTAwMTAzWhcNMjQwNTE5MTAwMTAzWjAzMTEwLwYDVQQD
EyhlOTM2MzJiZjZiMDljMTY1YjY1NWJhODVjOWI0MzVkMmQyMTc0ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbu4O+39IXAwPE2PEKHUzr5rufuL
xzuvA7BvfImVp+Wwk55Z5507GOYbA4EyeqegIaOsyGRzTCuWqZ9WLZ3xciXbz774
miPLjztKoK1dYSU013W1YXT7NZLk8GaKd63ogfFOZmTqva6LO8NMRlFa8k6A/qFN
yBOXt4N/7xY0i1ikNJy1JT7Lp8XDLk6rkfOXkqxzzcyjrJC/sWR4tfEb2mLmrckq
6wOZbZyZQ4NGyPII1fcbyXigR1gIb13jBPFM5OkGK0+aaYm7LfFDb52FPqkKsXHc
z5vCkyBDQf4Epe+iImMDGQH/ljoI0Ex6XaHMJYMSMqFIm0WQ2mEyvcQX2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk2Mr9rCcFltlW6hcm0NdLSF00qMB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfssF/nqq
drkY0xx4oiA8FDKjjbUVAycMSts6T4JJfGsNq/G8UxbneNFNcrl7+1rE4GiTTWAH
wuI4p4Sl1Kd7R/opbCd4Nqatn96YSOPKe5KmblyGCyoGIO13RUqsM4ztG3h82NNY
mEzWxasqtEw+QW0ybqtMOfm37bn64E+l1CdcWZaZYf2GNiixITkv4hrzsw+RBsS7
BhLL86Aiu6JIC5mHD6GEM7qPHZeXl4NYWysLCD0SB4Vg6YWvgRruIkW30Hsc9kRt
Izi6HgJaS0z6ddOjmCWF4heDP41ep4UPe10+khJWukFAgYTHQaQuwVBL2nkgznp6
umbwg1+KmjofjA==
-----END CERTIFICATE-----
Generated at Sat May 18 14:01:54 2024 by rpki-client on console-fra.rpki-client.org