Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File:                     G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier:          iEWe8c0cMmNLxP7D72+gtrxx6wMLt1Sh7dqziz/NX/s=
Subject key identifier:   5F:4B:BC:81:BC:01:B5:70:13:87:AC:03:A5:B7:75:8A:68:4F:67:5D
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer:       /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial:       018F8F04A8267D46A62C31812CA6E40EA644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number:          117C
Signing time:             Sun 19 May 2024 04:03:18 +0000
Manifest this update:     Sun 19 May 2024 04:03:18 +0000
Manifest next update:     Mon 20 May 2024 04:03:18 +0000
Files and hashes:         1: 95kfmjeYu601tVD7G5VIwEGLvN8.roa (hash: LncIH1GdBz4gKXhc1rjsKzlF4Bo9rfgpySezcZ0FWHw=)
                          2: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: Vt/3Brmhtt2ajMP9F3R/QIHUd8ktSjRfnxA2EZ+cgR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:04:a8:26:7d:46:a6:2c:31:81:2c:a6:e4:0e:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
        Validity
            Not Before: May 19 04:03:18 2024 GMT
            Not After : May 20 04:03:18 2024 GMT
        Subject: CN=5f4bbc81bc01b5701387ac03a5b7758a684f675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:0a:93:35:8a:63:5f:1e:cc:53:6c:60:df:
                    78:87:84:27:38:bd:b9:fa:2a:96:26:d5:c5:51:4a:
                    97:8f:f0:b5:cd:48:15:53:6e:4f:c2:e5:d5:a7:61:
                    35:1a:b6:3b:07:c5:1c:1b:43:0a:18:06:69:01:55:
                    68:56:26:dd:c2:07:1c:77:18:3b:53:54:34:2b:2a:
                    67:6b:d2:d1:fa:95:cf:72:a4:5a:7a:6d:07:6f:3f:
                    f7:a3:2f:ef:2f:63:46:41:94:04:65:ea:80:cb:6d:
                    f9:e4:8c:3c:93:3b:b8:a6:0a:a8:3e:8f:0d:f6:a0:
                    a5:07:e5:95:33:fc:28:87:b8:68:c1:51:53:d1:80:
                    fa:cb:19:a9:e2:e9:75:c4:5a:fb:25:af:87:a6:3f:
                    fb:d2:89:29:40:14:bc:6e:1d:64:12:20:ca:b4:b5:
                    02:d1:44:56:4f:d1:96:19:06:c0:06:e0:94:84:7f:
                    59:ef:97:41:1f:2c:f4:d7:8b:fa:57:9d:30:34:45:
                    fd:95:91:95:48:80:14:46:cf:16:a5:ed:6d:07:0a:
                    af:ee:a5:86:c8:4b:be:1e:1c:8b:fa:d2:cf:d3:9d:
                    c5:1d:72:b2:c2:f2:1b:62:b7:9f:31:a3:e1:4a:45:
                    6f:05:5f:1f:d2:6a:c5:3f:09:86:d9:2b:88:2a:07:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:BC:81:BC:01:B5:70:13:87:AC:03:A5:B7:75:8A:68:4F:67:5D
            X509v3 Authority Key Identifier:
                keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:60:01:d7:07:6a:b1:5b:08:52:a2:ed:58:6e:07:03:b7:
         ec:75:07:d1:7e:b1:dd:b0:c4:3a:b7:97:a1:67:ee:5c:9a:77:
         73:82:60:a4:db:c1:a9:e4:7a:df:3e:96:1f:af:a1:54:d9:9b:
         62:a9:d4:2a:31:c9:4a:17:21:bb:cc:ca:25:df:16:07:fa:eb:
         7f:ff:37:e0:60:21:56:b7:d0:7e:d0:f5:bc:ee:95:0a:39:0c:
         83:7d:cd:22:c2:c3:33:2c:64:d9:75:c7:ce:85:1b:9c:13:db:
         1a:b4:04:e5:0f:9c:39:30:fd:1d:36:7d:3c:79:ee:10:24:3f:
         06:78:66:c4:90:68:b1:0c:3c:54:d3:34:cb:76:ed:4b:7a:d3:
         e3:e0:d7:61:d7:2e:a9:9b:42:70:db:1d:c3:b6:ee:f2:5e:ab:
         a8:8e:30:1d:2a:a6:aa:21:1d:58:e4:02:08:33:ef:9d:46:8a:
         9a:59:88:c9:83:d6:8a:b1:82:f5:06:b8:64:78:00:4d:b1:52:
         42:8d:61:fb:f4:ba:7e:fa:d3:62:e0:cd:81:77:d6:5d:6d:d7:
         fe:b7:a7:1c:dc:4b:e9:51:ba:08:6c:d7:04:83:a5:54:9a:6a:
         12:3c:d6:15:66:38:af:78:f5:99:85:0d:fe:75:68:8c:e0:29:
         21:c2:ba:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+PBKgmfUamLDGBLKbkDqZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy
MzFlNWQwHhcNMjQwNTE5MDQwMzE4WhcNMjQwNTIwMDQwMzE4WjAzMTEwLwYDVQQD
Eyg1ZjRiYmM4MWJjMDFiNTcwMTM4N2FjMDNhNWI3NzU4YTY4NGY2NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFcKkzWKY18ezFNsYN94h4QnOL25
+iqWJtXFUUqXj/C1zUgVU25PwuXVp2E1GrY7B8UcG0MKGAZpAVVoVibdwgccdxg7
U1Q0Kypna9LR+pXPcqRaem0Hbz/3oy/vL2NGQZQEZeqAy2355Iw8kzu4pgqoPo8N
9qClB+WVM/woh7howVFT0YD6yxmp4ul1xFr7Ja+Hpj/70okpQBS8bh1kEiDKtLUC
0URWT9GWGQbABuCUhH9Z75dBHyz014v6V50wNEX9lZGVSIAURs8Wpe1tBwqv7qWG
yEu+HhyL+tLP053FHXKywvIbYrefMaPhSkVvBV8f0mrFPwmG2SuIKgc6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9LvIG8AbVwE4esA6W3dYpoT2ddMB8GA1UdIwQY
MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt
ZjEwZDI2ZTNjM2RmLzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm
LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMtgAdcH
arFbCFKi7VhuBwO37HUH0X6x3bDEOreXoWfuXJp3c4JgpNvBqeR63z6WH6+hVNmb
YqnUKjHJShchu8zKJd8WB/rrf/834GAhVrfQftD1vO6VCjkMg33NIsLDMyxk2XXH
zoUbnBPbGrQE5Q+cOTD9HTZ9PHnuECQ/BnhmxJBosQw8VNM0y3btS3rT4+DXYdcu
qZtCcNsdw7bu8l6rqI4wHSqmqiEdWOQCCDPvnUaKmlmIyYPWirGC9Qa4ZHgATbFS
Qo1h+/S6fvrTYuDNgXfWXW3X/renHNxL6VG6CGzXBIOlVJpqEjzWFWY4r3j1mYUN
/nVojOApIcK6oQ==
-----END CERTIFICATE-----
Generated at Sun May 19 06:19:13 2024 by rpki-client on console-fra.rpki-client.org