Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File:                     I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier:          L6rnZPlMFQNL/1Vbqxtstu6mkKMfvcM57QU7RiEyLe8=
Subject key identifier:   EB:3D:9E:5F:00:65:F0:11:90:1F:56:9F:53:38:20:89:11:46:F1:08
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       018F86360C061B1FD807B7AB3414AC148895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number:          0F2E
Signing time:             Fri 17 May 2024 11:00:39 +0000
Manifest this update:     Fri 17 May 2024 11:00:39 +0000
Manifest next update:     Sat 18 May 2024 11:00:39 +0000
Files and hashes:         1: 3ko76RI4_8olszWLknrRsnIM8R8.roa (hash: wG8/Ep14dSh0wf/BsCGCUSvi+GhBy0rTzfXHFMbca8s=)
                          2: 73FEbhV1kEqoCDNM9EUL4-uwCEA.roa (hash: jD21oGekQTHxi65Q+kNrEGsQ+rswrdPIvinEh7DgOtw=)
                          3: 86cQAUaQiVgyvYuSlncOQAujhrk.roa (hash: cKtNReAYpql2Rlq6yOGodlXIx/sgp3FpT5TB8KbxSnk=)
                          4: GZLuyBYHTOfulL_ywnxjlH74VIU.roa (hash: T/0V7jFnM8pQ95jCltSH3H/linCkKklRj/fPwtjx7yU=)
                          5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: HllNbHcU2c0Fhkdn8NWfrGeP8BCBJLkoMzOqwRF+8bY=)
                          6: N5h11_xlxU-DSsvKLtNIniosHpQ.roa (hash: ht47OM139ML5NJChmeLVcbqVwpoFUsAnMaWjmD4jG5o=)
                          7: kWM5fjcZcvreJRsxT-BC4b4mnFk.roa (hash: FX3PX03gEweW6VzVjb0HllAn0OCzaRqbAPAW9/UgvHo=)
                          8: mzxhqCPyXY9lG99X_7SLvwvfTR8.roa (hash: 3iKVwEJUq6At3dficC0aR9rYqJc6j2GQfyPX9RP4avQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:0c:06:1b:1f:d8:07:b7:ab:34:14:ac:14:88:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: May 17 11:00:39 2024 GMT
            Not After : May 18 11:00:39 2024 GMT
        Subject: CN=eb3d9e5f0065f011901f569f533820891146f108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:ab:f0:e0:3c:b9:c9:14:b5:95:77:c8:81:
                    cd:43:a0:44:89:58:af:29:cb:ae:8e:8f:5a:78:df:
                    c2:dd:48:35:46:37:77:2f:ae:da:8d:47:2a:3f:a9:
                    b6:e9:0f:a8:cc:aa:dd:7f:88:66:06:dc:e1:7a:c0:
                    66:e5:6d:92:bc:13:8f:4d:b4:17:e7:86:8d:7c:9d:
                    f8:a9:26:f9:5f:e2:ca:af:3d:45:4c:55:7b:ec:4c:
                    ad:b2:b0:5c:30:45:d3:4c:bc:c8:36:be:ea:6b:e2:
                    14:5e:0b:6d:53:35:f8:6d:c6:00:8e:45:70:8b:ce:
                    7d:01:99:c5:20:74:ca:9d:49:f1:af:b9:aa:05:30:
                    0f:e0:c3:66:a5:3f:34:e5:22:e9:1c:4b:78:9a:ac:
                    12:40:00:10:b1:27:a2:58:4f:c8:4a:58:d6:15:b0:
                    9a:b2:5e:9c:95:d2:90:ed:e6:6a:20:87:54:61:14:
                    3e:0d:bb:df:9b:95:2e:c2:f3:2f:e2:be:06:8e:ce:
                    b9:22:5a:aa:b1:82:aa:85:ae:86:16:b5:b7:32:6c:
                    bc:63:b8:f4:5b:da:ba:68:61:0f:00:88:ee:ee:af:
                    ac:3c:55:25:62:7f:db:28:0f:94:09:5b:24:70:97:
                    47:5b:6d:c5:76:56:13:38:3a:cd:14:70:14:23:2c:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3D:9E:5F:00:65:F0:11:90:1F:56:9F:53:38:20:89:11:46:F1:08
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:41:1f:50:15:20:29:cc:f0:a4:9f:f8:e6:59:ed:f0:9e:
         8c:36:45:be:7c:db:17:a7:ef:bc:a0:2d:58:6b:a5:6e:4f:15:
         58:1c:45:1d:37:5a:ee:d2:ff:f9:5a:32:32:9f:d8:8c:72:df:
         5c:3f:e1:66:0f:6c:1f:4e:f5:00:66:2c:74:f2:68:0e:ba:a3:
         20:fe:19:1b:68:2d:b8:55:6e:c4:a8:8a:40:8a:b0:94:06:fc:
         d5:56:26:78:dc:ec:61:25:27:1c:36:e8:fb:62:a0:fc:f0:87:
         02:55:f8:0b:ef:f5:3f:42:c2:37:a0:33:83:7c:99:dd:a4:7d:
         a7:64:6e:0f:4c:d5:67:37:89:d5:0e:34:9a:03:2c:c0:6e:0c:
         15:01:f1:bf:af:3d:6f:24:e6:c6:14:07:14:1d:ce:ad:9a:e3:
         3b:92:a2:57:62:78:ec:64:d4:4f:bf:10:af:2e:d3:83:57:6a:
         e6:00:3c:56:0a:01:73:9b:26:8e:7c:9e:13:14:7d:ad:74:52:
         7b:10:02:d5:9b:6e:94:b3:34:e2:1f:ad:e3:09:3f:f1:5c:56:
         b9:39:22:dd:2c:8c:f1:8c:2c:e3:34:11:42:45:24:82:4d:57:
         42:7e:85:b6:04:d6:f2:ce:4d:f9:d2:b9:0e:14:d5:67:1c:82:
         cc:ab:7e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNgwGGx/YB7erNBSsFIiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjQwNTE3MTEwMDM5WhcNMjQwNTE4MTEwMDM5WjAzMTEwLwYDVQQD
EyhlYjNkOWU1ZjAwNjVmMDExOTAxZjU2OWY1MzM4MjA4OTExNDZmMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNqr8OA8uckUtZV3yIHNQ6BEiViv
Kcuujo9aeN/C3Ug1Rjd3L67ajUcqP6m26Q+ozKrdf4hmBtzhesBm5W2SvBOPTbQX
54aNfJ34qSb5X+LKrz1FTFV77EytsrBcMEXTTLzINr7qa+IUXgttUzX4bcYAjkVw
i859AZnFIHTKnUnxr7mqBTAP4MNmpT805SLpHEt4mqwSQAAQsSeiWE/ISljWFbCa
sl6cldKQ7eZqIIdUYRQ+Dbvfm5UuwvMv4r4Gjs65IlqqsYKqha6GFrW3Mmy8Y7j0
W9q6aGEPAIju7q+sPFUlYn/bKA+UCVskcJdHW23FdlYTODrNFHAUIyxTwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs9nl8AZfARkB9Wn1M4IIkRRvEIMB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK1BH1AV
ICnM8KSf+OZZ7fCejDZFvnzbF6fvvKAtWGulbk8VWBxFHTda7tL/+VoyMp/YjHLf
XD/hZg9sH071AGYsdPJoDrqjIP4ZG2gtuFVuxKiKQIqwlAb81VYmeNzsYSUnHDbo
+2Kg/PCHAlX4C+/1P0LCN6Azg3yZ3aR9p2RuD0zVZzeJ1Q40mgMswG4MFQHxv689
byTmxhQHFB3OrZrjO5KiV2J47GTUT78Qry7Tg1dq5gA8VgoBc5smjnyeExR9rXRS
exAC1ZtulLM04h+t4wk/8VxWuTki3SyM8Yws4zQRQkUkgk1XQn6FtgTW8s5N+dK5
DhTVZxyCzKt+wQ==
-----END CERTIFICATE-----
Generated at Fri May 17 15:01:56 2024 by rpki-client on console-fra.rpki-client.org