Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File:                     4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier:          CBrqT2vDTpMYGaL0VpJlQ9WUQqpA39os4af3SEOY7hA=
Subject key identifier:   A6:54:E9:BC:4B:07:4D:CF:05:9C:78:B5:32:22:B1:FD:3C:8C:90:64
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       018FA441EDB96F04738724EE12E226210B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number:          1187
Signing time:             Thu 23 May 2024 07:02:15 +0000
Manifest this update:     Thu 23 May 2024 07:02:15 +0000
Manifest next update:     Fri 24 May 2024 07:02:15 +0000
Files and hashes:         1: 22wESLfBPQHKbV2nko6fd8ndlYE.roa (hash: 3sXdYNO91p9YQtZhFg3hiqrzR9yfxYIxPoYM6C9E/qo=)
                          2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: 03HLOiHFq2m/StFbnpbawgBVBeWkBJ7Y4RIHv27fYMw=)
                          3: TcZpNK1hXkfkeRSKlVkKeZy5DQk.roa (hash: Hut2kxPVKW8rSjOJjHFW8s624jHyR8RZdrQDf0Pjch0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 07:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a4:41:ed:b9:6f:04:73:87:24:ee:12:e2:26:21:0b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: May 23 07:02:15 2024 GMT
            Not After : May 24 07:02:15 2024 GMT
        Subject: CN=a654e9bc4b074dcf059c78b53222b1fd3c8c9064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:22:69:cb:95:db:50:52:db:9c:91:cc:80:
                    30:0a:90:92:f1:b5:0b:22:8f:3e:59:9b:d7:e4:03:
                    fe:e0:09:da:aa:57:45:e2:cd:0b:ec:88:44:e3:5e:
                    4c:9c:f4:2a:2b:e8:8f:17:30:ab:66:92:7f:4d:1e:
                    46:90:b6:47:81:0a:b9:b2:d4:03:44:51:8e:6e:ad:
                    41:d6:cd:1e:77:fa:e8:79:32:97:e8:10:51:59:e2:
                    05:00:16:9f:21:97:13:56:ef:8d:af:b8:40:fc:9e:
                    39:53:4b:9e:26:e8:df:34:fd:9c:78:ce:0d:af:2c:
                    02:b8:74:94:10:63:c8:ea:07:c9:1d:90:b4:0c:7b:
                    b3:64:f0:32:82:1e:b6:02:82:2e:73:c5:84:4e:ab:
                    33:ee:22:00:2b:bf:40:54:ce:03:7a:54:49:71:ce:
                    4a:9f:30:f0:27:7e:34:6a:96:82:48:06:3a:f9:a5:
                    c8:63:bb:b2:b2:ef:da:b6:b0:44:d2:2c:97:cb:d4:
                    4d:39:ca:85:83:79:35:3a:78:0f:bf:51:f0:ce:2d:
                    39:30:d7:79:b7:d9:39:72:e1:c3:f4:3e:22:52:51:
                    5d:c2:5f:4a:52:a3:82:97:07:48:4a:68:cf:99:2c:
                    5f:ab:bb:76:42:eb:85:1b:a9:6c:05:35:40:58:06:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:E9:BC:4B:07:4D:CF:05:9C:78:B5:32:22:B1:FD:3C:8C:90:64
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:33:d2:b2:e6:36:c6:68:1f:7f:d2:56:6d:a2:aa:d5:f8:
         b7:1b:0b:f4:df:dd:8f:d2:99:99:6e:e7:06:a5:04:4e:76:94:
         f8:55:43:c1:40:ad:34:08:d9:07:c7:fc:ef:ec:47:55:b6:e4:
         25:42:2c:2a:d8:75:7e:b1:5b:b0:db:e7:c0:e7:42:06:cd:be:
         84:04:54:aa:f7:3e:7d:73:4a:98:37:7e:7e:67:a1:92:1d:0a:
         4b:e5:fb:e8:85:5c:23:26:b2:30:da:fd:b3:a6:16:ac:e1:12:
         aa:d4:79:38:6a:cf:f5:37:3a:de:63:ab:aa:e7:3c:16:7d:8c:
         d9:37:03:30:9d:a5:47:97:9b:fc:d8:c8:da:a2:84:9d:e7:d3:
         bb:79:e0:34:cf:ab:3f:d1:b5:3e:5f:14:39:c3:18:87:a7:57:
         dd:34:10:d2:d8:29:d0:79:84:b0:ac:4b:07:d0:6f:2a:33:bd:
         90:2f:3f:0e:e9:0c:cf:b7:bf:57:7b:6b:c7:dc:a5:fb:30:2f:
         aa:c8:4b:88:d5:63:fd:81:61:6f:31:94:57:4b:fc:45:c6:9f:
         df:5e:b1:9a:c9:b3:bc:50:6c:01:c8:66:9f:62:35:59:d1:15:
         a0:4b:7e:8e:1c:b8:67:49:5c:0c:8b:0e:1b:74:3e:22:9a:d7:
         a7:e3:27:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+kQe25bwRzhyTuEuImIQteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl
Zjk5M2EwHhcNMjQwNTIzMDcwMjE1WhcNMjQwNTI0MDcwMjE1WjAzMTEwLwYDVQQD
EyhhNjU0ZTliYzRiMDc0ZGNmMDU5Yzc4YjUzMjIyYjFmZDNjOGM5MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOsiacuV21BS25yRzIAwCpCS8bUL
Io8+WZvX5AP+4AnaqldF4s0L7IhE415MnPQqK+iPFzCrZpJ/TR5GkLZHgQq5stQD
RFGObq1B1s0ed/roeTKX6BBRWeIFABafIZcTVu+Nr7hA/J45U0ueJujfNP2ceM4N
rywCuHSUEGPI6gfJHZC0DHuzZPAygh62AoIuc8WETqsz7iIAK79AVM4DelRJcc5K
nzDwJ340apaCSAY6+aXIY7uysu/atrBE0iyXy9RNOcqFg3k1OngPv1Hwzi05MNd5
t9k5cuHD9D4iUlFdwl9KUqOClwdISmjPmSxfq7t2QuuFG6lsBTVAWAZm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZU6bxLB03PBZx4tTIisf08jJBkMB8GA1UdIwQY
MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt
NjhhMmYwYmI1YjdhLzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh
LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwUz0rLm
NsZoH3/SVm2iqtX4txsL9N/dj9KZmW7nBqUETnaU+FVDwUCtNAjZB8f87+xHVbbk
JUIsKth1frFbsNvnwOdCBs2+hARUqvc+fXNKmDd+fmehkh0KS+X76IVcIyayMNr9
s6YWrOESqtR5OGrP9Tc63mOrquc8Fn2M2TcDMJ2lR5eb/NjI2qKEnefTu3ngNM+r
P9G1Pl8UOcMYh6dX3TQQ0tgp0HmEsKxLB9BvKjO9kC8/DukMz7e/V3trx9yl+zAv
qshLiNVj/YFhbzGUV0v8Rcaf316xmsmzvFBsAchmn2I1WdEVoEt+jhy4Z0lcDIsO
G3Q+IprXp+Mn2Q==
-----END CERTIFICATE-----
Generated at Thu May 23 11:51:53 2024 by rpki-client on console-ams.rpki-client.org