Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          /lVDJ0rCf/qQfZNG5Ksqv5d2uKLnz/ApavazTweshag=
Subject key identifier:   26:CB:EB:47:44:38:0E:E8:42:48:06:14:98:BC:C6:0D:A5:5A:6A:89
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       018F8F020203EF6C759F4CEB978C0C12071C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          117B
Signing time:             Sun 19 May 2024 04:00:24 +0000
Manifest this update:     Sun 19 May 2024 04:00:24 +0000
Manifest next update:     Mon 20 May 2024 04:00:24 +0000
Files and hashes:         1: 1-MNydKrfUJx8AEKpG5OnEl7dMvI.roa (hash: NKifk6SXh8lxyh84LhRB0Int5nlsj/4a9NNcFZ7aGRw=)
                          2: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: KbJQuLbiMqktc2bt4q1lJEEu99SH5gtsAbYpPBzGJg4=)
                          3: boIKJjqaGKszicG4oF_qABad9-w.roa (hash: oyMGwFCm659ZEXfgMQ4YTHycoUjKPbU1zm4D4aRqJb8=)
                          4: fEqeX3nfr9koO_5AfXh_rLSWMDY.roa (hash: A3K/9HsWacPR6n7WkkfHVkAnLfCaSN0s2HtV1RpzWDM=)
                          5: jSqJZceXGV_eqRDDbngqfHengEs.roa (hash: X1MsDU3SsuJ0VSvq5fRoGO9es0n8R5J6feZwPO89y2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:02:03:ef:6c:75:9f:4c:eb:97:8c:0c:12:07:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: May 19 04:00:24 2024 GMT
            Not After : May 20 04:00:24 2024 GMT
        Subject: CN=26cbeb4744380ee84248061498bcc60da55a6a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:d6:88:7c:78:c1:42:89:78:c3:4d:a1:bc:
                    0e:e4:87:dd:7e:bd:5d:ba:0f:26:b4:3f:55:c4:b0:
                    49:f9:9e:2b:0c:6c:a5:29:1d:91:bb:8f:91:f2:8f:
                    60:8c:03:14:ba:87:41:ee:2c:a1:bc:7a:b0:15:f1:
                    dc:c9:55:bd:c8:ca:5d:cf:c6:5e:d7:ee:be:e6:bc:
                    a6:dd:13:88:23:23:44:9d:d0:74:ad:ba:af:ad:6e:
                    80:7c:15:a7:0d:75:2b:49:f4:e1:5f:aa:58:62:70:
                    a0:8f:dc:4e:ef:b6:3e:6a:b1:a8:44:07:b4:fa:34:
                    1a:c3:cc:6c:83:79:a0:55:d0:e3:b2:bd:04:0b:fc:
                    20:d5:19:3b:05:18:c1:b1:a9:46:58:6d:ef:13:24:
                    63:bd:d3:a5:bd:30:5c:63:1c:5c:24:52:44:b4:c9:
                    e5:fd:a6:64:80:a1:da:a0:b2:8c:a9:fe:9e:d1:fa:
                    a1:03:41:f3:a8:2e:0c:ee:dc:f6:10:41:d5:88:3f:
                    c0:0a:9d:ba:33:49:2b:c8:a6:6c:2a:3d:5c:cc:9f:
                    ac:5f:20:3e:3d:f4:af:77:a1:b8:5f:7d:e9:c3:db:
                    0c:72:80:d3:60:23:7a:ef:20:7d:a0:1b:c4:3a:a5:
                    8c:e7:5d:c9:13:44:4d:56:97:6d:df:c4:d6:a7:95:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CB:EB:47:44:38:0E:E8:42:48:06:14:98:BC:C6:0D:A5:5A:6A:89
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:12:0d:12:6a:fd:94:4b:a8:2e:cb:87:22:52:d0:49:fc:ee:
         2b:00:fe:95:9f:99:28:4a:68:68:dd:26:b6:c0:0c:4b:b3:26:
         1a:94:8b:74:eb:7a:b1:6c:04:65:58:be:14:30:1b:2c:00:6a:
         e5:90:18:60:4a:a4:01:33:6f:60:f2:33:5b:ca:c4:ae:c7:d4:
         dc:4c:9d:1b:a3:db:df:bc:e1:21:c8:4e:8e:85:a2:cb:35:95:
         62:d9:58:15:4f:a7:e2:59:c6:da:87:69:27:a1:bc:df:6a:0e:
         74:3a:30:db:71:e6:68:7a:83:23:0c:5f:a0:e4:19:8d:ae:cf:
         bd:b5:ea:75:28:8d:75:21:c1:9d:3d:79:db:60:ca:ce:d9:16:
         1f:95:59:35:21:c6:a9:26:fc:6e:bc:96:c0:8e:49:90:4d:e7:
         b0:fd:5a:37:1e:07:97:90:c3:b1:df:6d:c5:cf:5e:83:ae:c1:
         3d:7e:6f:66:7f:a7:2c:a8:63:1f:ea:d7:7c:7d:1b:82:8a:60:
         6e:81:7e:71:21:24:92:f8:7e:b2:bd:0e:3a:58:1d:2c:51:b7:
         83:38:33:27:31:31:bb:d7:ba:24:46:22:36:f4:0a:0c:87:10:
         4f:10:43:7e:68:25:6c:f4:b8:a2:c0:f0:ab:ab:53:9a:7e:5c:
         f1:bb:e2:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+PAgID72x1n0zrl4wMEgccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1
MjQxNDkwHhcNMjQwNTE5MDQwMDI0WhcNMjQwNTIwMDQwMDI0WjAzMTEwLwYDVQQD
EygyNmNiZWI0NzQ0MzgwZWU4NDI0ODA2MTQ5OGJjYzYwZGE1NWE2YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZjWiHx4wUKJeMNNobwO5Ifdfr1d
ug8mtD9VxLBJ+Z4rDGylKR2Ru4+R8o9gjAMUuodB7iyhvHqwFfHcyVW9yMpdz8Ze
1+6+5rym3ROIIyNEndB0rbqvrW6AfBWnDXUrSfThX6pYYnCgj9xO77Y+arGoRAe0
+jQaw8xsg3mgVdDjsr0EC/wg1Rk7BRjBsalGWG3vEyRjvdOlvTBcYxxcJFJEtMnl
/aZkgKHaoLKMqf6e0fqhA0HzqC4M7tz2EEHViD/ACp26M0kryKZsKj1czJ+sXyA+
PfSvd6G4X33pw9sMcoDTYCN67yB9oBvEOqWM513JE0RNVpdt38TWp5WvQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbL60dEOA7oQkgGFJi8xg2lWmqJMB8GA1UdIwQY
MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt
YTNkZjNiNjljZTVhLzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh
LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhINEmr9
lEuoLsuHIlLQSfzuKwD+lZ+ZKEpoaN0mtsAMS7MmGpSLdOt6sWwEZVi+FDAbLABq
5ZAYYEqkATNvYPIzW8rErsfU3EydG6Pb37zhIchOjoWiyzWVYtlYFU+n4lnG2odp
J6G832oOdDow23HmaHqDIwxfoOQZja7PvbXqdSiNdSHBnT1522DKztkWH5VZNSHG
qSb8bryWwI5JkE3nsP1aNx4Hl5DDsd9txc9eg67BPX5vZn+nLKhjH+rXfH0bgopg
boF+cSEkkvh+sr0OOlgdLFG3gzgzJzExu9e6JEYiNvQKDIcQTxBDfmglbPS4osDw
q6tTmn5c8bviOg==
-----END CERTIFICATE-----
Generated at Sun May 19 05:11:26 2024 by rpki-client on console-fra.rpki-client.org