Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File:                     vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier:          3fubEKkQ0kzGAEbFqoupLnfhmZRujCvaSLvTL8sto6w=
Subject key identifier:   55:44:64:88:AC:81:49:E0:EC:69:C0:EC:56:A8:B5:C7:20:AA:47:B4
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer:       /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial:       01903404B12EFFE79CACD718AFF93B243E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number:          05C4
Signing time:             Thu 20 Jun 2024 05:00:40 +0000
Manifest this update:     Thu 20 Jun 2024 05:00:40 +0000
Manifest next update:     Fri 21 Jun 2024 05:00:40 +0000
Files and hashes:         1: 9YohKYZP4eNO9QloAC1-LGe3gHI.roa (hash: VBSdjgImWoWdTCmgCghT2/f2lHir6RfZFkIH1/tqFlY=)
                          2: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: So46S0JjlJPJw58ahtA0ALUGgRtNnhnPLM5aC988y9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:04:b1:2e:ff:e7:9c:ac:d7:18:af:f9:3b:24:3e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
        Validity
            Not Before: Jun 20 05:00:40 2024 GMT
            Not After : Jun 21 05:00:40 2024 GMT
        Subject: CN=55446488ac8149e0ec69c0ec56a8b5c720aa47b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:f8:48:3a:cb:c7:60:80:c7:02:f1:00:93:
                    b1:36:71:9e:e7:d8:59:83:13:63:05:22:c3:f6:06:
                    16:24:c2:a2:5c:33:6b:d8:42:88:52:49:55:2d:7e:
                    75:3a:25:4e:88:86:c1:cd:b4:06:9a:a7:85:33:d7:
                    c2:10:ff:6c:85:96:9d:d1:ae:43:ca:b4:03:91:e8:
                    51:2e:67:ce:a3:f9:26:18:79:2f:ac:42:f4:02:7c:
                    01:3e:57:bf:1c:bf:d9:f6:a0:cd:8a:6e:46:15:dc:
                    3e:7b:2b:74:03:40:13:33:a4:6a:cd:d3:f2:00:48:
                    87:47:25:8f:6b:7a:9a:01:8c:07:07:52:bd:96:29:
                    83:73:a5:b2:d2:f7:2d:35:71:21:2f:0e:14:dd:a4:
                    9c:35:51:d1:45:bf:7c:51:0a:8d:22:b0:f9:f7:f5:
                    33:00:f3:69:53:48:91:6c:f1:19:86:72:d2:db:8e:
                    c2:d0:3d:8d:62:0a:d8:26:c4:cb:36:38:c5:e6:86:
                    8b:f2:3c:41:13:9f:6d:43:21:ec:b4:49:96:20:d9:
                    a7:ac:60:0a:1c:e9:01:2f:db:19:37:cd:1e:45:f8:
                    29:48:af:e3:76:16:ab:2e:59:2c:2f:d7:92:17:c1:
                    aa:e4:3d:96:19:42:2a:76:00:21:fd:52:f8:09:82:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:64:88:AC:81:49:E0:EC:69:C0:EC:56:A8:B5:C7:20:AA:47:B4
            X509v3 Authority Key Identifier:
                keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:ed:44:80:cb:9d:17:30:38:40:59:67:64:1d:6b:d6:7a:
         ed:b9:62:c0:8d:0d:ad:4a:f6:6e:ff:7f:14:0e:09:07:1b:10:
         ef:cf:f1:6c:b9:cc:6a:06:e3:77:40:0f:6e:ae:ee:79:82:6d:
         83:6c:da:88:e7:af:b6:cf:83:1f:e1:88:36:a7:23:1d:7b:53:
         ca:51:68:29:dd:b4:be:1d:34:3a:e2:21:30:bb:7f:c8:0e:87:
         d2:39:f4:ef:ec:a8:0a:f7:90:46:50:05:26:c1:00:ec:4f:45:
         c9:3f:33:e1:2d:cd:2b:4b:89:2d:19:55:d9:c4:46:f5:9f:f9:
         24:92:dc:a5:8c:9a:af:5f:e9:0e:13:f1:56:22:4e:b0:cd:ca:
         96:7d:79:67:a3:a7:17:f7:94:31:16:15:0f:e5:da:40:04:59:
         b4:97:63:60:3b:9d:59:06:2b:b5:63:af:c2:20:7e:90:8e:5e:
         e0:49:7e:78:9a:f9:d5:29:21:5f:05:b5:4d:9f:a2:fe:df:c2:
         d5:7b:c6:f4:a7:95:df:3e:3e:d2:43:4d:0b:e0:40:d8:de:e1:
         b5:5d:f9:b1:38:24:82:2a:da:77:fc:5e:9d:f2:9f:bc:7b:73:
         46:70:e1:82:a7:64:43:db:ce:5a:6e:36:ff:53:58:7c:07:76:
         36:c7:83:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0BLEu/+ecrNcYr/k7JD4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjQwNjIwMDUwMDQwWhcNMjQwNjIxMDUwMDQwWjAzMTEwLwYDVQQD
Eyg1NTQ0NjQ4OGFjODE0OWUwZWM2OWMwZWM1NmE4YjVjNzIwYWE0N2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwX4SDrLx2CAxwLxAJOxNnGe59hZ
gxNjBSLD9gYWJMKiXDNr2EKIUklVLX51OiVOiIbBzbQGmqeFM9fCEP9shZad0a5D
yrQDkehRLmfOo/kmGHkvrEL0AnwBPle/HL/Z9qDNim5GFdw+eyt0A0ATM6RqzdPy
AEiHRyWPa3qaAYwHB1K9limDc6Wy0vctNXEhLw4U3aScNVHRRb98UQqNIrD59/Uz
APNpU0iRbPEZhnLS247C0D2NYgrYJsTLNjjF5oaL8jxBE59tQyHstEmWINmnrGAK
HOkBL9sZN80eRfgpSK/jdharLlksL9eSF8Gq5D2WGUIqdgAh/VL4CYIpwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVEZIisgUng7GnA7Faotccgqke0MB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtntRIDL
nRcwOEBZZ2Qda9Z67bliwI0NrUr2bv9/FA4JBxsQ78/xbLnMagbjd0APbq7ueYJt
g2zaiOevts+DH+GINqcjHXtTylFoKd20vh00OuIhMLt/yA6H0jn07+yoCveQRlAF
JsEA7E9FyT8z4S3NK0uJLRlV2cRG9Z/5JJLcpYyar1/pDhPxViJOsM3Kln15Z6On
F/eUMRYVD+XaQARZtJdjYDudWQYrtWOvwiB+kI5e4El+eJr51SkhXwW1TZ+i/t/C
1XvG9KeV3z4+0kNNC+BA2N7htV35sTgkgirad/xenfKfvHtzRnDhgqdkQ9vOWm42
/1NYfAd2NseDhw==
-----END CERTIFICATE-----
Generated at Thu Jun 20 08:51:41 2024 by rpki-client on console-ams.rpki-client.org