Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File:                     H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier:          MV6A6W5ymVci968MNf8rEsoRA0DuBhxurclGO+AVeYs=
Subject key identifier:   39:B1:42:8D:80:64:E8:B6:E8:3C:20:77:19:66:91:BF:D0:8A:0D:C3
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer:       /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial:       018F3C9CCC20AFD522413C7A9BBCFCDE080E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number:          0985
Signing time:             Fri 03 May 2024 04:00:59 +0000
Manifest this update:     Fri 03 May 2024 04:00:59 +0000
Manifest next update:     Sat 04 May 2024 04:00:59 +0000
Files and hashes:         1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: tF0Li6DQmbRy/RdxODl/WDxHell0u79Gol1D3SNCqMU=)
                          2: L2bY3-S5ejXbKK4pc-q4pJqCR48.roa (hash: xTmQRLKwpB9w7yb8XZ/jy4X5l8gd90YYzqIU6RpqKXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9c:cc:20:af:d5:22:41:3c:7a:9b:bc:fc:de:08:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
        Validity
            Not Before: May  3 04:00:59 2024 GMT
            Not After : May  4 04:00:59 2024 GMT
        Subject: CN=39b1428d8064e8b6e83c2077196691bfd08a0dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:08:2c:6f:8f:6e:66:a2:a0:e2:41:2e:0c:
                    bd:a2:b5:42:8e:62:68:61:2f:53:53:12:8c:6b:44:
                    d5:50:e9:6f:c0:4b:61:a6:82:3f:fa:c8:ae:56:4c:
                    79:94:41:df:f6:2f:7f:ef:3a:ee:a8:90:33:49:95:
                    f4:c0:77:5c:58:e6:4f:b8:9c:15:df:de:cc:fe:f7:
                    ea:fd:b3:b9:59:96:38:9f:05:0a:7d:e3:89:d5:bf:
                    73:88:0b:a6:44:de:c3:4d:31:90:a3:e7:21:3b:75:
                    aa:d1:fb:3f:f2:7e:8e:5e:9f:42:f1:e5:91:56:62:
                    3b:e0:3b:a6:7c:8a:cd:0e:98:68:77:48:d1:d5:65:
                    01:9f:2f:dd:94:97:e4:e5:94:e5:5d:03:7b:3d:76:
                    70:ab:3a:69:5a:f7:20:4c:85:e7:c3:18:ae:f9:a9:
                    b6:07:55:f7:c0:b5:1d:54:3d:14:80:6f:b0:de:8c:
                    bd:e5:63:85:2c:1d:21:94:62:1f:6b:49:18:f0:27:
                    7d:3b:9a:a6:36:ea:0f:92:f5:3b:cc:93:2d:40:10:
                    b6:d1:76:48:51:29:40:6e:99:d0:38:53:b6:36:9f:
                    22:89:bf:ae:5e:a6:6b:7e:e0:f8:33:c6:38:ce:8e:
                    47:6a:21:38:fd:36:8e:42:04:34:3c:39:1a:01:23:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:42:8D:80:64:E8:B6:E8:3C:20:77:19:66:91:BF:D0:8A:0D:C3
            X509v3 Authority Key Identifier:
                keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:79:2d:f1:90:89:0c:21:ff:da:8f:91:80:0d:54:17:3c:0a:
         b9:8a:c0:a6:a4:c6:ae:8f:5e:a1:e1:2c:f9:ce:d4:dc:96:69:
         98:cd:ff:64:2d:80:e8:d0:b8:26:a7:72:89:4f:78:7f:08:e5:
         78:d8:1e:fb:db:83:1a:9a:8d:2f:52:83:5c:f9:dd:9d:3b:41:
         73:9a:e2:59:72:19:e0:d3:48:01:f1:78:da:40:69:09:40:c6:
         da:54:92:f5:c4:5e:18:b2:76:6c:37:93:0a:06:2c:f0:1d:e4:
         89:84:a2:f0:e0:ac:c0:60:c6:d0:b4:d9:f7:88:97:6c:2d:57:
         c3:8f:d6:a7:e1:8e:dd:ee:ec:85:dc:8d:46:8f:72:c0:84:0f:
         d6:b7:e1:ee:b6:fb:2d:36:82:57:9a:8a:f6:ce:3a:67:a5:d9:
         6b:c8:01:fd:ac:82:ee:ad:bd:89:02:0e:cd:43:f2:27:f0:5a:
         00:3e:c8:d5:27:96:fd:1b:3c:c0:25:f1:f8:21:4f:4c:6d:e3:
         6c:fc:dd:b9:ed:00:f7:6f:ac:ea:80:fd:b0:f3:1f:81:71:86:
         94:d6:21:e6:7b:fc:e0:75:25:23:c9:ce:7f:26:de:46:aa:36:
         e8:d5:5f:9a:c3:fa:cd:d6:6d:59:9e:6c:58:7b:75:3a:c4:08:
         e9:10:be:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88nMwgr9UiQTx6m7z83ggOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh
NDBhYmYwHhcNMjQwNTAzMDQwMDU5WhcNMjQwNTA0MDQwMDU5WjAzMTEwLwYDVQQD
EygzOWIxNDI4ZDgwNjRlOGI2ZTgzYzIwNzcxOTY2OTFiZmQwOGEwZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xcILG+PbmaioOJBLgy9orVCjmJo
YS9TUxKMa0TVUOlvwEthpoI/+siuVkx5lEHf9i9/7zruqJAzSZX0wHdcWOZPuJwV
397M/vfq/bO5WZY4nwUKfeOJ1b9ziAumRN7DTTGQo+chO3Wq0fs/8n6OXp9C8eWR
VmI74DumfIrNDphod0jR1WUBny/dlJfk5ZTlXQN7PXZwqzppWvcgTIXnwxiu+am2
B1X3wLUdVD0UgG+w3oy95WOFLB0hlGIfa0kY8Cd9O5qmNuoPkvU7zJMtQBC20XZI
USlAbpnQOFO2Np8iib+uXqZrfuD4M8Y4zo5HaiE4/TaOQgQ0PDkaASPuqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmxQo2AZOi26Dwgdxlmkb/Qig3DMB8GA1UdIwQY
MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt
MjEyZjg5M2ZjODM1LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1
LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXkt8ZCJ
DCH/2o+RgA1UFzwKuYrApqTGro9eoeEs+c7U3JZpmM3/ZC2A6NC4JqdyiU94fwjl
eNge+9uDGpqNL1KDXPndnTtBc5riWXIZ4NNIAfF42kBpCUDG2lSS9cReGLJ2bDeT
CgYs8B3kiYSi8OCswGDG0LTZ94iXbC1Xw4/Wp+GO3e7shdyNRo9ywIQP1rfh7rb7
LTaCV5qK9s46Z6XZa8gB/ayC7q29iQIOzUPyJ/BaAD7I1SeW/Rs8wCXx+CFPTG3j
bPzdue0A92+s6oD9sPMfgXGGlNYh5nv84HUlI8nOfybeRqo26NVfmsP6zdZtWZ5s
WHt1OsQI6RC+iQ==
-----END CERTIFICATE-----
Generated at Fri May 3 12:15:26 2024 by rpki-client on console-fra.rpki-client.org