Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          BLdCVKM9TXxBXS6Gx/owHEPbDOxKjhsdKJMStNBfukI=
Subject key identifier:   70:91:2C:D2:44:1E:FD:5C:7C:88:65:B9:2D:CE:4A:04:EB:B4:5C:7A
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       018F44FB4637A95E5098542A54BD9ED14F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 19:01:09 +0000
Manifest this update:     Sat 04 May 2024 19:01:09 +0000
Manifest next update:     Sun 05 May 2024 19:01:09 +0000
Files and hashes:         1: 2KdtsH5mYfkke7WWFX1m4Xak9Bs.roa (hash: 4xbO3yLbMZEMAoelGakY38dRQW1kv0N/Xsv5ywIk84g=)
                          2: 6-2gaIuxFztVWGJc2MR5c_5HEJo.roa (hash: DaK7DYl8HpK2AjLNKLk5VK0+Hkml0rn6J5C8+otVopA=)
                          3: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: maFINs4ObsORGCvORMHAdc01Pa0Uqc+GPv+F7Fi5z2g=)
                          4: ivdNzlndtMrdYSfd0Di5N9TVpeg.roa (hash: 15AKmGprwaJPEYphVMpGE0LWvQhW3w2t5JNiTFeCLkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:46:37:a9:5e:50:98:54:2a:54:bd:9e:d1:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: May  4 19:01:09 2024 GMT
            Not After : May  5 19:01:09 2024 GMT
        Subject: CN=70912cd2441efd5c7c8865b92dce4a04ebb45c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:c4:c4:b2:fe:48:a0:45:99:49:2c:56:8e:
                    95:3a:8c:eb:2f:f1:59:1c:09:e4:ea:04:0e:40:b9:
                    92:c7:4e:75:cd:cc:1a:17:32:18:9b:71:81:c0:b2:
                    be:41:94:a7:4f:c3:5f:c3:af:a5:82:77:04:f9:0b:
                    8b:3e:03:de:f8:c2:67:4c:74:38:c4:0b:65:74:29:
                    81:de:ae:d9:35:ea:fb:b6:a6:74:ea:d0:c6:f4:81:
                    81:d9:55:34:98:77:34:7c:6b:84:02:3e:04:f6:b7:
                    05:8a:1a:16:2a:46:43:b6:19:c0:9c:1e:c1:6f:ea:
                    a9:70:e9:6b:42:26:b0:9c:3a:32:0e:9a:e4:16:0b:
                    9a:f0:1e:10:94:1b:d7:8d:2d:05:ca:90:f7:5d:30:
                    a7:74:89:87:cf:99:da:7b:d6:e0:ea:90:ce:7b:21:
                    ca:59:50:fe:73:c3:a2:52:5a:71:38:75:3b:6a:b9:
                    45:0e:31:c9:fa:c1:7f:93:9e:16:48:2c:f0:3e:01:
                    74:5c:32:17:05:ee:91:14:39:04:30:bb:6f:63:9a:
                    5a:81:18:fd:c2:e7:3b:af:3d:e3:34:d8:fc:68:60:
                    07:d3:bf:9c:13:81:0e:fb:91:16:3b:ec:cf:e9:73:
                    df:ec:e7:5a:89:f3:b6:46:92:aa:a6:3a:d3:88:7a:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:2C:D2:44:1E:FD:5C:7C:88:65:B9:2D:CE:4A:04:EB:B4:5C:7A
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:32:83:f9:3c:ba:de:82:78:ea:9c:a1:4c:02:76:29:b2:0d:
         91:65:43:46:62:27:81:a6:63:38:45:43:b8:c0:4b:e4:9c:15:
         22:87:9b:fa:af:36:87:56:2c:32:f4:47:6f:6b:0f:f1:98:5d:
         62:d1:cf:1a:4a:9c:1b:8c:f4:6d:d7:a4:4d:d1:c1:c2:36:f3:
         c5:14:49:68:a9:b9:44:2b:c2:63:80:42:7d:74:8a:b3:d8:5e:
         2a:2d:8c:72:55:a8:41:7b:a1:0a:20:28:b4:ae:51:cf:fc:8c:
         79:68:56:f6:27:dc:d6:4e:d9:df:ef:f4:a4:88:af:40:79:88:
         62:7a:09:32:b0:26:27:46:39:0f:04:12:f9:02:25:fb:fe:5f:
         a8:51:05:80:7b:fa:07:41:18:6e:82:aa:e5:91:4e:29:fd:1e:
         68:48:fc:0a:38:0b:25:1e:32:41:4c:5f:c2:3c:b7:5b:fc:4e:
         d9:6e:34:d6:a6:a2:5b:01:34:00:0e:ea:ed:d2:17:d2:da:a9:
         04:ca:81:19:1a:44:b6:47:40:7e:49:7f:3f:41:23:c2:ce:27:
         0e:fd:98:31:2c:17:43:c0:67:6c:b7:fb:3d:92:a5:1f:ae:00:
         42:71:a4:08:4a:69:0e:12:54:29:b5:7a:0a:a5:e5:dc:13:42:
         8f:96:31:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9E+0Y3qV5QmFQqVL2e0U+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk
YmI0ZmEwHhcNMjQwNTA0MTkwMTA5WhcNMjQwNTA1MTkwMTA5WjAzMTEwLwYDVQQD
Eyg3MDkxMmNkMjQ0MWVmZDVjN2M4ODY1YjkyZGNlNGEwNGViYjQ1YzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OHExLL+SKBFmUksVo6VOozrL/FZ
HAnk6gQOQLmSx051zcwaFzIYm3GBwLK+QZSnT8Nfw6+lgncE+QuLPgPe+MJnTHQ4
xAtldCmB3q7ZNer7tqZ06tDG9IGB2VU0mHc0fGuEAj4E9rcFihoWKkZDthnAnB7B
b+qpcOlrQiawnDoyDprkFgua8B4QlBvXjS0FypD3XTCndImHz5nae9bg6pDOeyHK
WVD+c8OiUlpxOHU7arlFDjHJ+sF/k54WSCzwPgF0XDIXBe6RFDkEMLtvY5pagRj9
wuc7rz3jNNj8aGAH07+cE4EO+5EWO+zP6XPf7OdaifO2RpKqpjrTiHp5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCRLNJEHv1cfIhluS3OSgTrtFx6MB8GA1UdIwQY
MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt
ZjlhYzE1ZTY2Mzg2LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2
LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzKD+Ty6
3oJ46pyhTAJ2KbINkWVDRmIngaZjOEVDuMBL5JwVIoeb+q82h1YsMvRHb2sP8Zhd
YtHPGkqcG4z0bdekTdHBwjbzxRRJaKm5RCvCY4BCfXSKs9heKi2MclWoQXuhCiAo
tK5Rz/yMeWhW9ifc1k7Z3+/0pIivQHmIYnoJMrAmJ0Y5DwQS+QIl+/5fqFEFgHv6
B0EYboKq5ZFOKf0eaEj8CjgLJR4yQUxfwjy3W/xO2W401qaiWwE0AA7q7dIX0tqp
BMqBGRpEtkdAfkl/P0Ejws4nDv2YMSwXQ8BnbLf7PZKlH64AQnGkCEppDhJUKbV6
CqXl3BNCj5YxcQ==
-----END CERTIFICATE-----
Generated at Sat May 4 22:10:59 2024 by rpki-client on console-ams.rpki-client.org