Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File:                     orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier:          3/a16BFcouNdp1QZimW89lm/3mX4eV/9dJjcLpevkJM=
Subject key identifier:   DC:8E:C7:CA:24:21:80:89:58:C7:28:A0:9A:93:CE:38:BC:63:91:35
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer:       /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial:       018F8748EC7340FD4655E71F3830786529B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number:          0E85
Signing time:             Fri 17 May 2024 16:00:54 +0000
Manifest this update:     Fri 17 May 2024 16:00:54 +0000
Manifest next update:     Sat 18 May 2024 16:00:54 +0000
Files and hashes:         1: DdcTeKjv9bmmNZJdrZo3gyK6wKY.roa (hash: duC3Rjy8KT1FZ6ZPzA3U7yEj6KGAUV6hxnE/zzlgKsg=)
                          2: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: dTY+u+lSjkckH44btwgHCjBQn/nnuK4w9nOmJJRM/DY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ec:73:40:fd:46:55:e7:1f:38:30:78:65:29:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
        Validity
            Not Before: May 17 16:00:54 2024 GMT
            Not After : May 18 16:00:54 2024 GMT
        Subject: CN=dc8ec7ca2421808958c728a09a93ce38bc639135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:b9:18:80:fa:14:e4:e0:8e:46:e1:ee:01:
                    05:51:7e:22:53:e9:56:c4:ee:24:7a:23:7d:75:11:
                    44:22:ce:92:de:9d:fd:03:09:47:0b:e7:43:2e:0a:
                    f8:fd:eb:7c:ca:46:3e:fa:ee:de:b0:07:02:65:97:
                    27:79:2b:8a:ba:cb:fd:92:88:b0:d2:ee:72:35:bd:
                    f2:4a:56:79:20:b1:3c:a4:21:91:5a:e8:6a:88:06:
                    c9:8d:b6:bb:c1:a5:a3:aa:4a:4b:1e:df:a0:56:34:
                    b2:54:b2:4b:04:97:7c:78:56:8d:ab:72:36:2b:3a:
                    92:53:2e:8f:24:74:a3:cb:28:76:ba:4a:54:81:d1:
                    3c:b4:1b:3c:03:5f:7c:ee:9d:72:5f:19:f7:cd:9f:
                    36:6b:6d:78:c7:43:50:58:6b:71:03:f2:96:66:0e:
                    24:6e:6d:70:fb:a5:02:01:ad:1d:10:4f:78:79:6c:
                    a4:eb:76:61:92:f9:29:e2:15:46:b5:8f:28:65:ee:
                    27:c1:73:f7:9f:f8:cc:74:a0:96:e3:e6:07:d8:d3:
                    31:75:bf:3c:91:58:1e:a8:6e:45:7b:ec:7e:14:fe:
                    99:ec:da:15:34:71:92:66:85:fa:58:ac:55:f9:ef:
                    01:c9:01:6e:f7:50:11:71:8d:48:cf:c3:db:07:76:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:C7:CA:24:21:80:89:58:C7:28:A0:9A:93:CE:38:BC:63:91:35
            X509v3 Authority Key Identifier:
                keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:98:50:15:ca:2d:fe:a7:8d:46:ad:f8:0e:78:9d:49:a3:
         28:ab:e3:a1:fe:fb:65:05:b8:f2:81:9c:38:c3:db:a4:65:71:
         bb:26:6b:fc:b1:86:97:d3:ef:3e:bc:ea:41:88:3b:56:4a:3e:
         ca:bd:f4:00:b4:88:52:ef:0b:f7:1c:a8:6f:60:38:89:73:c4:
         2e:c5:64:e1:d2:37:d0:9d:db:08:1f:24:80:3f:5b:86:4f:85:
         ca:bf:ef:c5:e6:b6:21:41:89:27:1b:11:91:b3:05:71:80:63:
         65:99:44:66:02:a7:5d:72:a1:b7:19:ad:48:f7:59:c0:21:f1:
         2e:2a:45:30:58:6b:bf:96:42:a5:2a:7d:25:9e:c3:a2:3e:af:
         ca:bb:de:99:6e:25:e5:bf:8a:b2:22:1d:3a:43:42:d9:b4:e1:
         e3:04:61:a7:68:49:10:23:79:df:ce:b8:80:bb:e2:1d:27:0a:
         58:e1:4f:bf:4b:fc:0b:51:c1:2b:4a:90:29:72:1a:0f:5b:fe:
         77:cb:97:3d:e0:9e:f5:46:fb:f3:20:c8:7b:30:74:68:07:79:
         7d:57:aa:67:7d:41:cc:e3:dd:c1:c6:d3:9e:cf:42:64:9e:2e:
         fc:93:a0:dd:e3:1d:47:9a:e2:0f:b2:02:b3:a5:e7:91:0f:4e:
         49:1a:dd:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSOxzQP1GVecfODB4ZSmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYmNkODhhYzNlMDJjZmZhZDNjMDBkZTQ2YjVkYTMzNmJk
NjQ3MDIwHhcNMjQwNTE3MTYwMDU0WhcNMjQwNTE4MTYwMDU0WjAzMTEwLwYDVQQD
EyhkYzhlYzdjYTI0MjE4MDg5NThjNzI4YTA5YTkzY2UzOGJjNjM5MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3G5GID6FOTgjkbh7gEFUX4iU+lW
xO4keiN9dRFEIs6S3p39AwlHC+dDLgr4/et8ykY++u7esAcCZZcneSuKusv9koiw
0u5yNb3ySlZ5ILE8pCGRWuhqiAbJjba7waWjqkpLHt+gVjSyVLJLBJd8eFaNq3I2
KzqSUy6PJHSjyyh2ukpUgdE8tBs8A1987p1yXxn3zZ82a214x0NQWGtxA/KWZg4k
bm1w+6UCAa0dEE94eWyk63Zhkvkp4hVGtY8oZe4nwXP3n/jMdKCW4+YH2NMxdb88
kVgeqG5Fe+x+FP6Z7NoVNHGSZoX6WKxV+e8ByQFu91ARcY1Iz8PbB3ZpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyOx8okIYCJWMcooJqTzji8Y5E1MB8GA1UdIwQY
MBaAFKK82IrD4Cz/rTwA3ka12jNr1kcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUt
YWFiODYyODYxYTA5LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jZjRkYjUtZmIyOS00YjJhLWEyMTUtYWFiODYyODYxYTA5
LzEvb3J6WWlzUGdMUC10UEFEZVJyWGFNMnZXUndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoyYUBXK
Lf6njUat+A54nUmjKKvjof77ZQW48oGcOMPbpGVxuyZr/LGGl9PvPrzqQYg7Vko+
yr30ALSIUu8L9xyob2A4iXPELsVk4dI30J3bCB8kgD9bhk+Fyr/vxea2IUGJJxsR
kbMFcYBjZZlEZgKnXXKhtxmtSPdZwCHxLipFMFhrv5ZCpSp9JZ7Doj6vyrvemW4l
5b+KsiIdOkNC2bTh4wRhp2hJECN53864gLviHScKWOFPv0v8C1HBK0qQKXIaD1v+
d8uXPeCe9Ub78yDIezB0aAd5fVeqZ31BzOPdwcbTns9CZJ4u/JOg3eMdR5riD7IC
s6XnkQ9OSRrdiA==
-----END CERTIFICATE-----
Generated at Fri May 17 17:52:14 2024 by rpki-client on console-ams.rpki-client.org