Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          MzZUmOYR6fqZDOKO9WKmPxi2KEZX/NPqBMkJGVeoJR4=
Subject key identifier:   BA:0C:31:4D:1B:05:76:42:00:AC:3F:6C:92:DA:31:6A:36:6F:5E:6F
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       018F87ED857FE9818E8C006351F07A91216E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:41 +0000
Manifest this update:     Fri 17 May 2024 19:00:41 +0000
Manifest next update:     Sat 18 May 2024 19:00:41 +0000
Files and hashes:         1: eghDJvGTaI0OSTACCqQ_8W0lgVE.roa (hash: CJxRJv2uIKvGtZUOqazly6VS7g79QuH7fIjbUWPjWXo=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: Lltk/gAgd8zPQVL5qVU8EZGtEMCf0/2XAgLaH0ogZdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:85:7f:e9:81:8e:8c:00:63:51:f0:7a:91:21:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: May 17 19:00:41 2024 GMT
            Not After : May 18 19:00:41 2024 GMT
        Subject: CN=ba0c314d1b05764200ac3f6c92da316a366f5e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:83:11:bb:6f:35:6f:d3:26:c6:74:ea:96:
                    28:0c:bc:8c:e6:3d:c7:61:d7:87:e5:4f:78:5c:6e:
                    c3:a1:7c:83:ea:2d:21:56:60:33:35:d1:36:94:49:
                    68:84:6e:26:9a:81:94:5e:9e:54:f9:ad:c7:95:f8:
                    13:fd:86:79:b5:5a:9b:81:cb:6e:b2:ea:72:d1:7b:
                    79:b8:7b:05:45:3f:c7:c3:ee:c0:71:0d:66:50:b7:
                    ec:c4:11:29:df:8f:cd:e9:a3:37:a4:4b:58:86:47:
                    e4:95:b1:df:52:90:8f:37:c2:5a:5f:fd:8a:77:c1:
                    4e:52:57:41:f3:62:8d:6b:c7:f9:3b:d8:b1:54:5f:
                    e4:ca:0c:87:b0:34:98:ef:7d:63:7a:4b:9b:d7:c1:
                    bc:c1:a4:94:b6:48:b0:91:c1:b0:96:ec:9f:7a:64:
                    a7:f3:5c:92:54:e8:03:15:2c:10:bd:04:ea:4c:da:
                    d0:b8:83:f4:3c:80:e5:b9:49:1d:82:d7:04:09:37:
                    22:41:51:e3:eb:79:6b:ef:5d:ae:8c:4e:d6:91:9d:
                    60:69:e2:e1:3d:61:04:7f:3f:ad:14:83:6e:47:6f:
                    b4:0c:db:f9:80:32:ac:2b:66:2d:e7:4f:f6:2e:b4:
                    50:70:54:e8:e7:6a:6c:9a:ae:fa:e7:f3:5c:d1:7a:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:31:4D:1B:05:76:42:00:AC:3F:6C:92:DA:31:6A:36:6F:5E:6F
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:92:61:ba:9e:73:42:cc:e4:4b:78:dc:bd:de:03:67:77:d3:
         94:0e:18:90:e5:56:9e:24:8b:a0:f7:fd:28:bf:2e:78:00:40:
         f9:70:cc:46:28:6c:99:e2:ac:f6:16:75:41:6a:ad:6c:89:78:
         97:60:17:b9:3a:58:69:33:02:7d:d8:32:34:8f:68:b0:90:8c:
         4e:64:49:b9:ac:a6:81:c5:27:75:13:1e:44:a5:6b:08:d4:5a:
         ca:e2:83:46:27:21:c2:67:79:f2:4d:1f:00:3d:a5:bf:fe:bd:
         b2:b6:a5:8d:a5:4b:a6:fa:da:5f:03:ae:07:77:49:ee:15:df:
         0e:df:c2:c1:18:7a:59:da:f2:1f:e6:27:26:9d:56:72:ab:9f:
         e3:51:b3:00:1f:2f:d5:cf:a6:bd:bc:08:bf:ed:9d:90:35:17:
         71:1e:59:29:ee:b2:9e:7f:3a:67:30:c1:bc:fe:1f:1c:07:6d:
         36:45:fe:fa:21:49:06:c0:68:e0:86:a2:fc:3c:05:53:ab:dd:
         d5:6f:ed:11:51:65:85:5b:ea:40:65:47:85:5a:14:67:34:8f:
         3e:a4:2e:86:06:b7:2f:0b:1e:bd:af:0c:65:c9:19:39:81:d5:
         49:72:63:de:fa:a0:20:30:50:86:0f:d0:2b:9f:e8:a6:e5:d3:
         8d:05:63:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7YV/6YGOjABjUfB6kSFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk
ODcyYzUwHhcNMjQwNTE3MTkwMDQxWhcNMjQwNTE4MTkwMDQxWjAzMTEwLwYDVQQD
EyhiYTBjMzE0ZDFiMDU3NjQyMDBhYzNmNmM5MmRhMzE2YTM2NmY1ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmDEbtvNW/TJsZ06pYoDLyM5j3H
YdeH5U94XG7DoXyD6i0hVmAzNdE2lElohG4mmoGUXp5U+a3HlfgT/YZ5tVqbgctu
supy0Xt5uHsFRT/Hw+7AcQ1mULfsxBEp34/N6aM3pEtYhkfklbHfUpCPN8JaX/2K
d8FOUldB82KNa8f5O9ixVF/kygyHsDSY731jekub18G8waSUtkiwkcGwluyfemSn
81ySVOgDFSwQvQTqTNrQuIP0PIDluUkdgtcECTciQVHj63lr712ujE7WkZ1gaeLh
PWEEfz+tFINuR2+0DNv5gDKsK2Yt50/2LrRQcFTo52psmq765/Nc0XrruwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoMMU0bBXZCAKw/bJLaMWo2b15vMB8GA1UdIwQY
MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt
Y2EzYjcyNzhkZGUyLzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy
LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5Jhup5z
QszkS3jcvd4DZ3fTlA4YkOVWniSLoPf9KL8ueABA+XDMRihsmeKs9hZ1QWqtbIl4
l2AXuTpYaTMCfdgyNI9osJCMTmRJuaymgcUndRMeRKVrCNRayuKDRichwmd58k0f
AD2lv/69sraljaVLpvraXwOuB3dJ7hXfDt/CwRh6WdryH+YnJp1Wcquf41GzAB8v
1c+mvbwIv+2dkDUXcR5ZKe6ynn86ZzDBvP4fHAdtNkX++iFJBsBo4Iai/DwFU6vd
1W/tEVFlhVvqQGVHhVoUZzSPPqQuhga3Lwseva8MZckZOYHVSXJj3vqgIDBQhg/Q
K5/opuXTjQVjKg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:40:58 2024 by rpki-client on console-ams.rpki-client.org