Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
File:                     SVx0J6902pRU8eKHwW-aXzp3gx8.mft (raw, json)
Hash identifier:          A1c8cajBJUMPVuGPbQnRPvDIdlMFz0gF5Z/elPKug3E=
Subject key identifier:   8F:54:9F:91:A4:AF:DA:50:9D:AB:B9:41:8A:1A:BA:D1:40:43:BC:65
Authority key identifier: 49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F
Certificate issuer:       /CN=495c7427af74da9454f1e287c16f9a5f3a77831f
Certificate serial:       018F86DA5E79D5471346A0FEB6A7AC7C12C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
Manifest number:          0F7F
Signing time:             Fri 17 May 2024 14:00:08 +0000
Manifest this update:     Fri 17 May 2024 14:00:08 +0000
Manifest next update:     Sat 18 May 2024 14:00:08 +0000
Files and hashes:         1: SVx0J6902pRU8eKHwW-aXzp3gx8.crl (hash: zivakXuXkFXyAT5rO6tKrW5t/QkmU7Egwax7H0xdb2Q=)
                          2: lZRmEpDk4wL4NTqih4SMWDQL64I.roa (hash: m9WTE3wqA8my81lsnhAv3XXx3hSjd9qr/dVT0CDSIUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:5e:79:d5:47:13:46:a0:fe:b6:a7:ac:7c:12:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495c7427af74da9454f1e287c16f9a5f3a77831f
        Validity
            Not Before: May 17 14:00:08 2024 GMT
            Not After : May 18 14:00:08 2024 GMT
        Subject: CN=8f549f91a4afda509dabb9418a1abad14043bc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:dc:1e:48:b7:da:f7:00:02:64:58:d7:64:
                    dd:e0:c8:01:e2:62:05:5d:a0:a5:bc:7b:c8:82:56:
                    88:50:d5:0f:f7:ef:37:90:a4:f2:8a:12:f4:11:3c:
                    26:56:da:52:03:d2:cf:e9:fa:fa:ea:89:17:af:5e:
                    58:82:dd:0c:71:c8:1c:43:b7:21:54:7e:30:11:36:
                    02:4f:65:2b:36:ac:35:9e:6b:5b:76:fd:89:d7:34:
                    f5:87:61:5b:35:ce:7b:41:af:06:28:ae:60:2b:fd:
                    c4:cc:d1:1f:83:39:9b:13:3d:f1:23:59:d5:1e:1c:
                    90:75:82:42:02:6e:8d:14:1d:de:f1:78:25:82:a0:
                    e3:55:02:6e:4d:5a:b5:32:39:ec:51:66:66:ae:4f:
                    8c:db:69:1f:92:6a:e2:97:5e:3c:73:89:d9:7c:13:
                    d5:15:6a:57:40:37:ed:26:85:df:fb:89:b8:c0:a2:
                    8c:86:fc:53:b6:cd:a6:41:ed:d6:df:69:97:c3:65:
                    b2:f8:48:4d:20:18:06:65:c4:c4:81:ef:d8:08:b7:
                    12:87:07:05:14:1e:0c:2f:f1:fe:c0:02:1f:f3:9f:
                    a1:b6:06:29:e3:f5:fb:b5:f5:35:cc:23:f4:91:78:
                    b6:78:e6:e6:de:32:8a:41:ea:d5:be:97:2b:4d:50:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:54:9F:91:A4:AF:DA:50:9D:AB:B9:41:8A:1A:BA:D1:40:43:BC:65
            X509v3 Authority Key Identifier:
                keyid:49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:69:bb:dd:c4:1a:37:2f:b3:77:bf:23:cf:36:2b:a5:65:
         27:0e:6d:af:0e:08:22:ae:65:d9:f9:f9:3a:d9:c9:64:d0:81:
         ec:3d:62:c7:aa:69:10:b6:8a:78:89:95:c8:71:b4:16:e5:ee:
         4c:bd:9b:1a:9a:cf:39:40:77:13:b8:48:0e:3a:02:c6:07:21:
         39:74:fe:d2:62:72:18:24:95:78:a8:85:72:9d:32:27:4b:30:
         c4:48:20:40:c5:80:41:46:ed:77:cb:f8:16:89:d7:ac:29:f0:
         9f:60:59:48:9c:d0:6c:c2:71:76:b4:0e:84:85:32:d8:a6:c4:
         d4:31:18:02:8b:aa:41:43:d1:00:f6:e7:5c:99:8c:ff:e5:ce:
         05:a7:cb:2f:09:59:16:e7:c2:b9:89:b5:ac:db:80:a8:1e:1a:
         ab:e6:af:03:d7:a7:f4:56:0e:56:1b:38:fa:45:30:2b:92:90:
         c5:bb:39:fd:ca:b4:5c:0b:82:5b:6b:87:ce:0a:df:61:78:51:
         f9:45:82:4b:e3:7e:7e:e9:72:46:0d:66:1e:69:e2:cf:95:9d:
         c4:9e:f1:58:31:28:83:ef:69:4a:8a:b8:31:e2:9c:3f:3a:c8:
         1a:06:a0:6a:22:8f:fb:97:57:f5:93:6c:74:58:e5:52:03:29:
         39:83:de:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2l551UcTRqD+tqesfBLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NWM3NDI3YWY3NGRhOTQ1NGYxZTI4N2MxNmY5YTVmM2E3
NzgzMWYwHhcNMjQwNTE3MTQwMDA4WhcNMjQwNTE4MTQwMDA4WjAzMTEwLwYDVQQD
Eyg4ZjU0OWY5MWE0YWZkYTUwOWRhYmI5NDE4YTFhYmFkMTQwNDNiYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/cHki32vcAAmRY12Td4MgB4mIF
XaClvHvIglaIUNUP9+83kKTyihL0ETwmVtpSA9LP6fr66okXr15Ygt0MccgcQ7ch
VH4wETYCT2UrNqw1nmtbdv2J1zT1h2FbNc57Qa8GKK5gK/3EzNEfgzmbEz3xI1nV
HhyQdYJCAm6NFB3e8XglgqDjVQJuTVq1MjnsUWZmrk+M22kfkmril148c4nZfBPV
FWpXQDftJoXf+4m4wKKMhvxTts2mQe3W32mXw2Wy+EhNIBgGZcTEge/YCLcShwcF
FB4ML/H+wAIf85+htgYp4/X7tfU1zCP0kXi2eObm3jKKQerVvpcrTVAr4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9Un5Gkr9pQnau5QYoautFAQ7xlMB8GA1UdIwQY
MBaAFElcdCevdNqUVPHih8Fvml86d4MfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMt
MDhkOGU1MGZjOWM1LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMtMDhkOGU1MGZjOWM1
LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh65pu93E
Gjcvs3e/I882K6VlJw5trw4IIq5l2fn5OtnJZNCB7D1ix6ppELaKeImVyHG0FuXu
TL2bGprPOUB3E7hIDjoCxgchOXT+0mJyGCSVeKiFcp0yJ0swxEggQMWAQUbtd8v4
FonXrCnwn2BZSJzQbMJxdrQOhIUy2KbE1DEYAouqQUPRAPbnXJmM/+XOBafLLwlZ
FufCuYm1rNuAqB4aq+avA9en9FYOVhs4+kUwK5KQxbs5/cq0XAuCW2uHzgrfYXhR
+UWCS+N+fulyRg1mHmniz5WdxJ7xWDEog+9pSoq4MeKcPzrIGgagaiKP+5dX9ZNs
dFjlUgMpOYPeRA==
-----END CERTIFICATE-----
Generated at Fri May 17 17:53:34 2024 by rpki-client on console-ams.rpki-client.org