Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
File:                     dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft (raw, json)
Hash identifier:          BzxpETEbNtbsUsHZAWMRbE5b8Ti0Go8yWcK8/cGVAX8=
Subject key identifier:   B4:90:77:17:F5:9B:AE:FA:28:57:29:B1:AC:B0:EB:84:8D:88:CB:78
Authority key identifier: 74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
Certificate issuer:       /CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Certificate serial:       018F87ECFA77C4DD78A8BCAD97F9C016B7C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
Manifest number:          10CD
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl (hash: v7PFeX/v7PD8pSu677fE6rUwjCGu4OAYQpX99aeI+jc=)
                          2: s1FgNcrgtLXRJUBPk45z2nmhh9E.roa (hash: 2Fv8L021ngMMjqR+nudMGSM97Za9ARUHC+vevmZOiqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fa:77:c4:dd:78:a8:bc:ad:97:f9:c0:16:b7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e87431bebf703cc4e4a33106f4618a1a00a969
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=b4907717f59baefa285729b1acb0eb848d88cb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:95:f6:5f:40:c8:e3:f8:a7:e0:1f:82:2c:
                    4f:10:e6:06:79:15:d4:37:26:99:89:c6:49:68:43:
                    38:c9:f6:39:b2:1a:63:50:cc:bc:ee:9c:c8:42:1d:
                    64:78:90:ec:fe:c1:0c:9f:df:d2:11:44:21:3a:72:
                    a3:1a:c5:a8:12:cf:d4:c4:32:fd:89:37:6b:fd:f7:
                    e3:01:ba:af:a0:55:64:6a:96:a1:64:49:49:fe:c6:
                    7d:9b:99:40:50:bb:91:76:d0:20:67:65:86:d3:a8:
                    c0:a7:7c:8c:74:dc:93:e2:d1:b9:4e:12:c8:1c:72:
                    41:d8:c8:36:1d:7e:eb:fa:9c:29:52:91:d7:cc:7e:
                    cd:97:36:11:f7:ce:7f:ed:2f:d9:61:34:da:64:0a:
                    4d:24:af:80:20:a9:2e:b3:df:ab:75:ca:8e:c0:94:
                    37:23:3d:6b:42:25:f8:e1:e8:b5:94:27:2a:a8:05:
                    b4:34:97:f4:00:ed:77:fe:ce:20:b1:0a:36:aa:ac:
                    13:e6:2e:50:80:10:0d:4d:da:5c:62:0d:96:df:de:
                    b5:77:95:c5:2e:3c:fd:a8:02:93:45:60:ee:9f:0d:
                    bb:d9:84:b9:43:1a:59:24:07:c7:5a:45:39:2b:2f:
                    40:1a:99:c1:70:5d:50:e6:2e:92:b0:4f:df:dc:da:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:77:17:F5:9B:AE:FA:28:57:29:B1:AC:B0:EB:84:8D:88:CB:78
            X509v3 Authority Key Identifier:
                keyid:74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:cb:a6:d6:0a:ba:8b:2f:45:68:09:3f:f9:df:6a:41:1d:
         7b:b0:3e:1f:24:e0:f2:83:5b:d4:86:f8:53:3d:5a:2d:c5:99:
         86:7d:cf:94:76:2c:7c:b4:f9:bd:76:d9:52:b3:15:d2:5e:28:
         b2:20:9c:2a:81:1c:99:20:c2:9e:76:21:9a:57:72:04:d9:7c:
         7d:90:55:31:88:bb:78:d7:d0:d8:b5:aa:95:c1:da:f7:7d:c0:
         0b:2a:9a:65:d1:61:64:68:a2:e0:80:d0:39:e4:74:52:34:eb:
         2d:dc:fb:ca:28:28:a5:83:e4:89:51:fc:c3:13:db:e3:f6:cd:
         53:26:9d:2d:b1:2e:90:68:a8:60:ca:e7:09:d0:8f:5a:03:05:
         f6:cb:a6:41:5b:85:df:3d:5e:80:af:7d:24:ca:9c:74:aa:b0:
         7d:14:09:c9:b1:8c:39:0a:da:34:42:1e:c2:0e:7d:3e:63:b2:
         09:69:65:d1:10:9a:e7:ea:c9:33:3c:2e:70:a4:47:69:cb:37:
         99:ae:9a:c9:1b:92:36:4e:70:d1:78:fa:4d:8c:97:70:e2:df:
         2f:37:60:f7:7c:09:0d:1b:19:58:d4:57:86:44:25:8b:62:b6:
         c8:09:da:80:d8:1c:f3:79:5e:09:3f:34:a9:1a:a3:c9:8a:70:
         af:44:7b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Pp3xN14qLytl/nAFrfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTg3NDMxYmViZjcwM2NjNGU0YTMzMTA2ZjQ2MThhMWEw
MGE5NjkwHhcNMjQwNTE3MTkwMDA1WhcNMjQwNTE4MTkwMDA1WjAzMTEwLwYDVQQD
EyhiNDkwNzcxN2Y1OWJhZWZhMjg1NzI5YjFhY2IwZWI4NDhkODhjYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tuV9l9AyOP4p+AfgixPEOYGeRXU
NyaZicZJaEM4yfY5shpjUMy87pzIQh1keJDs/sEMn9/SEUQhOnKjGsWoEs/UxDL9
iTdr/ffjAbqvoFVkapahZElJ/sZ9m5lAULuRdtAgZ2WG06jAp3yMdNyT4tG5ThLI
HHJB2Mg2HX7r+pwpUpHXzH7NlzYR985/7S/ZYTTaZApNJK+AIKkus9+rdcqOwJQ3
Iz1rQiX44ei1lCcqqAW0NJf0AO13/s4gsQo2qqwT5i5QgBANTdpcYg2W3961d5XF
Ljz9qAKTRWDunw272YS5QxpZJAfHWkU5Ky9AGpnBcF1Q5i6SsE/f3Npk5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSQdxf1m676KFcpsayw64SNiMt4MB8GA1UdIwQY
MBaAFHTodDG+v3A8xOSjMQb0YYoaAKlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9oME1iNl9jRHpFNUtNeEJ2UmhpaG9BcVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNGY1ZWMtZWZkYy00YjAwLThlYjYt
YTA0OGViOTRkNTViLzEvZE9oME1iNl9jRHpFNUtNeEJ2UmhpaG9BcVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lNGY1ZWMtZWZkYy00YjAwLThlYjYtYTA0OGViOTRkNTVi
LzEvZE9oME1iNl9jRHpFNUtNeEJ2UmhpaG9BcVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTzLptYK
uosvRWgJP/nfakEde7A+HyTg8oNb1Ib4Uz1aLcWZhn3PlHYsfLT5vXbZUrMV0l4o
siCcKoEcmSDCnnYhmldyBNl8fZBVMYi7eNfQ2LWqlcHa933ACyqaZdFhZGii4IDQ
OeR0UjTrLdz7yigopYPkiVH8wxPb4/bNUyadLbEukGioYMrnCdCPWgMF9sumQVuF
3z1egK99JMqcdKqwfRQJybGMOQraNEIewg59PmOyCWll0RCa5+rJMzwucKRHacs3
ma6ayRuSNk5w0Xj6TYyXcOLfLzdg93wJDRsZWNRXhkQli2K2yAnagNgc83leCT80
qRqjyYpwr0R7zQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:00 2024 by rpki-client on console-fra.rpki-client.org