Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File:                     zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier:          bkimxs0Lp1nTjmuNPQAhRCdMiKUAGF9/ccy335Lv9ro=
Subject key identifier:   39:B1:4F:45:09:CF:FE:FC:0B:08:61:44:22:A2:33:74:E5:76:08:CC
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer:       /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial:       018F874A734478617FD4329DF7FB1894916E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number:          D3
Signing time:             Fri 17 May 2024 16:02:34 +0000
Manifest this update:     Fri 17 May 2024 16:02:34 +0000
Manifest next update:     Sat 18 May 2024 16:02:34 +0000
Files and hashes:         1: qTCMMowUHLb3IupB7kA5hBLvT1o.roa (hash: 8xYgLQ6fUnTOTSC4Yx2CrwsTaK+sGBFSfTtczRlrUzQ=)
                          2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: 4jZbbTt0ISJDNFShMdkosdLnDpOxSdGkQmfBqwodFoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:73:44:78:61:7f:d4:32:9d:f7:fb:18:94:91:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
        Validity
            Not Before: May 17 16:02:34 2024 GMT
            Not After : May 18 16:02:34 2024 GMT
        Subject: CN=39b14f4509cffefc0b08614422a23374e57608cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:17:d8:cf:e9:18:74:88:77:6e:42:90:2e:
                    ac:d5:35:ff:de:79:0b:8b:1a:e3:3f:ad:7e:41:20:
                    4b:3d:c2:8b:57:5c:5b:eb:36:1d:ab:bf:8c:07:e2:
                    01:d0:6d:00:85:6f:6e:25:5e:50:f1:af:69:3b:ec:
                    33:4f:e6:d1:da:15:32:02:68:d2:a4:64:e6:d8:59:
                    6c:26:0b:53:ce:fc:62:41:ee:16:fc:55:48:7d:58:
                    01:f6:1a:3a:c3:dd:fd:d5:fd:27:ed:e3:49:d9:0a:
                    f0:fc:ec:d4:dc:5a:06:c1:9f:d1:6f:08:22:75:05:
                    6a:91:f9:25:d0:e5:cc:a1:05:04:ab:c8:29:d0:81:
                    0e:5d:27:0f:e6:fc:a2:6c:4d:fe:80:39:69:7a:a0:
                    9a:00:38:d0:d8:85:40:8f:1e:aa:c8:8a:3b:38:e3:
                    87:b2:2e:ae:e5:92:1d:f9:55:48:82:c5:cd:42:ea:
                    5f:98:83:0c:10:ad:56:d4:3d:8b:3c:8e:b0:c0:b8:
                    f4:d2:3b:a7:15:28:bf:aa:db:2e:1b:7f:d4:dc:49:
                    b3:9f:f7:ce:1b:46:fc:e4:1d:ce:d8:1c:99:30:f3:
                    4b:55:70:e0:39:d3:1b:cd:5b:98:7c:fd:2a:d6:b2:
                    c8:07:cf:9c:53:9a:61:c5:84:d9:cf:bb:d5:97:a6:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:4F:45:09:CF:FE:FC:0B:08:61:44:22:A2:33:74:E5:76:08:CC
            X509v3 Authority Key Identifier:
                keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:72:be:93:ab:2b:a6:49:be:f4:9b:a4:45:11:59:d3:e7:dc:
         40:04:45:30:7a:eb:65:42:e0:e7:bc:cd:76:22:6f:72:11:7b:
         1a:b0:59:a4:79:cf:79:ad:a1:c9:84:7d:79:13:2c:45:b6:99:
         e7:95:95:59:b2:bc:4d:ba:9a:e0:71:a3:d8:2f:a3:e0:8e:e9:
         3c:1f:40:77:81:13:e0:de:84:93:02:1f:b5:c8:c4:7c:c7:62:
         50:f1:38:70:e9:51:a1:71:9d:da:6f:6e:ca:65:f8:a4:3c:b3:
         72:2f:fd:a6:b8:a4:c5:ca:ea:c5:12:9d:49:8b:cc:b1:ad:05:
         d8:0d:7e:2c:3a:a1:16:38:4a:a6:2a:b7:e1:cf:cc:89:95:51:
         db:6b:a7:99:5b:ab:7b:5f:37:26:ce:eb:49:0d:c2:81:98:5e:
         11:3e:34:68:cb:24:27:31:66:0d:68:5f:20:b6:84:d1:4c:c2:
         b0:76:e7:e2:73:17:2d:a8:fd:6f:b3:c9:f3:6b:f9:da:a2:fa:
         1d:fa:70:8d:35:bf:d1:a3:ae:15:a7:bd:7d:b1:97:cb:09:64:
         ce:90:27:f1:1f:25:50:59:1f:7c:5b:30:e8:b0:2d:0f:6a:f7:
         1e:47:87:09:bd:30:13:d3:fc:fc:c8:43:43:22:9a:fc:2a:3c:
         89:3b:e7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSnNEeGF/1DKd9/sYlJFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGQ0ODcwOGRhNTA1NDk1OWU2MThhNTgyZTI4YzE1NWZl
ZjExM2YwHhcNMjQwNTE3MTYwMjM0WhcNMjQwNTE4MTYwMjM0WjAzMTEwLwYDVQQD
EygzOWIxNGY0NTA5Y2ZmZWZjMGIwODYxNDQyMmEyMzM3NGU1NzYwOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcoX2M/pGHSId25CkC6s1TX/3nkL
ixrjP61+QSBLPcKLV1xb6zYdq7+MB+IB0G0AhW9uJV5Q8a9pO+wzT+bR2hUyAmjS
pGTm2FlsJgtTzvxiQe4W/FVIfVgB9ho6w9391f0n7eNJ2Qrw/OzU3FoGwZ/Rbwgi
dQVqkfkl0OXMoQUEq8gp0IEOXScP5vyibE3+gDlpeqCaADjQ2IVAjx6qyIo7OOOH
si6u5ZId+VVIgsXNQupfmIMMEK1W1D2LPI6wwLj00junFSi/qtsuG3/U3Emzn/fO
G0b85B3O2ByZMPNLVXDgOdMbzVuYfP0q1rLIB8+cU5phxYTZz7vVl6Y4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmxT0UJz/78CwhhRCKiM3TldgjMMB8GA1UdIwQY
MBaAFMxNSHCNpQVJWeYYpYLijBVf7xE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekUxSWNJMmxCVWxaNWhpbGd1S01GVl92RVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NmE1MjQtMmUxYi00ZTllLWIyZDgt
YTljMzEyMjk4NGM1LzEvekUxSWNJMmxCVWxaNWhpbGd1S01GVl92RVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NmE1MjQtMmUxYi00ZTllLWIyZDgtYTljMzEyMjk4NGM1
LzEvekUxSWNJMmxCVWxaNWhpbGd1S01GVl92RVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXK+k6sr
pkm+9JukRRFZ0+fcQARFMHrrZULg57zNdiJvchF7GrBZpHnPea2hyYR9eRMsRbaZ
55WVWbK8Tbqa4HGj2C+j4I7pPB9Ad4ET4N6EkwIftcjEfMdiUPE4cOlRoXGd2m9u
ymX4pDyzci/9prikxcrqxRKdSYvMsa0F2A1+LDqhFjhKpiq34c/MiZVR22unmVur
e183Js7rSQ3CgZheET40aMskJzFmDWhfILaE0UzCsHbn4nMXLaj9b7PJ82v52qL6
HfpwjTW/0aOuFae9fbGXywlkzpAn8R8lUFkffFsw6LAtD2r3HkeHCb0wE9P8/MhD
QyKa/Co8iTvnfA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:20:01 2024 by rpki-client on console-fra.rpki-client.org