Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File:                     h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier:          w1xVrAXXZl2ZmN3M5ipxDRtlXgdPUFIcp+11EC1oHzY=
Subject key identifier:   8C:04:95:E0:B6:9D:60:96:E1:50:4D:2E:A0:A0:08:B1:08:A6:4D:E3
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer:       /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial:       018F994EFDE8CABECBB5CA4FF5DF93E958B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number:          0569
Signing time:             Tue 21 May 2024 04:00:41 +0000
Manifest this update:     Tue 21 May 2024 04:00:41 +0000
Manifest next update:     Wed 22 May 2024 04:00:41 +0000
Files and hashes:         1: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: z1tWZFrWHXA3WXTlALw+EBSuVg0rmkdEJ+lUSXnEG5c=)
                          2: yxcAa88C4fDvrPgfLGVac5AT0p0.roa (hash: fntuugOz+3akrKBWRer5Ua4hUZf97mfltkHqaFB+jrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:4e:fd:e8:ca:be:cb:b5:ca:4f:f5:df:93:e9:58:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87de085975de6588e07fed135513aa38acedb763
        Validity
            Not Before: May 21 04:00:41 2024 GMT
            Not After : May 22 04:00:41 2024 GMT
        Subject: CN=8c0495e0b69d6096e1504d2ea0a008b108a64de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:e6:5a:62:35:2d:51:b4:d8:9b:61:3d:bc:
                    7f:6f:bb:cd:11:40:ae:bf:b4:2b:f1:cb:49:fd:f4:
                    63:89:53:e4:03:d5:65:b5:2a:ea:49:e1:2b:b8:dc:
                    c8:ff:d8:0f:f3:45:7d:5f:2c:c4:14:76:b2:04:af:
                    3e:26:5f:bf:a4:92:52:a2:de:f4:bc:55:e2:e9:94:
                    09:d2:26:48:56:de:65:30:2f:0d:9f:d7:c4:c3:12:
                    ff:0e:cd:fd:ec:9d:24:b0:54:f7:77:1d:c0:20:e5:
                    81:cd:ff:15:da:6b:ce:3f:c7:17:d1:42:e5:87:64:
                    ca:d9:1f:01:1e:5b:b8:25:5e:6a:15:a2:74:93:fb:
                    11:17:22:b0:a6:dd:af:b4:74:6f:d0:f6:89:67:2a:
                    c7:8a:5d:14:3d:f6:98:15:f7:4f:d0:e0:36:67:34:
                    bf:68:05:77:ca:d6:cf:e4:cd:20:3d:ab:e1:90:4d:
                    18:41:bd:27:89:0e:4a:2d:27:e1:4e:ea:b1:62:54:
                    58:59:41:40:8e:84:b1:17:42:57:6f:7e:b9:23:ab:
                    05:e1:49:72:d1:82:73:5b:1a:8c:51:ed:c8:11:98:
                    a1:76:8f:27:22:e8:32:2e:08:2c:ae:1e:10:60:73:
                    78:fb:a4:6e:ba:42:3e:d0:03:8b:50:fe:f5:59:c3:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:04:95:E0:B6:9D:60:96:E1:50:4D:2E:A0:A0:08:B1:08:A6:4D:E3
            X509v3 Authority Key Identifier:
                keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:31:53:43:4f:6d:c7:8b:8e:84:3f:62:6f:79:5f:10:8e:ea:
         c3:7e:87:43:95:82:a0:d8:2a:d5:4e:59:07:ca:e2:a9:2b:d2:
         bf:f2:48:f0:a0:02:ba:17:b4:ec:7a:5a:7c:ae:7c:0d:0d:4c:
         1a:59:03:8f:07:f4:49:7c:06:23:30:7f:45:ec:8f:18:1b:42:
         b4:0a:39:7d:d0:b3:62:27:d3:33:d4:e7:fa:b2:c0:0d:e0:24:
         d4:b7:de:ed:59:49:fc:d8:d3:87:f2:77:d5:21:37:21:f4:c1:
         7c:93:48:3f:7f:c7:e1:1c:18:39:fa:10:85:9e:3f:b7:5e:d6:
         f2:ce:05:22:19:7a:f3:96:0d:03:59:dc:fd:06:bc:2d:f1:9e:
         20:16:0e:b1:59:c5:3e:93:4a:82:22:b6:6c:1b:5a:7c:08:64:
         ad:34:4b:ef:ad:b6:03:73:2f:d5:9c:3b:bf:7c:1d:37:0e:57:
         70:86:5a:66:6a:46:7f:89:fb:dd:34:47:cb:34:bd:7d:2a:85:
         b9:0a:0c:38:bc:2b:44:a1:83:78:44:e7:90:f1:3f:27:22:ce:
         68:d4:78:ff:13:32:bd:bf:2c:d4:39:e9:59:7d:7f:a3:6d:c4:
         b0:74:04:ba:d4:6a:b8:de:a8:c4:d9:af:4d:7b:24:bd:1b:9d:
         fb:1d:24:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ZTv3oyr7LtcpP9d+T6Vi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGUwODU5NzVkZTY1ODhlMDdmZWQxMzU1MTNhYTM4YWNl
ZGI3NjMwHhcNMjQwNTIxMDQwMDQxWhcNMjQwNTIyMDQwMDQxWjAzMTEwLwYDVQQD
Eyg4YzA0OTVlMGI2OWQ2MDk2ZTE1MDRkMmVhMGEwMDhiMTA4YTY0ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHXmWmI1LVG02JthPbx/b7vNEUCu
v7Qr8ctJ/fRjiVPkA9VltSrqSeEruNzI/9gP80V9XyzEFHayBK8+Jl+/pJJSot70
vFXi6ZQJ0iZIVt5lMC8Nn9fEwxL/Ds397J0ksFT3dx3AIOWBzf8V2mvOP8cX0ULl
h2TK2R8BHlu4JV5qFaJ0k/sRFyKwpt2vtHRv0PaJZyrHil0UPfaYFfdP0OA2ZzS/
aAV3ytbP5M0gPavhkE0YQb0niQ5KLSfhTuqxYlRYWUFAjoSxF0JXb365I6sF4Uly
0YJzWxqMUe3IEZihdo8nIugyLggsrh4QYHN4+6RuukI+0AOLUP71WcPzQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwEleC2nWCW4VBNLqCgCLEIpk3jMB8GA1UdIwQY
MBaAFIfeCFl13mWI4H/tE1UTqjis7bdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDk0SVdYWGVaWWpnZi0wVFZST3FPS3p0dDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNGVmNzEtZjEyMi00N2NlLThhNDAt
Y2MwZjk3MDcxNDBlLzEvaDk0SVdYWGVaWWpnZi0wVFZST3FPS3p0dDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNGVmNzEtZjEyMi00N2NlLThhNDAtY2MwZjk3MDcxNDBl
LzEvaDk0SVdYWGVaWWpnZi0wVFZST3FPS3p0dDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzFTQ09t
x4uOhD9ib3lfEI7qw36HQ5WCoNgq1U5ZB8riqSvSv/JI8KACuhe07HpafK58DQ1M
GlkDjwf0SXwGIzB/ReyPGBtCtAo5fdCzYifTM9Tn+rLADeAk1Lfe7VlJ/NjTh/J3
1SE3IfTBfJNIP3/H4RwYOfoQhZ4/t17W8s4FIhl685YNA1nc/Qa8LfGeIBYOsVnF
PpNKgiK2bBtafAhkrTRL7622A3Mv1Zw7v3wdNw5XcIZaZmpGf4n73TRHyzS9fSqF
uQoMOLwrRKGDeETnkPE/JyLOaNR4/xMyvb8s1DnpWX1/o23EsHQEutRquN6oxNmv
TXskvRud+x0kEQ==
-----END CERTIFICATE-----
Generated at Tue May 21 04:40:25 2024 by rpki-client on console-ams.rpki-client.org