Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft
File:                     RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft (raw, json)
Hash identifier:          vr+9kNDMKMQK5qI//FYI7Er+S8Xzuyzuisoqd6/uQP0=
Subject key identifier:   B8:D0:D7:E5:7C:CF:50:AA:90:DD:2F:B5:C8:CB:B0:ED:D3:F8:92:A9
Authority key identifier: 45:36:39:64:2F:9D:2B:46:72:34:3A:F8:D8:2F:C7:55:47:CD:98:51
Certificate issuer:       /CN=453639642f9d2b4672343af8d82fc75547cd9851
Certificate serial:       018F87EDB403BA64FF256407CC157E1FA0F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft
Manifest number:          0941
Signing time:             Fri 17 May 2024 19:00:53 +0000
Manifest this update:     Fri 17 May 2024 19:00:53 +0000
Manifest next update:     Sat 18 May 2024 19:00:53 +0000
Files and hashes:         1: 1ShXaHmm_joriDms2mhzVaw3ZPM.roa (hash: RMV09VQAqFDAYDnRjUxFj7XDR1qjBiWWXoxo1kuQakE=)
                          2: RTY5ZC-dK0ZyNDr42C_HVUfNmFE.crl (hash: uimolwvNjo24T90U7l8ZbdhhROpn3u73s7/GS7Vui4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b4:03:ba:64:ff:25:64:07:cc:15:7e:1f:a0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453639642f9d2b4672343af8d82fc75547cd9851
        Validity
            Not Before: May 17 19:00:53 2024 GMT
            Not After : May 18 19:00:53 2024 GMT
        Subject: CN=b8d0d7e57ccf50aa90dd2fb5c8cbb0edd3f892a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:21:76:d3:0f:77:60:ee:22:22:ba:60:7a:
                    9d:dd:47:60:73:26:f0:57:1a:b8:4a:44:4b:e0:7a:
                    0b:30:15:83:90:ad:0a:c0:86:26:37:20:8b:6a:c4:
                    a8:cd:84:a0:ec:d9:fb:e9:5e:ed:31:a1:4a:6a:46:
                    d1:00:93:f9:ac:95:b3:c3:a5:0f:86:9b:22:e4:b1:
                    1b:22:dd:78:5c:8b:9c:07:e9:6c:63:3f:22:58:49:
                    e0:77:f9:9a:9a:eb:25:a0:7a:a2:9d:71:27:c5:a7:
                    b0:ce:c4:44:b2:1a:79:c6:4d:a4:c7:69:3b:9d:ad:
                    9c:52:55:c1:e9:b5:18:c1:2a:c7:48:d3:ce:61:9e:
                    39:28:c8:91:79:fc:94:44:d4:c3:9a:2a:f6:19:83:
                    5f:b4:4b:02:db:94:89:df:9d:8e:87:95:8d:85:f1:
                    c5:c9:c7:2d:f9:fb:8a:25:67:ab:f2:15:55:08:a7:
                    50:30:8c:28:ac:30:c0:73:0b:46:b6:da:70:d5:34:
                    c5:b0:d8:6a:d8:35:b5:d1:61:cd:8b:ed:ea:e3:9b:
                    26:d0:25:cc:6a:29:2b:9a:9b:3e:67:a1:9b:51:c9:
                    dd:01:95:bd:ae:3c:32:1f:06:75:00:81:5b:6d:df:
                    6d:ff:6b:8b:d9:49:f6:b1:f4:cf:db:18:d0:0f:f3:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D0:D7:E5:7C:CF:50:AA:90:DD:2F:B5:C8:CB:B0:ED:D3:F8:92:A9
            X509v3 Authority Key Identifier:
                keyid:45:36:39:64:2F:9D:2B:46:72:34:3A:F8:D8:2F:C7:55:47:CD:98:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:01:06:18:0b:66:6a:2c:ee:43:0d:40:2b:1a:63:3e:4e:11:
         5e:83:8c:e5:06:4b:72:dd:64:fd:08:31:03:4d:de:92:56:a5:
         61:3e:4f:36:e1:fa:fc:c4:cc:1a:2f:ad:8c:58:61:66:79:04:
         7d:3b:f1:0e:25:ff:48:7d:6d:e5:01:fd:a1:dc:01:3c:11:a5:
         0e:b5:ec:d5:96:b3:20:f0:bb:ad:aa:ec:a2:84:1e:66:dc:c1:
         28:d6:65:66:58:1a:ea:50:ab:35:91:7b:94:e4:6a:15:1c:f1:
         44:84:5a:25:16:ed:83:f8:2a:df:b4:eb:63:2f:58:f0:1a:cc:
         5b:a9:f3:15:45:f2:86:23:fd:e6:df:92:d7:13:6f:00:78:b0:
         fe:66:04:30:12:0b:0d:87:ed:d7:a1:1b:e5:d0:01:ea:f1:1e:
         4f:da:43:98:53:41:1f:7d:84:5a:1e:df:f7:df:5e:9f:0c:65:
         06:dc:d1:55:f8:2b:1a:fb:70:24:cd:c6:84:17:19:82:63:51:
         09:f5:e4:cb:9e:93:21:e6:71:d7:40:b7:2f:9b:66:80:bf:c4:
         8c:25:06:fd:82:28:fb:21:9d:6e:8e:76:56:a7:76:c3:b9:32:
         81:f9:68:0f:0c:2d:7c:c1:e3:d8:bf:28:4a:28:a1:2d:da:cc:
         92:ae:10:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7bQDumT/JWQHzBV+H6DwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MzYzOTY0MmY5ZDJiNDY3MjM0M2FmOGQ4MmZjNzU1NDdj
ZDk4NTEwHhcNMjQwNTE3MTkwMDUzWhcNMjQwNTE4MTkwMDUzWjAzMTEwLwYDVQQD
EyhiOGQwZDdlNTdjY2Y1MGFhOTBkZDJmYjVjOGNiYjBlZGQzZjg5MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ohdtMPd2DuIiK6YHqd3Udgcybw
Vxq4SkRL4HoLMBWDkK0KwIYmNyCLasSozYSg7Nn76V7tMaFKakbRAJP5rJWzw6UP
hpsi5LEbIt14XIucB+lsYz8iWEngd/mamusloHqinXEnxaewzsREshp5xk2kx2k7
na2cUlXB6bUYwSrHSNPOYZ45KMiRefyURNTDmir2GYNftEsC25SJ352Oh5WNhfHF
ycct+fuKJWer8hVVCKdQMIworDDAcwtGttpw1TTFsNhq2DW10WHNi+3q45sm0CXM
aikrmps+Z6GbUcndAZW9rjwyHwZ1AIFbbd9t/2uL2Un2sfTP2xjQD/O/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjQ1+V8z1CqkN0vtcjLsO3T+JKpMB8GA1UdIwQY
MBaAFEU2OWQvnStGcjQ6+Ngvx1VHzZhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlRZNVpDLWRLMFp5TkRyNDJDX0hWVWZObUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NzI4YWQtOTA3MC00YjExLWFhOTgt
YzJlNWZkYjkyNWYzLzEvUlRZNVpDLWRLMFp5TkRyNDJDX0hWVWZObUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82NzI4YWQtOTA3MC00YjExLWFhOTgtYzJlNWZkYjkyNWYz
LzEvUlRZNVpDLWRLMFp5TkRyNDJDX0hWVWZObUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQEGGAtm
aizuQw1AKxpjPk4RXoOM5QZLct1k/QgxA03eklalYT5PNuH6/MTMGi+tjFhhZnkE
fTvxDiX/SH1t5QH9odwBPBGlDrXs1ZazIPC7rarsooQeZtzBKNZlZlga6lCrNZF7
lORqFRzxRIRaJRbtg/gq37TrYy9Y8BrMW6nzFUXyhiP95t+S1xNvAHiw/mYEMBIL
DYft16Eb5dAB6vEeT9pDmFNBH32EWh7f999enwxlBtzRVfgrGvtwJM3GhBcZgmNR
CfXky56TIeZx10C3L5tmgL/EjCUG/YIo+yGdbo52Vqd2w7kygfloDwwtfMHj2L8o
SiihLdrMkq4QRg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:06:33 2024 by rpki-client on console-ams.rpki-client.org