Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File:                     ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier:          rlE1nRd1L9h5AgQcbFkcnKnHrxwBhFbkQQtAOKurchE=
Subject key identifier:   DD:11:20:1E:E3:D2:55:F3:0D:E4:CE:8D:A1:C8:0B:4F:F0:3F:B6:1D
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer:       /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial:       018F8749D8BE250A45A7EBAE0583BD9E67E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number:          0201
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: Xs/0QRHJemxH8UAyJjicAyhMKcwulVFMJsSh7OWU1EE=)
                          2: n7oDDAcR7lNmLsTSCgyoZrOJDwI.roa (hash: LIWrWe5On5UuQIBRg2Et33d5mexQqrFaN8zhJugjh7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d8:be:25:0a:45:a7:eb:ae:05:83:bd:9e:67:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=dd11201ee3d255f30de4ce8da1c80b4ff03fb61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:25:3a:11:1d:f8:19:f6:34:5f:b0:84:b3:
                    00:21:65:a5:8f:2d:80:10:33:d9:8f:e0:fd:a0:41:
                    b7:26:e4:ec:36:a3:9a:7b:2a:d0:5d:92:84:74:fb:
                    4a:69:b3:c1:6c:53:7d:27:90:53:27:bf:35:a1:c3:
                    b4:d9:a3:9b:9e:65:ab:77:f8:df:8c:93:2e:a6:9d:
                    2f:8a:53:38:c8:e7:d5:02:f3:84:6e:d4:06:bf:e2:
                    b4:d3:09:70:ee:67:45:30:8d:3c:c5:1f:30:f1:14:
                    71:d6:9d:8a:1f:c4:4f:e6:d7:ab:81:ad:d2:ad:3b:
                    11:37:d4:3d:50:24:ac:20:84:df:bf:1c:08:a4:1d:
                    58:3c:18:9f:1a:ef:03:64:99:bb:70:61:ef:18:29:
                    36:3f:4d:ed:bf:47:40:5c:83:70:7e:04:55:e1:d8:
                    73:f0:ac:8e:22:f3:9c:1f:35:d3:30:32:ad:06:73:
                    82:9a:86:c7:68:10:98:f9:46:28:6b:fc:8b:f4:ed:
                    d8:c7:5b:fa:38:fc:c4:f7:b5:d6:ed:76:55:9c:11:
                    5c:09:f6:f1:4f:d9:3f:87:b6:0b:57:99:a8:46:7c:
                    94:29:7e:c1:4f:a0:07:5c:06:30:e3:ff:f4:d1:b7:
                    5e:e7:40:f7:81:81:24:4e:cc:da:6f:07:ae:a0:ae:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:11:20:1E:E3:D2:55:F3:0D:E4:CE:8D:A1:C8:0B:4F:F0:3F:B6:1D
            X509v3 Authority Key Identifier:
                keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:78:49:e6:0e:b5:84:06:dc:b4:b8:43:24:9f:68:6b:6f:ab:
         7a:31:4d:da:35:aa:00:5d:11:50:b9:89:71:e7:27:04:3d:d4:
         7e:22:f4:23:18:44:76:69:65:a3:46:12:61:06:4a:a0:f3:06:
         44:6f:b4:9d:5e:75:19:43:63:a3:68:d5:35:be:66:3a:f9:4a:
         65:52:49:ef:79:97:f2:c5:d3:98:a5:24:49:f3:9b:3f:07:07:
         5b:d5:95:eb:df:58:b8:01:4d:a8:a2:05:26:55:56:cb:3d:6e:
         e2:12:83:9c:63:ba:81:28:ee:a7:ff:05:84:32:f8:25:4c:4f:
         7d:69:d7:1b:7e:ff:68:79:ba:45:ca:ba:b7:e9:12:55:b2:3e:
         2b:00:92:c7:d8:e6:90:69:de:91:82:49:33:cc:01:3f:f4:8c:
         fb:b8:d4:c6:6c:8f:b4:c7:3a:3b:f8:fe:f7:de:2e:f9:63:9a:
         4a:c6:6b:e9:94:c8:ac:5e:4f:98:0c:1b:26:88:d0:45:52:b5:
         12:60:bc:ce:fb:0c:eb:5b:c2:3a:40:5e:1f:6a:10:b7:8e:a9:
         3c:5f:55:9f:58:26:11:a1:82:0f:4c:f8:7c:5a:69:4e:f7:71:
         99:e8:78:3e:25:b6:5b:50:90:18:30:a4:0e:f2:e9:ac:5e:2a:
         b8:72:5d:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdi+JQpFp+uuBYO9nmfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl
NzVkZWYwHhcNMjQwNTE3MTYwMTU0WhcNMjQwNTE4MTYwMTU0WjAzMTEwLwYDVQQD
EyhkZDExMjAxZWUzZDI1NWYzMGRlNGNlOGRhMWM4MGI0ZmYwM2ZiNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuglOhEd+Bn2NF+whLMAIWWljy2A
EDPZj+D9oEG3JuTsNqOaeyrQXZKEdPtKabPBbFN9J5BTJ781ocO02aObnmWrd/jf
jJMupp0vilM4yOfVAvOEbtQGv+K00wlw7mdFMI08xR8w8RRx1p2KH8RP5terga3S
rTsRN9Q9UCSsIITfvxwIpB1YPBifGu8DZJm7cGHvGCk2P03tv0dAXINwfgRV4dhz
8KyOIvOcHzXTMDKtBnOCmobHaBCY+UYoa/yL9O3Yx1v6OPzE97XW7XZVnBFcCfbx
T9k/h7YLV5moRnyUKX7BT6AHXAYw4//00bde50D3gYEkTszabweuoK6ECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0RIB7j0lXzDeTOjaHIC0/wP7YdMB8GA1UdIwQY
MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt
YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5
LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXhJ5g61
hAbctLhDJJ9oa2+rejFN2jWqAF0RULmJcecnBD3UfiL0IxhEdmllo0YSYQZKoPMG
RG+0nV51GUNjo2jVNb5mOvlKZVJJ73mX8sXTmKUkSfObPwcHW9WV699YuAFNqKIF
JlVWyz1u4hKDnGO6gSjup/8FhDL4JUxPfWnXG37/aHm6Rcq6t+kSVbI+KwCSx9jm
kGnekYJJM8wBP/SM+7jUxmyPtMc6O/j+994u+WOaSsZr6ZTIrF5PmAwbJojQRVK1
EmC8zvsM61vCOkBeH2oQt46pPF9Vn1gmEaGCD0z4fFppTvdxmeh4PiW2W1CQGDCk
DvLprF4quHJdJQ==
-----END CERTIFICATE-----
Generated at Fri May 17 17:55:44 2024 by rpki-client on console-ams.rpki-client.org