Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File:                     QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier:          HFvT/oggA28WukynmVuIqeqw4oFRcsTckyWe5HNIleo=
Subject key identifier:   65:E8:C0:68:39:B3:96:EE:86:77:A7:A6:D3:9D:A6:C3:2D:DB:B2:F8
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer:       /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial:       018F87B65EB62CB6944D301CE40B9FFF62CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: PtidvH62xRGTQ9EJ0hLtPc2VtVZHaQM/Xoj1EOZuaIY=)
                          2: cvrmaIrLxlaZQh_lx3_kwYPRPno.roa (hash: LiPq5Kgz0hwnkaFSP5CWIHT4TrfxYz8A0k7VuK7Lar0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5e:b6:2c:b6:94:4d:30:1c:e4:0b:9f:ff:62:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=65e8c06839b396ee8677a7a6d39da6c32ddbb2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:ba:2e:68:3a:f4:9e:8f:d7:4f:f0:de:3e:
                    8f:87:5c:58:eb:99:52:76:8d:02:0c:c2:b8:c1:8f:
                    09:2f:df:aa:7b:45:3d:46:1c:d7:04:99:5e:7e:b9:
                    50:a1:63:be:07:e7:b7:85:60:cb:f5:88:8b:10:72:
                    43:56:83:da:a7:c0:fa:d3:f8:c7:c6:45:35:2a:2b:
                    34:14:46:9f:8e:02:b3:9b:bd:6d:48:69:c7:0c:b5:
                    9b:d9:6a:c0:ce:a2:9f:3a:4c:01:27:64:20:33:d9:
                    ef:bb:2e:ab:33:59:c0:bf:fb:58:8b:be:f2:f5:93:
                    0b:55:25:8d:09:2c:c6:dc:d4:04:cd:c0:d0:f4:63:
                    64:64:4f:9b:d0:ef:46:7e:1e:c8:76:6b:36:ba:77:
                    52:00:75:6c:86:e6:f2:19:db:ff:12:49:a5:eb:53:
                    56:9d:87:18:8d:80:e8:2c:a6:c8:dc:03:a4:f1:a4:
                    8a:5b:a3:12:29:cf:61:c6:1f:e9:c3:2b:2f:3b:b6:
                    de:a4:82:15:26:ad:15:38:8d:db:49:14:6e:f9:a4:
                    7f:b9:41:02:5a:0a:36:b2:42:59:fa:bd:74:d6:0d:
                    03:83:81:fe:b8:e5:68:99:66:8c:e9:a3:16:22:e2:
                    36:a7:3c:97:73:3d:76:f7:a6:76:ae:2a:6a:3b:d1:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E8:C0:68:39:B3:96:EE:86:77:A7:A6:D3:9D:A6:C3:2D:DB:B2:F8
            X509v3 Authority Key Identifier:
                keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:7b:63:f0:34:65:33:72:fa:3b:41:76:9f:d8:db:cd:a9:
         00:7a:e1:6a:41:7c:d4:fb:d0:fe:af:e7:3d:75:5e:a0:a0:be:
         17:27:d3:85:f6:81:bb:70:46:23:fc:ab:94:a4:bd:cb:2c:83:
         05:29:cb:a0:98:18:da:a3:be:1a:77:9b:17:23:54:2b:47:10:
         ee:bb:29:6f:82:06:2b:6f:dd:17:b5:5e:f7:aa:04:1d:b6:ff:
         86:24:0f:e8:01:53:9d:e3:72:01:63:8d:54:d4:27:cc:2a:50:
         23:3c:dc:75:53:b6:8b:bf:eb:87:bc:b8:0e:57:49:c2:37:66:
         ae:69:80:1a:bb:9b:36:6d:1f:2d:07:98:b9:39:1f:83:6b:0f:
         83:4e:85:f7:a2:3b:97:a5:95:1d:95:54:68:8f:18:00:d9:09:
         46:9d:a5:5f:88:63:a5:81:79:d6:47:e2:9c:4b:9a:ac:e2:48:
         10:c2:65:64:59:7f:1f:18:b2:3c:c7:e6:8a:06:2f:07:dd:78:
         7e:93:36:09:bc:40:95:7f:d5:a3:99:df:f3:4b:c0:3a:5a:3a:
         35:f6:6e:14:2f:45:1d:30:f7:01:1c:83:f9:68:56:25:2d:bf:
         5b:80:08:3b:83:d7:d8:13:7b:93:c9:f9:b9:be:39:e1:49:c9:
         fa:3b:07:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htl62LLaUTTAc5Auf/2LNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxODZlNmI5ZDFmNzhjOTRkNjNmYWM5MzRhYjlhYWRjMGM5
NmQ0M2UwHhcNMjQwNTE3MTgwMDI2WhcNMjQwNTE4MTgwMDI2WjAzMTEwLwYDVQQD
Eyg2NWU4YzA2ODM5YjM5NmVlODY3N2E3YTZkMzlkYTZjMzJkZGJiMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXq6Lmg69J6P10/w3j6Ph1xY65lS
do0CDMK4wY8JL9+qe0U9RhzXBJlefrlQoWO+B+e3hWDL9YiLEHJDVoPap8D60/jH
xkU1Kis0FEafjgKzm71tSGnHDLWb2WrAzqKfOkwBJ2QgM9nvuy6rM1nAv/tYi77y
9ZMLVSWNCSzG3NQEzcDQ9GNkZE+b0O9Gfh7Idms2undSAHVshubyGdv/Ekml61NW
nYcYjYDoLKbI3AOk8aSKW6MSKc9hxh/pwysvO7bepIIVJq0VOI3bSRRu+aR/uUEC
Wgo2skJZ+r101g0Dg4H+uOVomWaM6aMWIuI2pzyXcz1296Z2ripqO9F6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXowGg5s5buhnenptOdpsMt27L4MB8GA1UdIwQY
MBaAFEGG5rnR94yU1j+sk0q5qtwMltQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQt
ZDc4NzY2ZDhjODU4LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xYjlhNjYtZjgyMC00NWEwLWIwMmQtZDc4NzY2ZDhjODU4
LzEvUVlibXVkSDNqSlRXUDZ5VFNybXEzQXlXMUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/t7Y/A0
ZTNy+jtBdp/Y282pAHrhakF81PvQ/q/nPXVeoKC+FyfThfaBu3BGI/yrlKS9yyyD
BSnLoJgY2qO+GnebFyNUK0cQ7rspb4IGK2/dF7Ve96oEHbb/hiQP6AFTneNyAWON
VNQnzCpQIzzcdVO2i7/rh7y4DldJwjdmrmmAGrubNm0fLQeYuTkfg2sPg06F96I7
l6WVHZVUaI8YANkJRp2lX4hjpYF51kfinEuarOJIEMJlZFl/HxiyPMfmigYvB914
fpM2CbxAlX/Vo5nf80vAOlo6NfZuFC9FHTD3ARyD+WhWJS2/W4AIO4PX2BN7k8n5
ub454UnJ+jsH3g==
-----END CERTIFICATE-----
Generated at Fri May 17 23:43:56 2024 by rpki-client on console-ams.rpki-client.org