Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          i8sNaFVv33njq3UNeyFsKWmLkt+mgmPrQZdaqEsfBfI=
Subject key identifier:   F1:35:90:0A:9A:32:8B:1C:93:CA:9A:94:0A:DD:76:CD:0A:01:99:B6
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       018F3EC255941AD646489B564867C807F060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          090C
Signing time:             Fri 03 May 2024 14:01:14 +0000
Manifest this update:     Fri 03 May 2024 14:01:14 +0000
Manifest next update:     Sat 04 May 2024 14:01:14 +0000
Files and hashes:         1: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: qPPze6EWhld5RFxbnxtOr8/nPz7mC4TiupqS/gXUUs4=)
                          2: T4cqfjnENNSKj9M7dYvA_IXZGH4.roa (hash: BfhxC+A1x6yY45FStJ6mZdgkbBbx5PyhgFntDJQ1NlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:55:94:1a:d6:46:48:9b:56:48:67:c8:07:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: May  3 14:01:14 2024 GMT
            Not After : May  4 14:01:14 2024 GMT
        Subject: CN=f135900a9a328b1c93ca9a940add76cd0a0199b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:90:c4:a9:99:23:b0:eb:b4:15:bd:5c:bd:
                    a8:6b:62:4a:21:7c:02:0e:ca:a2:81:4e:74:06:bf:
                    de:52:99:fa:ba:c9:a1:ae:29:b7:b2:22:bc:ae:e2:
                    92:cf:26:31:09:a8:0c:0e:e6:10:dd:d9:02:0b:81:
                    cd:ba:c3:fa:2f:a8:57:dc:3c:ea:a9:4d:21:16:17:
                    11:e5:cd:59:fb:f9:91:b2:eb:70:65:3c:50:3c:4c:
                    26:8c:45:dd:07:1f:49:ce:8f:94:1f:c6:06:29:17:
                    6b:31:a0:b1:32:b2:e3:67:97:fc:95:4b:1e:94:c7:
                    35:da:7b:68:5e:53:f7:f0:bd:e5:5b:f7:6c:5d:22:
                    98:81:ed:d2:19:ca:80:8d:94:43:e1:fe:df:6c:d5:
                    4f:e0:b9:72:a7:68:24:3c:b1:c1:ce:e8:aa:86:c0:
                    29:f2:d6:0d:d7:3b:2d:34:ad:58:d3:a0:9f:95:da:
                    9f:46:8d:9a:81:2a:70:77:fd:49:9a:c1:e7:89:48:
                    6f:14:0c:75:39:fe:8c:f2:ca:0b:7e:5b:15:09:49:
                    98:3c:5a:bf:fc:dd:b5:00:c9:14:ba:27:bd:03:bd:
                    b4:c2:91:64:c6:d0:75:1e:66:e4:3d:76:32:60:d1:
                    f0:e1:21:6e:f8:6a:e9:d5:33:ab:f1:2a:47:e0:37:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:35:90:0A:9A:32:8B:1C:93:CA:9A:94:0A:DD:76:CD:0A:01:99:B6
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:2a:00:aa:f1:0b:29:62:73:4b:c2:67:33:ef:54:e3:74:31:
         00:ce:a1:a1:8b:aa:83:8f:8c:2f:b9:63:81:42:59:52:0d:4a:
         9a:2a:c5:6b:00:61:c6:62:b8:b6:94:bc:28:97:28:0e:3a:8d:
         dd:bd:67:ce:3d:41:89:26:b7:36:da:1f:c0:a1:0e:bd:4f:d5:
         45:e6:bc:dd:ec:99:70:fd:b2:c9:1e:bc:1a:00:c7:f9:af:69:
         55:8a:ca:2e:37:02:6c:ed:4b:d5:f6:ad:18:60:9c:c6:ff:f7:
         b2:fb:1a:1d:e4:85:5b:83:85:cf:e6:59:08:7f:f8:c0:97:21:
         cb:38:f1:2a:b1:1e:79:9a:75:52:a6:e3:59:87:fb:1d:31:b9:
         86:3a:d3:cb:1e:ac:e4:06:ad:40:da:0f:d6:68:a1:67:cf:2c:
         a0:3d:c6:00:43:0e:ee:8d:c3:69:4e:41:aa:bf:e1:69:db:de:
         47:23:7e:dc:ee:9b:a3:aa:a1:e2:21:98:29:a2:1c:84:bd:e5:
         4d:c0:52:15:13:37:09:63:31:98:0b:83:76:a0:61:cf:fe:62:
         02:af:5f:2b:8c:ba:3a:86:96:68:a0:23:0d:4d:1f:5e:f1:8f:
         ce:b7:b1:80:40:32:d5:3b:45:aa:ff:f4:09:e7:b0:81:50:e7:
         66:3e:c2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+wlWUGtZGSJtWSGfIB/BgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5
OGM4NGIwHhcNMjQwNTAzMTQwMTE0WhcNMjQwNTA0MTQwMTE0WjAzMTEwLwYDVQQD
EyhmMTM1OTAwYTlhMzI4YjFjOTNjYTlhOTQwYWRkNzZjZDBhMDE5OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB2QxKmZI7DrtBW9XL2oa2JKIXwC
DsqigU50Br/eUpn6usmhrim3siK8ruKSzyYxCagMDuYQ3dkCC4HNusP6L6hX3Dzq
qU0hFhcR5c1Z+/mRsutwZTxQPEwmjEXdBx9Jzo+UH8YGKRdrMaCxMrLjZ5f8lUse
lMc12ntoXlP38L3lW/dsXSKYge3SGcqAjZRD4f7fbNVP4Llyp2gkPLHBzuiqhsAp
8tYN1zstNK1Y06CfldqfRo2agSpwd/1JmsHniUhvFAx1Of6M8soLflsVCUmYPFq/
/N21AMkUuie9A720wpFkxtB1HmbkPXYyYNHw4SFu+Grp1TOr8SpH4De5VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE1kAqaMosck8qalArdds0KAZm2MB8GA1UdIwQY
MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt
MDgyYjFmN2YwZGIyLzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy
LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSoAqvEL
KWJzS8JnM+9U43QxAM6hoYuqg4+ML7ljgUJZUg1KmirFawBhxmK4tpS8KJcoDjqN
3b1nzj1BiSa3NtofwKEOvU/VRea83eyZcP2yyR68GgDH+a9pVYrKLjcCbO1L1fat
GGCcxv/3svsaHeSFW4OFz+ZZCH/4wJchyzjxKrEeeZp1UqbjWYf7HTG5hjrTyx6s
5AatQNoP1mihZ88soD3GAEMO7o3DaU5Bqr/hadveRyN+3O6bo6qh4iGYKaIchL3l
TcBSFRM3CWMxmAuDdqBhz/5iAq9fK4y6OoaWaKAjDU0fXvGPzrexgEAy1TtFqv/0
CeewgVDnZj7C4g==
-----END CERTIFICATE-----
Generated at Fri May 3 15:43:45 2024 by rpki-client on console-ams.rpki-client.org