Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File:                     9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier:          3R9FHuekFQxCY8Vx9eblVEI255DC6zOEfxqRfm0LrRc=
Subject key identifier:   5B:1A:83:B5:46:47:24:2E:2B:F4:6A:BC:A4:5D:68:F5:36:B0:91:E0
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer:       /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial:       018F4042E73D919A1DE66F5178438BB2898C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number:          0687
Signing time:             Fri 03 May 2024 21:01:17 +0000
Manifest this update:     Fri 03 May 2024 21:01:17 +0000
Manifest next update:     Sat 04 May 2024 21:01:17 +0000
Files and hashes:         1: 3ze7nG6NJbQXoAtsnTSw12VdWwo.roa (hash: LRyzoQAgF5WxWBrfECQmM2BoIUCq6n1Onnn/hluC8Tc=)
                          2: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: 6dWreBS+TJRXCa6UKAWMctp7WHvDSNfIhbCehFLLhao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:42:e7:3d:91:9a:1d:e6:6f:51:78:43:8b:b2:89:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
        Validity
            Not Before: May  3 21:01:17 2024 GMT
            Not After : May  4 21:01:17 2024 GMT
        Subject: CN=5b1a83b54647242e2bf46abca45d68f536b091e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:60:8c:65:74:7b:8e:76:ff:1b:fe:89:33:
                    ae:76:21:d0:49:1d:5f:04:2c:8f:02:45:29:56:0e:
                    e9:fd:c0:ee:c1:d2:6b:59:cc:a8:70:fb:e4:d8:e6:
                    06:c4:b4:ee:64:65:f8:11:9b:a1:08:27:ac:1c:5d:
                    50:01:00:1f:cb:78:39:30:80:cb:9c:d1:30:2d:c3:
                    49:3e:92:81:4e:1c:81:7a:9b:ab:4e:99:27:8f:75:
                    77:07:29:2a:06:7a:33:e6:e8:7d:ab:e6:ac:5f:00:
                    34:3a:bc:3e:a7:5f:68:c5:46:7b:96:de:c0:2d:75:
                    55:47:79:6b:06:48:c9:f3:43:aa:68:61:62:c4:b3:
                    3e:e9:69:8f:f6:a4:00:95:d9:4a:54:05:43:9e:a7:
                    39:f7:e9:39:5c:d2:7e:6c:9e:f1:26:fc:01:5a:20:
                    eb:36:d4:4f:03:97:48:e7:62:6f:11:74:e5:c8:a3:
                    ed:1a:44:d3:15:34:08:09:8c:c0:cc:f6:d5:57:91:
                    50:9c:11:1d:3e:4d:4b:42:69:98:5f:ab:15:02:4f:
                    1f:b2:4a:6f:e1:62:72:4e:d5:38:ce:f6:a7:3f:22:
                    7c:8e:cf:d4:07:21:fc:47:5d:23:73:a1:d6:bb:63:
                    4c:f0:aa:88:7f:fe:df:b7:73:c2:7a:6d:9f:46:ea:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:83:B5:46:47:24:2E:2B:F4:6A:BC:A4:5D:68:F5:36:B0:91:E0
            X509v3 Authority Key Identifier:
                keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:8d:ac:1f:fd:5f:c5:15:ee:50:5c:89:83:b8:5a:72:b7:
         c1:3f:fc:bc:a6:05:98:99:8e:ec:d4:e4:93:30:ac:1c:44:51:
         89:8a:b9:1a:2a:00:e3:7e:c3:6a:02:50:dc:ef:39:e6:e4:a3:
         51:0b:e5:9b:f4:ce:7c:ca:5f:99:99:65:42:77:1d:94:42:84:
         42:7d:9b:70:8a:ab:ae:04:f0:ce:9e:47:e5:ab:4e:0d:dd:35:
         58:46:a0:7d:76:2d:30:bf:f0:87:db:c2:04:a3:5b:47:34:60:
         19:6f:dd:00:c3:dc:13:ab:39:50:a4:51:c4:13:ac:83:ed:6a:
         00:8d:b2:aa:0e:48:5f:e8:f5:59:e1:c3:9f:92:a9:bf:c3:24:
         7f:2e:e1:9f:3a:bd:e4:c0:b4:54:bc:7e:e2:c7:b2:ce:e5:8f:
         76:b1:6c:3f:81:69:50:23:02:8e:54:4f:c2:f0:47:88:08:61:
         11:29:7a:5f:ca:b4:d2:69:de:4e:7b:d1:77:8d:1e:1b:35:cf:
         37:18:a4:39:30:99:c6:99:81:bb:d9:15:b2:88:02:fc:81:d8:
         03:e7:c6:25:86:9e:b7:2d:35:66:53:79:cd:f6:de:a8:83:e4:
         d8:ab:c4:b4:bc:f4:96:ba:47:30:72:ec:55:3c:8a:bf:b9:94:
         7f:70:60:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9AQuc9kZod5m9ReEOLsomMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmQwY2FkMGVhZWQxYTYxZjQ3OGZiMDkxOWM3YTQzMjI3
MjQ2OTUwHhcNMjQwNTAzMjEwMTE3WhcNMjQwNTA0MjEwMTE3WjAzMTEwLwYDVQQD
Eyg1YjFhODNiNTQ2NDcyNDJlMmJmNDZhYmNhNDVkNjhmNTM2YjA5MWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aZgjGV0e452/xv+iTOudiHQSR1f
BCyPAkUpVg7p/cDuwdJrWcyocPvk2OYGxLTuZGX4EZuhCCesHF1QAQAfy3g5MIDL
nNEwLcNJPpKBThyBepurTpknj3V3BykqBnoz5uh9q+asXwA0Orw+p19oxUZ7lt7A
LXVVR3lrBkjJ80OqaGFixLM+6WmP9qQAldlKVAVDnqc59+k5XNJ+bJ7xJvwBWiDr
NtRPA5dI52JvEXTlyKPtGkTTFTQICYzAzPbVV5FQnBEdPk1LQmmYX6sVAk8fskpv
4WJyTtU4zvanPyJ8js/UByH8R10jc6HWu2NM8KqIf/7ft3PCem2fRuqEmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsag7VGRyQuK/RqvKRdaPU2sJHgMB8GA1UdIwQY
MBaAFPQtDK0OrtGmH0ePsJGcekMickaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjct
N2Y3Mzk0YmU4Y2U0LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjctN2Y3Mzk0YmU4Y2U0
LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLqNrB/9
X8UV7lBciYO4WnK3wT/8vKYFmJmO7NTkkzCsHERRiYq5GioA437DagJQ3O855uSj
UQvlm/TOfMpfmZllQncdlEKEQn2bcIqrrgTwzp5H5atODd01WEagfXYtML/wh9vC
BKNbRzRgGW/dAMPcE6s5UKRRxBOsg+1qAI2yqg5IX+j1WeHDn5Kpv8Mkfy7hnzq9
5MC0VLx+4seyzuWPdrFsP4FpUCMCjlRPwvBHiAhhESl6X8q00mneTnvRd40eGzXP
NxikOTCZxpmBu9kVsogC/IHYA+fGJYaety01ZlN5zfbeqIPk2KvEtLz0lrpHMHLs
VTyKv7mUf3Bgyg==
-----END CERTIFICATE-----
Generated at Sat May 4 00:00:16 2024 by rpki-client on console-ams.rpki-client.org