Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File:                     Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier:          XZOC2SfHlwTnoaHPMhOwkBBWHBRb2lrxcP2KBbzyrQ8=
Subject key identifier:   7B:59:22:B8:07:D1:75:CA:85:DC:DB:76:CF:5C:68:6D:C1:DD:0E:EF
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer:       /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial:       018F99178277BFCC5E9828F427873775F828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number:          0254
Signing time:             Tue 21 May 2024 03:00:05 +0000
Manifest this update:     Tue 21 May 2024 03:00:05 +0000
Manifest next update:     Wed 22 May 2024 03:00:05 +0000
Files and hashes:         1: WDAg4lQjP4uLvaLEoH2QPmw642I.roa (hash: zSKo5ZMdgxPBBrxGMoSPTwmkIu6AUhlLZF0lZh7LOqs=)
                          2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: yXmMz9a7UVsvtHh+ZUOl2nCNiw7PNNGhhTQifR0IMO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:17:82:77:bf:cc:5e:98:28:f4:27:87:37:75:f8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
        Validity
            Not Before: May 21 03:00:05 2024 GMT
            Not After : May 22 03:00:05 2024 GMT
        Subject: CN=7b5922b807d175ca85dcdb76cf5c686dc1dd0eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:64:2d:7d:50:90:23:b9:d4:46:2a:de:7c:
                    da:45:94:31:43:b0:aa:3e:3c:1f:15:40:60:56:ea:
                    46:9c:c3:49:49:d8:74:7b:ce:91:67:90:91:53:90:
                    a0:36:58:89:bc:ac:2b:f5:a7:93:c2:20:e0:d5:41:
                    e5:9a:6c:88:40:a5:da:61:2b:8b:d9:53:95:36:e2:
                    b5:e4:65:ff:45:0c:2d:88:d4:53:17:4c:bb:ea:3b:
                    7f:16:37:2e:7d:d6:ee:3f:23:77:25:24:29:95:8e:
                    b4:e4:d2:9d:b7:29:8f:bc:0f:23:2d:b3:6d:54:13:
                    46:01:15:8a:51:c7:44:a3:2a:35:44:56:2f:0c:0d:
                    66:8f:4c:57:21:b3:a5:03:6b:8e:77:87:12:50:81:
                    2d:f4:b0:de:29:83:ce:9a:ca:97:de:99:44:01:ec:
                    9b:c6:a2:49:8b:e7:62:71:a0:26:24:a6:ef:c0:1d:
                    a2:bf:50:2e:5b:a1:21:42:36:36:f9:72:4d:d0:0c:
                    b4:e0:0a:ad:7a:eb:c6:ab:20:4e:53:c4:e1:08:91:
                    79:37:74:6d:a8:c6:d3:70:2e:5d:a5:97:13:a9:17:
                    16:ef:d6:69:dc:23:da:b0:ea:bc:2c:3d:ba:e3:36:
                    5e:b4:85:04:08:0b:a8:9d:3f:c3:8d:84:5d:8e:4f:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:22:B8:07:D1:75:CA:85:DC:DB:76:CF:5C:68:6D:C1:DD:0E:EF
            X509v3 Authority Key Identifier:
                keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:12:54:ef:49:8e:5b:d1:32:ac:c5:4e:0b:be:50:36:4b:
         b4:11:d6:9b:9a:84:26:3f:7c:42:0f:2f:5a:90:81:3b:97:cc:
         ad:75:bb:c8:93:b4:30:69:b8:23:a6:e6:54:47:2f:3a:2e:39:
         4b:14:c0:e2:06:24:f3:5b:9c:57:b5:de:46:58:2d:26:69:af:
         0d:8e:3a:01:12:61:87:52:34:d8:6b:22:09:0a:f7:79:60:73:
         ab:9e:05:b8:20:ef:47:77:3f:1f:59:6d:63:10:17:4d:e6:f6:
         5d:62:92:24:9c:da:06:db:7f:2a:b9:f3:00:53:48:e1:5b:af:
         b1:2e:6b:34:6b:69:97:95:47:68:ff:97:e6:a6:99:49:cc:6f:
         7f:57:28:63:27:ea:b7:d2:ee:15:f6:b1:5c:1e:8d:d3:b1:29:
         4f:66:90:b3:8e:2e:ad:30:3f:21:92:0c:95:f5:4b:58:2b:8a:
         31:e4:f8:41:db:32:22:79:e3:34:38:4b:57:a3:6d:84:3e:6b:
         02:d7:bb:8e:98:b4:14:24:bf:47:c3:02:fa:ce:4e:7a:e5:66:
         4f:0a:51:d7:b7:e3:28:49:78:17:03:e8:d2:40:93:2f:80:16:
         09:80:cb:ae:0e:21:c3:38:9f:76:2d:e9:ef:b1:a3:65:42:36:
         6a:59:33:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ZF4J3v8xemCj0J4c3dfgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh
NTAxZTAwHhcNMjQwNTIxMDMwMDA1WhcNMjQwNTIyMDMwMDA1WjAzMTEwLwYDVQQD
Eyg3YjU5MjJiODA3ZDE3NWNhODVkY2RiNzZjZjVjNjg2ZGMxZGQwZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHRkLX1QkCO51EYq3nzaRZQxQ7Cq
PjwfFUBgVupGnMNJSdh0e86RZ5CRU5CgNliJvKwr9aeTwiDg1UHlmmyIQKXaYSuL
2VOVNuK15GX/RQwtiNRTF0y76jt/FjcufdbuPyN3JSQplY605NKdtymPvA8jLbNt
VBNGARWKUcdEoyo1RFYvDA1mj0xXIbOlA2uOd4cSUIEt9LDeKYPOmsqX3plEAeyb
xqJJi+dicaAmJKbvwB2iv1AuW6EhQjY2+XJN0Ay04AqteuvGqyBOU8ThCJF5N3Rt
qMbTcC5dpZcTqRcW79Zp3CPasOq8LD264zZetIUECAuonT/DjYRdjk871QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtZIrgH0XXKhdzbds9caG3B3Q7vMB8GA1UdIwQY
MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt
OWUyNDk2OGU2NjY0LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0
LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMMSVO9J
jlvRMqzFTgu+UDZLtBHWm5qEJj98Qg8vWpCBO5fMrXW7yJO0MGm4I6bmVEcvOi45
SxTA4gYk81ucV7XeRlgtJmmvDY46ARJhh1I02GsiCQr3eWBzq54FuCDvR3c/H1lt
YxAXTeb2XWKSJJzaBtt/KrnzAFNI4VuvsS5rNGtpl5VHaP+X5qaZScxvf1coYyfq
t9LuFfaxXB6N07EpT2aQs44urTA/IZIMlfVLWCuKMeT4QdsyInnjNDhLV6NthD5r
Ate7jpi0FCS/R8MC+s5OeuVmTwpR17fjKEl4FwPo0kCTL4AWCYDLrg4hwzifdi3p
77GjZUI2alkzTQ==
-----END CERTIFICATE-----
Generated at Tue May 21 10:50:54 2024 by rpki-client on console-fra.rpki-client.org