Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File:                     KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier:          Ey1FnWSgi5pKcZC/9tpIRFmQnu+n89V6R95DVujOSL4=
Subject key identifier:   3E:26:F8:EA:16:47:53:69:E0:DE:B4:73:C7:BF:C3:C1:27:EF:E1:8D
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer:       /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial:       018F87484EBA2416F04B411CA24D6B204F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:13 +0000
Manifest this update:     Fri 17 May 2024 16:00:13 +0000
Manifest next update:     Sat 18 May 2024 16:00:13 +0000
Files and hashes:         1: 1YWTDS9OD7qAo4jPvK1RQ_VccKY.roa (hash: FyRzY7eDmlURTUVS+C4n4oPG+2EmfkNtvm35u2eKpwM=)
                          2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: kje6I5rrwrlD5yDUMfh8L/jlE2e0/HX77aaT5DDNpyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:4e:ba:24:16:f0:4b:41:1c:a2:4d:6b:20:4f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
        Validity
            Not Before: May 17 16:00:13 2024 GMT
            Not After : May 18 16:00:13 2024 GMT
        Subject: CN=3e26f8ea16475369e0deb473c7bfc3c127efe18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:58:41:a7:bb:62:d3:a8:7c:46:c2:5f:f9:
                    72:89:19:55:1f:19:e0:a0:75:b0:21:3c:55:0f:31:
                    c8:33:4f:bf:6e:7d:79:d3:5d:e0:08:91:c8:9e:71:
                    87:7d:88:4a:f5:25:ed:cc:10:cb:3f:f5:62:5d:77:
                    64:94:fc:12:5c:c7:5c:aa:1d:c1:03:a8:da:3b:ac:
                    97:22:f2:b7:15:90:69:13:85:27:29:83:d0:71:99:
                    d5:f8:c5:96:e7:62:3b:3f:cd:50:66:f6:5d:47:f8:
                    fb:63:19:8e:1d:a4:27:f8:0b:6c:53:ff:21:3f:31:
                    7e:aa:f0:1e:4a:62:23:ec:60:e6:af:e0:c0:aa:b4:
                    d8:de:7b:57:3c:3e:6a:e5:ac:00:e1:18:58:51:bb:
                    4e:07:80:3a:1c:f9:ff:f5:3b:b7:d4:e7:16:85:d6:
                    18:9f:94:03:29:35:dd:9c:61:69:f6:52:34:d7:8b:
                    68:6c:5e:9e:d9:ba:d1:7b:19:c4:61:21:84:ba:c5:
                    cf:46:7b:65:d2:0b:a0:3e:52:19:50:d2:10:30:42:
                    35:b6:65:fb:ac:22:9d:a9:0b:1f:5d:ba:a3:47:e4:
                    c6:13:3f:d3:9d:61:82:1d:fb:7b:5a:c1:80:90:58:
                    dd:27:75:23:4c:67:53:22:9e:be:76:19:46:07:e5:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:F8:EA:16:47:53:69:E0:DE:B4:73:C7:BF:C3:C1:27:EF:E1:8D
            X509v3 Authority Key Identifier:
                keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:79:66:c1:12:af:78:9c:5f:f5:02:15:dd:13:0b:1b:06:d5:
         40:60:f2:3c:a9:2b:14:f0:65:48:51:34:9c:33:dc:fe:0e:5e:
         38:02:cd:c0:a8:ef:d0:35:ab:d2:68:d9:f6:dc:8f:39:36:8c:
         ca:6f:b0:d9:08:82:62:b0:9d:50:f8:78:93:c5:2d:ac:b5:d8:
         23:13:d3:38:df:ce:11:6f:ab:e8:92:83:d9:ba:f9:dc:1d:9f:
         1b:f9:f5:46:b9:b0:31:11:0c:0c:73:e9:2b:10:d4:f7:05:70:
         38:17:ff:2e:aa:90:1e:81:d8:24:53:c7:6e:8a:d4:e2:b7:46:
         f1:72:21:7f:00:5a:38:a0:ad:d6:d3:87:bc:d3:0c:58:40:97:
         ca:bb:e0:2f:c3:e1:89:bf:c9:ed:b3:95:98:86:1b:51:05:1e:
         67:75:9c:6a:16:a7:1e:ff:2d:8a:09:a5:96:8f:6d:d5:cc:6f:
         10:37:74:ed:02:03:9d:6c:d5:95:45:50:89:bd:df:b5:d2:4f:
         e9:91:2d:2d:4f:6c:14:a9:4c:ab:c1:51:65:7d:e0:51:32:24:
         5d:e4:00:4a:d4:b2:a8:15:5a:2d:f8:02:04:6b:e8:e0:bf:78:
         6c:8a:f5:0d:ed:e0:58:49:98:3d:12:ce:03:07:13:61:7e:5c:
         f7:2f:fa:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSE66JBbwS0Ecok1rIE8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz
MWViMGUwHhcNMjQwNTE3MTYwMDEzWhcNMjQwNTE4MTYwMDEzWjAzMTEwLwYDVQQD
EygzZTI2ZjhlYTE2NDc1MzY5ZTBkZWI0NzNjN2JmYzNjMTI3ZWZlMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6FYQae7YtOofEbCX/lyiRlVHxng
oHWwITxVDzHIM0+/bn15013gCJHInnGHfYhK9SXtzBDLP/ViXXdklPwSXMdcqh3B
A6jaO6yXIvK3FZBpE4UnKYPQcZnV+MWW52I7P81QZvZdR/j7YxmOHaQn+AtsU/8h
PzF+qvAeSmIj7GDmr+DAqrTY3ntXPD5q5awA4RhYUbtOB4A6HPn/9Tu31OcWhdYY
n5QDKTXdnGFp9lI014tobF6e2brRexnEYSGEusXPRntl0gugPlIZUNIQMEI1tmX7
rCKdqQsfXbqjR+TGEz/TnWGCHft7WsGAkFjdJ3UjTGdTIp6+dhlGB+XkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4m+OoWR1Np4N60c8e/w8En7+GNMB8GA1UdIwQY
MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt
ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0
LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHlmwRKv
eJxf9QIV3RMLGwbVQGDyPKkrFPBlSFE0nDPc/g5eOALNwKjv0DWr0mjZ9tyPOTaM
ym+w2QiCYrCdUPh4k8UtrLXYIxPTON/OEW+r6JKD2br53B2fG/n1RrmwMREMDHPp
KxDU9wVwOBf/LqqQHoHYJFPHborU4rdG8XIhfwBaOKCt1tOHvNMMWECXyrvgL8Ph
ib/J7bOVmIYbUQUeZ3WcahanHv8tigmllo9t1cxvEDd07QIDnWzVlUVQib3ftdJP
6ZEtLU9sFKlMq8FRZX3gUTIkXeQAStSyqBVaLfgCBGvo4L94bIr1De3gWEmYPRLO
AwcTYX5c9y/6Sw==
-----END CERTIFICATE-----
Generated at Fri May 17 17:57:29 2024 by rpki-client on console-ams.rpki-client.org