Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c47684-2a41-4f79-b992-68b7f6f850fd/1/u8Pp2HPlEWyCwbltjtFNMFeXzZo.mft
File:                     u8Pp2HPlEWyCwbltjtFNMFeXzZo.mft (raw, json)
Hash identifier:          o77o3+9lzJ6M1ym+ivh0gs9X3LnLmf6HbVig44e7F/A=
Subject key identifier:   B1:F4:89:A8:37:30:8C:24:AB:79:F4:7A:17:75:48:20:5A:3B:1A:43
Authority key identifier: BB:C3:E9:D8:73:E5:11:6C:82:C1:B9:6D:8E:D1:4D:30:57:97:CD:9A
Certificate issuer:       /CN=bbc3e9d873e5116c82c1b96d8ed14d305797cd9a
Certificate serial:       018F8892677640A2455373E1D8FB789F8F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8Pp2HPlEWyCwbltjtFNMFeXzZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/c47684-2a41-4f79-b992-68b7f6f850fd/1/u8Pp2HPlEWyCwbltjtFNMFeXzZo.mft
Manifest number:          033B
Signing time:             Fri 17 May 2024 22:00:47 +0000
Manifest this update:     Fri 17 May 2024 22:00:47 +0000
Manifest next update:     Sat 18 May 2024 22:00:47 +0000
Files and hashes:         1: K5Yt74r9AQvpfy3MGyt7mfmMV34.roa (hash: tBYCVdSuum/g4haCIlLxY0t7v8O2D+/0tV696g0ny5w=)
                          2: u8Pp2HPlEWyCwbltjtFNMFeXzZo.crl (hash: Bc5i8BdlOzEjUI+hquwAW++GSa3TS8wWb8klb98b9mg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/c47684-2a41-4f79-b992-68b7f6f850fd/1/u8Pp2HPlEWyCwbltjtFNMFeXzZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/c47684-2a41-4f79-b992-68b7f6f850fd/1/u8Pp2HPlEWyCwbltjtFNMFeXzZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8Pp2HPlEWyCwbltjtFNMFeXzZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:67:76:40:a2:45:53:73:e1:d8:fb:78:9f:8f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc3e9d873e5116c82c1b96d8ed14d305797cd9a
        Validity
            Not Before: May 17 22:00:47 2024 GMT
            Not After : May 18 22:00:47 2024 GMT
        Subject: CN=b1f489a837308c24ab79f47a177548205a3b1a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:47:0b:00:e1:b3:cc:66:67:5b:c0:ec:ae:
                    eb:4e:a7:75:d8:d5:a5:39:16:ea:d1:16:c0:5e:bd:
                    ac:10:18:95:b4:47:cf:a1:44:1c:01:c3:1e:c6:70:
                    94:2a:f6:3f:b5:24:e8:c6:7f:4e:01:fd:e5:20:01:
                    de:82:ca:3e:a1:f8:bf:ae:21:38:66:29:38:04:c4:
                    5b:bd:da:55:86:89:78:51:75:b8:89:11:24:99:c1:
                    c6:ee:37:2b:3b:91:c7:67:6c:67:e7:e0:a9:9d:c8:
                    22:cd:d3:5c:62:ed:3f:aa:b6:aa:e8:d2:82:7c:02:
                    4b:20:6f:0a:70:9f:ec:8c:5e:6b:9d:10:c1:61:ba:
                    58:60:95:e0:4e:fb:b7:cf:3f:8a:a1:ec:ad:05:1e:
                    dd:d4:3e:05:ae:73:a1:fe:3c:19:60:84:85:0d:8c:
                    86:a7:53:f4:c5:d6:85:c2:00:e8:fc:fe:dd:73:49:
                    c0:1d:eb:8f:4f:06:e5:e7:da:d1:72:39:01:ac:fe:
                    c1:56:05:68:2b:6a:ad:f6:ea:da:00:60:56:5d:10:
                    85:3d:c6:db:6d:80:38:39:7a:05:5f:88:42:ef:41:
                    55:05:0e:80:8e:2a:2b:d4:ef:a0:24:14:a4:25:a1:
                    23:d1:4f:99:37:de:f9:9f:12:89:06:75:d6:f8:9e:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:89:A8:37:30:8C:24:AB:79:F4:7A:17:75:48:20:5A:3B:1A:43
            X509v3 Authority Key Identifier:
                keyid:BB:C3:E9:D8:73:E5:11:6C:82:C1:B9:6D:8E:D1:4D:30:57:97:CD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8Pp2HPlEWyCwbltjtFNMFeXzZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c47684-2a41-4f79-b992-68b7f6f850fd/1/u8Pp2HPlEWyCwbltjtFNMFeXzZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c47684-2a41-4f79-b992-68b7f6f850fd/1/u8Pp2HPlEWyCwbltjtFNMFeXzZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:7f:1f:1b:8e:c3:1e:a9:b4:b8:06:e0:73:77:cc:66:46:
         bd:ee:b2:84:0c:7f:c0:14:c1:70:74:2d:5a:0c:60:82:10:9b:
         39:4f:39:b4:d4:db:41:02:3d:24:9d:d6:5c:1f:0a:14:f5:8d:
         93:83:1a:82:3b:1a:a1:a5:8a:21:fa:35:2e:0c:11:90:02:b4:
         f4:d6:89:a5:8d:ec:0b:e2:4d:8d:d5:7e:9d:17:e9:69:76:87:
         d9:41:db:70:88:7f:a1:0c:8b:5e:6d:fa:5c:25:1d:6d:e3:e0:
         0e:26:78:ae:3a:cb:da:fe:bf:ba:9e:46:fe:96:f9:3b:ce:13:
         8a:7c:5f:3e:46:15:a2:d1:56:cb:d0:eb:04:77:19:26:19:e0:
         49:60:3c:ac:f5:68:a7:49:8c:dc:ac:0f:32:90:4c:61:aa:80:
         38:79:e4:e6:bc:88:d4:fa:08:0d:6a:2a:8c:dc:60:8f:55:0a:
         a7:62:c6:68:a7:be:bc:00:79:f4:c0:13:12:0c:15:55:f7:05:
         8a:9e:89:97:5a:f0:63:b8:28:e1:d4:fc:8e:d5:7a:31:b1:4e:
         32:f9:19:12:81:d6:6d:63:d6:8e:8b:c1:30:46:54:fb:d5:f5:
         52:2f:dd:3e:47:cb:17:f6:6e:ca:1f:5d:e3:1a:a7:ab:e6:63:
         95:0c:ab:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikmd2QKJFU3Ph2Pt4n48iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzNlOWQ4NzNlNTExNmM4MmMxYjk2ZDhlZDE0ZDMwNTc5
N2NkOWEwHhcNMjQwNTE3MjIwMDQ3WhcNMjQwNTE4MjIwMDQ3WjAzMTEwLwYDVQQD
EyhiMWY0ODlhODM3MzA4YzI0YWI3OWY0N2ExNzc1NDgyMDVhM2IxYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWVHCwDhs8xmZ1vA7K7rTqd12NWl
ORbq0RbAXr2sEBiVtEfPoUQcAcMexnCUKvY/tSToxn9OAf3lIAHegso+ofi/riE4
Zik4BMRbvdpVhol4UXW4iREkmcHG7jcrO5HHZ2xn5+CpncgizdNcYu0/qraq6NKC
fAJLIG8KcJ/sjF5rnRDBYbpYYJXgTvu3zz+KoeytBR7d1D4FrnOh/jwZYISFDYyG
p1P0xdaFwgDo/P7dc0nAHeuPTwbl59rRcjkBrP7BVgVoK2qt9uraAGBWXRCFPcbb
bYA4OXoFX4hC70FVBQ6Ajior1O+gJBSkJaEj0U+ZN975nxKJBnXW+J6LrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH0iag3MIwkq3n0ehd1SCBaOxpDMB8GA1UdIwQY
MBaAFLvD6dhz5RFsgsG5bY7RTTBXl82aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThQcDJIUGxFV3lDd2JsdGp0Rk5NRmVYelpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jNDc2ODQtMmE0MS00Zjc5LWI5OTIt
NjhiN2Y2Zjg1MGZkLzEvdThQcDJIUGxFV3lDd2JsdGp0Rk5NRmVYelpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jNDc2ODQtMmE0MS00Zjc5LWI5OTItNjhiN2Y2Zjg1MGZk
LzEvdThQcDJIUGxFV3lDd2JsdGp0Rk5NRmVYelpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPZ/HxuO
wx6ptLgG4HN3zGZGve6yhAx/wBTBcHQtWgxgghCbOU85tNTbQQI9JJ3WXB8KFPWN
k4MagjsaoaWKIfo1LgwRkAK09NaJpY3sC+JNjdV+nRfpaXaH2UHbcIh/oQyLXm36
XCUdbePgDiZ4rjrL2v6/up5G/pb5O84TinxfPkYVotFWy9DrBHcZJhngSWA8rPVo
p0mM3KwPMpBMYaqAOHnk5ryI1PoIDWoqjNxgj1UKp2LGaKe+vAB59MATEgwVVfcF
ip6Jl1rwY7go4dT8jtV6MbFOMvkZEoHWbWPWjovBMEZU+9X1Ui/dPkfLF/Zuyh9d
4xqnq+ZjlQyrqg==
-----END CERTIFICATE-----
Generated at Sat May 18 01:52:48 2024 by rpki-client on console-fra.rpki-client.org