Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File:                     hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier:          iO2ZTaUIXGsfQTWTgdfWzv1eLmusLdm1iDXm5RDj+RU=
Subject key identifier:   06:40:95:B2:1E:FC:65:51:D8:5C:D1:67:EE:59:45:F5:65:24:1D:99
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       018F836E2DB952EE4E7CC4457FE6C7CCE944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number:          0D99
Signing time:             Thu 16 May 2024 22:03:06 +0000
Manifest this update:     Thu 16 May 2024 22:03:06 +0000
Manifest next update:     Fri 17 May 2024 22:03:06 +0000
Files and hashes:         1: D6jL7Zll5nH7p6ZK7dH8lTC92r8.roa (hash: zrqxb3Vmj7CIgcW9xX/ngFlMrDmUhW7UKD2vt99OJpM=)
                          2: MZUM0hSSRaBdQC4lbZj09JhNKZA.roa (hash: wyoaeVIfoWcKivcoZRDqHmar6MFrpCKWDAeeZzAomks=)
                          3: dC04HAlEZwg4HmnZusOjbxjMqAc.roa (hash: ykPiX1+6Q7jF8x3c99JcRWnXbFiNync8/XSlxI7JSHM=)
                          4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: q9QpNCYb28hoDh10mubpqYe+iiqSfXd7+8SlnVeWHI0=)
                          5: uA_COy_nhiulcYwwLXRE7amZR30.roa (hash: TUefD6i7JrtaacXIkcf0GhfQWLEB7AcsOfmpwkn9Qpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:2d:b9:52:ee:4e:7c:c4:45:7f:e6:c7:cc:e9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: May 16 22:03:06 2024 GMT
            Not After : May 17 22:03:06 2024 GMT
        Subject: CN=064095b21efc6551d85cd167ee5945f565241d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:b6:5a:b1:18:56:e8:4e:e5:7a:1e:dc:07:
                    fa:82:43:a1:40:92:b9:3f:87:cf:94:7a:a7:fd:ae:
                    bd:07:c1:93:d9:c8:64:2c:52:f5:8a:cc:f2:89:70:
                    11:11:5e:17:ff:dd:fd:8e:08:34:42:6d:11:a1:bd:
                    78:d7:a5:c6:4f:f8:df:69:b5:26:af:f7:6b:72:ce:
                    c4:7d:1d:71:38:b7:bc:aa:4e:1b:f1:b9:56:96:cb:
                    1e:78:01:38:59:a3:57:eb:48:e2:f4:de:25:b5:50:
                    59:39:ba:dc:06:61:87:9f:0c:ea:19:58:95:31:6d:
                    16:7d:b1:c1:87:fb:c5:63:0a:d0:8b:9a:74:97:22:
                    cd:56:85:bd:2d:33:7a:52:4b:a4:11:16:96:46:3b:
                    61:ce:61:27:20:c1:23:a1:dd:22:75:28:79:43:3f:
                    e7:a1:3f:ba:3e:17:2a:4f:c7:90:6c:c0:85:1d:ab:
                    da:ca:3d:24:74:71:bf:d4:0e:ad:f2:e2:22:e0:18:
                    96:61:97:76:80:a6:d2:50:55:8d:ed:cb:2a:84:af:
                    5a:d2:f0:ae:4b:63:8b:0a:34:7b:80:d6:f5:70:fd:
                    94:be:4d:c2:29:14:c3:05:0c:82:b4:59:a3:fb:e0:
                    f7:6d:d3:9a:27:c9:51:a3:43:32:e5:36:db:cc:0c:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:95:B2:1E:FC:65:51:D8:5C:D1:67:EE:59:45:F5:65:24:1D:99
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:ff:2c:e7:2c:12:a0:f0:5e:81:a9:78:10:47:9b:30:28:
         69:60:68:f9:e2:09:2f:57:0d:bf:39:59:c4:80:10:e7:35:7e:
         ac:38:f4:ce:c0:09:1b:5e:a0:91:12:6a:df:23:e4:a3:48:1a:
         02:3e:11:a3:24:c3:7b:a6:6e:84:2e:69:29:6a:4d:98:3f:4c:
         d3:c5:90:d8:b6:ac:05:88:67:c4:a8:7c:4f:68:dc:f7:eb:58:
         3c:1a:cc:46:c5:8e:e8:ea:e7:82:04:93:3d:e9:55:38:31:8c:
         fe:5a:78:0e:c1:01:05:60:14:ab:4d:2e:52:d7:93:4e:15:2d:
         1f:32:0b:f5:ab:48:0e:61:4a:49:91:3e:48:be:f9:69:8f:3b:
         f6:55:d9:44:52:df:8b:6b:8b:76:ba:d0:4b:20:26:0d:e9:7c:
         ee:0d:cb:bd:b2:74:f7:1e:ab:6d:23:af:ea:0b:43:a0:96:15:
         92:c1:c0:81:77:e0:28:9f:c2:33:15:a5:8c:c4:35:6d:92:ec:
         f1:0c:56:ee:97:5f:d2:db:e4:94:34:be:2c:1e:98:cb:ac:b5:
         84:c0:89:4d:be:0f:70:51:55:9e:48:ef:43:16:4b:b6:13:e8:
         ac:c2:e8:5f:4d:d3:db:d1:cf:e3:22:38:e1:81:ee:d6:71:0a:
         bc:44:b2:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Dbi25Uu5OfMRFf+bHzOlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3
YzBlMTAwHhcNMjQwNTE2MjIwMzA2WhcNMjQwNTE3MjIwMzA2WjAzMTEwLwYDVQQD
EygwNjQwOTViMjFlZmM2NTUxZDg1Y2QxNjdlZTU5NDVmNTY1MjQxZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOC2WrEYVuhO5Xoe3Af6gkOhQJK5
P4fPlHqn/a69B8GT2chkLFL1iszyiXAREV4X/939jgg0Qm0Rob1416XGT/jfabUm
r/drcs7EfR1xOLe8qk4b8blWlsseeAE4WaNX60ji9N4ltVBZObrcBmGHnwzqGViV
MW0WfbHBh/vFYwrQi5p0lyLNVoW9LTN6UkukERaWRjthzmEnIMEjod0idSh5Qz/n
oT+6PhcqT8eQbMCFHavayj0kdHG/1A6t8uIi4BiWYZd2gKbSUFWN7csqhK9a0vCu
S2OLCjR7gNb1cP2Uvk3CKRTDBQyCtFmj++D3bdOaJ8lRo0My5TbbzAytQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZAlbIe/GVR2FzRZ+5ZRfVlJB2ZMB8GA1UdIwQY
MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt
MDdlMzZlZmM1ZTQyLzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy
LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv3/LOcs
EqDwXoGpeBBHmzAoaWBo+eIJL1cNvzlZxIAQ5zV+rDj0zsAJG16gkRJq3yPko0ga
Aj4RoyTDe6ZuhC5pKWpNmD9M08WQ2LasBYhnxKh8T2jc9+tYPBrMRsWO6OrnggST
PelVODGM/lp4DsEBBWAUq00uUteTThUtHzIL9atIDmFKSZE+SL75aY879lXZRFLf
i2uLdrrQSyAmDel87g3LvbJ09x6rbSOv6gtDoJYVksHAgXfgKJ/CMxWljMQ1bZLs
8QxW7pdf0tvklDS+LB6Yy6y1hMCJTb4PcFFVnkjvQxZLthPorMLoX03T29HP4yI4
4YHu1nEKvESyeg==
-----END CERTIFICATE-----
Generated at Thu May 16 22:41:09 2024 by rpki-client on console-ams.rpki-client.org