Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          keUZHdKXjlunW4UAnLBFbZLxkOUKcRc9C5Bdxem1aro=
Subject key identifier:   CD:B6:DA:35:54:90:70:F7:21:B7:C9:5A:60:3D:84:1E:1E:C6:12:A1
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       018F584AFA686951CD357C2C408DBAD5D59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          1160
Signing time:             Wed 08 May 2024 13:00:59 +0000
Manifest this update:     Wed 08 May 2024 13:00:59 +0000
Manifest next update:     Thu 09 May 2024 13:00:59 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: 5HfbrtLsxFWXu0mdkiTKd6tilIX7dBc5cXTTTHfWpxc=)
                          2: k2uklugIMPOmXzyFVLiMH9Cn7E8.roa (hash: EAmmDWVoCeGPDZab3cFjaMI91xTKoUal5Qsmh/X/Tek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:4a:fa:68:69:51:cd:35:7c:2c:40:8d:ba:d5:d5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: May  8 13:00:59 2024 GMT
            Not After : May  9 13:00:59 2024 GMT
        Subject: CN=cdb6da35549070f721b7c95a603d841e1ec612a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:6e:36:29:bf:d9:70:f5:63:8d:fc:50:5c:
                    8c:d2:1a:d2:fe:cf:c5:aa:1d:43:92:9d:d3:71:c1:
                    e8:58:13:6d:da:b8:7f:f1:42:98:08:c8:7e:7d:15:
                    a2:59:aa:b7:a3:4a:91:0d:b1:db:97:29:05:d6:69:
                    fa:b8:e4:07:b7:df:cd:55:cb:82:4d:29:9e:c4:1f:
                    ee:84:ff:ab:6f:cc:4e:28:bb:ce:1f:a5:06:b7:1f:
                    5b:e5:3c:83:4d:9f:82:b3:11:62:6f:e9:19:b2:68:
                    57:53:3a:64:89:2d:5e:59:12:1c:95:aa:d4:67:9c:
                    ff:6f:38:76:b4:b4:cd:7e:f6:98:e2:b7:7c:6a:56:
                    eb:ab:0e:d9:69:48:ab:95:7e:a2:8f:7e:7b:88:a0:
                    61:97:3c:a3:a7:98:cd:a3:c9:a5:12:74:9b:8f:d7:
                    aa:f4:e8:6f:5a:2b:55:5d:6c:f3:43:b5:3a:69:da:
                    c8:2e:c5:d8:b9:fa:da:c7:4a:51:ef:ec:fb:4c:d4:
                    09:3e:5b:94:9c:3b:6d:36:54:33:b1:71:32:45:ae:
                    dd:58:03:2d:cb:b3:cf:63:28:68:b1:eb:3a:e7:e9:
                    79:04:bd:5a:ce:b5:e7:5a:50:be:44:bb:5a:85:49:
                    49:03:6a:81:89:39:18:25:28:5e:d1:69:1d:34:bf:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:DA:35:54:90:70:F7:21:B7:C9:5A:60:3D:84:1E:1E:C6:12:A1
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:68:67:16:a1:85:9d:fe:b0:1b:7d:82:25:a7:e1:40:54:e1:
         96:5e:0b:c5:81:c7:02:c8:eb:cf:a1:ca:41:77:ea:39:3d:b6:
         f8:9d:6d:48:90:f7:da:f3:1a:68:e3:29:34:8d:87:c6:0a:1f:
         db:13:bc:7c:32:6b:a2:24:59:45:a6:84:5f:2a:f5:98:aa:14:
         e8:98:6b:15:d7:2d:91:47:48:f5:73:85:f6:50:43:92:a8:db:
         e8:56:1d:ec:37:ad:2f:13:74:ec:64:42:7c:c4:d9:61:e2:60:
         39:64:ce:1f:af:d3:49:b3:9e:6b:0e:4a:89:0e:f2:c7:76:ee:
         da:72:9b:21:54:1f:72:fa:02:c0:9d:cb:4d:b4:b3:b5:9b:80:
         f6:2e:1c:0a:7b:36:61:a0:67:6c:50:6b:eb:82:2d:64:15:f7:
         14:6e:a0:6b:cf:b6:88:cf:ff:f8:2b:61:b7:e2:c5:23:5a:06:
         30:8d:f8:61:b9:09:dd:21:cd:c7:d2:74:cb:5f:6c:8b:5d:69:
         90:91:a7:44:8f:d1:1f:44:15:03:e1:1f:93:56:2b:fd:a5:46:
         fe:b1:a6:3e:69:3c:a9:74:c6:a5:62:b2:aa:07:ac:76:50:d9:
         8e:b7:99:60:96:51:28:03:76:96:83:a9:b8:fc:8d:96:82:2f:
         97:4d:c7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9YSvpoaVHNNXwsQI261dWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjQwNTA4MTMwMDU5WhcNMjQwNTA5MTMwMDU5WjAzMTEwLwYDVQQD
EyhjZGI2ZGEzNTU0OTA3MGY3MjFiN2M5NWE2MDNkODQxZTFlYzYxMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pJuNim/2XD1Y438UFyM0hrS/s/F
qh1Dkp3TccHoWBNt2rh/8UKYCMh+fRWiWaq3o0qRDbHblykF1mn6uOQHt9/NVcuC
TSmexB/uhP+rb8xOKLvOH6UGtx9b5TyDTZ+CsxFib+kZsmhXUzpkiS1eWRIclarU
Z5z/bzh2tLTNfvaY4rd8albrqw7ZaUirlX6ij357iKBhlzyjp5jNo8mlEnSbj9eq
9OhvWitVXWzzQ7U6adrILsXYufrax0pR7+z7TNQJPluUnDttNlQzsXEyRa7dWAMt
y7PPYyhoses65+l5BL1azrXnWlC+RLtahUlJA2qBiTkYJShe0WkdNL8m4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM222jVUkHD3IbfJWmA9hB4exhKhMB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWhnFqGF
nf6wG32CJafhQFThll4LxYHHAsjrz6HKQXfqOT22+J1tSJD32vMaaOMpNI2Hxgof
2xO8fDJroiRZRaaEXyr1mKoU6JhrFdctkUdI9XOF9lBDkqjb6FYd7DetLxN07GRC
fMTZYeJgOWTOH6/TSbOeaw5KiQ7yx3bu2nKbIVQfcvoCwJ3LTbSztZuA9i4cCns2
YaBnbFBr64ItZBX3FG6ga8+2iM//+Ctht+LFI1oGMI34YbkJ3SHNx9J0y19si11p
kJGnRI/RH0QVA+Efk1Yr/aVG/rGmPmk8qXTGpWKyqgesdlDZjreZYJZRKAN2loOp
uPyNloIvl03HFg==
-----END CERTIFICATE-----
Generated at Wed May 8 18:08:40 2024 by rpki-client on console-ams.rpki-client.org