Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File:                     gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier:          5U5aC1CLyd68Tf3uJ3UAjBdpNQB6UfhqckY698aX6Ys=
Subject key identifier:   05:15:7C:2E:52:E9:08:8F:EF:C2:87:37:FA:00:F1:2B:BD:09:91:25
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer:       /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial:       018F8258FD8A42A2110AAD71BB4A74093494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number:          1175
Signing time:             Thu 16 May 2024 17:00:21 +0000
Manifest this update:     Thu 16 May 2024 17:00:21 +0000
Manifest next update:     Fri 17 May 2024 17:00:21 +0000
Files and hashes:         1: S1hMqZR1-HUYMZuOOHyUfP0OV6A.roa (hash: 1HC99XxYA7H5lUUogQ/BzYiQTZG6IYtoIweVSSvgjY8=)
                          2: USu0kyiMDKckkaitq_nFnDF8p-k.roa (hash: IpVblkGSLoBRSOZDa3aDN/5P/w3mh26A3KxvnU3Y1Vk=)
                          3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: WSDxCKjNHaBmR8CeLsNgEDDwRa5GCpkibpxIr+znyGY=)
                          4: yJigt7WPN9DYDx5fLX0n2c-KHQA.roa (hash: gSW9NFhLfhIcbtZELCSreEKotIrfN2ZclTVS3dyDuhI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:58:fd:8a:42:a2:11:0a:ad:71:bb:4a:74:09:34:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
        Validity
            Not Before: May 16 17:00:21 2024 GMT
            Not After : May 17 17:00:21 2024 GMT
        Subject: CN=05157c2e52e9088fefc28737fa00f12bbd099125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:00:cd:94:be:63:9b:e1:0b:a2:05:d8:09:
                    77:e7:73:48:76:2a:25:92:7c:9c:99:c9:03:8c:9e:
                    fa:7e:19:d7:53:e2:a7:00:94:0c:37:98:60:b6:e3:
                    df:5f:c4:93:21:f0:76:49:f9:d6:98:bc:76:78:f7:
                    6e:35:d6:99:56:d6:0f:d4:47:67:58:d3:c3:49:8f:
                    38:9e:26:14:a0:5a:2d:7c:89:f5:17:cc:19:56:9a:
                    c9:39:bb:da:a9:77:8c:87:4d:d7:fd:3b:ab:8d:77:
                    5e:4d:6a:41:51:90:a4:2b:24:e6:0f:c2:a5:6e:2e:
                    cd:a4:29:2e:11:31:8b:d7:ab:93:0d:95:c9:0c:c2:
                    7a:61:d3:43:11:10:46:ca:bd:65:ad:d6:b9:ad:a9:
                    2d:40:95:77:a0:ff:b8:57:0a:6b:25:ba:fe:ec:ac:
                    e9:b7:20:34:a6:a1:d9:17:d2:64:94:eb:10:21:8c:
                    d2:92:c9:37:7d:3f:5b:70:05:6d:27:a7:c2:18:57:
                    2a:da:1f:3a:c6:80:d7:ea:d2:35:02:57:d3:f5:41:
                    13:de:23:25:31:2b:ed:3c:ce:30:a8:6e:48:48:3f:
                    6c:87:1b:b0:ba:33:a3:f3:07:93:e1:9d:ee:bd:ce:
                    e6:48:a9:94:a3:0b:98:27:51:a5:a3:db:97:47:be:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:7C:2E:52:E9:08:8F:EF:C2:87:37:FA:00:F1:2B:BD:09:91:25
            X509v3 Authority Key Identifier:
                keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:f2:8d:29:cd:a4:65:33:cc:db:12:67:fa:ea:7b:74:ca:
         66:30:d4:d4:b6:c4:b7:b5:d0:cd:63:5c:62:8c:b1:d8:25:5b:
         03:a3:87:2d:a7:0c:a6:5c:00:e8:0a:eb:e3:af:a4:4e:94:ce:
         04:3f:b3:61:cd:94:bf:29:17:d9:43:5c:ed:11:58:7b:52:c2:
         6b:fb:12:34:d4:45:50:86:66:31:dc:30:c9:07:a9:65:e3:50:
         54:9a:c4:d5:77:99:42:9c:a9:c0:d7:68:5d:52:5e:06:27:0c:
         25:f7:cc:0c:65:a1:29:3d:f9:97:09:f7:6e:9b:69:76:d3:66:
         62:b2:94:2c:15:a1:c6:50:bb:53:00:91:af:9b:32:1f:8c:e6:
         12:3d:6c:df:bb:be:dc:3d:3d:be:59:d9:b8:54:fb:9a:01:cd:
         35:ba:dd:db:a6:24:61:b0:dc:57:6a:55:c1:2d:d2:d1:f4:c1:
         2f:ec:cd:80:df:27:cc:51:d7:96:fa:b6:53:ce:18:c9:77:70:
         e4:12:62:dc:96:7f:45:1f:c8:1a:c1:f1:a8:23:3e:08:59:86:
         c5:fe:33:c1:eb:70:f5:10:b7:84:ad:3c:fa:50:f4:57:16:09:
         66:2d:2c:0f:78:e7:f2:bd:56:48:27:75:00:2b:48:7e:99:0c:
         f7:e9:c2:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+CWP2KQqIRCq1xu0p0CTSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy
NjM5NGEwHhcNMjQwNTE2MTcwMDIxWhcNMjQwNTE3MTcwMDIxWjAzMTEwLwYDVQQD
EygwNTE1N2MyZTUyZTkwODhmZWZjMjg3MzdmYTAwZjEyYmJkMDk5MTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+oAzZS+Y5vhC6IF2Al353NIdiol
knycmckDjJ76fhnXU+KnAJQMN5hgtuPfX8STIfB2SfnWmLx2ePduNdaZVtYP1Edn
WNPDSY84niYUoFotfIn1F8wZVprJObvaqXeMh03X/TurjXdeTWpBUZCkKyTmD8Kl
bi7NpCkuETGL16uTDZXJDMJ6YdNDERBGyr1lrda5raktQJV3oP+4VwprJbr+7Kzp
tyA0pqHZF9JklOsQIYzSksk3fT9bcAVtJ6fCGFcq2h86xoDX6tI1AlfT9UET3iMl
MSvtPM4wqG5ISD9shxuwujOj8weT4Z3uvc7mSKmUowuYJ1Glo9uXR75dAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUVfC5S6QiP78KHN/oA8Su9CZElMB8GA1UdIwQY
MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt
NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5
LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqDyjSnN
pGUzzNsSZ/rqe3TKZjDU1LbEt7XQzWNcYoyx2CVbA6OHLacMplwA6Arr46+kTpTO
BD+zYc2UvykX2UNc7RFYe1LCa/sSNNRFUIZmMdwwyQepZeNQVJrE1XeZQpypwNdo
XVJeBicMJffMDGWhKT35lwn3bptpdtNmYrKULBWhxlC7UwCRr5syH4zmEj1s37u+
3D09vlnZuFT7mgHNNbrd26YkYbDcV2pVwS3S0fTBL+zNgN8nzFHXlvq2U84YyXdw
5BJi3JZ/RR/IGsHxqCM+CFmGxf4zwetw9RC3hK08+lD0VxYJZi0sD3jn8r1WSCd1
ACtIfpkM9+nC9Q==
-----END CERTIFICATE-----
Generated at Thu May 16 20:00:01 2024 by rpki-client on console-fra.rpki-client.org