Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File:                     53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier:          iZ9DQAzjSyP0RO2w6lKDCOlZFK56ias0wg+0EcINaMs=
Subject key identifier:   67:D1:22:2D:36:45:4E:74:42:C5:5C:7C:E4:F3:1B:E2:F5:27:A5:4E
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer:       /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial:       018F3E8B76262AE1DA45C8BFF75C5B14E8F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 13:01:18 +0000
Manifest this update:     Fri 03 May 2024 13:01:18 +0000
Manifest next update:     Sat 04 May 2024 13:01:18 +0000
Files and hashes:         1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: RD8ZU6MN7Si450JOUDAI+K/GQ2uZ6JJY6MczzwiTG5k=)
                          2: f1T0Oh6QPe0yPwWdPUz078bLCeQ.roa (hash: LGTy35zaESh7N+Z7ji4tW93wUhU1zf7U9cObVrnOZbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:8b:76:26:2a:e1:da:45:c8:bf:f7:5c:5b:14:e8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
        Validity
            Not Before: May  3 13:01:18 2024 GMT
            Not After : May  4 13:01:18 2024 GMT
        Subject: CN=67d1222d36454e7442c55c7ce4f31be2f527a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:d9:49:5b:30:c3:83:d6:99:6b:35:7c:f7:
                    bf:37:0b:b7:ac:fb:f3:db:84:92:e0:e6:8c:03:04:
                    36:ff:b8:40:aa:ee:2b:2d:fc:d0:f8:e4:a7:b1:2a:
                    bc:2b:66:04:5d:fe:ce:77:41:3e:e6:67:77:43:a9:
                    da:50:43:52:6a:ac:d3:9d:3f:7e:a8:2d:93:16:f8:
                    f1:5d:16:75:2c:a1:4c:66:f3:7a:69:66:a8:8b:6d:
                    16:29:33:d7:43:2a:05:6d:17:2b:63:5f:03:80:85:
                    32:b5:12:39:6f:f9:c3:ee:74:ac:95:9a:57:3b:36:
                    3b:f0:2f:8b:cb:d2:4d:41:7f:5e:7e:f0:4f:b2:57:
                    6c:aa:83:c2:56:42:ae:bd:9b:61:c8:26:aa:51:40:
                    cd:6f:be:21:b0:f0:c2:05:e4:76:3b:2e:51:e1:25:
                    ab:c0:80:5a:17:9e:b0:d3:d3:c6:45:49:91:5c:80:
                    9a:54:f7:fd:bc:ad:d6:73:43:36:7f:22:a2:d1:b6:
                    6f:49:28:a1:9d:7e:c5:e9:2d:37:30:89:6f:7b:b4:
                    75:ba:3e:46:93:91:0d:7a:3f:0f:11:52:39:53:42:
                    60:6e:b2:14:d5:7c:5b:e8:03:b3:40:97:bf:e7:18:
                    a1:6a:72:44:1c:0f:23:f2:d0:66:f4:aa:bf:33:0e:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:22:2D:36:45:4E:74:42:C5:5C:7C:E4:F3:1B:E2:F5:27:A5:4E
            X509v3 Authority Key Identifier:
                keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:e4:9d:a7:59:6d:c5:4c:3b:29:8f:ed:5a:d5:6a:e6:56:
         1e:4d:24:62:77:cb:97:dd:ba:04:92:58:7a:25:2f:fa:41:a2:
         82:7b:bb:67:df:ec:6a:6f:2a:63:a0:e4:3a:c5:b1:16:da:f2:
         a2:ea:b2:be:fd:b3:61:68:ab:7c:58:21:25:07:de:da:8f:f1:
         da:0d:59:99:fc:92:33:10:54:d5:1b:80:fb:1c:e3:60:ff:0a:
         c9:1b:2e:e8:ab:e9:3d:98:62:ef:08:cb:c8:18:96:41:69:78:
         75:b6:79:43:87:91:6b:29:0d:c0:5b:67:c3:91:9f:d9:12:ab:
         dd:64:b8:e4:c8:a7:31:00:81:30:63:84:d7:9c:32:1d:28:27:
         5b:ef:32:49:17:8a:f1:e6:2d:59:ab:51:40:b7:c0:67:b9:00:
         30:98:bf:db:65:7c:81:88:5c:4c:65:25:c2:59:77:0d:04:67:
         99:d2:06:35:69:e6:14:35:73:b1:86:d9:36:97:4d:c0:dc:08:
         c4:3c:ad:e8:18:7f:51:4a:99:b9:c4:ac:d0:4c:70:bf:93:47:
         b5:52:a3:bb:88:17:56:70:a6:62:66:ad:c6:be:8c:85:5a:ef:
         a7:e6:c0:d3:b3:66:25:0d:5f:8e:c1:6f:ab:f1:2a:f5:2f:eb:
         25:2f:ad:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+i3YmKuHaRci/91xbFOj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Nzk2ZDhjMTlmMzJhMWNhZmJkNWI3OGY1Mjc2Y2U4ZGY5
OTVkMGEwHhcNMjQwNTAzMTMwMTE4WhcNMjQwNTA0MTMwMTE4WjAzMTEwLwYDVQQD
Eyg2N2QxMjIyZDM2NDU0ZTc0NDJjNTVjN2NlNGYzMWJlMmY1MjdhNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA187ZSVsww4PWmWs1fPe/Nwu3rPvz
24SS4OaMAwQ2/7hAqu4rLfzQ+OSnsSq8K2YEXf7Od0E+5md3Q6naUENSaqzTnT9+
qC2TFvjxXRZ1LKFMZvN6aWaoi20WKTPXQyoFbRcrY18DgIUytRI5b/nD7nSslZpX
OzY78C+Ly9JNQX9efvBPsldsqoPCVkKuvZthyCaqUUDNb74hsPDCBeR2Oy5R4SWr
wIBaF56w09PGRUmRXICaVPf9vK3Wc0M2fyKi0bZvSSihnX7F6S03MIlve7R1uj5G
k5ENej8PEVI5U0JgbrIU1Xxb6AOzQJe/5xihanJEHA8j8tBm9Kq/Mw6bnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfRIi02RU50QsVcfOTzG+L1J6VOMB8GA1UdIwQY
MBaAFOd5bYwZ8yocr71bePUnbOjfmV0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ZWM5NzAtNzk2NS00ZTBiLWI5NDct
Mjg1N2U4YTIzNTU4LzEvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81ZWM5NzAtNzk2NS00ZTBiLWI5NDctMjg1N2U4YTIzNTU4
LzEvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOjknadZ
bcVMOymP7VrVauZWHk0kYnfLl926BJJYeiUv+kGignu7Z9/sam8qY6DkOsWxFtry
ouqyvv2zYWirfFghJQfe2o/x2g1ZmfySMxBU1RuA+xzjYP8KyRsu6KvpPZhi7wjL
yBiWQWl4dbZ5Q4eRaykNwFtnw5Gf2RKr3WS45MinMQCBMGOE15wyHSgnW+8ySReK
8eYtWatRQLfAZ7kAMJi/22V8gYhcTGUlwll3DQRnmdIGNWnmFDVzsYbZNpdNwNwI
xDyt6Bh/UUqZucSs0Exwv5NHtVKju4gXVnCmYmatxr6MhVrvp+bA07NmJQ1fjsFv
q/Eq9S/rJS+tYQ==
-----END CERTIFICATE-----
Generated at Fri May 3 18:12:01 2024 by rpki-client on console-fra.rpki-client.org