Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File:                     h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier:          iAzCASe6ksB03JBJS1Ek9DNk/0sddaIqQVbFaGYtL/A=
Subject key identifier:   36:A1:C0:75:F5:D5:A2:2C:A4:07:61:62:4D:49:9C:EC:9C:F7:C0:10
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer:       /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial:       018F8891F58DE104582221D7309D30B6D7DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number:          086C
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: F6jglsNI8z1MZ7xsLcoaagUs_GY.roa (hash: kloHWB+0I+NdY367Et78FnmPhcvMHP+w5nKMMyIiZUA=)
                          2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: JauTu0BuNUR5GeOz8jkCwMJtwxTDNKV9J3MNdOwf2yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f5:8d:e1:04:58:22:21:d7:30:9d:30:b6:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=36a1c075f5d5a22ca40761624d499cec9cf7c010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:31:15:52:bc:9a:90:c9:6d:7d:f4:4b:48:
                    d2:d5:89:7b:92:7c:f8:ee:ed:4e:fc:49:f8:41:1f:
                    fe:b2:28:19:2b:c3:1a:2a:c0:1d:1f:95:02:75:db:
                    08:3b:cf:b0:07:65:17:4b:a6:77:0e:e5:b4:fe:47:
                    c6:f3:2d:78:d9:04:67:42:95:38:75:9b:64:f6:a8:
                    4c:89:ea:31:0c:ef:77:e2:58:30:35:78:50:2d:a7:
                    51:26:85:18:a1:20:b8:73:f9:da:90:d3:24:ed:6e:
                    9a:a0:01:e4:77:13:00:f9:0b:70:46:2f:03:d4:ef:
                    ed:e1:43:98:c0:8a:f6:74:e7:91:23:0c:40:8a:44:
                    1f:78:5b:62:a7:d4:c0:03:85:bc:32:87:ec:a3:1a:
                    3d:39:4e:dd:f5:10:d1:aa:20:a8:42:cb:d8:44:76:
                    31:2b:42:1d:b2:d8:ea:d9:93:ca:5f:c6:28:c3:68:
                    5d:53:cf:3a:bb:9f:da:2e:44:49:56:02:dd:83:a2:
                    d4:5a:24:28:12:e7:a1:cc:6a:6c:2c:cc:1f:35:a4:
                    1c:f0:d8:eb:32:de:d0:15:d8:d9:5f:e3:aa:ee:10:
                    c3:0a:55:60:c3:93:8c:b5:fa:40:07:2b:eb:8a:53:
                    97:74:26:31:32:84:c5:e1:14:3f:39:9e:b4:ea:4c:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:C0:75:F5:D5:A2:2C:A4:07:61:62:4D:49:9C:EC:9C:F7:C0:10
            X509v3 Authority Key Identifier:
                keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:1d:59:d2:af:31:05:90:9c:81:8f:5c:ca:5d:6d:ad:f8:
         bd:06:fb:a4:09:bf:e7:f7:89:d8:8e:b2:37:fc:c4:cd:8d:55:
         d3:c9:72:b5:13:29:e3:a8:f4:dd:7a:93:1f:a4:e9:20:f3:16:
         7e:f5:e0:78:00:9b:2b:2a:dd:9c:9c:a2:2e:6c:cd:ab:5c:2f:
         5d:69:4b:cf:6a:a2:f6:e7:d4:64:d0:40:ee:4e:19:55:79:c6:
         4d:07:8e:ce:98:2a:e7:9e:da:e6:92:17:93:a8:d2:ae:c6:96:
         cd:6d:cf:b2:e2:58:27:a3:5e:14:fe:83:a1:7c:f1:b3:85:9b:
         9d:3c:c6:ea:69:9b:70:ac:3a:4f:da:3c:49:ee:dc:68:4a:05:
         21:a9:bf:12:6e:64:87:e6:d2:7a:c7:6c:24:97:2d:37:de:23:
         09:e8:1b:6e:a8:3f:07:28:c3:2d:c3:8e:26:6c:30:a4:6a:62:
         cf:83:cc:5b:ae:bc:00:91:43:4e:91:6c:96:ca:61:af:bf:55:
         7a:74:b7:06:b3:85:36:b5:43:44:56:69:82:51:c4:a2:a8:9e:
         72:53:a5:7a:2c:01:bb:1b:a6:63:70:ac:34:b3:59:f0:54:72:
         56:20:8c:46:b0:c6:04:18:c0:de:2b:de:2e:6f:f9:9f:8d:fa:
         e1:b5:d4:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkfWN4QRYIiHXMJ0wttfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjQwNTE3MjIwMDE3WhcNMjQwNTE4MjIwMDE3WjAzMTEwLwYDVQQD
EygzNmExYzA3NWY1ZDVhMjJjYTQwNzYxNjI0ZDQ5OWNlYzljZjdjMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z0xFVK8mpDJbX30S0jS1Yl7knz4
7u1O/En4QR/+sigZK8MaKsAdH5UCddsIO8+wB2UXS6Z3DuW0/kfG8y142QRnQpU4
dZtk9qhMieoxDO934lgwNXhQLadRJoUYoSC4c/nakNMk7W6aoAHkdxMA+QtwRi8D
1O/t4UOYwIr2dOeRIwxAikQfeFtip9TAA4W8Mofsoxo9OU7d9RDRqiCoQsvYRHYx
K0Idstjq2ZPKX8Yow2hdU886u5/aLkRJVgLdg6LUWiQoEuehzGpsLMwfNaQc8Njr
Mt7QFdjZX+Oq7hDDClVgw5OMtfpAByvrilOXdCYxMoTF4RQ/OZ606kz9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDahwHX11aIspAdhYk1JnOyc98AQMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZMdWdKv
MQWQnIGPXMpdba34vQb7pAm/5/eJ2I6yN/zEzY1V08lytRMp46j03XqTH6TpIPMW
fvXgeACbKyrdnJyiLmzNq1wvXWlLz2qi9ufUZNBA7k4ZVXnGTQeOzpgq557a5pIX
k6jSrsaWzW3PsuJYJ6NeFP6DoXzxs4WbnTzG6mmbcKw6T9o8Se7caEoFIam/Em5k
h+bSesdsJJctN94jCegbbqg/ByjDLcOOJmwwpGpiz4PMW668AJFDTpFslsphr79V
enS3BrOFNrVDRFZpglHEoqieclOleiwBuxumY3CsNLNZ8FRyViCMRrDGBBjA3ive
Lm/5n4364bXUKA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:09:56 2024 by rpki-client on console-ams.rpki-client.org