Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File:                     XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier:          j2plpN4AsPqgnJ8aK1fRoGaQuk2QAg7Z7BkbhW0nRig=
Subject key identifier:   23:AA:C6:FB:B1:38:54:AE:65:CF:F4:C5:51:EC:16:D6:9E:ED:8B:21
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer:       /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial:       018F88245F32E191D39ED201608BEF3B9226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number:          080F
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: Cbzco0VmzqJnKI/m5nLyzGk/enZsCfK+DC6qFUk7LIo=)
                          2: tVRByCCFPyjMfM-7tXYPbYx6Kvw.roa (hash: eIJlu4l7xMgYq5czKvI4r77VN1NlE9O52MR8HgF+L8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:5f:32:e1:91:d3:9e:d2:01:60:8b:ef:3b:92:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=23aac6fbb13854ae65cff4c551ec16d69eed8b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:77:ae:12:02:87:6c:8b:04:34:37:18:8a:
                    65:ff:dc:a0:43:db:c9:59:ef:af:34:e1:08:dc:62:
                    cf:77:2b:17:4c:6e:bd:f3:10:e5:ac:d5:0f:0e:af:
                    5e:af:31:d4:ad:3f:cb:4a:95:f5:38:99:55:f9:78:
                    15:4f:6a:15:ef:88:ac:14:7c:99:c2:7e:37:1a:04:
                    b7:d5:d2:6e:0e:a0:98:cc:27:e8:86:73:71:90:60:
                    c4:96:48:da:26:ee:d1:6e:d7:08:fd:7a:94:54:f6:
                    b9:b2:4e:c3:b4:74:26:99:8a:21:c0:75:e6:a4:60:
                    21:de:1e:e9:d7:0e:56:21:45:d3:f5:c5:9e:41:f5:
                    92:e7:5b:05:ee:b3:69:2d:d8:87:8e:de:09:c4:5c:
                    f9:38:ae:71:71:e4:02:b1:19:8a:40:16:e4:86:19:
                    a5:7a:a1:a4:53:af:75:8b:76:ee:31:2c:84:14:be:
                    df:ca:2f:95:41:5d:1a:0e:70:0c:6f:3e:66:02:5e:
                    00:68:a7:66:8e:c5:6f:b7:37:b8:c3:60:2e:dd:ae:
                    14:d8:13:25:61:aa:b5:80:5e:b0:29:4b:c1:ce:b4:
                    b7:c8:c2:f6:8a:d7:90:5a:e7:01:e8:7e:31:f5:d1:
                    c1:2c:23:6c:a8:53:ac:1b:39:b3:9a:ce:49:50:8c:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:C6:FB:B1:38:54:AE:65:CF:F4:C5:51:EC:16:D6:9E:ED:8B:21
            X509v3 Authority Key Identifier:
                keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:d3:a6:bd:c8:c5:d6:17:f4:85:0d:07:4e:31:35:56:2a:
         61:b8:17:36:aa:95:68:02:7d:ba:ea:e9:dc:78:62:9d:fb:0e:
         cf:8b:76:5c:01:08:71:93:c8:97:70:6f:ab:a1:42:12:43:e0:
         a4:f3:91:3c:d5:aa:20:48:94:d6:cf:50:bf:ce:f7:f1:60:58:
         45:4f:0b:27:cf:ee:07:dc:f0:b6:ef:cf:8e:ba:fc:60:37:ef:
         ca:ba:4d:50:af:49:01:25:74:49:68:e9:02:08:ee:fd:d7:12:
         3d:54:f0:d6:91:26:cb:0c:ea:e3:c2:44:ca:ca:2c:0d:62:83:
         8b:96:ac:35:88:9c:e0:2a:3d:96:13:4c:c9:70:d7:05:7d:74:
         ca:0f:e9:63:91:47:21:eb:20:78:99:8d:55:f6:6b:7d:8a:61:
         30:de:2b:39:aa:8f:b4:f8:7e:67:9e:48:e7:92:96:46:bc:84:
         b9:24:fd:95:15:3c:d0:68:50:7c:73:6c:8e:0c:b9:0b:33:73:
         27:fe:bd:ad:12:25:6a:a5:fc:fb:1d:9c:a0:0b:f4:df:0e:96:
         3d:64:f2:5e:41:ea:3c:e6:8b:a0:f5:f0:18:bb:82:de:99:84:
         ad:7d:aa:bd:9f:46:e3:2e:54:18:13:20:14:03:3f:2a:52:a8:
         06:7a:2f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJF8y4ZHTntIBYIvvO5ImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2Y2MzQwMTQwN2MxY2M3OTdiMTcwMzRlODEzZDIyNTRm
OTc3M2UwHhcNMjQwNTE3MjAwMDM2WhcNMjQwNTE4MjAwMDM2WjAzMTEwLwYDVQQD
EygyM2FhYzZmYmIxMzg1NGFlNjVjZmY0YzU1MWVjMTZkNjllZWQ4YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzJ3rhICh2yLBDQ3GIpl/9ygQ9vJ
We+vNOEI3GLPdysXTG698xDlrNUPDq9erzHUrT/LSpX1OJlV+XgVT2oV74isFHyZ
wn43GgS31dJuDqCYzCfohnNxkGDElkjaJu7RbtcI/XqUVPa5sk7DtHQmmYohwHXm
pGAh3h7p1w5WIUXT9cWeQfWS51sF7rNpLdiHjt4JxFz5OK5xceQCsRmKQBbkhhml
eqGkU691i3buMSyEFL7fyi+VQV0aDnAMbz5mAl4AaKdmjsVvtze4w2Au3a4U2BMl
Yaq1gF6wKUvBzrS3yML2iteQWucB6H4x9dHBLCNsqFOsGzmzms5JUIySgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOqxvuxOFSuZc/0xVHsFtae7YshMB8GA1UdIwQY
MBaAFF1/Y0AUB8HMeXsXA06BPSJU+Xc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMt
MzNmYjE0NTJiYjBhLzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMtMzNmYjE0NTJiYjBh
LzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwzTpr3I
xdYX9IUNB04xNVYqYbgXNqqVaAJ9uurp3HhinfsOz4t2XAEIcZPIl3Bvq6FCEkPg
pPORPNWqIEiU1s9Qv8738WBYRU8LJ8/uB9zwtu/Pjrr8YDfvyrpNUK9JASV0SWjp
Agju/dcSPVTw1pEmywzq48JEysosDWKDi5asNYic4Co9lhNMyXDXBX10yg/pY5FH
IesgeJmNVfZrfYphMN4rOaqPtPh+Z55I55KWRryEuST9lRU80GhQfHNsjgy5CzNz
J/69rRIlaqX8+x2coAv03w6WPWTyXkHqPOaLoPXwGLuC3pmErX2qvZ9G4y5UGBMg
FAM/KlKoBnovXw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:59 2024 by rpki-client on console-ams.rpki-client.org