Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File:                     1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier:          qUGYFCRTL/in/QqWTW8figbQSpYWLA1Eoy+Dio6AZIQ=
Subject key identifier:   E3:FD:38:0B:5B:C1:17:41:24:E2:E0:2E:B0:83:A6:99:76:65:88:E7
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer:       /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial:       018F5325117905D99C38BB34E4AD51AFD689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number:          0C3E
Signing time:             Tue 07 May 2024 13:01:29 +0000
Manifest this update:     Tue 07 May 2024 13:01:29 +0000
Manifest next update:     Wed 08 May 2024 13:01:29 +0000
Files and hashes:         1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: LqLzff08SrD9koBy/as040OoUwM2ufOaf5+8uh8JgtI=)
                          2: CHwtZvXQYETOJHLIgEpPc5tDITc.roa (hash: wW9XliQFFLgTraua+tujiHlL8qeHCerR+6fBugdJDvU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:11:79:05:d9:9c:38:bb:34:e4:ad:51:af:d6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
        Validity
            Not Before: May  7 13:01:29 2024 GMT
            Not After : May  8 13:01:29 2024 GMT
        Subject: CN=e3fd380b5bc1174124e2e02eb083a699766588e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:05:5b:c8:15:07:9a:9a:87:85:ed:96:9a:
                    04:49:fb:8b:6d:24:1f:81:e0:49:86:71:77:dc:3d:
                    cd:e2:dc:e9:80:d4:37:9e:b5:0e:98:35:5b:9b:9a:
                    6d:61:29:08:c9:d1:df:43:78:f1:63:34:62:65:e2:
                    b0:90:73:52:8f:08:10:00:25:92:6e:f1:e7:4b:92:
                    7b:d5:0b:df:93:67:0a:dd:bd:e5:4b:75:34:e5:31:
                    91:36:c4:bc:3d:b6:d4:79:b7:14:29:f2:59:b8:8e:
                    2b:af:92:5e:f6:8e:36:fb:52:ce:51:a7:44:c4:7d:
                    80:da:e0:b7:74:e8:ba:10:29:e1:ba:46:54:bd:6d:
                    89:7d:9a:1a:18:f9:66:24:da:a2:b9:c1:ef:72:53:
                    28:dc:eb:7f:16:0b:12:0e:1b:71:63:24:43:a2:b1:
                    02:c7:66:ea:7a:93:b5:e5:86:ab:9b:19:fe:a5:ee:
                    38:bc:fa:0c:10:7e:90:c4:c1:9c:f3:4a:65:be:26:
                    e5:2a:be:ee:93:52:a1:df:50:f9:f0:bd:9f:b3:a8:
                    85:ce:66:75:1e:7d:06:ba:f6:e3:4b:b4:cb:07:c6:
                    35:76:2d:25:19:78:44:00:9d:dc:2b:30:8e:8a:85:
                    6e:69:d0:70:c2:ef:a0:0f:c5:df:54:cc:3d:60:47:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FD:38:0B:5B:C1:17:41:24:E2:E0:2E:B0:83:A6:99:76:65:88:E7
            X509v3 Authority Key Identifier:
                keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:13:60:f9:4b:56:3e:89:e7:46:9f:9b:ae:e3:4c:ac:13:75:
         8d:23:65:26:fd:5a:10:66:33:47:b3:40:87:b0:bb:b5:80:90:
         5f:2a:ba:71:ea:d1:f2:d3:29:6c:f3:b9:50:a9:49:b1:4f:1c:
         17:e0:9f:b0:11:93:3c:f1:87:52:96:e6:ed:0c:da:0d:0c:12:
         2d:6c:95:5b:5b:18:97:71:4f:21:7d:8c:ca:9a:3c:99:9c:1a:
         ca:22:68:40:f6:d1:e0:ab:67:e5:d1:91:85:f9:25:c4:f2:01:
         3a:7c:4c:c8:fa:e2:34:a8:fe:31:5d:4a:4f:a2:0d:5b:af:48:
         1b:54:a3:17:2e:b2:2b:91:e0:07:14:2c:14:21:37:fd:3c:52:
         42:b4:e6:b7:15:9f:0d:4a:29:7f:94:8c:5c:00:0f:9d:97:dc:
         fe:8e:a4:12:94:b9:a9:04:d6:09:e7:a7:39:78:26:b5:ce:68:
         d4:c9:25:ff:39:aa:b2:a8:30:40:6a:e7:10:d8:b2:f0:b7:b4:
         38:40:0b:fa:7e:4e:c6:d8:bd:e8:6a:ff:4c:ac:64:e8:e7:83:
         99:b5:e9:e6:b1:df:cd:6d:5e:8e:67:4e:e9:6e:06:13:e4:71:
         21:d2:55:ef:69:3c:96:9e:7c:27:e1:a9:e3:b4:08:4a:00:82:
         66:93:47:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TJRF5BdmcOLs05K1Rr9aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh
MTk5MjYwHhcNMjQwNTA3MTMwMTI5WhcNMjQwNTA4MTMwMTI5WjAzMTEwLwYDVQQD
EyhlM2ZkMzgwYjViYzExNzQxMjRlMmUwMmViMDgzYTY5OTc2NjU4OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDYFW8gVB5qah4XtlpoESfuLbSQf
geBJhnF33D3N4tzpgNQ3nrUOmDVbm5ptYSkIydHfQ3jxYzRiZeKwkHNSjwgQACWS
bvHnS5J71Qvfk2cK3b3lS3U05TGRNsS8PbbUebcUKfJZuI4rr5Je9o42+1LOUadE
xH2A2uC3dOi6ECnhukZUvW2JfZoaGPlmJNqiucHvclMo3Ot/FgsSDhtxYyRDorEC
x2bqepO15Yarmxn+pe44vPoMEH6QxMGc80plviblKr7uk1Kh31D58L2fs6iFzmZ1
Hn0GuvbjS7TLB8Y1di0lGXhEAJ3cKzCOioVuadBwwu+gD8XfVMw9YEd3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP9OAtbwRdBJOLgLrCDppl2ZYjnMB8GA1UdIwQY
MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt
YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj
LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBNg+UtW
PonnRp+bruNMrBN1jSNlJv1aEGYzR7NAh7C7tYCQXyq6cerR8tMpbPO5UKlJsU8c
F+CfsBGTPPGHUpbm7QzaDQwSLWyVW1sYl3FPIX2Mypo8mZwayiJoQPbR4Ktn5dGR
hfklxPIBOnxMyPriNKj+MV1KT6INW69IG1SjFy6yK5HgBxQsFCE3/TxSQrTmtxWf
DUopf5SMXAAPnZfc/o6kEpS5qQTWCeenOXgmtc5o1Mkl/zmqsqgwQGrnENiy8Le0
OEAL+n5Oxti96Gr/TKxk6OeDmbXp5rHfzW1ejmdO6W4GE+RxIdJV72k8lp58J+Gp
47QISgCCZpNHQw==
-----END CERTIFICATE-----
Generated at Tue May 7 14:32:47 2024 by rpki-client on console-ams.rpki-client.org