Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File:                     kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier:          h8hZ7ZYQFSaCGetjXzRPnSsJ34xH9Yl6RVUWwQ9xoO8=
Subject key identifier:   38:9D:36:D3:28:87:FA:CD:46:3A:2C:01:54:0E:C9:86:50:07:49:40
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer:       /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial:       018F874A05C3D0808ACCE5B6BAFAF979602F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number:          06E8
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: VhvK3_8ch6TIJa3XQ7Ju1Pctjo4.roa (hash: /1gTtq3l1ph7QCImobAtTXidZpoWzvdNzdNSPKVQY+Q=)
                          2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: WdxOfxVHNimuBTUG7QouBoo0EdwcKg23PJApHAhpM5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:05:c3:d0:80:8a:cc:e5:b6:ba:fa:f9:79:60:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=389d36d32887facd463a2c01540ec98650074940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:01:9d:c4:fc:62:a7:65:c1:a3:83:82:b5:
                    88:70:ad:0f:eb:af:58:a9:22:f0:a6:cc:1a:ae:5c:
                    26:8f:90:27:f2:81:95:a6:d7:d3:a0:4a:a8:20:98:
                    0d:a3:61:7a:dc:53:63:fa:61:ea:cf:bd:95:78:71:
                    d2:96:20:13:46:83:83:bf:ec:db:03:c7:98:f2:c0:
                    69:a1:4a:c7:dc:a3:cc:1a:db:5b:4f:56:b1:7b:59:
                    a3:dc:3b:a8:4e:22:4f:0c:05:1c:c0:b6:ba:56:7a:
                    ca:75:18:9c:c2:c0:0e:d9:13:be:20:b2:d0:ab:d8:
                    ab:75:8c:c6:59:b0:f2:24:04:fd:91:c5:d2:b0:8d:
                    bc:d4:69:ed:cb:7a:e0:cc:ed:ad:4d:52:51:d3:07:
                    3a:9f:b6:d1:2e:ba:42:5a:b6:24:e8:da:82:cd:87:
                    7a:20:b0:3d:d9:79:1c:3c:bf:d9:ad:0c:3a:b6:18:
                    87:01:d3:ce:72:2a:bf:fd:f5:34:95:27:60:f8:e3:
                    16:0e:89:ff:76:20:24:7d:b1:4a:77:ef:1f:90:dd:
                    91:ce:cd:9d:c1:f2:45:cd:46:5b:6c:3d:5d:93:65:
                    38:a1:56:c5:38:f0:e0:58:59:d4:cc:ea:c1:53:1c:
                    87:de:4d:e0:93:41:77:28:d8:c4:93:82:06:41:e6:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:36:D3:28:87:FA:CD:46:3A:2C:01:54:0E:C9:86:50:07:49:40
            X509v3 Authority Key Identifier:
                keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:85:3d:09:53:8f:2f:26:ba:a3:9b:c4:2d:c2:68:19:5f:9c:
         45:45:11:eb:4f:bc:44:06:04:d2:58:41:03:d4:59:74:e2:89:
         3f:0b:6f:95:70:f0:b7:d3:68:27:b7:d2:e1:95:22:4c:c5:9a:
         71:6f:09:4c:83:53:62:53:d1:50:9c:bb:7b:4e:a8:69:5f:d9:
         20:79:8b:f2:99:11:aa:07:00:ed:6a:0b:d7:fe:44:aa:d2:6f:
         32:bd:4c:c9:96:58:f5:09:52:d5:20:29:f8:9c:bf:b4:fb:3b:
         6a:4f:e1:e0:ca:96:cf:5e:b5:43:4a:ba:12:fd:3e:dd:5f:e3:
         13:af:76:eb:13:2d:a0:78:cf:8e:0f:f8:44:af:bf:68:3e:0b:
         41:f6:ff:ff:3b:c3:53:1f:17:04:f3:2c:83:34:d7:64:f8:73:
         0b:9b:1b:d1:11:84:58:ac:42:9f:14:af:aa:0f:be:d9:6e:38:
         8c:14:ba:cf:36:bc:e6:59:df:ef:3d:66:62:4c:a7:41:84:ae:
         eb:37:01:a8:27:0a:2b:83:c0:c3:68:d4:87:13:bd:0b:b8:75:
         59:7e:64:13:1c:6b:44:a5:fd:ec:8f:b8:4c:0e:79:11:c8:54:
         b9:7d:66:5b:ac:4d:60:32:3f:2a:0c:1d:67:cd:2c:16:ee:7a:
         d5:d0:67:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSgXD0ICKzOW2uvr5eWAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwY2JhYTZiMzZlNmNkNjg3NGM3OGVkNDVhNGY4ZGQ3MTcz
MDMxZDkwHhcNMjQwNTE3MTYwMjA2WhcNMjQwNTE4MTYwMjA2WjAzMTEwLwYDVQQD
EygzODlkMzZkMzI4ODdmYWNkNDYzYTJjMDE1NDBlYzk4NjUwMDc0OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HgBncT8YqdlwaODgrWIcK0P669Y
qSLwpswarlwmj5An8oGVptfToEqoIJgNo2F63FNj+mHqz72VeHHSliATRoODv+zb
A8eY8sBpoUrH3KPMGttbT1axe1mj3DuoTiJPDAUcwLa6VnrKdRicwsAO2RO+ILLQ
q9irdYzGWbDyJAT9kcXSsI281Gnty3rgzO2tTVJR0wc6n7bRLrpCWrYk6NqCzYd6
ILA92XkcPL/ZrQw6thiHAdPOciq//fU0lSdg+OMWDon/diAkfbFKd+8fkN2Rzs2d
wfJFzUZbbD1dk2U4oVbFOPDgWFnUzOrBUxyH3k3gk0F3KNjEk4IGQebXkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDidNtMoh/rNRjosAVQOyYZQB0lAMB8GA1UdIwQY
MBaAFJDLqms25s1odMeO1FpPjdcXMDHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5Njgt
YjZkNGM0ZmMwYzIxLzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5NjgtYjZkNGM0ZmMwYzIx
LzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYU9CVOP
Lya6o5vELcJoGV+cRUUR60+8RAYE0lhBA9RZdOKJPwtvlXDwt9NoJ7fS4ZUiTMWa
cW8JTINTYlPRUJy7e06oaV/ZIHmL8pkRqgcA7WoL1/5EqtJvMr1MyZZY9QlS1SAp
+Jy/tPs7ak/h4MqWz161Q0q6Ev0+3V/jE6926xMtoHjPjg/4RK+/aD4LQfb//zvD
Ux8XBPMsgzTXZPhzC5sb0RGEWKxCnxSvqg++2W44jBS6zza85lnf7z1mYkynQYSu
6zcBqCcKK4PAw2jUhxO9C7h1WX5kExxrRKX97I+4TA55EchUuX1mW6xNYDI/Kgwd
Z80sFu561dBniw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:27:13 2024 by rpki-client on console-fra.rpki-client.org