Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File:                     cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier:          6D2BXD/Fw+sl3eGatPGbknWpYOaAImH1LzURpfsZj6s=
Subject key identifier:   44:F1:48:30:E3:84:85:FF:0E:12:47:AC:76:81:3C:42:C5:55:22:DE
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer:       /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial:       018F8749A1D9EB2B669B8D7C5D4D5CAB6117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number:          1170
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: 1-TStpl2JTyfJiIR6badjDktJMiw.roa (hash: Llugf1RAY2XHJjbtpH7ruEf3S1Ft8fbIkONuRNQYA0U=)
                          2: 3K5Ygla5KJ2aQIjxNsrZxuFK-bc.roa (hash: AvjGRvXtZ8gH//fGiUQiwvQTVb2+GzrnEd5t9JJIaCo=)
                          3: 7XBq6k1LvM9jpMo3qXuk6KNqhHY.roa (hash: g0zy7iwtUxaxPczOpRluA/4EeHPjxNnYLYsQf07evXU=)
                          4: SGlozPujQe5bYXZl4JgoT4bsQiw.roa (hash: kDBCZTmYvgJOzZM1VtDggs4LD3ZeG+nHfcYj1F/yj0w=)
                          5: _Z7KkiOjgWMKb1odMyV8CX6h8QA.roa (hash: s1BzpC1skXfE1s1h182CzAZWv0Y4GgrdsVd6KXis69Q=)
                          6: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: Kr+LqD53mXUaCZo+KXGOrM9bP5ONv+xWJzUtYKElj/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a1:d9:eb:2b:66:9b:8d:7c:5d:4d:5c:ab:61:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=44f14830e38485ff0e1247ac76813c42c55522de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:e1:cd:67:2b:88:5c:55:35:74:2d:ab:12:
                    55:41:f4:41:a8:0e:3d:a9:c9:85:c0:66:b2:9a:3f:
                    0c:72:9f:d4:fd:20:24:e1:3e:ab:5f:67:fd:08:6a:
                    12:a1:58:ac:28:65:38:5f:e6:aa:45:a0:fc:1b:5b:
                    7a:4f:e4:77:df:c3:d5:cd:ba:a5:33:80:5b:2f:cd:
                    2d:c4:e4:d1:f9:6e:5e:79:4d:25:c8:26:49:3f:11:
                    89:fb:08:1a:ed:6a:e1:14:bd:0d:6f:d8:ef:0c:3f:
                    03:7e:65:53:f6:ab:93:a7:e4:a6:31:04:36:f5:ae:
                    64:23:f0:25:88:a7:5b:de:e1:4f:4f:04:1b:31:54:
                    88:d5:39:77:0e:1d:08:06:07:be:a5:e2:f7:45:3c:
                    9a:9f:1c:d7:3b:04:b8:08:f6:2c:5f:8c:ea:15:57:
                    e9:8a:66:35:93:b9:98:c9:c2:51:67:90:22:b4:f6:
                    72:97:bd:ab:17:7b:c3:01:63:3b:57:f6:c5:d6:a7:
                    90:a3:21:0d:f4:f7:fa:a4:f9:84:87:a0:64:9d:19:
                    b4:4b:c6:2c:44:ab:2b:31:db:ac:8f:af:61:3c:9c:
                    f1:b1:51:81:77:c5:96:97:eb:ca:45:25:29:bb:69:
                    7e:23:44:cc:b5:23:3f:84:3f:d6:40:8d:ad:95:60:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F1:48:30:E3:84:85:FF:0E:12:47:AC:76:81:3C:42:C5:55:22:DE
            X509v3 Authority Key Identifier:
                keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:96:e8:17:8a:ca:58:98:3e:04:a9:77:ec:87:f7:f2:97:ca:
         a4:dd:17:8c:52:b4:8d:de:b5:5c:12:26:ef:b7:8b:a7:98:2a:
         56:22:f4:9b:8d:86:8a:ec:fa:7c:ee:3d:62:ae:f6:25:49:5b:
         de:86:ef:b6:19:94:29:87:46:d4:10:3d:1e:1d:c5:e0:9e:d1:
         d2:f2:2c:f5:39:fc:21:60:96:2d:78:97:5f:4a:68:4d:9b:f6:
         11:98:69:61:48:42:b9:86:a1:1f:f7:63:8d:0f:89:57:a9:c2:
         04:53:9f:b0:8d:bc:fa:df:ed:99:03:1e:d7:7b:03:8d:e9:08:
         b7:41:0f:95:3e:c6:7b:c5:8c:b1:b5:f9:0f:67:59:96:10:34:
         66:48:b5:2d:8f:d7:dd:72:f4:2e:85:fd:48:29:fc:5b:b3:b3:
         30:72:f4:fb:ae:54:cf:cb:b1:9f:42:3c:b0:e8:d2:59:35:8e:
         e3:93:28:1a:40:99:65:3d:ed:c3:98:c3:2e:08:8b:88:ae:d9:
         81:fe:ef:a6:c4:be:da:d5:c7:8f:12:3d:7d:44:4a:41:d1:23:
         5a:be:b7:96:1c:00:eb:6a:c0:84:20:d7:a5:24:8e:ea:bb:57:
         97:3e:22:14:41:fc:6e:74:72:82:ab:dc:fc:0d:c5:ae:22:fd:
         d3:90:8f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSaHZ6ytmm418XU1cq2EXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm
MDQ1OWIwHhcNMjQwNTE3MTYwMTQwWhcNMjQwNTE4MTYwMTQwWjAzMTEwLwYDVQQD
Eyg0NGYxNDgzMGUzODQ4NWZmMGUxMjQ3YWM3NjgxM2M0MmM1NTUyMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCbhzWcriFxVNXQtqxJVQfRBqA49
qcmFwGaymj8Mcp/U/SAk4T6rX2f9CGoSoVisKGU4X+aqRaD8G1t6T+R338PVzbql
M4BbL80txOTR+W5eeU0lyCZJPxGJ+wga7WrhFL0Nb9jvDD8DfmVT9quTp+SmMQQ2
9a5kI/AliKdb3uFPTwQbMVSI1Tl3Dh0IBge+peL3RTyanxzXOwS4CPYsX4zqFVfp
imY1k7mYycJRZ5AitPZyl72rF3vDAWM7V/bF1qeQoyEN9Pf6pPmEh6BknRm0S8Ys
RKsrMdusj69hPJzxsVGBd8WWl+vKRSUpu2l+I0TMtSM/hD/WQI2tlWA2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETxSDDjhIX/DhJHrHaBPELFVSLeMB8GA1UdIwQY
MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct
MjYwYzM3N2EzMTRhLzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh
LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpboF4rK
WJg+BKl37If38pfKpN0XjFK0jd61XBIm77eLp5gqViL0m42Giuz6fO49Yq72JUlb
3obvthmUKYdG1BA9Hh3F4J7R0vIs9Tn8IWCWLXiXX0poTZv2EZhpYUhCuYahH/dj
jQ+JV6nCBFOfsI28+t/tmQMe13sDjekIt0EPlT7Ge8WMsbX5D2dZlhA0Zki1LY/X
3XL0LoX9SCn8W7OzMHL0+65Uz8uxn0I8sOjSWTWO45MoGkCZZT3tw5jDLgiLiK7Z
gf7vpsS+2tXHjxI9fURKQdEjWr63lhwA62rAhCDXpSSO6rtXlz4iFEH8bnRygqvc
/A3FriL905CPEA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:03:06 2024 by rpki-client on console-ams.rpki-client.org