Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File:                     hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier:          NA6DC1HylzaLa5wvhBJe9Sm1pR5eWvIprEVX803Kqwo=
Subject key identifier:   2D:A4:59:93:EA:CE:FA:34:08:02:F3:55:BC:D3:F3:3A:E8:50:03:2B
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer:       /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial:       018F88926A73939C6D505AA73D2F09805929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number:          0EAE
Signing time:             Fri 17 May 2024 22:00:47 +0000
Manifest this update:     Fri 17 May 2024 22:00:47 +0000
Manifest next update:     Sat 18 May 2024 22:00:47 +0000
Files and hashes:         1: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: Ncsmn1vKy2ixNfV1Lt4zTi1jAddx1eVG/BNEYzAfgFo=)
                          2: jIwpC8qaeLBzg8m-1H_PZuxnLfA.roa (hash: cd83qClTMelLOTFZ9SBRQNhu9qO/TU056soXz0a+1Dw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:6a:73:93:9c:6d:50:5a:a7:3d:2f:09:80:59:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
        Validity
            Not Before: May 17 22:00:47 2024 GMT
            Not After : May 18 22:00:47 2024 GMT
        Subject: CN=2da45993eacefa340802f355bcd3f33ae850032b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:0b:a8:4e:e4:3e:65:fc:2d:c7:ae:83:81:
                    f9:a9:cc:ec:71:d1:a8:c6:ec:e4:b3:7e:7e:3d:d0:
                    a6:bd:66:24:62:4f:0f:da:8a:36:06:6a:83:fd:e1:
                    f5:db:30:90:3d:78:4c:fb:55:28:9c:50:c6:2a:e8:
                    ac:a3:c5:52:70:c1:97:1f:a6:97:5f:48:e9:78:0e:
                    7f:c6:69:84:37:a2:e0:ab:56:9a:53:8d:48:b2:ed:
                    76:f0:fa:27:6e:b1:80:4d:32:2b:c5:de:42:01:21:
                    01:8b:14:1d:1b:3e:5b:71:c6:16:34:d1:93:bf:7f:
                    b8:27:f4:14:c5:6c:7e:8b:e3:3a:fe:8d:67:b3:26:
                    15:75:fb:22:25:f5:76:99:4a:42:31:10:aa:08:4e:
                    4d:ca:6f:41:6d:b3:04:bb:24:df:81:95:e1:33:61:
                    d1:5a:81:a9:f2:6e:04:07:dd:e7:c8:c4:4c:ff:45:
                    df:0a:a6:a6:7b:ff:ed:5b:02:4f:3f:25:4c:9b:ac:
                    17:0d:b0:f1:84:c0:87:9d:71:52:b0:08:ac:0a:70:
                    8e:44:02:c1:73:38:4e:93:1e:13:1f:ff:35:9d:e5:
                    ac:77:fe:df:7b:3e:f7:b2:ce:ad:87:05:a8:99:7d:
                    de:c9:58:ee:d2:6f:ee:48:bc:0e:65:01:b7:56:95:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:59:93:EA:CE:FA:34:08:02:F3:55:BC:D3:F3:3A:E8:50:03:2B
            X509v3 Authority Key Identifier:
                keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:45:c2:0f:5a:bd:f7:d2:26:bc:e7:7a:17:3c:5a:4e:f8:98:
         01:5f:03:72:8b:e9:3c:94:2f:48:7b:a1:8c:07:19:e8:a1:6b:
         e8:15:07:39:00:9a:8a:cd:19:19:26:06:a6:1b:f6:6c:b5:2e:
         46:b0:b2:4f:ab:87:9e:69:a5:f5:0c:40:2f:55:b4:94:d1:2c:
         07:0c:47:14:a9:88:c3:3b:f9:61:45:5f:fb:92:5d:d3:26:5f:
         9d:b1:eb:70:9d:34:e5:7f:d0:f6:54:45:18:3d:a9:2d:40:36:
         a7:08:f7:e9:2b:94:e9:ad:86:48:90:56:db:7f:ed:29:a9:9f:
         11:81:07:60:5b:cf:d7:e5:00:45:63:58:83:d2:56:f1:f6:ed:
         45:8f:6f:fa:05:98:54:99:dd:e7:e7:de:d0:ee:d7:3c:d8:2d:
         a8:88:fc:6a:59:8c:3f:d8:07:12:11:38:f8:bf:aa:e3:52:b6:
         53:14:bf:0b:32:0b:be:3c:ec:c8:95:b3:5d:27:0d:67:39:0c:
         15:14:86:08:fa:9b:b2:bd:37:8e:02:39:3a:07:99:ce:59:bf:
         65:57:ee:ba:40:75:e0:6d:6f:3b:a7:7e:c0:36:db:31:d6:7c:
         c4:62:37:f7:16:11:86:2d:0e:ef:6a:6f:97:61:a8:be:cd:c5:
         22:27:22:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikmpzk5xtUFqnPS8JgFkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YzQxMTJlZmM5YmVkODQ3NjFkMzY3OGI4N2M0ODM5NDhk
MmE3MmYwHhcNMjQwNTE3MjIwMDQ3WhcNMjQwNTE4MjIwMDQ3WjAzMTEwLwYDVQQD
EygyZGE0NTk5M2VhY2VmYTM0MDgwMmYzNTViY2QzZjMzYWU4NTAwMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBsLqE7kPmX8Lceug4H5qczscdGo
xuzks35+PdCmvWYkYk8P2oo2BmqD/eH12zCQPXhM+1UonFDGKuiso8VScMGXH6aX
X0jpeA5/xmmEN6Lgq1aaU41Isu128PonbrGATTIrxd5CASEBixQdGz5bccYWNNGT
v3+4J/QUxWx+i+M6/o1nsyYVdfsiJfV2mUpCMRCqCE5Nym9BbbMEuyTfgZXhM2HR
WoGp8m4EB93nyMRM/0XfCqame//tWwJPPyVMm6wXDbDxhMCHnXFSsAisCnCORALB
czhOkx4TH/81neWsd/7fez73ss6thwWomX3eyVju0m/uSLwOZQG3VpVBVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2kWZPqzvo0CALzVbzT8zroUAMrMB8GA1UdIwQY
MBaAFIbEES78m+2Edh02eLh8SDlI0qcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQt
MDBiOTZkNzRkOGIwLzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQtMDBiOTZkNzRkOGIw
LzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckXCD1q9
99ImvOd6FzxaTviYAV8DcovpPJQvSHuhjAcZ6KFr6BUHOQCais0ZGSYGphv2bLUu
RrCyT6uHnmml9QxAL1W0lNEsBwxHFKmIwzv5YUVf+5Jd0yZfnbHrcJ005X/Q9lRF
GD2pLUA2pwj36SuU6a2GSJBW23/tKamfEYEHYFvP1+UARWNYg9JW8fbtRY9v+gWY
VJnd5+fe0O7XPNgtqIj8almMP9gHEhE4+L+q41K2UxS/CzILvjzsyJWzXScNZzkM
FRSGCPqbsr03jgI5OgeZzlm/ZVfuukB14G1vO6d+wDbbMdZ8xGI39xYRhi0O72pv
l2Govs3FIiciSg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:46:13 2024 by rpki-client on console-fra.rpki-client.org