Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File:                     5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier:          gfZn3+wBnKLGDB5X9oJvq8bQvXW7ykWOibpY3SrghcY=
Subject key identifier:   F4:25:F2:BD:72:BD:23:CA:2E:9E:E7:03:47:23:FE:6D:62:9C:F4:19
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer:       /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial:       018F4B6B2D8F07EE232FFBD80C24D9D17D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number:          08D9
Signing time:             Mon 06 May 2024 01:01:06 +0000
Manifest this update:     Mon 06 May 2024 01:01:06 +0000
Manifest next update:     Tue 07 May 2024 01:01:06 +0000
Files and hashes:         1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: cIYp6tOIQITGhMutfqFqR/IJnyBmaHHyH4HeuavKaI0=)
                          2: hBpPDkAyziAUcqMK-cnpnAvwVrk.roa (hash: tDCU4r8z1SJShr8kq4I9hUxz04GiqxTnU2W3l95q9cY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:2d:8f:07:ee:23:2f:fb:d8:0c:24:d9:d1:7d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
        Validity
            Not Before: May  6 01:01:06 2024 GMT
            Not After : May  7 01:01:06 2024 GMT
        Subject: CN=f425f2bd72bd23ca2e9ee7034723fe6d629cf419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:1d:b7:06:d9:c9:02:a2:23:55:f3:cc:75:
                    8c:d3:6c:7d:ed:09:be:b6:f3:17:c3:97:66:4f:89:
                    cc:85:12:65:61:6e:6d:d3:40:1f:f2:9c:2a:8b:b0:
                    e8:88:72:d6:f3:9e:c7:c0:80:6a:c3:36:8d:0d:d9:
                    0e:fd:ec:3c:4b:6b:b1:dc:8a:72:d4:ee:8d:72:d0:
                    be:54:88:fa:c6:89:7d:75:48:15:34:32:b4:bd:47:
                    eb:58:f2:d2:57:e3:64:a6:3e:98:c0:44:5c:58:47:
                    83:17:08:02:a5:69:fb:a9:6e:0e:4f:e2:41:e2:cd:
                    3a:35:dd:e4:b5:6f:f0:67:2f:0f:34:39:8e:f6:a7:
                    7d:c3:a0:85:00:7b:2e:7f:90:e3:4b:08:32:c4:30:
                    eb:5c:1b:10:44:3e:76:fd:fd:5c:40:6d:4b:64:1b:
                    e3:c2:d9:1b:10:c8:5c:76:dc:e6:32:37:d2:c8:93:
                    2f:00:42:87:e8:3d:7f:32:74:c2:65:3d:e8:ea:78:
                    ce:93:bc:58:ef:15:c3:f4:9b:5b:a7:6f:6e:0b:40:
                    ee:ff:68:80:1e:32:d3:c2:61:aa:12:cc:56:5c:d5:
                    25:f8:0f:1e:7e:f0:5a:4e:45:b3:65:8e:b0:a2:94:
                    79:9f:fc:2d:4c:9e:74:ab:af:39:45:52:c4:25:82:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:25:F2:BD:72:BD:23:CA:2E:9E:E7:03:47:23:FE:6D:62:9C:F4:19
            X509v3 Authority Key Identifier:
                keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:66:3f:b5:ae:e1:13:d4:fb:5a:81:91:47:ec:28:b2:9b:48:
         89:ac:34:0f:77:49:20:34:68:21:87:01:e5:81:30:5f:c9:5e:
         f3:9a:01:b6:95:f3:a4:2e:ce:55:a3:d0:b5:a5:0a:af:3b:e2:
         ac:31:fa:92:92:75:77:9f:f0:0b:66:bb:c2:a5:b1:27:b6:a7:
         6e:02:a2:e6:6f:21:b5:39:b4:c9:f1:2c:66:da:bc:53:64:62:
         37:e4:3d:6a:55:b3:45:46:94:9c:07:65:f3:db:97:49:fe:38:
         29:a7:b4:14:e6:ed:70:47:3b:cd:0e:ac:fe:10:8e:90:fa:eb:
         f7:bf:65:30:8f:48:5a:c5:1c:8b:47:67:7d:21:e4:2a:ed:d2:
         20:7b:ba:3f:22:1f:19:a6:9d:37:10:ef:8f:e4:eb:17:1c:81:
         20:dc:cf:6c:b7:ba:18:03:ff:a8:0e:e3:6d:b7:ae:5a:85:26:
         97:6b:25:1f:be:bd:86:23:54:61:87:7e:00:87:b5:5b:02:74:
         dd:7e:3d:98:27:48:cf:ac:07:72:96:6d:01:02:60:c8:18:11:
         2b:d2:4e:b8:3b:ea:6e:82:4a:0a:09:2f:6a:b5:c8:41:f5:94:
         1e:c2:b2:6a:7b:fd:ec:48:c8:7f:aa:03:b0:94:f0:72:36:41:
         72:be:54:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Lay2PB+4jL/vYDCTZ0X2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjQwNTA2MDEwMTA2WhcNMjQwNTA3MDEwMTA2WjAzMTEwLwYDVQQD
EyhmNDI1ZjJiZDcyYmQyM2NhMmU5ZWU3MDM0NzIzZmU2ZDYyOWNmNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHkdtwbZyQKiI1XzzHWM02x97Qm+
tvMXw5dmT4nMhRJlYW5t00Af8pwqi7DoiHLW857HwIBqwzaNDdkO/ew8S2ux3Ipy
1O6NctC+VIj6xol9dUgVNDK0vUfrWPLSV+Nkpj6YwERcWEeDFwgCpWn7qW4OT+JB
4s06Nd3ktW/wZy8PNDmO9qd9w6CFAHsuf5DjSwgyxDDrXBsQRD52/f1cQG1LZBvj
wtkbEMhcdtzmMjfSyJMvAEKH6D1/MnTCZT3o6njOk7xY7xXD9Jtbp29uC0Du/2iA
HjLTwmGqEsxWXNUl+A8efvBaTkWzZY6wopR5n/wtTJ50q685RVLEJYKnUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQl8r1yvSPKLp7nA0cj/m1inPQZMB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWY/ta7h
E9T7WoGRR+wosptIiaw0D3dJIDRoIYcB5YEwX8le85oBtpXzpC7OVaPQtaUKrzvi
rDH6kpJ1d5/wC2a7wqWxJ7anbgKi5m8htTm0yfEsZtq8U2RiN+Q9alWzRUaUnAdl
89uXSf44Kae0FObtcEc7zQ6s/hCOkPrr979lMI9IWsUci0dnfSHkKu3SIHu6PyIf
GaadNxDvj+TrFxyBINzPbLe6GAP/qA7jbbeuWoUml2slH769hiNUYYd+AIe1WwJ0
3X49mCdIz6wHcpZtAQJgyBgRK9JOuDvqboJKCgkvarXIQfWUHsKyanv97EjIf6oD
sJTwcjZBcr5Uzg==
-----END CERTIFICATE-----
Generated at Mon May 6 06:47:29 2024 by rpki-client on console-fra.rpki-client.org