Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File:                     xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier:          /5DzLeNTsGW8YMPVtqhEVfOqJDKcOa6szbHnYUpGmxk=
Subject key identifier:   22:CE:CC:53:59:70:41:D9:7D:E3:A1:EA:20:B1:FF:9A:D9:05:AF:AB
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer:       /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial:       018F874A491C34F78C916B1A365F066558A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 16:02:23 +0000
Manifest this update:     Fri 17 May 2024 16:02:23 +0000
Manifest next update:     Sat 18 May 2024 16:02:23 +0000
Files and hashes:         1: H-1q34KVRZvsoX_6nZcQwhDpUHc.roa (hash: jq3GJpIVWlvUeLD3fbBxkItFCo/+OJY4mYkLapKDQrA=)
                          2: thed-l6Hqgw3bEK-oFYf4KS9Cnw.roa (hash: F/C6KO0kkWCFUWJ0VBjBj0LzNMxOuF3eZfmn3QQ+WjI=)
                          3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: 8V+A+qmLdMTQghG0BO8Pyw3/sEP0rOieL2uzUcpf4aQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:49:1c:34:f7:8c:91:6b:1a:36:5f:06:65:58:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 18 16:02:23 2024 GMT
        Subject: CN=22cecc53597041d97de3a1ea20b1ff9ad905afab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:b5:e5:aa:28:d9:60:cd:4f:12:2a:a1:e1:
                    5d:26:4c:02:45:a8:e4:de:15:aa:53:fa:52:ee:75:
                    29:c8:00:0a:e4:f7:86:50:6f:2a:b0:84:f6:eb:47:
                    d0:41:4f:89:23:3b:e5:b8:35:06:22:88:7f:98:cf:
                    f2:64:d7:c4:0f:f2:7a:35:25:80:7b:ca:1e:eb:b5:
                    a3:1d:aa:4e:bd:db:c8:8c:79:cc:44:42:29:04:5f:
                    54:2d:04:46:46:96:c3:74:b9:52:1b:0e:b1:95:11:
                    f5:e5:d3:bb:5a:92:4d:16:e6:e9:b1:7b:c8:2d:67:
                    f6:a8:a5:86:2a:ec:0c:2b:2d:cf:20:fa:d2:fb:12:
                    51:1a:48:09:20:2a:01:2d:d0:96:70:78:31:91:f9:
                    c5:24:64:4b:b7:56:65:40:b3:47:aa:f6:f9:76:d2:
                    a7:ba:b0:6a:e1:e7:ae:33:f5:a3:29:85:43:1a:a7:
                    5f:73:7c:db:2d:bb:c5:3d:4d:5c:3f:c6:c1:d9:ee:
                    c4:33:a6:7b:a0:bf:fb:be:78:02:23:2b:c3:99:54:
                    37:9c:aa:cc:63:19:b8:87:3d:a2:7a:bd:3c:16:0f:
                    f6:bc:42:bb:a0:d0:32:ce:fc:72:3a:44:69:ac:b8:
                    eb:a2:91:b7:56:7e:33:0f:50:e3:9e:98:d2:7f:32:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:CC:53:59:70:41:D9:7D:E3:A1:EA:20:B1:FF:9A:D9:05:AF:AB
            X509v3 Authority Key Identifier:
                keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:95:a2:e9:09:f3:f9:01:05:58:e6:bc:5d:b3:10:75:71:30:
         a4:9b:6b:0f:3a:02:79:cb:f7:6f:bc:78:05:04:e7:9d:e6:53:
         28:8b:e8:ff:55:cb:b7:8f:a8:28:36:69:a1:fc:c9:76:a1:b3:
         06:82:62:7f:1f:13:ee:df:b6:63:b4:35:4b:38:d5:91:13:69:
         f0:1f:27:95:ae:49:90:9e:53:99:3d:db:50:69:27:12:72:1d:
         92:f4:2e:2b:e7:2e:5e:1a:38:c2:0d:95:1c:cb:72:e8:dc:b9:
         9f:6e:59:1a:46:be:3a:83:70:85:1b:90:7c:52:e2:a1:d6:0a:
         7a:5e:26:1d:c0:41:60:14:05:9f:4b:ec:a5:2b:c6:d8:98:48:
         a0:4b:96:89:4c:c4:64:37:5c:3a:e6:3b:59:7f:83:5a:b4:45:
         12:87:bc:13:1b:db:b0:63:d7:a4:58:40:b5:8b:41:ac:59:14:
         9a:b1:0d:31:94:98:c6:7f:59:37:80:fa:a3:09:fa:67:08:9e:
         69:ea:03:5c:b2:a2:ed:fe:5c:ed:4c:bf:2c:5c:18:51:87:21:
         0b:be:3a:8a:5a:0f:db:f7:72:88:3c:fd:a4:05:f0:cc:b7:3b:
         27:bf:ad:5b:bd:07:9e:d4:91:d9:ca:97:11:e2:03:23:f7:16:
         12:fd:ae:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSkkcNPeMkWsaNl8GZVijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjQwNTE3MTYwMjIzWhcNMjQwNTE4MTYwMjIzWjAzMTEwLwYDVQQD
EygyMmNlY2M1MzU5NzA0MWQ5N2RlM2ExZWEyMGIxZmY5YWQ5MDVhZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvS15aoo2WDNTxIqoeFdJkwCRajk
3hWqU/pS7nUpyAAK5PeGUG8qsIT260fQQU+JIzvluDUGIoh/mM/yZNfED/J6NSWA
e8oe67WjHapOvdvIjHnMREIpBF9ULQRGRpbDdLlSGw6xlRH15dO7WpJNFubpsXvI
LWf2qKWGKuwMKy3PIPrS+xJRGkgJICoBLdCWcHgxkfnFJGRLt1ZlQLNHqvb5dtKn
urBq4eeuM/WjKYVDGqdfc3zbLbvFPU1cP8bB2e7EM6Z7oL/7vngCIyvDmVQ3nKrM
Yxm4hz2ier08Fg/2vEK7oNAyzvxyOkRprLjropG3Vn4zD1DjnpjSfzIe5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLOzFNZcEHZfeOh6iCx/5rZBa+rMB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZWi6Qnz
+QEFWOa8XbMQdXEwpJtrDzoCecv3b7x4BQTnneZTKIvo/1XLt4+oKDZpofzJdqGz
BoJifx8T7t+2Y7Q1SzjVkRNp8B8nla5JkJ5TmT3bUGknEnIdkvQuK+cuXho4wg2V
HMty6Ny5n25ZGka+OoNwhRuQfFLiodYKel4mHcBBYBQFn0vspSvG2JhIoEuWiUzE
ZDdcOuY7WX+DWrRFEoe8ExvbsGPXpFhAtYtBrFkUmrENMZSYxn9ZN4D6own6Zwie
aeoDXLKi7f5c7Uy/LFwYUYchC746iloP2/dyiDz9pAXwzLc7J7+tW70HntSR2cqX
EeIDI/cWEv2usQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:05:22 2024 by rpki-client on console-ams.rpki-client.org