Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File:                     MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier:          GJ1L+hsO7zJHzIhS0t7yw30H45v9bv30r9YOs+IfN+0=
Subject key identifier:   47:56:0C:2C:EF:41:A8:8E:47:FF:9C:31:CF:78:76:04:62:CB:CC:99
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer:       /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial:       018F87B6095D6788F11885F7079EA6D2F187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number:          0AED
Signing time:             Fri 17 May 2024 18:00:05 +0000
Manifest this update:     Fri 17 May 2024 18:00:05 +0000
Manifest next update:     Sat 18 May 2024 18:00:05 +0000
Files and hashes:         1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: 2JNWCFWH0tiRC7FkKKnShhLELLa+Mu30l1/ZRHfV2jw=)
                          2: x8P7aFmWqsInbrqZ4-aFq2mnoEA.roa (hash: 55MGpqcK5z2X+ank0nmLWobuVEk2gC7I/byKLfgHvbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:09:5d:67:88:f1:18:85:f7:07:9e:a6:d2:f1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
        Validity
            Not Before: May 17 18:00:05 2024 GMT
            Not After : May 18 18:00:05 2024 GMT
        Subject: CN=47560c2cef41a88e47ff9c31cf78760462cbcc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:a2:f6:f7:7b:8c:82:bd:da:40:d3:80:b4:
                    7d:3a:92:d9:cf:cc:fb:e6:48:f6:69:b9:25:8a:04:
                    1a:88:77:e4:fb:e2:3d:22:87:8a:b6:fb:bf:81:b6:
                    ef:e7:89:a7:06:30:77:ba:57:7b:9d:3f:2b:5f:b7:
                    cd:84:66:bc:b0:ea:2b:9f:23:df:45:7d:04:bf:12:
                    3b:f7:1e:84:5d:27:a3:66:14:81:ce:f7:07:37:29:
                    46:68:d4:47:5c:7c:1b:eb:9a:4a:ab:a2:ae:d4:d1:
                    4f:79:40:a1:0c:9f:a9:5a:65:18:f1:f5:33:e7:3a:
                    51:7d:bf:0e:e9:f6:f2:2e:95:72:24:7b:b1:dc:0e:
                    84:26:10:2b:f8:33:84:cb:4f:20:b6:da:08:5e:a5:
                    02:64:b9:0c:eb:8e:09:cc:86:3f:c3:0b:d8:d1:bb:
                    16:54:7e:77:4b:a7:29:13:ca:ec:70:c4:cd:2a:0a:
                    07:bd:59:27:0e:58:32:ae:e1:8e:e1:67:5b:0a:d5:
                    8a:11:7c:9e:63:49:ea:38:42:6a:97:e4:54:3c:a4:
                    be:d4:ca:eb:39:34:6d:52:dd:2b:4d:fe:cc:e1:7f:
                    0e:5a:52:16:84:7c:a2:79:2e:1a:b3:41:b1:77:39:
                    9e:53:e9:20:7b:5a:90:25:50:79:e9:62:4e:af:74:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:56:0C:2C:EF:41:A8:8E:47:FF:9C:31:CF:78:76:04:62:CB:CC:99
            X509v3 Authority Key Identifier:
                keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:81:56:a3:aa:f4:92:f7:d8:fe:32:c3:73:6e:bb:fa:88:e1:
         af:b2:a1:2f:49:89:30:9c:8c:1f:90:6a:49:60:72:18:9d:55:
         7d:89:3b:c2:1e:41:34:73:df:79:29:40:74:d4:ce:46:96:75:
         84:44:93:b0:38:96:9e:a0:be:9b:9e:ab:07:72:4b:d0:e0:ff:
         15:d8:1d:10:b1:fb:60:6f:73:19:c6:84:22:cd:ea:bf:b5:dd:
         49:a5:72:08:27:67:2d:21:a8:b8:e4:70:b7:c1:ff:19:c3:cc:
         a6:46:f7:49:52:67:49:9a:28:69:5c:1b:57:3c:39:c0:80:c1:
         48:2d:bd:a7:73:68:c3:93:c8:c1:58:0d:25:e8:f4:95:a8:08:
         1d:86:9a:50:d0:19:f7:1b:2a:57:98:e1:3e:96:fc:8b:f9:58:
         c1:9e:15:3e:38:a4:33:cd:f6:80:c3:a5:d4:34:04:47:df:c9:
         2a:ae:6c:d1:98:b5:11:b2:0f:16:f0:94:7f:35:1d:dd:88:a5:
         d7:d3:81:fc:c9:ef:10:2c:8f:bb:d6:d1:5e:05:2c:02:fa:82:
         94:7f:ad:e0:93:69:26:62:8b:93:35:ef:ab:7e:07:fc:d1:fd:
         e8:31:46:1d:a2:f5:96:8f:7e:69:d7:64:a5:0d:14:bf:dd:94:
         15:60:b1:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtgldZ4jxGIX3B56m0vGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDY2YjY2YTM5ODJkMjBhODFlZjIwMWRjNzU1ZWQzMzUz
YjE2YTQwHhcNMjQwNTE3MTgwMDA1WhcNMjQwNTE4MTgwMDA1WjAzMTEwLwYDVQQD
Eyg0NzU2MGMyY2VmNDFhODhlNDdmZjljMzFjZjc4NzYwNDYyY2JjYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Ki9vd7jIK92kDTgLR9OpLZz8z7
5kj2abkligQaiHfk++I9IoeKtvu/gbbv54mnBjB3uld7nT8rX7fNhGa8sOornyPf
RX0EvxI79x6EXSejZhSBzvcHNylGaNRHXHwb65pKq6Ku1NFPeUChDJ+pWmUY8fUz
5zpRfb8O6fbyLpVyJHux3A6EJhAr+DOEy08gttoIXqUCZLkM644JzIY/wwvY0bsW
VH53S6cpE8rscMTNKgoHvVknDlgyruGO4WdbCtWKEXyeY0nqOEJql+RUPKS+1Mrr
OTRtUt0rTf7M4X8OWlIWhHyieS4as0GxdzmeU+kge1qQJVB56WJOr3QCLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdWDCzvQaiOR/+cMc94dgRiy8yZMB8GA1UdIwQY
MBaAFDDWa2ajmC0gqB7yAdx1XtM1OxakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5aclpxT1lMU0NvSHZJQjNIVmUwelU3RnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84OGU0ODItODI3Ny00MjgwLTlmNWIt
ODE0NGIxNDBlZGY5LzEvTU5aclpxT1lMU0NvSHZJQjNIVmUwelU3RnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84OGU0ODItODI3Ny00MjgwLTlmNWItODE0NGIxNDBlZGY5
LzEvTU5aclpxT1lMU0NvSHZJQjNIVmUwelU3RnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYFWo6r0
kvfY/jLDc267+ojhr7KhL0mJMJyMH5BqSWByGJ1VfYk7wh5BNHPfeSlAdNTORpZ1
hESTsDiWnqC+m56rB3JL0OD/FdgdELH7YG9zGcaEIs3qv7XdSaVyCCdnLSGouORw
t8H/GcPMpkb3SVJnSZooaVwbVzw5wIDBSC29p3Now5PIwVgNJej0lagIHYaaUNAZ
9xsqV5jhPpb8i/lYwZ4VPjikM832gMOl1DQER9/JKq5s0Zi1EbIPFvCUfzUd3Yil
19OB/MnvECyPu9bRXgUsAvqClH+t4JNpJmKLkzXvq34H/NH96DFGHaL1lo9+addk
pQ0Uv92UFWCxsA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:52:50 2024 by rpki-client on console-ams.rpki-client.org