Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File:                     d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier:          mh4+79H9S17StMuDmWqZ8OocVabs8zaZ1CSVFiiYMEo=
Subject key identifier:   96:42:BB:91:6F:A4:AC:09:25:61:F1:73:9D:CB:C1:AF:05:01:3A:C1
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer:       /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial:       018F874AC13FCC13C5DEFD6AFC4FD4787656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:54 +0000
Manifest this update:     Fri 17 May 2024 16:02:54 +0000
Manifest next update:     Sat 18 May 2024 16:02:54 +0000
Files and hashes:         1: CxEFb_SPtgpusRu1Ni588FKYVYI.roa (hash: o99ivj152j7CI87cLlEc6ECSNP80mBIqoqiIsYG8jy4=)
                          2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: TRllL5c/zk1MuUMo+iXP16LVLjhYt5ytvklGFZIOo1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c1:3f:cc:13:c5:de:fd:6a:fc:4f:d4:78:76:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
        Validity
            Not Before: May 17 16:02:54 2024 GMT
            Not After : May 18 16:02:54 2024 GMT
        Subject: CN=9642bb916fa4ac092561f1739dcbc1af05013ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:cf:44:74:d7:b2:42:72:a8:e4:55:f3:3e:
                    7d:fe:45:3f:d1:62:15:28:74:c1:6d:26:fb:33:c5:
                    8a:b7:37:3d:08:23:0f:0e:dc:f7:8f:5a:8e:10:79:
                    32:03:07:b6:f0:4a:5a:3d:36:34:ce:8f:01:73:66:
                    c7:50:24:0a:4a:d6:25:be:0d:d3:de:f1:1b:85:32:
                    44:72:79:73:31:ef:03:be:21:6b:15:3b:22:bc:31:
                    91:e2:cd:1b:c5:45:ee:aa:4a:7a:45:76:58:59:4d:
                    bc:8a:0c:d5:07:9d:a6:de:c0:a3:e3:64:b8:dd:90:
                    48:2f:16:96:e4:08:ff:31:28:e9:23:60:d7:db:79:
                    f5:68:6c:0f:97:2b:3d:11:dd:74:9e:c6:89:71:93:
                    38:a9:08:e0:13:3d:c3:39:e6:90:c6:03:57:5f:5c:
                    18:ef:6e:ca:82:5d:4e:37:cc:62:22:a9:e9:82:86:
                    67:3a:76:31:55:07:09:8f:3e:a7:a0:5c:fa:cd:2b:
                    46:ce:3a:b0:3a:a3:f3:0a:3b:29:6b:2c:1d:82:76:
                    28:df:a2:d3:9a:4b:39:11:67:80:98:e0:3d:c8:45:
                    3f:18:9a:0a:aa:88:d4:1a:40:4f:1c:97:24:54:39:
                    fc:ce:03:88:8b:88:d4:98:8b:89:35:14:2f:ce:d8:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:BB:91:6F:A4:AC:09:25:61:F1:73:9D:CB:C1:AF:05:01:3A:C1
            X509v3 Authority Key Identifier:
                keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:69:ab:e1:fd:0d:0d:17:20:2d:8f:d0:44:88:6b:f4:35:f7:
         01:26:20:47:90:2c:c6:85:b5:51:d5:68:77:68:db:e5:2d:fd:
         e6:64:85:15:2f:79:ab:73:5f:7e:09:86:07:f1:5e:26:5b:9c:
         17:32:70:8e:6a:50:7d:30:14:3e:da:bf:22:62:18:18:13:e3:
         16:30:b1:e1:d3:b3:5f:00:91:30:4b:c1:f2:e0:f1:54:a8:d5:
         24:d7:09:a6:a7:8e:60:75:2e:74:77:95:f3:a6:05:df:2f:0f:
         43:32:f0:b3:6b:a2:74:69:8c:10:df:65:e9:07:02:3e:f8:9f:
         8f:93:4f:2b:7c:8e:06:c0:71:e1:19:17:f3:87:b0:92:17:d0:
         02:a5:d5:a6:b6:1b:2b:a3:bb:ed:9c:08:0f:a1:79:74:dc:d2:
         48:83:e6:02:d0:b6:b0:85:ea:7b:ba:74:ea:cc:a0:3a:19:19:
         c8:bc:fb:2f:cc:ea:4c:a5:f3:0a:ec:df:4a:5c:eb:6b:6a:6f:
         33:b7:26:28:0b:ad:c9:9c:6f:3d:d1:a0:e6:63:25:6e:47:38:
         37:8a:0c:71:00:d7:9b:0b:99:56:61:df:db:6b:c5:1f:e5:f4:
         9d:78:8e:94:c7:95:44:35:56:e5:79:7e:77:12:22:a5:10:ef:
         0e:a5:5f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSsE/zBPF3v1q/E/UeHZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWRmMWRlNDNhY2NhNjFlZWMwMzRjZWEyNjhiNDY1NGNj
MTVjYWMwHhcNMjQwNTE3MTYwMjU0WhcNMjQwNTE4MTYwMjU0WjAzMTEwLwYDVQQD
Eyg5NjQyYmI5MTZmYTRhYzA5MjU2MWYxNzM5ZGNiYzFhZjA1MDEzYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq3PRHTXskJyqORV8z59/kU/0WIV
KHTBbSb7M8WKtzc9CCMPDtz3j1qOEHkyAwe28EpaPTY0zo8Bc2bHUCQKStYlvg3T
3vEbhTJEcnlzMe8DviFrFTsivDGR4s0bxUXuqkp6RXZYWU28igzVB52m3sCj42S4
3ZBILxaW5Aj/MSjpI2DX23n1aGwPlys9Ed10nsaJcZM4qQjgEz3DOeaQxgNXX1wY
727Kgl1ON8xiIqnpgoZnOnYxVQcJjz6noFz6zStGzjqwOqPzCjspaywdgnYo36LT
mks5EWeAmOA9yEU/GJoKqojUGkBPHJckVDn8zgOIi4jUmIuJNRQvztgTBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZCu5FvpKwJJWHxc53Lwa8FATrBMB8GA1UdIwQY
MBaAFHed8d5DrMph7sA0zqJotGVMwVysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUzeDNrT3N5bUh1d0RUT29taTBaVXpCWEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zYWY0OGEtMDYxNi00YzMyLWJiNDAt
NGI5YWU0MWIzZDJmLzEvZDUzeDNrT3N5bUh1d0RUT29taTBaVXpCWEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zYWY0OGEtMDYxNi00YzMyLWJiNDAtNGI5YWU0MWIzZDJm
LzEvZDUzeDNrT3N5bUh1d0RUT29taTBaVXpCWEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2mr4f0N
DRcgLY/QRIhr9DX3ASYgR5AsxoW1UdVod2jb5S395mSFFS95q3NffgmGB/FeJluc
FzJwjmpQfTAUPtq/ImIYGBPjFjCx4dOzXwCRMEvB8uDxVKjVJNcJpqeOYHUudHeV
86YF3y8PQzLws2uidGmMEN9l6QcCPvifj5NPK3yOBsBx4RkX84ewkhfQAqXVprYb
K6O77ZwID6F5dNzSSIPmAtC2sIXqe7p06sygOhkZyLz7L8zqTKXzCuzfSlzra2pv
M7cmKAutyZxvPdGg5mMlbkc4N4oMcQDXmwuZVmHf22vFH+X0nXiOlMeVRDVW5Xl+
dxIipRDvDqVfnw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:29:53 2024 by rpki-client on console-fra.rpki-client.org