Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File:                     S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier:          YrKh/StQ3CUpZ3h91ew4SMsBBr4hiQCXLC7UW2zv4xk=
Subject key identifier:   A4:DF:90:41:F9:E1:90:C2:4C:9E:F8:9C:2E:82:90:B0:1B:C8:A6:95
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer:       /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial:       018F874AD919426903FB1E58D4B0700A5AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:03:00 +0000
Manifest this update:     Fri 17 May 2024 16:03:00 +0000
Manifest next update:     Sat 18 May 2024 16:03:00 +0000
Files and hashes:         1: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: mLX1Q99JRU+Fi93E2+GtCLUTgRRVRfzhlbJHI8Fl2Hw=)
                          2: vIATmj2GMMRJ3YG3xydQustXLss.roa (hash: mvIxIBQlB0exo1H3antJxgUM6cpzr2S25+QNGx60FIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d9:19:42:69:03:fb:1e:58:d4:b0:70:0a:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
        Validity
            Not Before: May 17 16:03:00 2024 GMT
            Not After : May 18 16:03:00 2024 GMT
        Subject: CN=a4df9041f9e190c24c9ef89c2e8290b01bc8a695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:15:ab:ff:c7:5d:18:c5:e2:b5:23:99:a2:
                    75:74:8e:02:c9:40:a3:9c:32:61:7d:af:da:64:0c:
                    67:6e:07:57:7f:e7:9c:f0:5b:82:03:5f:ef:34:0d:
                    e7:e6:c3:f8:7f:df:f3:f2:9b:d2:46:06:a9:5c:b7:
                    d8:95:8c:42:f3:a1:1f:77:8c:7a:ee:e7:98:7c:3a:
                    56:b6:65:73:46:3d:5a:4a:0e:43:cd:21:56:dd:18:
                    0a:f2:13:ef:ce:ae:38:d9:db:b0:ec:8a:94:93:e8:
                    29:2b:d0:1b:f9:8e:ca:31:09:d8:f2:0b:a0:be:6a:
                    9e:34:c8:5c:06:68:5f:ef:8e:d6:00:18:5c:64:38:
                    2e:05:c6:80:4f:30:fd:4b:44:fb:94:58:54:bc:f2:
                    15:05:c3:34:8a:a4:58:53:33:73:ba:36:1e:ba:02:
                    59:52:ae:a6:af:21:d2:1d:d7:23:f7:aa:59:01:62:
                    d8:97:2e:8a:78:b9:84:69:ab:cd:e0:39:bf:2f:46:
                    63:b1:b3:41:6a:44:1a:4e:e9:c9:66:6a:b6:cb:d7:
                    45:98:66:13:b3:7b:25:89:5c:7b:0b:71:26:d6:e1:
                    b9:a3:ee:ca:de:f5:19:80:aa:03:11:b4:9c:62:eb:
                    5c:59:12:59:2d:6b:ec:99:22:79:e4:ea:4c:9a:ec:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:90:41:F9:E1:90:C2:4C:9E:F8:9C:2E:82:90:B0:1B:C8:A6:95
            X509v3 Authority Key Identifier:
                keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8a:c8:1a:7e:ad:b3:e9:e6:72:81:da:ac:8f:75:7b:4a:77:
         44:44:11:8d:43:44:ab:f2:04:bd:82:23:37:af:4c:4a:b2:c4:
         e2:c1:7c:61:54:df:ce:13:7c:9b:34:b2:ee:08:94:0e:61:ee:
         e3:2f:60:56:b0:f6:77:20:b2:cd:20:60:8c:14:79:a4:44:b4:
         38:18:db:31:62:18:a5:e6:87:1e:81:e6:d5:5c:1c:3e:cf:7a:
         e5:ad:b4:23:b5:e6:f8:7c:95:b4:29:f0:d4:5b:d6:ff:82:77:
         69:b7:25:78:88:ae:95:9b:58:62:04:fc:9f:e8:fa:2c:7d:2e:
         f4:b2:be:12:c8:50:72:2a:5e:3a:d8:f4:bc:08:88:ec:4f:91:
         bf:a4:bf:df:88:ff:34:1a:35:70:72:9b:8d:52:73:89:6a:6a:
         59:a1:23:c7:cc:b1:7f:ba:62:a3:00:ed:9b:bb:44:3d:ed:b9:
         82:5b:8b:d1:e9:2c:7a:a6:7f:dc:ea:8b:1b:e1:7a:d5:7b:9d:
         a7:c7:5f:79:4f:de:37:55:ff:6b:a6:6a:28:39:ec:c1:e4:96:
         f1:c8:c0:74:be:59:af:73:7d:d0:1d:a9:f4:6c:35:b8:33:9c:
         a0:7d:d2:d5:4a:5f:d0:88:f7:4b:ab:c0:c4:24:18:4f:7b:e3:
         15:ee:94:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HStkZQmkD+x5Y1LBwClqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjMyYTc1OGI1OTMwOWU4NjEwODlkNjU1M2FlZTA2N2E2
YjM1M2YwHhcNMjQwNTE3MTYwMzAwWhcNMjQwNTE4MTYwMzAwWjAzMTEwLwYDVQQD
EyhhNGRmOTA0MWY5ZTE5MGMyNGM5ZWY4OWMyZTgyOTBiMDFiYzhhNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/wVq//HXRjF4rUjmaJ1dI4CyUCj
nDJhfa/aZAxnbgdXf+ec8FuCA1/vNA3n5sP4f9/z8pvSRgapXLfYlYxC86Efd4x6
7ueYfDpWtmVzRj1aSg5DzSFW3RgK8hPvzq442duw7IqUk+gpK9Ab+Y7KMQnY8gug
vmqeNMhcBmhf747WABhcZDguBcaATzD9S0T7lFhUvPIVBcM0iqRYUzNzujYeugJZ
Uq6mryHSHdcj96pZAWLYly6KeLmEaavN4Dm/L0ZjsbNBakQaTunJZmq2y9dFmGYT
s3sliVx7C3Em1uG5o+7K3vUZgKoDEbScYutcWRJZLWvsmSJ55OpMmuzyDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTfkEH54ZDCTJ74nC6CkLAbyKaVMB8GA1UdIwQY
MBaAFEtjKnWLWTCehhCJ1lU67gZ6azU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMt
OTRjMGIwYjc2MDI5LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMtOTRjMGIwYjc2MDI5
LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4rIGn6t
s+nmcoHarI91e0p3REQRjUNEq/IEvYIjN69MSrLE4sF8YVTfzhN8mzSy7giUDmHu
4y9gVrD2dyCyzSBgjBR5pES0OBjbMWIYpeaHHoHm1VwcPs965a20I7Xm+HyVtCnw
1FvW/4J3abcleIiulZtYYgT8n+j6LH0u9LK+EshQcipeOtj0vAiI7E+Rv6S/34j/
NBo1cHKbjVJziWpqWaEjx8yxf7piowDtm7tEPe25gluL0ekseqZ/3OqLG+F61Xud
p8dfeU/eN1X/a6ZqKDnsweSW8cjAdL5Zr3N90B2p9Gw1uDOcoH3S1Upf0Ij3S6vA
xCQYT3vjFe6UYg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:06:38 2024 by rpki-client on console-ams.rpki-client.org