Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File:                     ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier:          q9wzGmGIT755hPPbXDR7YYFB3iL/mfdawnje1ruZezM=
Subject key identifier:   78:C7:15:EF:D4:AF:AF:30:E6:62:D2:79:39:10:50:B4:EF:EC:D7:81
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer:       /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial:       018F87496C303EDAE417FDA00E8EC3F49031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number:          0673
Signing time:             Fri 17 May 2024 16:01:26 +0000
Manifest this update:     Fri 17 May 2024 16:01:26 +0000
Manifest next update:     Sat 18 May 2024 16:01:26 +0000
Files and hashes:         1: NJ5-rR9fKxo3ypgPOOSB0palupo.roa (hash: rJFYDs6L28VC/6rt8nTipzw44euqlS2JMXw2JwVvmPI=)
                          2: TKvHd_prP-V2GrJJnozVkMaquaw.roa (hash: mMqVZQ+6v34/Lysa+umQ1AFdSz7iNCCcgMu8UC+KqIg=)
                          3: UudUGmqFX--EJKTTwQXGsxGAu54.roa (hash: WYjh4nO/nFTnAXEu84RQtjop+KWheNqhr9plV/LRr78=)
                          4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: ZtMlA08HKLNGah/c5dO9N6tmE+HhzAeRENa/RUBhPXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:6c:30:3e:da:e4:17:fd:a0:0e:8e:c3:f4:90:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
        Validity
            Not Before: May 17 16:01:26 2024 GMT
            Not After : May 18 16:01:26 2024 GMT
        Subject: CN=78c715efd4afaf30e662d279391050b4efecd781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:f2:ab:62:62:38:b6:ad:cc:63:e0:63:8b:
                    de:c3:14:f6:fc:ab:00:d3:07:b6:b5:5c:36:62:d5:
                    28:32:dc:50:a3:87:1a:57:9a:6c:2b:b9:b3:d6:a6:
                    1d:48:6e:77:c0:36:06:7d:ab:ca:45:14:1c:4e:ab:
                    19:e9:96:4b:6f:90:d9:62:61:4d:71:ca:5b:68:f4:
                    1e:67:68:e3:b4:5e:9f:5a:47:40:c6:f0:0b:e1:25:
                    6f:05:df:ac:fc:b8:cd:8e:44:df:67:69:0c:74:04:
                    b5:d7:91:19:ec:e5:3e:e7:3b:f9:20:d5:30:59:12:
                    0a:cd:83:4f:88:e3:41:42:06:20:bb:05:28:95:dc:
                    46:c4:22:b3:17:73:ed:fe:e1:20:e5:cd:a6:f2:90:
                    3c:15:28:ed:fc:6b:33:92:e0:02:ce:8e:a2:15:90:
                    c6:18:d3:f8:af:18:94:52:37:3c:ee:64:58:ba:26:
                    90:a6:50:4c:e5:6b:3e:68:2d:92:34:39:95:cf:ea:
                    1f:cc:40:03:ad:de:ea:6f:cf:9b:e6:61:88:bd:7a:
                    28:0d:34:d4:ff:ab:93:8b:53:87:74:df:ca:d7:05:
                    83:a2:ba:d1:db:81:d4:d2:78:5a:23:0a:f8:85:57:
                    61:23:4f:56:92:86:4e:ed:88:5f:db:a3:86:a9:01:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:15:EF:D4:AF:AF:30:E6:62:D2:79:39:10:50:B4:EF:EC:D7:81
            X509v3 Authority Key Identifier:
                keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:16:5a:4c:d3:c1:87:df:3c:5f:76:7e:b7:21:7a:13:fa:c4:
         3f:55:1a:ad:7a:50:46:f8:87:44:b3:f9:eb:e5:ec:f4:44:5f:
         5c:44:18:a2:20:8b:49:8d:3f:77:89:aa:ec:c3:48:4e:5e:26:
         8b:22:08:18:ee:c2:36:2d:7e:a6:ee:b6:3b:d5:bf:0e:5d:f5:
         34:e4:96:fd:a0:92:8c:8a:8c:ee:96:70:80:78:02:73:6d:94:
         38:7f:9d:4d:98:f9:27:8c:9b:c2:02:5a:5b:24:a8:1b:c8:dd:
         b0:be:73:c7:f7:66:5b:68:c2:83:dc:58:35:e8:58:00:96:44:
         89:52:96:5b:85:bb:74:97:eb:79:db:87:6f:bf:b2:84:2c:9e:
         7f:8f:8c:fc:46:8d:90:84:d4:41:30:46:c5:d7:e9:ef:d4:c8:
         e2:c2:c4:ef:03:a6:d1:c5:6c:2f:6d:6b:c5:dc:12:2a:1c:c4:
         ed:69:a6:4d:40:61:cf:f0:0b:5c:26:6a:cd:7f:a0:30:dc:16:
         c8:3b:70:93:db:a3:83:99:59:f0:8b:f4:8d:66:d5:de:68:a5:
         7e:6e:c6:4d:79:0d:fd:62:fd:31:46:34:b7:8a:01:3f:00:7d:
         8c:41:54:b2:55:b5:35:a9:4a:7b:e9:f6:02:1b:61:c6:81:ca:
         64:70:31:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWwwPtrkF/2gDo7D9JAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0
YzA5MzQwHhcNMjQwNTE3MTYwMTI2WhcNMjQwNTE4MTYwMTI2WjAzMTEwLwYDVQQD
Eyg3OGM3MTVlZmQ0YWZhZjMwZTY2MmQyNzkzOTEwNTBiNGVmZWNkNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroTyq2JiOLatzGPgY4vewxT2/KsA
0we2tVw2YtUoMtxQo4caV5psK7mz1qYdSG53wDYGfavKRRQcTqsZ6ZZLb5DZYmFN
ccpbaPQeZ2jjtF6fWkdAxvAL4SVvBd+s/LjNjkTfZ2kMdAS115EZ7OU+5zv5INUw
WRIKzYNPiONBQgYguwUoldxGxCKzF3Pt/uEg5c2m8pA8FSjt/GszkuACzo6iFZDG
GNP4rxiUUjc87mRYuiaQplBM5Ws+aC2SNDmVz+ofzEADrd7qb8+b5mGIvXooDTTU
/6uTi1OHdN/K1wWDorrR24HU0nhaIwr4hVdhI09WkoZO7Yhf26OGqQEoHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjHFe/Ur68w5mLSeTkQULTv7NeBMB8GA1UdIwQY
MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt
MDRkYmM5YWMxNDQ0LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0
LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhZaTNPB
h988X3Z+tyF6E/rEP1UarXpQRviHRLP56+Xs9ERfXEQYoiCLSY0/d4mq7MNITl4m
iyIIGO7CNi1+pu62O9W/Dl31NOSW/aCSjIqM7pZwgHgCc22UOH+dTZj5J4ybwgJa
WySoG8jdsL5zx/dmW2jCg9xYNehYAJZEiVKWW4W7dJfreduHb7+yhCyef4+M/EaN
kITUQTBGxdfp79TI4sLE7wOm0cVsL21rxdwSKhzE7WmmTUBhz/ALXCZqzX+gMNwW
yDtwk9ujg5lZ8Iv0jWbV3milfm7GTXkN/WL9MUY0t4oBPwB9jEFUslW1NalKe+n2
AhthxoHKZHAxcQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:31:22 2024 by rpki-client on console-fra.rpki-client.org