Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File:                     23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier:          CprGHXg6BV0eCxJHoEGhjvTDDOKqpgF5jG09/614LMY=
Subject key identifier:   75:1A:5D:12:B8:BC:B8:04:D7:06:B4:4F:7A:74:82:FF:CC:AA:A9:49
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer:       /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial:       018F3C663CAD77AF9E0F49CE70EFDFF216BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number:          0E02
Signing time:             Fri 03 May 2024 03:01:24 +0000
Manifest this update:     Fri 03 May 2024 03:01:24 +0000
Manifest next update:     Sat 04 May 2024 03:01:24 +0000
Files and hashes:         1: 0pfcc1rglLuSnj7OE4XItikPATY.roa (hash: mUcKo5EAhI89jyPvc40ppcifBtynaXpzdB2ooZQr3AE=)
                          2: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: 6XSbPfN7WgAQsNCdBCA0pOqWHWcqXAW+U8/XRp+rIts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:3c:ad:77:af:9e:0f:49:ce:70:ef:df:f2:16:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
        Validity
            Not Before: May  3 03:01:24 2024 GMT
            Not After : May  4 03:01:24 2024 GMT
        Subject: CN=751a5d12b8bcb804d706b44f7a7482ffccaaa949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:aa:d2:5e:89:be:14:43:98:76:32:19:61:
                    23:56:01:e6:e5:38:ea:68:0f:4f:c1:76:d4:d7:be:
                    15:9e:02:1f:6f:22:55:84:8b:fb:c5:24:e7:32:86:
                    6c:d3:33:c5:52:1c:e7:d7:b8:cf:7a:53:a8:c6:1d:
                    d0:85:62:c9:76:d0:c4:05:fd:eb:bd:81:1f:06:29:
                    3d:2c:63:36:9b:92:d3:42:86:68:49:49:ca:91:48:
                    28:e1:44:c4:db:04:35:37:2c:38:7e:4e:b9:8b:39:
                    45:10:dd:12:4e:21:bf:62:27:21:64:3e:1b:b8:fa:
                    04:35:60:88:d0:19:ff:66:31:07:dd:6f:e0:16:4b:
                    60:b1:c4:ba:41:53:bc:97:91:79:de:b6:44:89:5a:
                    55:78:2f:e0:8c:77:25:cc:de:84:f2:e4:df:cd:d5:
                    8e:00:af:64:f7:78:f7:e1:b1:19:67:c9:86:a0:55:
                    6f:19:3d:3d:7b:52:ca:d3:f7:05:ca:14:8a:d0:a0:
                    e0:90:da:70:7a:4b:95:d5:5c:79:82:ee:d6:39:94:
                    70:aa:87:0b:1d:83:7b:8a:50:d3:a4:c4:c5:f6:83:
                    14:59:97:14:cf:12:f2:f5:60:9f:b2:53:a8:fa:10:
                    00:40:8e:7c:23:1d:13:e7:9d:b7:2e:ba:3b:80:a4:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1A:5D:12:B8:BC:B8:04:D7:06:B4:4F:7A:74:82:FF:CC:AA:A9:49
            X509v3 Authority Key Identifier:
                keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:16:a2:e3:c8:b6:30:d2:5a:82:64:80:14:52:f1:0f:a5:62:
         b0:ff:eb:7f:6e:c5:bf:27:5e:47:e5:01:34:0d:ac:89:0b:b5:
         18:32:91:ee:2d:2a:32:f4:3b:03:14:7c:10:ad:aa:04:55:35:
         3d:7c:d0:93:ce:18:5c:2d:6d:68:6a:73:5f:75:1f:a1:8c:e9:
         e5:79:84:7b:64:75:26:e4:f7:d6:88:7e:4e:34:9d:e5:ff:ff:
         8d:3b:86:25:e7:20:7b:99:1d:0f:47:f7:bf:12:86:95:44:2a:
         91:2d:98:7a:4a:7c:d5:cd:89:46:3a:e3:c9:7d:a1:85:26:4a:
         35:9c:9b:34:c4:e9:5c:db:ac:96:a3:62:da:2f:75:61:74:80:
         61:23:1b:2d:f6:6e:db:cb:31:97:8d:6c:18:79:90:29:f5:1a:
         52:64:10:93:34:f9:13:b0:3a:f0:c0:95:a9:b2:6b:b5:11:d8:
         3e:10:1b:97:5b:76:85:05:dc:9b:d7:83:44:32:68:bb:15:d0:
         ce:9a:7a:b2:3c:d2:29:66:60:3f:71:80:c2:7e:ea:f2:19:84:
         27:16:83:00:03:b1:c0:cc:17:2a:90:3f:fb:57:ce:49:05:75:
         2f:15:5e:d2:c5:60:4c:70:b9:97:0f:58:eb:de:ba:03:f4:d9:
         97:b0:59:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88Zjytd6+eD0nOcO/f8ha/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk
MWViYmUwHhcNMjQwNTAzMDMwMTI0WhcNMjQwNTA0MDMwMTI0WjAzMTEwLwYDVQQD
Eyg3NTFhNWQxMmI4YmNiODA0ZDcwNmI0NGY3YTc0ODJmZmNjYWFhOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSKq0l6JvhRDmHYyGWEjVgHm5Tjq
aA9PwXbU174VngIfbyJVhIv7xSTnMoZs0zPFUhzn17jPelOoxh3QhWLJdtDEBf3r
vYEfBik9LGM2m5LTQoZoSUnKkUgo4UTE2wQ1Nyw4fk65izlFEN0STiG/YichZD4b
uPoENWCI0Bn/ZjEH3W/gFktgscS6QVO8l5F53rZEiVpVeC/gjHclzN6E8uTfzdWO
AK9k93j34bEZZ8mGoFVvGT09e1LK0/cFyhSK0KDgkNpwekuV1Vx5gu7WOZRwqocL
HYN7ilDTpMTF9oMUWZcUzxLy9WCfslOo+hAAQI58Ix0T5523Lro7gKTmawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUaXRK4vLgE1wa0T3p0gv/MqqlJMB8GA1UdIwQY
MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt
ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy
LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxai48i2
MNJagmSAFFLxD6VisP/rf27FvydeR+UBNA2siQu1GDKR7i0qMvQ7AxR8EK2qBFU1
PXzQk84YXC1taGpzX3UfoYzp5XmEe2R1JuT31oh+TjSd5f//jTuGJecge5kdD0f3
vxKGlUQqkS2Yekp81c2JRjrjyX2hhSZKNZybNMTpXNuslqNi2i91YXSAYSMbLfZu
28sxl41sGHmQKfUaUmQQkzT5E7A68MCVqbJrtRHYPhAbl1t2hQXcm9eDRDJouxXQ
zpp6sjzSKWZgP3GAwn7q8hmEJxaDAAOxwMwXKpA/+1fOSQV1LxVe0sVgTHC5lw9Y
6966A/TZl7BZQA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:35:44 2024 by rpki-client on console-fra.rpki-client.org