Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          AtdUaJHINP3c0AyuxhdD2CUjnMs+uQZ0wdb0/yj5Y0I=
Subject key identifier:   3A:E5:90:D9:4C:C1:CD:82:F0:6A:87:95:04:08:E4:BC:00:5B:82:75
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       018F86DA58528E657A88F03016A0380129D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          0CB7
Signing time:             Fri 17 May 2024 14:00:07 +0000
Manifest this update:     Fri 17 May 2024 14:00:07 +0000
Manifest next update:     Sat 18 May 2024 14:00:07 +0000
Files and hashes:         1: 1-1hPho1XPvqmhMNCQAWN6hCR18w.roa (hash: 6LHJetLayFyViJ7WA9RvcKnnCGk11bplhcCwf3gqYkg=)
                          2: YrvzDqkd1B5xtAgrJG6_vPA5hTY.roa (hash: bB+zAHFh3cSESWCCORFSQjv/+zrxpyhh7DN+eN8kYLM=)
                          3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: PDzgPACvQkgdTsFQ6CQuAumLCvFY+54BoG0J5577C78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:58:52:8e:65:7a:88:f0:30:16:a0:38:01:29:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: May 17 14:00:07 2024 GMT
            Not After : May 18 14:00:07 2024 GMT
        Subject: CN=3ae590d94cc1cd82f06a87950408e4bc005b8275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:5f:ff:75:98:04:06:90:08:0e:48:80:c3:
                    5d:40:c7:c3:68:1a:2d:23:2c:c0:c6:1a:fe:c5:18:
                    9c:20:1b:15:2a:ba:58:41:9f:c2:47:5a:a3:76:f7:
                    f0:af:f4:e5:e0:50:b5:d7:01:d3:5e:a3:20:56:b2:
                    ef:de:48:65:5f:8f:e8:db:c1:7e:c1:26:ab:e7:f2:
                    a1:c6:25:bd:7f:a2:f7:b7:48:ed:88:2c:b9:00:9b:
                    87:07:29:bc:1b:e0:8e:76:51:11:2a:39:dc:25:f3:
                    14:9f:e2:85:56:84:b0:3c:fc:2a:b1:db:f5:25:70:
                    89:77:22:ca:fd:7a:81:54:89:d9:13:4f:9b:85:82:
                    16:76:04:d0:14:b1:32:3d:06:fd:f4:17:5f:af:a2:
                    81:9c:d1:44:1c:7a:61:3a:22:2a:a4:e6:6d:df:73:
                    45:ca:ad:47:6a:2e:87:64:dd:06:65:18:70:ed:e4:
                    54:7e:b5:fa:d9:b2:6c:14:6a:3b:aa:39:7d:a0:bb:
                    9b:c1:20:3c:77:3a:36:d4:0e:61:04:02:4d:23:b7:
                    a4:95:4b:3b:40:06:3a:e2:a8:4a:66:6e:c5:37:57:
                    55:29:3c:0a:78:c3:d8:f0:e1:52:6f:07:90:d4:44:
                    02:10:2f:1b:3b:4f:ca:a4:b5:e6:b7:6d:24:c1:98:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:90:D9:4C:C1:CD:82:F0:6A:87:95:04:08:E4:BC:00:5B:82:75
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:2e:71:da:aa:e6:4e:8e:33:a4:05:e9:3e:72:13:14:ab:
         17:c8:d6:83:4a:95:4f:9f:cf:7e:af:72:e6:2c:27:eb:07:5b:
         53:f0:81:e0:da:a4:80:eb:9a:7b:11:c9:7e:aa:e6:67:32:90:
         69:13:19:23:a7:31:8d:bb:4c:83:35:16:ce:bd:96:7a:2b:aa:
         ac:73:25:ff:60:74:a4:fb:02:a1:14:2f:9e:b3:48:3c:1e:b7:
         b7:d7:c6:84:43:de:91:b2:f9:86:6d:47:58:ab:7b:e0:b8:80:
         63:5a:f6:44:b1:61:41:73:36:59:9e:e6:a8:26:e9:7d:46:fc:
         d9:64:65:d5:ac:23:7b:2f:97:03:1e:9a:5b:02:ac:ff:64:49:
         68:c1:7c:08:7f:d7:5c:16:96:d5:74:82:c7:be:c6:07:56:16:
         69:9d:a7:46:6c:a6:e5:a5:50:0d:8a:81:8d:78:95:23:a4:63:
         64:35:86:f4:95:c7:43:13:f4:35:d6:8f:e3:ca:b5:90:23:e6:
         94:38:01:d9:51:a9:a1:2f:2c:30:91:f8:cc:db:45:40:6c:16:
         9d:20:bb:68:94:26:16:ee:0a:f4:d5:82:f7:3f:02:48:55:fa:
         1a:28:df:c8:de:ad:df:83:b3:2f:a5:16:f2:b0:93:1c:c0:89:
         8e:3e:d2:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2lhSjmV6iPAwFqA4ASnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjQwNTE3MTQwMDA3WhcNMjQwNTE4MTQwMDA3WjAzMTEwLwYDVQQD
EygzYWU1OTBkOTRjYzFjZDgyZjA2YTg3OTUwNDA4ZTRiYzAwNWI4Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyJf/3WYBAaQCA5IgMNdQMfDaBot
IyzAxhr+xRicIBsVKrpYQZ/CR1qjdvfwr/Tl4FC11wHTXqMgVrLv3khlX4/o28F+
wSar5/KhxiW9f6L3t0jtiCy5AJuHBym8G+COdlERKjncJfMUn+KFVoSwPPwqsdv1
JXCJdyLK/XqBVInZE0+bhYIWdgTQFLEyPQb99Bdfr6KBnNFEHHphOiIqpOZt33NF
yq1Hai6HZN0GZRhw7eRUfrX62bJsFGo7qjl9oLubwSA8dzo21A5hBAJNI7eklUs7
QAY64qhKZm7FN1dVKTwKeMPY8OFSbweQ1EQCEC8bO0/KpLXmt20kwZgxrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrlkNlMwc2C8GqHlQQI5LwAW4J1MB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfsucdqq
5k6OM6QF6T5yExSrF8jWg0qVT5/Pfq9y5iwn6wdbU/CB4NqkgOuaexHJfqrmZzKQ
aRMZI6cxjbtMgzUWzr2WeiuqrHMl/2B0pPsCoRQvnrNIPB63t9fGhEPekbL5hm1H
WKt74LiAY1r2RLFhQXM2WZ7mqCbpfUb82WRl1awjey+XAx6aWwKs/2RJaMF8CH/X
XBaW1XSCx77GB1YWaZ2nRmym5aVQDYqBjXiVI6RjZDWG9JXHQxP0NdaP48q1kCPm
lDgB2VGpoS8sMJH4zNtFQGwWnSC7aJQmFu4K9NWC9z8CSFX6GijfyN6t34OzL6UW
8rCTHMCJjj7S/w==
-----END CERTIFICATE-----
Generated at Fri May 17 18:31:53 2024 by rpki-client on console-fra.rpki-client.org