Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          +mY9CytaTGl6+RRsrzuXtQzBt6JYh4/Th6KSlmgV0rE=
Subject key identifier:   B4:F7:08:9F:3C:89:76:76:AF:BF:7F:D1:66:84:24:3E:85:B2:72:7A
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       018F836C8260C4EC670C2721524B869221CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          1178
Signing time:             Thu 16 May 2024 22:01:17 +0000
Manifest this update:     Thu 16 May 2024 22:01:17 +0000
Manifest next update:     Fri 17 May 2024 22:01:17 +0000
Files and hashes:         1: 1-QoQrsxBiA8gUhogiPJxJU5aQ28.roa (hash: ZiWQO70O5OS+omIR0bGuJjT+r54t0vgxC/v2DvsQebI=)
                          2: MsvF0XXeG_H1QdtSTQT_I6JC-4g.roa (hash: 7N34yh8nfiV2tA8n/7qroN6muqmFq1I5d6qOsD+HWhw=)
                          3: T277SPSlZ-lAoFdlXuuivHspqKQ.roa (hash: 5A8/bpIovQ9y2LPE88b+lQl67wFZNSCaD2DIwMzSdQs=)
                          4: cvFJ8pL0gvxVzAvHIy7JuBHR3Us.roa (hash: +rBv0ViN64g0uaaeknicM0X1g4jZ+XZq41zbQ3kwUBo=)
                          5: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: O4WBFrtNzBNyGFaA7q/BulZ1+9HYWECh1ONYmhHRyso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6c:82:60:c4:ec:67:0c:27:21:52:4b:86:92:21:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: May 16 22:01:17 2024 GMT
            Not After : May 17 22:01:17 2024 GMT
        Subject: CN=b4f7089f3c897676afbf7fd16684243e85b2727a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:33:d5:e6:a3:a3:ba:02:22:94:73:cb:cf:
                    45:93:8a:bd:70:93:dc:8d:44:60:6e:76:b2:10:c3:
                    52:67:f6:2f:76:67:a4:ed:c4:00:66:92:fc:75:10:
                    81:0b:d0:d1:bb:ce:e3:bc:c7:ef:eb:b3:7a:f5:31:
                    76:e5:f5:85:a8:65:64:9d:98:49:9b:e0:05:f0:e2:
                    70:8d:a7:f7:b9:36:94:f7:82:73:27:62:8b:f7:f3:
                    af:ed:e6:08:e9:ee:cb:52:7e:bc:77:6d:e1:8f:65:
                    cd:31:4e:3c:2e:a4:3c:e4:55:47:ab:b6:57:41:b8:
                    3e:33:b7:75:cc:99:a4:1e:d9:91:2c:b6:22:f5:31:
                    6d:04:56:6a:d3:32:47:9d:e4:6c:9b:61:fe:3b:f3:
                    f7:01:6a:65:e9:33:93:fa:f2:a1:3b:73:10:f8:f8:
                    8b:15:a0:91:28:3a:53:8a:ab:e2:ed:24:72:14:58:
                    c9:d7:8e:e1:54:7c:d9:b0:84:dc:72:a2:f6:84:d2:
                    9c:2f:89:9e:08:44:be:5f:41:30:88:5e:fc:20:6c:
                    18:3a:a0:a6:57:72:fd:18:77:00:ed:0b:90:22:aa:
                    55:96:71:19:34:c4:1a:16:9d:bb:5e:23:09:ed:41:
                    7a:82:b3:1e:15:b9:00:46:53:6f:c4:ce:b4:50:f0:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F7:08:9F:3C:89:76:76:AF:BF:7F:D1:66:84:24:3E:85:B2:72:7A
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:57:7a:ec:31:f3:15:c8:b0:5c:8c:d8:2a:34:06:80:f3:91:
         66:5c:07:9f:61:cc:8d:05:1b:81:79:57:d2:70:1d:29:06:b3:
         fd:32:1c:28:7f:c1:e3:b1:6a:9e:38:a6:95:93:41:ae:94:2e:
         2c:10:70:cd:d4:7a:59:d6:ec:17:32:b6:3e:50:82:63:67:b5:
         b3:fe:3d:56:61:d4:7d:bb:a6:14:a9:5b:a9:e0:fb:c9:d0:fe:
         30:0e:66:5c:2f:f9:3c:fd:39:73:f7:3a:18:8b:7d:48:20:36:
         16:e1:dd:fa:4d:8f:d8:90:04:bc:87:fb:6a:f4:1f:12:d7:4e:
         b9:ec:c5:84:04:f7:d6:6f:bc:ab:d7:a9:81:91:4d:78:a3:02:
         35:15:e9:8a:a3:49:a3:8b:fc:1e:d6:9b:ad:12:6b:cc:5e:b2:
         37:65:5a:34:59:5d:47:0c:7b:49:8a:4d:64:f1:f7:2d:0c:b2:
         cb:ba:b2:a3:2f:b4:55:4a:a2:bc:b1:6f:c2:32:1a:f6:43:66:
         20:33:23:06:6e:ef:ea:d0:61:20:d3:94:dd:42:e7:5f:36:24:
         14:b9:46:72:db:eb:a6:a4:b8:4a:3f:b6:25:32:fb:bf:96:34:
         7c:c2:07:62:54:69:ea:98:ee:df:46:9a:d4:ed:62:96:3f:21:
         d3:5e:09:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DbIJgxOxnDCchUkuGkiHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj
ZWU0ZDgwHhcNMjQwNTE2MjIwMTE3WhcNMjQwNTE3MjIwMTE3WjAzMTEwLwYDVQQD
EyhiNGY3MDg5ZjNjODk3Njc2YWZiZjdmZDE2Njg0MjQzZTg1YjI3MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWIz1eajo7oCIpRzy89Fk4q9cJPc
jURgbnayEMNSZ/Yvdmek7cQAZpL8dRCBC9DRu87jvMfv67N69TF25fWFqGVknZhJ
m+AF8OJwjaf3uTaU94JzJ2KL9/Ov7eYI6e7LUn68d23hj2XNMU48LqQ85FVHq7ZX
Qbg+M7d1zJmkHtmRLLYi9TFtBFZq0zJHneRsm2H+O/P3AWpl6TOT+vKhO3MQ+PiL
FaCRKDpTiqvi7SRyFFjJ147hVHzZsITccqL2hNKcL4meCES+X0EwiF78IGwYOqCm
V3L9GHcA7QuQIqpVlnEZNMQaFp27XiMJ7UF6grMeFbkARlNvxM60UPAiDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT3CJ88iXZ2r79/0WaEJD6FsnJ6MB8GA1UdIwQY
MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt
ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5
LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVd67DHz
FciwXIzYKjQGgPORZlwHn2HMjQUbgXlX0nAdKQaz/TIcKH/B47FqnjimlZNBrpQu
LBBwzdR6WdbsFzK2PlCCY2e1s/49VmHUfbumFKlbqeD7ydD+MA5mXC/5PP05c/c6
GIt9SCA2FuHd+k2P2JAEvIf7avQfEtdOuezFhAT31m+8q9epgZFNeKMCNRXpiqNJ
o4v8HtabrRJrzF6yN2VaNFldRwx7SYpNZPH3LQyyy7qyoy+0VUqivLFvwjIa9kNm
IDMjBm7v6tBhINOU3ULnXzYkFLlGctvrpqS4Sj+2JTL7v5Y0fMIHYlRp6pju30aa
1O1ilj8h014JwA==
-----END CERTIFICATE-----
Generated at Fri May 17 06:35:30 2024 by rpki-client on console-fra.rpki-client.org