Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File:                     UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier:          Q79E6Rg1bjtNouU01RoVzpcfYknmOl12m+mqMntBsU8=
Subject key identifier:   E4:6A:55:39:C2:F7:AE:E6:0D:8A:FE:27:9C:83:EE:17:8C:50:4A:6E
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer:       /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial:       018F98E0A7832C3658E8EA431BF7509FD878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number:          B6
Signing time:             Tue 21 May 2024 02:00:10 +0000
Manifest this update:     Tue 21 May 2024 02:00:10 +0000
Manifest next update:     Wed 22 May 2024 02:00:10 +0000
Files and hashes:         1: CSiL6Yyeg0xQXBcj8XOK4HgrYxI.roa (hash: s+ixpHOOBgmvBKRK/+ubiTkSvkUa1at28/oEorgp1hc=)
                          2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: S2trOt86bzw2gRmLXhLXUS+PHxcEjHqw33O/QcL1cq4=)
                          3: Z5Wj4ETCBwwFJoDKH5Fj58u-pFU.roa (hash: HnoyoyObavcuS/eILrDrrZ4EIOLhnlSVEA6BYmwlkwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:e0:a7:83:2c:36:58:e8:ea:43:1b:f7:50:9f:d8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
        Validity
            Not Before: May 21 02:00:10 2024 GMT
            Not After : May 22 02:00:10 2024 GMT
        Subject: CN=e46a5539c2f7aee60d8afe279c83ee178c504a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:86:62:97:a7:13:28:28:e4:71:4e:6f:3d:
                    e9:4d:ff:20:c2:70:e5:55:48:2c:9a:d8:4e:21:be:
                    f4:53:0a:71:ce:09:2b:e0:ed:ca:ca:a4:30:3b:fd:
                    68:de:b9:8a:da:37:1c:ed:e0:ba:3b:20:ca:3c:55:
                    8b:05:d8:eb:ec:7a:7d:9c:61:b4:59:c4:49:36:48:
                    e7:50:07:3d:f2:a0:e1:a0:0d:82:6f:14:7c:be:1a:
                    d6:c1:91:07:f5:77:11:c0:9f:77:96:59:f4:4e:e4:
                    11:55:1d:2f:14:78:6d:20:3b:bd:57:77:98:f5:dd:
                    97:90:30:d3:d2:ed:15:7a:ce:2f:9d:c3:71:8b:f0:
                    37:a5:bb:39:3d:a4:bb:22:d9:45:1e:25:3b:36:12:
                    71:c7:98:83:59:71:60:cb:98:bc:af:0a:04:e2:5d:
                    f8:09:6b:5c:3e:6a:38:a7:d9:d6:fd:79:78:09:62:
                    5b:2f:35:f0:cd:5f:d8:0f:8e:94:94:73:ae:4e:43:
                    2c:41:fd:1d:56:4e:ff:37:09:8b:a2:d7:29:fa:e5:
                    8b:70:a6:2b:07:39:45:01:58:7a:51:8e:5c:4e:f6:
                    63:a4:2d:c6:5a:b6:58:19:48:5b:1a:08:8c:48:f8:
                    52:66:7f:71:1a:50:78:78:07:5d:94:0d:93:f6:b9:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6A:55:39:C2:F7:AE:E6:0D:8A:FE:27:9C:83:EE:17:8C:50:4A:6E
            X509v3 Authority Key Identifier:
                keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:48:b1:f0:75:4f:ef:a2:bc:6b:c8:01:b8:2f:4f:44:c8:
         73:9f:f7:be:5a:e4:1a:9b:f1:0b:bd:1a:42:40:5c:a3:26:dd:
         c1:4c:70:5e:82:aa:4a:5d:6d:3c:fe:3f:a1:07:95:89:10:df:
         22:0d:fa:12:24:36:46:05:be:ee:e0:62:6f:b0:83:9a:32:79:
         f0:ca:a6:7f:c6:a8:34:d3:29:4b:e9:09:88:bc:b8:55:3f:17:
         7d:c5:de:9d:ca:3f:7c:f6:63:f0:e7:c7:91:b7:20:b9:64:d7:
         d5:18:89:ba:ab:b7:2a:9c:75:f5:ef:85:cb:b6:f2:54:32:72:
         c8:20:f6:d7:9a:36:56:d7:3e:a2:eb:f4:d6:26:2f:b5:ec:78:
         a2:af:c1:39:1f:32:90:c5:ce:5f:96:d7:bf:b8:e4:fa:cf:17:
         4f:ed:e2:60:7d:bf:a4:af:bd:8d:c0:23:da:3e:51:56:14:43:
         2f:38:0d:66:60:ca:52:93:ce:dd:6c:d9:04:b8:d0:27:e3:f5:
         be:99:36:d7:e1:59:53:0b:34:b8:4a:21:a5:d9:ae:b8:9f:d6:
         8c:83:4e:7f:88:a8:72:6e:a4:44:5a:6d:c9:be:63:a5:d8:d9:
         d7:17:08:4d:73:9b:6e:8f:d0:54:a8:2a:14:ea:90:6e:aa:78:
         d3:69:22:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Y4KeDLDZY6OpDG/dQn9h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMmMzN2U3ZWNiNTliNjY3ZmE4MmVjZjA5M2U1ZWQ4NzY2
MWE4ZTIwHhcNMjQwNTIxMDIwMDEwWhcNMjQwNTIyMDIwMDEwWjAzMTEwLwYDVQQD
EyhlNDZhNTUzOWMyZjdhZWU2MGQ4YWZlMjc5YzgzZWUxNzhjNTA0YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllGGYpenEygo5HFObz3pTf8gwnDl
VUgsmthOIb70Uwpxzgkr4O3KyqQwO/1o3rmK2jcc7eC6OyDKPFWLBdjr7Hp9nGG0
WcRJNkjnUAc98qDhoA2CbxR8vhrWwZEH9XcRwJ93lln0TuQRVR0vFHhtIDu9V3eY
9d2XkDDT0u0Ves4vncNxi/A3pbs5PaS7ItlFHiU7NhJxx5iDWXFgy5i8rwoE4l34
CWtcPmo4p9nW/Xl4CWJbLzXwzV/YD46UlHOuTkMsQf0dVk7/NwmLotcp+uWLcKYr
BzlFAVh6UY5cTvZjpC3GWrZYGUhbGgiMSPhSZn9xGlB4eAddlA2T9rmXxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORqVTnC967mDYr+J5yD7heMUEpuMB8GA1UdIwQY
MBaAFFAsN+fstZtmf6guzwk+Xth2YajiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWIt
YmExNDg0M2M1NDljLzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWItYmExNDg0M2M1NDlj
LzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpFIsfB1
T++ivGvIAbgvT0TIc5/3vlrkGpvxC70aQkBcoybdwUxwXoKqSl1tPP4/oQeViRDf
Ig36EiQ2RgW+7uBib7CDmjJ58Mqmf8aoNNMpS+kJiLy4VT8XfcXenco/fPZj8OfH
kbcguWTX1RiJuqu3Kpx19e+Fy7byVDJyyCD215o2Vtc+ouv01iYvtex4oq/BOR8y
kMXOX5bXv7jk+s8XT+3iYH2/pK+9jcAj2j5RVhRDLzgNZmDKUpPO3WzZBLjQJ+P1
vpk21+FZUws0uEohpdmuuJ/WjINOf4iocm6kRFptyb5jpdjZ1xcITXObbo/QVKgq
FOqQbqp402kinw==
-----END CERTIFICATE-----
Generated at Tue May 21 02:54:49 2024 by rpki-client on console-fra.rpki-client.org