Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File:                     tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier:          tgvXx9wTx9i1xd0diP6BBmYVOjW3Cs/Th50aN8CdJ1E=
Subject key identifier:   9F:35:CB:91:C0:65:96:92:73:3F:16:2C:E4:5D:AF:F4:1E:27:BB:D1
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer:       /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial:       018F866CC87CD9994E988BBCC7399BF05C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number:          0415
Signing time:             Fri 17 May 2024 12:00:27 +0000
Manifest this update:     Fri 17 May 2024 12:00:27 +0000
Manifest next update:     Sat 18 May 2024 12:00:27 +0000
Files and hashes:         1: Sx6zXuvKBcBwPwy49aPX9FSJ3_M.roa (hash: JpaHWQ3HZec7MBhI/gk4wGUrgIZKzcDw7hRYIG8GcRE=)
                          2: f114cWYKe42ZAAlbaz5x8NhLHCo.roa (hash: 5lCUt2yc4MTwxYGnHwLliYXoypodtGv5tAuHgxqQu7E=)
                          3: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: lP47qflZ50UqmIV80YSm6qWqnF9nZ+enoBRcD83O6KE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:c8:7c:d9:99:4e:98:8b:bc:c7:39:9b:f0:5c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
        Validity
            Not Before: May 17 12:00:27 2024 GMT
            Not After : May 18 12:00:27 2024 GMT
        Subject: CN=9f35cb91c0659692733f162ce45daff41e27bbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:50:0b:a7:f5:48:d4:fe:48:0c:dc:4b:41:
                    7c:d6:b2:57:11:ea:58:14:4d:d8:17:7d:46:40:5d:
                    d2:e0:0e:e4:fa:ef:7f:0c:92:37:4a:c0:fb:7a:f9:
                    8b:21:38:9f:4b:26:f6:74:50:a0:f9:b2:5e:c8:0d:
                    07:81:df:a4:70:df:46:ea:19:fd:72:3c:f5:30:47:
                    5f:b5:7e:e1:82:cd:1a:c1:32:c2:b9:cc:06:6c:e5:
                    37:9a:e1:d1:03:83:98:77:89:e6:57:f4:fb:7e:eb:
                    1c:d5:59:05:3b:75:a6:f9:ba:9a:29:fe:88:53:0f:
                    de:3c:5f:ca:10:b7:0f:80:95:b7:1d:8a:fc:d7:c0:
                    0a:51:a6:43:42:33:fa:b3:99:a5:16:97:c6:a5:e3:
                    73:1b:0f:b5:b1:b2:ab:cf:70:46:82:a1:0d:26:03:
                    c8:58:9d:84:66:d1:62:fd:7e:d0:f9:71:95:c9:12:
                    9a:66:1d:b5:d8:a1:06:53:15:ca:f5:4e:23:5a:a9:
                    81:17:39:bb:cb:6b:c0:c6:fd:b1:86:9a:24:9f:56:
                    95:ce:b3:0d:47:7b:87:a1:84:d9:6b:c4:f1:5c:ce:
                    43:fe:08:25:d9:6e:ff:63:9f:23:a9:3e:62:59:9a:
                    32:f0:d2:09:20:46:0f:2b:30:20:f9:47:0e:36:b2:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:35:CB:91:C0:65:96:92:73:3F:16:2C:E4:5D:AF:F4:1E:27:BB:D1
            X509v3 Authority Key Identifier:
                keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:6c:fe:19:cd:f5:f7:c1:9c:84:05:1b:b5:c4:12:67:f2:
         5b:ae:3e:73:95:0e:65:47:88:a8:b1:bb:11:d9:4b:75:92:e1:
         b3:fc:a0:1e:b2:2b:21:dd:1f:d0:d4:56:6c:5c:92:d9:26:06:
         77:d9:a1:38:34:4b:83:ab:c6:05:f3:bb:d0:be:b3:eb:a8:16:
         ce:7f:27:2f:d2:07:64:6d:ac:88:40:03:40:9d:1f:ab:93:c3:
         90:ca:f8:87:cb:ea:ef:f5:da:f2:fd:68:2e:c3:63:21:32:65:
         37:31:e4:a0:62:cf:3b:e4:5c:2b:8e:aa:6d:77:28:3e:c2:a2:
         d5:17:4b:15:e0:25:75:e1:fe:3e:82:fa:6f:73:67:64:2b:a3:
         a9:f7:6f:36:71:b7:43:a4:00:df:2f:1f:e8:2f:8d:00:be:22:
         27:81:44:75:1d:b5:5b:e6:3a:ac:d9:d4:7f:6e:30:f9:70:8b:
         2c:5b:9c:5c:05:3d:f2:55:65:8d:e7:35:e0:08:f4:99:af:1c:
         13:0b:07:b8:a1:5c:d3:fa:56:66:ff:bf:d2:78:80:fa:16:ea:
         03:7b:c6:a9:d1:f1:fc:10:c3:ac:62:b1:34:4e:74:b1:1c:67:
         e4:4c:58:16:13:e0:15:a3:3d:16:dc:97:16:48:cb:c6:f7:74:
         2d:72:66:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbMh82ZlOmIu8xzmb8FyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi
NDYyZTcwHhcNMjQwNTE3MTIwMDI3WhcNMjQwNTE4MTIwMDI3WjAzMTEwLwYDVQQD
Eyg5ZjM1Y2I5MWMwNjU5NjkyNzMzZjE2MmNlNDVkYWZmNDFlMjdiYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunFQC6f1SNT+SAzcS0F81rJXEepY
FE3YF31GQF3S4A7k+u9/DJI3SsD7evmLITifSyb2dFCg+bJeyA0Hgd+kcN9G6hn9
cjz1MEdftX7hgs0awTLCucwGbOU3muHRA4OYd4nmV/T7fusc1VkFO3Wm+bqaKf6I
Uw/ePF/KELcPgJW3HYr818AKUaZDQjP6s5mlFpfGpeNzGw+1sbKrz3BGgqENJgPI
WJ2EZtFi/X7Q+XGVyRKaZh212KEGUxXK9U4jWqmBFzm7y2vAxv2xhpokn1aVzrMN
R3uHoYTZa8TxXM5D/ggl2W7/Y58jqT5iWZoy8NIJIEYPKzAg+UcONrJatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ81y5HAZZaScz8WLORdr/QeJ7vRMB8GA1UdIwQY
MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt
OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm
LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtBs/hnN
9ffBnIQFG7XEEmfyW64+c5UOZUeIqLG7EdlLdZLhs/ygHrIrId0f0NRWbFyS2SYG
d9mhODRLg6vGBfO70L6z66gWzn8nL9IHZG2siEADQJ0fq5PDkMr4h8vq7/Xa8v1o
LsNjITJlNzHkoGLPO+RcK46qbXcoPsKi1RdLFeAldeH+PoL6b3NnZCujqfdvNnG3
Q6QA3y8f6C+NAL4iJ4FEdR21W+Y6rNnUf24w+XCLLFucXAU98lVljec14Aj0ma8c
EwsHuKFc0/pWZv+/0niA+hbqA3vGqdHx/BDDrGKxNE50sRxn5ExYFhPgFaM9FtyX
FkjLxvd0LXJmTw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:09:21 2024 by rpki-client on console-ams.rpki-client.org