Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          xrsistPoJgboMlNSOoZjmgYFs0Sfbh5wRhBVbeOGv7U=
Subject key identifier:   78:4C:0F:99:C7:2B:7E:F3:8A:03:CA:CD:00:11:7F:F2:ED:3F:D5:39
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       018F42D5EF7B0EBE0A9EA77AB3130BD3BC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          0814
Signing time:             Sat 04 May 2024 09:01:07 +0000
Manifest this update:     Sat 04 May 2024 09:01:07 +0000
Manifest next update:     Sun 05 May 2024 09:01:07 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: 5GnLBBtKGVVrBv72wcH5nW5CF+5SpfbC6XvzYSf+0Dw=)
                          2: sfDjxO-hcKYfu8i7EXCg6wgqBuU.roa (hash: 8K/rYP/tSY1RPcT1L6L7OLuM5vMnfm1SK22tZ8zk5Io=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d5:ef:7b:0e:be:0a:9e:a7:7a:b3:13:0b:d3:bc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: May  4 09:01:07 2024 GMT
            Not After : May  5 09:01:07 2024 GMT
        Subject: CN=784c0f99c72b7ef38a03cacd00117ff2ed3fd539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:b1:78:bb:5b:30:67:06:73:5b:b9:1f:3b:
                    54:13:6a:83:61:75:c5:60:e0:96:8b:7c:8e:f7:d0:
                    b9:c3:52:a8:f4:36:a3:ab:9e:9c:5e:89:2c:88:b6:
                    a2:00:13:48:75:d8:c0:37:02:b4:bd:09:a2:a6:61:
                    cf:b2:1f:c2:ba:87:92:f8:ca:85:ea:a8:14:0f:1e:
                    0a:cc:48:12:cd:e2:ad:95:89:bf:62:25:36:6f:10:
                    c2:1d:b9:e6:37:df:37:ad:2e:2e:26:af:a5:e7:72:
                    e8:b9:f2:d3:3d:09:2e:94:58:42:7c:9e:4c:53:d4:
                    69:16:e5:bc:0f:d3:47:19:f8:72:8a:45:f6:51:d6:
                    62:ce:a7:37:37:06:ec:d1:f6:5e:a3:15:44:5e:2d:
                    23:d6:81:72:84:09:4f:64:57:db:c9:32:fd:12:cd:
                    ab:a0:8a:8a:45:cb:5f:e9:a5:b2:07:77:e4:ee:ec:
                    48:2d:a0:a3:e8:30:9a:26:0c:a3:42:ac:b1:fa:85:
                    c8:93:22:a8:65:93:80:40:e2:af:3a:2c:c5:a3:f5:
                    d3:0d:2b:35:98:fc:85:7d:82:aa:f6:1a:cc:cf:39:
                    eb:e2:f6:ae:fb:39:19:05:36:cc:57:f1:81:fb:e6:
                    de:a7:75:3d:51:8d:cd:39:83:42:6c:21:f0:d4:68:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:0F:99:C7:2B:7E:F3:8A:03:CA:CD:00:11:7F:F2:ED:3F:D5:39
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:17:81:d5:4e:88:1f:ff:8a:76:a4:9d:09:7f:4d:19:08:
         3e:d7:77:d7:e5:09:4e:73:80:7a:8d:3a:f2:07:3f:eb:19:8f:
         82:db:3d:27:81:53:69:3d:43:65:dd:81:4f:c4:96:06:a0:28:
         48:e1:36:99:79:18:82:35:7e:83:67:83:e3:87:fe:53:b1:04:
         c6:4d:65:4c:0d:fd:36:84:a6:ae:b8:c9:d7:f7:ba:37:2f:89:
         6b:2d:e5:d4:29:9b:a9:5e:60:20:26:86:d8:ea:d4:91:40:6a:
         81:07:bf:ff:4a:5a:33:be:e8:0e:12:e1:86:55:32:35:5c:c3:
         bf:74:b2:f9:75:fa:bc:6a:e9:cd:f3:2f:af:3a:cb:3b:fe:70:
         04:ca:fb:c5:4e:fc:e1:57:de:d9:d7:92:70:77:b6:0d:a8:4f:
         0b:84:4b:5c:2f:33:36:31:78:56:e2:73:98:98:d3:d1:0f:bd:
         f4:53:ef:f6:2f:ba:bf:25:2d:df:8b:23:2a:32:39:7b:79:f2:
         c1:04:82:ba:4d:74:1c:60:f4:ba:c0:85:52:bf:4a:e5:d1:5e:
         9e:1f:3d:fb:d3:3c:5e:d4:3d:36:54:33:49:9e:e9:f2:85:e8:
         c9:76:56:6e:ac:e7:1f:fd:58:bf:5a:9f:d4:40:34:bb:d5:c3:
         be:c4:95:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9C1e97Dr4Knqd6sxML07yVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5
YTYyNWQwHhcNMjQwNTA0MDkwMTA3WhcNMjQwNTA1MDkwMTA3WjAzMTEwLwYDVQQD
Eyg3ODRjMGY5OWM3MmI3ZWYzOGEwM2NhY2QwMDExN2ZmMmVkM2ZkNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKxeLtbMGcGc1u5HztUE2qDYXXF
YOCWi3yO99C5w1Ko9Dajq56cXoksiLaiABNIddjANwK0vQmipmHPsh/CuoeS+MqF
6qgUDx4KzEgSzeKtlYm/YiU2bxDCHbnmN983rS4uJq+l53LoufLTPQkulFhCfJ5M
U9RpFuW8D9NHGfhyikX2UdZizqc3Nwbs0fZeoxVEXi0j1oFyhAlPZFfbyTL9Es2r
oIqKRctf6aWyB3fk7uxILaCj6DCaJgyjQqyx+oXIkyKoZZOAQOKvOizFo/XTDSs1
mPyFfYKq9hrMzznr4vau+zkZBTbMV/GB++bep3U9UY3NOYNCbCHw1Ggc1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhMD5nHK37zigPKzQARf/LtP9U5MB8GA1UdIwQY
MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt
OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5
LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7IXgdVO
iB//inaknQl/TRkIPtd31+UJTnOAeo068gc/6xmPgts9J4FTaT1DZd2BT8SWBqAo
SOE2mXkYgjV+g2eD44f+U7EExk1lTA39NoSmrrjJ1/e6Ny+Jay3l1CmbqV5gICaG
2OrUkUBqgQe//0paM77oDhLhhlUyNVzDv3Sy+XX6vGrpzfMvrzrLO/5wBMr7xU78
4Vfe2deScHe2DahPC4RLXC8zNjF4VuJzmJjT0Q+99FPv9i+6vyUt34sjKjI5e3ny
wQSCuk10HGD0usCFUr9K5dFenh89+9M8XtQ9NlQzSZ7p8oXoyXZWbqznH/1Yv1qf
1EA0u9XDvsSVow==
-----END CERTIFICATE-----
Generated at Sat May 4 11:23:34 2024 by rpki-client on console-ams.rpki-client.org