Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File:                     gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier:          P8a+LWWwYlPM6P6YHZMl9lmsxXc7iO+rsSrvgO694yo=
Subject key identifier:   8F:29:C7:57:B9:C4:AD:66:41:84:55:1B:76:A3:85:3E:A1:13:49:11
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer:       /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial:       018F94CD632A2773732114EC8C165329508B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number:          117E
Signing time:             Mon 20 May 2024 07:00:39 +0000
Manifest this update:     Mon 20 May 2024 07:00:39 +0000
Manifest next update:     Tue 21 May 2024 07:00:39 +0000
Files and hashes:         1: 6sOIdb-WZrvc4BJlq59axqMlgRs.roa (hash: IKcJMThRZUrIDHHSZp3Z/kAafV8hEl2TTedufIkFTfw=)
                          2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: iZx0Yk00CE0gCx9UNTzK3p+cHr8HTgRienX/n7QlhXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cd:63:2a:27:73:73:21:14:ec:8c:16:53:29:50:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
        Validity
            Not Before: May 20 07:00:39 2024 GMT
            Not After : May 21 07:00:39 2024 GMT
        Subject: CN=8f29c757b9c4ad664184551b76a3853ea1134911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bf:44:31:06:3b:f2:bf:51:49:52:39:05:84:
                    77:0d:42:9f:4f:ea:19:6d:da:9c:31:6e:bb:6e:30:
                    a2:a0:03:5b:f9:b8:36:14:ff:f5:d6:6a:85:4c:39:
                    8f:75:d3:33:be:e9:57:7b:f6:dc:bc:2a:93:67:03:
                    2f:25:45:a6:eb:58:06:37:8b:c7:ce:3e:1b:de:2c:
                    08:8c:01:97:67:4c:30:92:89:5a:a6:8e:99:54:69:
                    1c:66:b4:fc:af:34:3d:23:d2:36:19:32:d1:f8:65:
                    10:65:59:72:b8:77:da:83:8e:46:89:2c:d9:0b:00:
                    4b:23:96:06:e7:21:0a:c5:cf:de:86:a0:c4:59:0a:
                    7f:62:9e:a9:68:73:02:7f:6f:94:02:bb:53:4d:bb:
                    af:50:3d:f6:1c:a2:89:71:1e:32:ce:af:9b:de:2c:
                    78:3a:b5:3c:9b:10:ee:61:13:66:22:2b:90:84:b6:
                    75:3d:a8:c9:b6:34:d8:42:54:44:82:1d:b0:73:37:
                    46:19:36:82:67:fe:a3:0e:08:b2:8a:95:74:6f:51:
                    a8:f5:88:e0:07:ea:50:cd:33:19:1f:21:8e:60:01:
                    b3:5f:a4:fa:f0:11:0b:25:f3:48:46:3e:52:c8:51:
                    c0:48:fe:d7:bc:2b:12:79:e1:74:37:53:2c:19:91:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:C7:57:B9:C4:AD:66:41:84:55:1B:76:A3:85:3E:A1:13:49:11
            X509v3 Authority Key Identifier:
                keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:67:f0:90:62:ae:94:dc:ed:ff:98:56:d2:ef:a0:8f:d9:
         f1:02:22:7c:cc:d7:70:1a:84:9c:27:e3:55:f3:7d:7d:ed:8f:
         25:6f:67:2e:21:3b:f1:ca:45:bb:58:ec:fa:30:d6:9d:f4:0e:
         c4:f5:7d:c9:b1:b8:09:fe:54:ca:a0:9c:ae:51:af:ce:95:e3:
         a5:2d:c2:11:e1:93:e0:12:49:43:fc:f6:1e:e7:73:d5:ab:2c:
         29:ca:24:67:4c:fd:21:fa:b4:23:4b:c3:5d:a6:54:b6:2a:15:
         4b:0a:79:98:1a:36:a6:b8:2f:96:9f:4c:f3:51:12:34:7d:90:
         42:3e:7b:58:b0:73:26:bb:52:86:c3:f1:a0:5c:36:6f:9f:86:
         f6:fd:d6:de:a1:1d:82:ba:ac:aa:b9:05:b2:81:fd:9a:a2:0b:
         c3:72:91:57:7f:6a:f3:31:25:25:02:53:e3:5d:74:5b:4d:01:
         1e:24:f8:fd:0d:e1:c5:5b:21:0c:01:00:41:a8:93:ed:cb:2a:
         4d:99:08:bf:76:27:43:ae:3e:86:78:ae:7c:85:4c:a4:38:3a:
         e0:d5:25:08:31:97:a2:3c:35:db:04:21:d5:c2:66:68:c7:aa:
         05:0c:3c:2b:82:b2:01:3e:b0:f2:67:1e:f7:0c:10:d8:9b:b9:
         9b:61:43:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+UzWMqJ3NzIRTsjBZTKVCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk
YjY2M2UwHhcNMjQwNTIwMDcwMDM5WhcNMjQwNTIxMDcwMDM5WjAzMTEwLwYDVQQD
Eyg4ZjI5Yzc1N2I5YzRhZDY2NDE4NDU1MWI3NmEzODUzZWExMTM0OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b9EMQY78r9RSVI5BYR3DUKfT+oZ
bdqcMW67bjCioANb+bg2FP/11mqFTDmPddMzvulXe/bcvCqTZwMvJUWm61gGN4vH
zj4b3iwIjAGXZ0wwkolapo6ZVGkcZrT8rzQ9I9I2GTLR+GUQZVlyuHfag45GiSzZ
CwBLI5YG5yEKxc/ehqDEWQp/Yp6paHMCf2+UArtTTbuvUD32HKKJcR4yzq+b3ix4
OrU8mxDuYRNmIiuQhLZ1PajJtjTYQlREgh2wczdGGTaCZ/6jDgiyipV0b1Go9Yjg
B+pQzTMZHyGOYAGzX6T68BELJfNIRj5SyFHASP7XvCsSeeF0N1MsGZGI8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8px1e5xK1mQYRVG3ajhT6hE0kRMB8GA1UdIwQY
MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt
ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl
LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6hn8JBi
rpTc7f+YVtLvoI/Z8QIifMzXcBqEnCfjVfN9fe2PJW9nLiE78cpFu1js+jDWnfQO
xPV9ybG4Cf5UyqCcrlGvzpXjpS3CEeGT4BJJQ/z2Hudz1assKcokZ0z9Ifq0I0vD
XaZUtioVSwp5mBo2prgvlp9M81ESNH2QQj57WLBzJrtShsPxoFw2b5+G9v3W3qEd
grqsqrkFsoH9mqILw3KRV39q8zElJQJT4110W00BHiT4/Q3hxVshDAEAQaiT7csq
TZkIv3YnQ64+hniufIVMpDg64NUlCDGXojw12wQh1cJmaMeqBQw8K4KyAT6w8mce
9wwQ2Ju5m2FDsg==
-----END CERTIFICATE-----
Generated at Mon May 20 11:31:39 2024 by rpki-client on console-fra.rpki-client.org