Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File:                     2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier:          eYy6xgNsrrs0d3ZaIfHvNkyzP7lXrhBUFVybHF1/L/g=
Subject key identifier:   F4:E9:AF:91:54:8D:EC:53:1A:F2:17:E1:BE:C2:0C:08:5D:0B:6F:D2
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer:       /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial:       018F5139027C81967172A7AA3EF299556B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 04:04:01 +0000
Manifest this update:     Tue 07 May 2024 04:04:01 +0000
Manifest next update:     Wed 08 May 2024 04:04:01 +0000
Files and hashes:         1: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: tSt+IG0nWYsHpIo575OnLPyq+nOptQhcYH/esCnfFOk=)
                          2: lanMJS4Am6urFlUa0s4lrBNolvQ.roa (hash: ihUppG/wWpqCjb9+bCzX+Qs06dJX/9KYjJi9q2r6kIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:39:02:7c:81:96:71:72:a7:aa:3e:f2:99:55:6b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
        Validity
            Not Before: May  7 04:04:01 2024 GMT
            Not After : May  8 04:04:01 2024 GMT
        Subject: CN=f4e9af91548dec531af217e1bec20c085d0b6fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:a1:73:fd:23:62:98:37:f5:52:f9:dc:a1:
                    7e:95:d4:5d:52:0a:df:dc:eb:a1:dc:90:ac:ee:f2:
                    fc:e4:ea:55:8e:76:36:65:3f:18:5b:38:17:89:7f:
                    f6:94:7b:1b:88:c0:bb:31:4a:39:8c:77:ae:10:69:
                    18:6c:f2:0a:f0:89:0d:04:cc:38:e3:4c:8d:c9:a5:
                    9b:67:8a:37:26:b5:6b:41:ab:40:7d:fb:3e:c7:ed:
                    46:ba:f6:7d:e0:eb:1b:0a:24:84:32:2c:0e:37:6f:
                    2b:06:4d:fd:1b:17:12:e3:ea:f8:73:2d:d8:f7:81:
                    a9:3a:e1:90:16:0f:8b:ff:3c:0c:2c:d4:3b:61:ac:
                    93:0e:57:24:cf:61:d1:96:88:cf:ea:39:0e:30:a0:
                    ca:36:af:a1:87:05:98:66:ce:23:b8:78:19:28:43:
                    fe:8c:01:1f:26:ef:cd:aa:a3:d0:07:18:0e:ab:ff:
                    5f:1e:4b:cb:88:56:d6:e1:26:09:13:fa:dc:03:c5:
                    77:b8:60:4a:f2:40:f4:cc:95:1b:7c:e5:7f:d1:c5:
                    8e:81:dd:c6:bc:d4:95:83:5a:bb:6b:d7:a3:e2:c0:
                    64:c3:e7:ba:f5:30:d4:7f:1d:58:86:00:8e:24:87:
                    99:9f:61:e7:49:01:fb:81:ec:12:ea:d9:41:05:e7:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:AF:91:54:8D:EC:53:1A:F2:17:E1:BE:C2:0C:08:5D:0B:6F:D2
            X509v3 Authority Key Identifier:
                keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:36:61:7a:a0:19:6a:b9:c8:23:59:ed:98:a5:02:53:3f:
         ac:6e:99:0a:69:fb:63:3d:44:4a:06:11:30:3e:37:6f:50:f2:
         10:7f:87:ef:7d:f9:2e:ac:5b:1d:0a:1a:23:45:34:c9:08:ea:
         35:c0:22:d1:52:de:88:39:7a:d5:fb:91:f8:ce:a9:be:0d:5d:
         74:90:48:cc:eb:e3:e0:ab:4d:5b:1f:e3:3b:9a:eb:38:42:d4:
         0d:8a:46:1c:2c:e2:b7:64:b6:fd:c7:29:e7:b1:d5:7b:2f:7d:
         a9:77:01:0b:19:36:2a:b8:d0:8e:ac:0a:c4:09:c0:12:a4:e6:
         90:10:2c:f3:dd:2c:6d:90:d5:78:74:db:0d:6a:7c:c1:72:99:
         63:eb:10:78:58:c1:bb:8a:cb:15:06:57:8d:bf:bb:52:a1:7f:
         86:f0:ff:de:b5:9f:92:dc:20:28:0a:9c:d2:72:33:4b:38:44:
         47:03:40:d6:68:db:63:76:df:46:e1:0d:a0:09:6a:46:7f:60:
         db:f3:d7:e4:88:3a:3e:d3:68:15:d2:e4:6c:82:91:6e:93:c2:
         0e:3d:a9:48:4b:c8:f6:62:67:e4:0c:17:e1:90:05:78:d4:e7:
         61:e9:f9:ee:7b:02:92:72:bd:05:41:4a:d4:78:7d:57:0d:da:
         c0:a1:96:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROQJ8gZZxcqeqPvKZVWt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzJkYThkNDU4ODQ5ZDVmNDBiYTZmMGI5MjA4Zjg1ODVk
OWUyM2UwHhcNMjQwNTA3MDQwNDAxWhcNMjQwNTA4MDQwNDAxWjAzMTEwLwYDVQQD
EyhmNGU5YWY5MTU0OGRlYzUzMWFmMjE3ZTFiZWMyMGMwODVkMGI2ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk6hc/0jYpg39VL53KF+ldRdUgrf
3Ouh3JCs7vL85OpVjnY2ZT8YWzgXiX/2lHsbiMC7MUo5jHeuEGkYbPIK8IkNBMw4
40yNyaWbZ4o3JrVrQatAffs+x+1GuvZ94OsbCiSEMiwON28rBk39GxcS4+r4cy3Y
94GpOuGQFg+L/zwMLNQ7YayTDlckz2HRlojP6jkOMKDKNq+hhwWYZs4juHgZKEP+
jAEfJu/NqqPQBxgOq/9fHkvLiFbW4SYJE/rcA8V3uGBK8kD0zJUbfOV/0cWOgd3G
vNSVg1q7a9ej4sBkw+e69TDUfx1YhgCOJIeZn2HnSQH7gewS6tlBBeeXcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTpr5FUjexTGvIX4b7CDAhdC2/SMB8GA1UdIwQY
MBaAFNgy2o1FiEnV9Aum8Lkgj4WF2eI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYt
Yzk5Nzk1ZjM4ODVmLzEvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYtYzk5Nzk1ZjM4ODVm
LzEvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewc2YXqg
GWq5yCNZ7ZilAlM/rG6ZCmn7Yz1ESgYRMD43b1DyEH+H7335LqxbHQoaI0U0yQjq
NcAi0VLeiDl61fuR+M6pvg1ddJBIzOvj4KtNWx/jO5rrOELUDYpGHCzit2S2/ccp
57HVey99qXcBCxk2KrjQjqwKxAnAEqTmkBAs890sbZDVeHTbDWp8wXKZY+sQeFjB
u4rLFQZXjb+7UqF/hvD/3rWfktwgKAqc0nIzSzhERwNA1mjbY3bfRuENoAlqRn9g
2/PX5Ig6PtNoFdLkbIKRbpPCDj2pSEvI9mJn5AwX4ZAFeNTnYen57nsCknK9BUFK
1Hh9Vw3awKGWiQ==
-----END CERTIFICATE-----
Generated at Tue May 7 04:45:23 2024 by rpki-client on console-fra.rpki-client.org