Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File:                     XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier:          +XRJWmdnW0SzpmPMH2q435YH2v90g6/greG4adA3F3M=
Subject key identifier:   0C:B6:CB:63:6A:8F:2B:52:A9:62:06:14:51:31:4C:9A:46:BA:D9:95
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer:       /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial:       018F87EDA0E597F123F08B3C8EE8087E87D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number:          0E88
Signing time:             Fri 17 May 2024 19:00:48 +0000
Manifest this update:     Fri 17 May 2024 19:00:48 +0000
Manifest next update:     Sat 18 May 2024 19:00:48 +0000
Files and hashes:         1: 3MlAnYNYmpnnucH0i9X2-d_jBwM.roa (hash: UsXEbfTw/yVkUEMUAXPUAC5D2jht3sHEf3hrfVk9eCA=)
                          2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: +YkueE7Fhoi2WuaPUYGNeT0cq/NVMLZVu48KD00LJf0=)
                          3: XlZV0JGoC61-cMHTHreM1RkVfGY.roa (hash: V/7Is+IIQlrls2gwUa06ty07/dwo5arO9KSPyPc0cbQ=)
                          4: cTCd_dVfi9yiX1yVcaBRxBLQsfU.roa (hash: LeUyNi/s483VZAd8BYjHy9P0YaXgxID01PlkVQav/EU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:a0:e5:97:f1:23:f0:8b:3c:8e:e8:08:7e:87:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
        Validity
            Not Before: May 17 19:00:48 2024 GMT
            Not After : May 18 19:00:48 2024 GMT
        Subject: CN=0cb6cb636a8f2b52a962061451314c9a46bad995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:ac:31:35:3a:29:f1:64:6b:ce:69:77:16:
                    fe:af:76:08:5c:25:42:78:36:2e:df:54:23:5a:5e:
                    bd:95:5e:ef:69:3a:0d:45:2c:7b:c7:a0:04:05:52:
                    6a:9e:07:21:f5:d0:4d:d5:13:f7:05:b3:97:2b:31:
                    61:e5:f1:79:3b:ce:a0:40:15:a6:fc:e8:2a:d7:35:
                    d9:b8:45:6c:e6:dd:ae:e3:df:fe:c5:f2:0b:4e:13:
                    43:84:29:2a:46:71:bd:b3:8a:38:25:50:3a:af:5a:
                    5c:7b:ee:39:12:ab:a9:13:dc:93:7b:4b:f2:26:26:
                    8c:96:9f:e4:89:46:92:bd:3f:ae:af:54:76:09:bb:
                    1f:8d:0f:b8:f8:ce:47:7b:4d:94:c5:8f:44:04:8c:
                    d2:32:17:9f:e3:6c:99:a3:28:d9:dc:e4:9f:be:b8:
                    a8:da:4c:f9:58:ae:89:32:3a:ea:ac:42:4b:2a:5f:
                    f4:71:54:9b:fa:f3:ca:66:77:b6:20:bb:29:7e:89:
                    7e:a6:0c:dd:75:c1:e7:f2:fa:d3:cc:80:78:c9:87:
                    0e:01:74:d7:c0:2d:d1:03:a8:b4:6e:ce:3a:6c:df:
                    6d:5d:91:e1:ab:41:00:81:74:52:a2:8a:c0:55:05:
                    ff:59:d6:28:da:61:47:eb:22:51:38:e3:65:9a:a3:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:CB:63:6A:8F:2B:52:A9:62:06:14:51:31:4C:9A:46:BA:D9:95
            X509v3 Authority Key Identifier:
                keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:11:ca:c9:d8:5e:cf:1b:e5:2a:85:ef:c7:f1:34:af:7c:
         ce:b2:c0:e5:7b:40:35:33:d6:76:d1:ab:03:79:37:36:14:ee:
         11:86:3c:54:4f:83:83:eb:8c:2b:5e:bc:cb:14:87:78:44:52:
         9f:bd:61:23:7c:ca:d4:b8:32:fb:36:56:68:e1:d5:6e:27:c8:
         2f:1b:22:fe:cb:39:05:25:73:d0:0d:4d:df:50:16:37:9b:5b:
         3b:d7:70:71:cf:6c:8c:6f:f7:42:1e:ca:ca:b3:8a:6d:23:2b:
         66:6a:86:3d:4d:bf:f5:84:5d:d3:85:96:b5:1b:04:bb:9f:00:
         ec:b7:ec:95:e4:27:3f:55:97:3a:b5:bb:c9:8a:2a:0b:c7:d2:
         06:82:97:58:31:bd:34:1e:d0:60:07:58:4c:85:40:53:16:77:
         71:dc:e0:56:1e:21:65:09:b8:50:18:f9:a6:e0:fc:71:64:e7:
         72:1b:ff:10:26:52:ac:b1:78:c3:d7:48:04:24:42:5c:6e:7c:
         7e:39:d4:1d:92:95:5d:50:4b:c7:7b:da:29:99:5e:0a:5a:49:
         34:75:ef:db:7a:30:31:16:7e:cc:01:9e:25:22:17:2c:31:5e:
         8d:a1:cf:d5:ce:74:db:66:9e:59:75:c0:15:88:aa:dd:55:e4:
         fa:74:14:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7aDll/Ej8Is8jugIfofQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjQwNTE3MTkwMDQ4WhcNMjQwNTE4MTkwMDQ4WjAzMTEwLwYDVQQD
EygwY2I2Y2I2MzZhOGYyYjUyYTk2MjA2MTQ1MTMxNGM5YTQ2YmFkOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL+sMTU6KfFka85pdxb+r3YIXCVC
eDYu31QjWl69lV7vaToNRSx7x6AEBVJqngch9dBN1RP3BbOXKzFh5fF5O86gQBWm
/Ogq1zXZuEVs5t2u49/+xfILThNDhCkqRnG9s4o4JVA6r1pce+45EqupE9yTe0vy
JiaMlp/kiUaSvT+ur1R2CbsfjQ+4+M5He02UxY9EBIzSMhef42yZoyjZ3OSfvrio
2kz5WK6JMjrqrEJLKl/0cVSb+vPKZne2ILspfol+pgzddcHn8vrTzIB4yYcOAXTX
wC3RA6i0bs46bN9tXZHhq0EAgXRSoorAVQX/WdYo2mFH6yJROONlmqOpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy2y2NqjytSqWIGFFExTJpGutmVMB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA0RysnY
Xs8b5SqF78fxNK98zrLA5XtANTPWdtGrA3k3NhTuEYY8VE+Dg+uMK168yxSHeERS
n71hI3zK1Lgy+zZWaOHVbifILxsi/ss5BSVz0A1N31AWN5tbO9dwcc9sjG/3Qh7K
yrOKbSMrZmqGPU2/9YRd04WWtRsEu58A7LfsleQnP1WXOrW7yYoqC8fSBoKXWDG9
NB7QYAdYTIVAUxZ3cdzgVh4hZQm4UBj5puD8cWTnchv/ECZSrLF4w9dIBCRCXG58
fjnUHZKVXVBLx3vaKZleClpJNHXv23owMRZ+zAGeJSIXLDFejaHP1c5022aeWXXA
FYiq3VXk+nQUQg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:53:08 2024 by rpki-client on console-fra.rpki-client.org