Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File:                     iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier:          b3feR2U0nVL9H62FTINZRj641duHIBFH00Qa1d7cr04=
Subject key identifier:   A5:A7:77:60:1B:97:9B:E7:1C:B1:E4:C4:58:3E:3C:34:F1:74:00:5D
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer:       /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial:       018FB0E9A86BA99E7EBF324E7A36C266B06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number:          0F09
Signing time:             Sat 25 May 2024 18:00:53 +0000
Manifest this update:     Sat 25 May 2024 18:00:53 +0000
Manifest next update:     Sun 26 May 2024 18:00:53 +0000
Files and hashes:         1: 1-joSiX3Htc7Df9RSA41Wko1aDtY.roa (hash: 3J+h0D0T/u1pF4YOsKgMI+bNU/7c/+60BYmvVflamq4=)
                          2: 5Grtd8EjB8TA9OMGKBFL9EBnemc.roa (hash: exjb4sg0wNk6L7EvwKbwTbj3lb9nbnZupEgfy7vMABM=)
                          3: Johv_1ZHm9BnPmbrSaD1g2r2nHQ.roa (hash: tNwKWd1R801ObXmox90ZNPkPpTSAXLB3O2CiUBCHxkg=)
                          4: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: lXAjX65kffJK3wsZ6D+fOuqWtSOglOwK2aCt7+AwI8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b0:e9:a8:6b:a9:9e:7e:bf:32:4e:7a:36:c2:66:b0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
        Validity
            Not Before: May 25 18:00:53 2024 GMT
            Not After : May 26 18:00:53 2024 GMT
        Subject: CN=a5a777601b979be71cb1e4c4583e3c34f174005d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:d2:02:b3:bd:59:a0:f0:f9:70:5b:6a:02:
                    32:d9:6f:7f:ed:4f:36:38:ab:d3:ef:24:bd:78:bb:
                    27:59:e9:2d:2d:cd:3b:72:05:54:68:21:a8:54:fe:
                    fc:e1:26:57:4a:2c:72:6c:31:a1:b6:a6:b3:93:f1:
                    72:32:3d:9f:11:30:19:4e:2d:16:72:d5:8d:34:ee:
                    f2:48:ad:d0:21:a7:01:41:d3:70:c1:6b:6a:e3:e2:
                    2a:ce:3f:48:16:08:05:66:d2:a2:74:c8:2e:ab:5a:
                    d4:1e:e2:b3:f9:81:52:a7:5e:2f:f3:42:bf:eb:08:
                    a8:a0:b1:ae:01:cc:c1:8c:98:7d:e3:cc:29:61:21:
                    57:22:81:ce:a9:7a:81:99:2d:36:a2:97:84:60:d0:
                    6f:7a:c8:e6:bf:7d:d7:e9:20:ef:8a:a7:c5:02:a0:
                    07:ff:48:89:81:62:04:7c:48:06:b3:a5:69:4c:ce:
                    2d:70:8d:1c:a2:56:18:00:bb:45:35:4e:39:3f:49:
                    b1:e1:c8:85:f0:76:1c:b0:71:35:d5:a0:29:4b:62:
                    da:86:2d:0c:06:db:d9:cb:8a:4f:50:08:65:0b:c0:
                    89:13:2e:4b:7c:5d:07:d0:c3:59:01:30:5a:86:95:
                    36:c6:77:5c:45:92:1c:66:48:cd:f6:42:3c:39:12:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:77:60:1B:97:9B:E7:1C:B1:E4:C4:58:3E:3C:34:F1:74:00:5D
            X509v3 Authority Key Identifier:
                keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:aa:d7:1f:27:68:dc:2c:78:e4:5e:2e:1e:24:81:88:1a:
         fd:c4:88:df:ea:22:72:70:ec:4e:f2:77:d3:38:25:37:28:0b:
         60:e8:1e:f1:28:f6:06:45:8d:81:e1:02:8e:12:39:43:54:7b:
         1d:96:d5:d1:d2:1f:30:71:2a:94:69:62:91:30:ab:15:ff:4e:
         ba:0f:f8:8c:e6:c1:d9:26:c3:2f:4f:6b:81:ea:a3:36:92:bd:
         fe:ac:da:8a:41:92:06:61:6a:99:0f:ac:21:c0:ad:f0:e2:96:
         6d:1f:17:e6:fd:47:71:ab:4f:0d:93:f2:ea:82:3d:2e:8f:7f:
         a4:22:bf:35:49:2f:61:ed:cd:cb:41:a9:24:8b:d1:a5:73:fa:
         3c:b5:b4:53:76:91:2c:b0:59:bb:c6:08:54:e3:6d:7e:0f:99:
         e4:d9:b6:a6:28:23:ba:4e:7b:6c:4d:58:93:f4:f1:8a:7a:f6:
         6a:11:a3:55:f8:3e:5d:8f:5e:ec:83:49:d0:6e:de:a8:fe:6d:
         2a:7a:b3:93:31:4c:62:d6:37:09:67:be:d0:5e:ab:42:b2:0b:
         27:51:66:00:c2:bf:12:ad:29:33:ca:f9:fe:ce:9a:e4:63:11:
         2a:f8:ce:15:96:98:f4:19:c2:d1:78:4b:60:92:7c:5c:a7:4d:
         ee:74:08:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+w6ahrqZ5+vzJOejbCZrBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl
MDcwMTIwHhcNMjQwNTI1MTgwMDUzWhcNMjQwNTI2MTgwMDUzWjAzMTEwLwYDVQQD
EyhhNWE3Nzc2MDFiOTc5YmU3MWNiMWU0YzQ1ODNlM2MzNGYxNzQwMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2XSArO9WaDw+XBbagIy2W9/7U82
OKvT7yS9eLsnWektLc07cgVUaCGoVP784SZXSixybDGhtqazk/FyMj2fETAZTi0W
ctWNNO7ySK3QIacBQdNwwWtq4+Iqzj9IFggFZtKidMguq1rUHuKz+YFSp14v80K/
6wiooLGuAczBjJh948wpYSFXIoHOqXqBmS02opeEYNBvesjmv33X6SDviqfFAqAH
/0iJgWIEfEgGs6VpTM4tcI0colYYALtFNU45P0mx4ciF8HYcsHE11aApS2Lahi0M
BtvZy4pPUAhlC8CJEy5LfF0H0MNZATBahpU2xndcRZIcZkjN9kI8ORKIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWnd2Abl5vnHLHkxFg+PDTxdABdMB8GA1UdIwQY
MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt
ZjY1NDFmNzc4NTg1LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1
LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXyq1x8n
aNwseOReLh4kgYga/cSI3+oicnDsTvJ30zglNygLYOge8Sj2BkWNgeECjhI5Q1R7
HZbV0dIfMHEqlGlikTCrFf9Oug/4jObB2SbDL09rgeqjNpK9/qzaikGSBmFqmQ+s
IcCt8OKWbR8X5v1HcatPDZPy6oI9Lo9/pCK/NUkvYe3Ny0GpJIvRpXP6PLW0U3aR
LLBZu8YIVONtfg+Z5Nm2pigjuk57bE1Yk/Txinr2ahGjVfg+XY9e7INJ0G7eqP5t
KnqzkzFMYtY3CWe+0F6rQrILJ1FmAMK/Eq0pM8r5/s6a5GMRKvjOFZaY9BnC0XhL
YJJ8XKdN7nQI9Q==
-----END CERTIFICATE-----
Generated at Sat May 25 19:06:47 2024 by rpki-client on console-fra.rpki-client.org