Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File:                     v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier:          UV7azdwrip9Xf4BXUpuJabDAoYZtsjXQAnKRzF6NJP8=
Subject key identifier:   38:3F:D3:CD:01:D2:7D:F0:8B:A7:65:C3:FB:E7:A7:A4:A5:23:FC:58
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer:       /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial:       018F8748A558D3D65D2B2B5136949B986B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: 6k7WAYIeXXs34Gf03sjVBAYtLKE.roa (hash: Q9bCst4ykRYHA9Z+XI3s0SpWQFa52478E/q6vumeF9A=)
                          2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: CkbSgMIfl5aD8uunz8C6ls+XfpeUI5GRd1URtKmVTRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a5:58:d3:d6:5d:2b:2b:51:36:94:9b:98:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=383fd3cd01d27df08ba765c3fbe7a7a4a523fc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:ae:4f:61:a0:91:3e:e6:e6:06:ed:43:94:
                    79:b5:13:1b:ad:22:0c:e1:0e:b4:a1:3f:fa:6d:47:
                    bb:29:ba:1d:b4:0f:8f:84:dd:7e:ae:79:3e:c8:59:
                    07:3e:ad:b9:a6:48:2c:92:54:b8:29:49:44:40:2c:
                    a7:a5:85:cf:23:31:bb:45:d0:ce:f8:48:2f:7c:75:
                    4d:67:f3:60:e2:59:cb:c8:2b:6e:dd:cf:31:5d:37:
                    12:62:b2:80:63:e5:ba:3b:32:95:5c:94:2b:89:da:
                    c1:4c:fa:70:9e:87:79:1d:a1:32:dd:48:b3:f3:7c:
                    7d:74:7c:b8:d1:07:09:e4:3b:e8:c6:7e:a3:36:95:
                    e8:af:97:1f:6b:69:f0:6e:96:ba:05:fc:df:b0:15:
                    9b:33:ec:a7:60:60:0a:a9:67:af:a2:67:d3:e9:00:
                    a1:b8:2f:c2:b4:92:1a:c2:cc:af:3d:7e:61:98:d7:
                    b4:41:76:ba:5a:cc:f3:69:df:b2:e4:9b:42:19:4e:
                    2d:07:a5:42:88:47:3a:bf:1d:a9:eb:56:2f:e2:7b:
                    1c:1e:41:cb:e3:be:12:c1:f9:f5:04:ca:d8:34:0e:
                    2d:4f:3c:9c:34:1f:f1:3d:a0:79:aa:d3:bc:f5:bf:
                    20:88:69:14:f1:63:bb:58:64:e3:b6:fa:db:fa:bc:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3F:D3:CD:01:D2:7D:F0:8B:A7:65:C3:FB:E7:A7:A4:A5:23:FC:58
            X509v3 Authority Key Identifier:
                keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:4c:ae:1e:02:c0:fc:7e:79:50:cd:d5:31:0d:05:c6:10:
         33:20:ac:89:c1:4b:e4:47:8a:20:17:43:f3:96:54:f8:03:96:
         c0:a0:96:e6:eb:7a:e9:71:6c:6d:e8:9f:91:9b:72:11:4b:d6:
         96:0a:9e:03:7c:c5:0b:e7:9c:e6:f5:64:d8:59:7b:d9:92:70:
         de:ba:0c:91:47:d2:2d:cd:ba:81:35:1c:dc:82:a8:c8:d1:3d:
         7b:02:a6:4e:43:c0:bf:30:f6:f5:c3:b2:d0:e4:90:98:e9:44:
         af:b5:eb:a8:f8:28:77:43:ad:a8:d4:af:cc:94:bc:61:b9:67:
         f4:8d:2b:ad:87:2c:db:b6:08:c9:90:1d:db:d1:80:f5:ed:ac:
         b7:d3:e7:8e:f7:f4:c6:b9:25:64:46:bd:2f:14:55:9b:36:bd:
         54:88:13:0e:59:04:f9:eb:dc:ae:c7:c1:24:1f:09:e0:03:f4:
         5f:60:c6:13:c3:3e:a0:c3:2b:8e:7f:8a:fc:1c:94:b9:af:4d:
         5d:7e:90:a3:58:6c:7b:86:cf:cc:5f:70:89:52:03:93:50:41:
         d5:cb:74:80:08:11:55:8a:3d:4b:71:fc:1a:3e:3d:73:a8:32:
         ae:7d:71:0e:0a:0b:9f:9d:08:1b:29:5c:0e:01:3c:a3:55:c6:
         07:ad:f4:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSKVY09ZdKytRNpSbmGuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi
Yjk5NDQwHhcNMjQwNTE3MTYwMDM2WhcNMjQwNTE4MTYwMDM2WjAzMTEwLwYDVQQD
EygzODNmZDNjZDAxZDI3ZGYwOGJhNzY1YzNmYmU3YTdhNGE1MjNmYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK2uT2GgkT7m5gbtQ5R5tRMbrSIM
4Q60oT/6bUe7KbodtA+PhN1+rnk+yFkHPq25pkgsklS4KUlEQCynpYXPIzG7RdDO
+EgvfHVNZ/Ng4lnLyCtu3c8xXTcSYrKAY+W6OzKVXJQridrBTPpwnod5HaEy3Uiz
83x9dHy40QcJ5Dvoxn6jNpXor5cfa2nwbpa6BfzfsBWbM+ynYGAKqWevomfT6QCh
uC/CtJIawsyvPX5hmNe0QXa6Wszzad+y5JtCGU4tB6VCiEc6vx2p61Yv4nscHkHL
474Swfn1BMrYNA4tTzycNB/xPaB5qtO89b8giGkU8WO7WGTjtvrb+rwauQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg/080B0n3wi6dlw/vnp6SlI/xYMB8GA1UdIwQY
MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt
YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj
LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqNMrh4C
wPx+eVDN1TENBcYQMyCsicFL5EeKIBdD85ZU+AOWwKCW5ut66XFsbeifkZtyEUvW
lgqeA3zFC+ec5vVk2Fl72ZJw3roMkUfSLc26gTUc3IKoyNE9ewKmTkPAvzD29cOy
0OSQmOlEr7XrqPgod0OtqNSvzJS8Ybln9I0rrYcs27YIyZAd29GA9e2st9Pnjvf0
xrklZEa9LxRVmza9VIgTDlkE+evcrsfBJB8J4AP0X2DGE8M+oMMrjn+K/ByUua9N
XX6Qo1hse4bPzF9wiVIDk1BB1ct0gAgRVYo9S3H8Gj49c6gyrn1xDgoLn50IGylc
DgE8o1XGB630mg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:39:35 2024 by rpki-client on console-fra.rpki-client.org