Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File:                     l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier:          UAI/Pn3nsH0Hr3o3UbKEI8B0JndCZcW/nhwSDrznJkU=
Subject key identifier:   2C:13:E2:75:F6:52:5F:71:06:3D:89:5A:0E:D5:38:E7:92:42:5F:BD
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer:       /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial:       018F994F1E382B8479BA3765CD8F01A8B20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number:          10B5
Signing time:             Tue 21 May 2024 04:00:50 +0000
Manifest this update:     Tue 21 May 2024 04:00:50 +0000
Manifest next update:     Wed 22 May 2024 04:00:50 +0000
Files and hashes:         1: k_HFj_5-D273v5Ot40GshumNfw4.roa (hash: cnxCuV1TBrY13zun9iLHuD9Rpo8oeb0PfMFrdA6KoQI=)
                          2: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: 1T/JSjsXXqOvqrJE+7KiuWbJeODFuJN9lM0vmSEG+mI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:4f:1e:38:2b:84:79:ba:37:65:cd:8f:01:a8:b2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
        Validity
            Not Before: May 21 04:00:50 2024 GMT
            Not After : May 22 04:00:50 2024 GMT
        Subject: CN=2c13e275f6525f71063d895a0ed538e792425fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:e2:e8:85:b9:bc:c3:0f:ff:55:f9:90:a1:
                    0f:c0:4d:0e:39:ed:d0:a4:55:2f:c4:7d:b6:2b:08:
                    4f:cf:a1:44:41:0d:c1:a8:0f:c2:82:fa:9f:2f:19:
                    74:e5:2b:f2:1d:e2:eb:68:f9:3b:2a:ce:f3:79:db:
                    d6:ba:ca:34:8b:aa:d1:10:f3:d0:27:a2:5f:0b:e0:
                    84:0f:e4:9e:e9:d1:79:2a:c8:a7:eb:7d:cc:5e:c0:
                    86:a7:8a:d6:12:cf:54:49:ac:98:61:db:cf:33:1c:
                    56:ae:4d:67:e3:61:51:9a:33:73:7e:f7:cd:4e:87:
                    43:a7:e4:4b:86:ec:66:44:a3:7c:06:e5:9b:af:54:
                    87:ca:19:2f:28:3b:27:83:87:5d:83:e5:b6:88:42:
                    ee:c2:4c:f4:61:b2:24:94:f9:32:00:e8:89:95:60:
                    e1:7b:a5:e6:2d:7d:6b:a0:c8:af:39:97:31:0a:0e:
                    a2:8e:7f:79:7a:78:9a:5a:04:52:08:f9:a1:29:6d:
                    2c:c6:14:eb:2c:93:4a:ff:35:43:91:e3:44:da:31:
                    c6:c1:e6:d6:f6:b8:45:4d:a7:83:49:b5:13:fb:f2:
                    e9:51:ce:5e:08:52:df:01:66:f6:60:5f:46:f4:fe:
                    a6:b9:4e:b5:96:d3:5f:6c:d1:50:e9:fa:52:b6:b3:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:13:E2:75:F6:52:5F:71:06:3D:89:5A:0E:D5:38:E7:92:42:5F:BD
            X509v3 Authority Key Identifier:
                keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:40:7a:5f:d1:6e:bd:b3:ac:d1:ef:8f:68:c8:97:d4:16:
         6b:3a:2f:b3:e8:d0:5e:f4:09:1f:4d:59:a5:2f:6a:02:eb:fe:
         d6:09:0a:1f:ab:97:c8:1f:aa:fd:f4:ab:3c:b0:17:94:30:d2:
         b7:2a:81:a4:56:4a:03:3f:c4:ca:6c:f9:57:14:b9:70:d5:62:
         4a:62:7b:a8:97:a3:c6:1d:c0:da:b5:75:c5:66:62:4b:35:ea:
         d9:55:6c:fe:b9:ed:aa:1f:55:05:bd:78:a7:97:0b:ed:42:6d:
         1d:52:3a:5e:0d:30:5a:0d:d3:cd:89:08:7b:b0:b4:63:e4:f1:
         9b:18:79:9f:40:14:8b:a3:ca:1d:3c:2c:5a:e2:b1:f6:91:2d:
         59:9f:77:0e:79:5d:43:ca:df:3d:e7:34:d8:41:83:85:f5:5f:
         ce:16:29:21:e9:48:24:04:11:cd:1d:ed:75:6b:3c:1c:e6:b2:
         0e:e3:95:46:d9:42:f1:5b:b6:b1:ef:1c:4b:56:1c:78:99:46:
         16:c9:51:91:f3:9a:a5:4f:8d:e6:6b:6d:b5:44:55:bf:b6:70:
         06:5b:10:f6:78:f7:bd:0b:41:37:09:73:1c:6a:43:ad:6a:10:
         7f:bd:a5:9c:07:a8:04:b7:b9:89:b2:fd:2c:02:61:11:de:4e:
         02:5d:2f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ZTx44K4R5ujdlzY8BqLIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OGY0MWUyOTAyODU0NzNjMmExZTJiZTdmNjZmNjM0NTJl
ZDQ2NDQwHhcNMjQwNTIxMDQwMDUwWhcNMjQwNTIyMDQwMDUwWjAzMTEwLwYDVQQD
EygyYzEzZTI3NWY2NTI1ZjcxMDYzZDg5NWEwZWQ1MzhlNzkyNDI1ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbvi6IW5vMMP/1X5kKEPwE0OOe3Q
pFUvxH22KwhPz6FEQQ3BqA/CgvqfLxl05SvyHeLraPk7Ks7zedvWuso0i6rREPPQ
J6JfC+CED+Se6dF5Ksin633MXsCGp4rWEs9USayYYdvPMxxWrk1n42FRmjNzfvfN
TodDp+RLhuxmRKN8BuWbr1SHyhkvKDsng4ddg+W2iELuwkz0YbIklPkyAOiJlWDh
e6XmLX1roMivOZcxCg6ijn95eniaWgRSCPmhKW0sxhTrLJNK/zVDkeNE2jHGwebW
9rhFTaeDSbUT+/LpUc5eCFLfAWb2YF9G9P6muU61ltNfbNFQ6fpStrPOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwT4nX2Ul9xBj2JWg7VOOeSQl+9MB8GA1UdIwQY
MBaAFJePQeKQKFRzwqHivn9m9jRS7UZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzIt
MzU3N2IxZWZkYzc4LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzItMzU3N2IxZWZkYzc4
LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC5Ael/R
br2zrNHvj2jIl9QWazovs+jQXvQJH01ZpS9qAuv+1gkKH6uXyB+q/fSrPLAXlDDS
tyqBpFZKAz/Eymz5VxS5cNViSmJ7qJejxh3A2rV1xWZiSzXq2VVs/rntqh9VBb14
p5cL7UJtHVI6Xg0wWg3TzYkIe7C0Y+Txmxh5n0AUi6PKHTwsWuKx9pEtWZ93Dnld
Q8rfPec02EGDhfVfzhYpIelIJAQRzR3tdWs8HOayDuOVRtlC8Vu2se8cS1YceJlG
FslRkfOapU+N5mtttURVv7ZwBlsQ9nj3vQtBNwlzHGpDrWoQf72lnAeoBLe5ibL9
LAJhEd5OAl0vWQ==
-----END CERTIFICATE-----
Generated at Tue May 21 13:57:02 2024 by rpki-client on console-ams.rpki-client.org