Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File:                     jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier:          cDuxQLH1NpnxC9obJDW4wQ4Nov0B3JPAjpjGMou2fz4=
Subject key identifier:   2E:00:DD:04:10:AE:49:03:54:A2:06:7B:AE:50:FA:31:0E:0F:1E:AC
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer:       /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial:       018F885B56B386EFA5A48E10DDB4DFD3E610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number:          0222
Signing time:             Fri 17 May 2024 21:00:38 +0000
Manifest this update:     Fri 17 May 2024 21:00:38 +0000
Manifest next update:     Sat 18 May 2024 21:00:38 +0000
Files and hashes:         1: KyOsOL4D9eEPjsmTbByq1PkKZds.roa (hash: 3sy4S4/yLlpIFYW5jT8fBCztibnQkn7ujmkA73mt2AA=)
                          2: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: bK68sJuXdm8ICPBwKCLQcU6uZ4MJ4roqgvsodQI7aNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:56:b3:86:ef:a5:a4:8e:10:dd:b4:df:d3:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
        Validity
            Not Before: May 17 21:00:38 2024 GMT
            Not After : May 18 21:00:38 2024 GMT
        Subject: CN=2e00dd0410ae490354a2067bae50fa310e0f1eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:86:3f:ef:3b:cd:dc:3b:8c:aa:c4:e7:77:
                    e7:16:c6:88:36:30:71:3b:0e:ae:87:68:ae:fe:66:
                    08:d1:18:9e:1f:78:78:5e:f8:63:4e:94:c1:0c:79:
                    ee:52:76:5f:81:f3:d7:ba:6c:b5:b8:52:f5:82:b9:
                    87:a2:38:5f:a1:ff:21:0d:35:a1:3c:7b:81:e6:6d:
                    3f:9b:3f:b6:24:f0:17:bb:d3:f3:8d:a5:5b:d8:59:
                    1e:16:b2:2e:0f:a9:aa:56:e7:cb:be:db:d3:15:50:
                    3f:62:d4:0e:1c:80:a2:57:81:0a:f8:3c:88:59:5c:
                    d2:1e:3a:54:e0:c4:51:18:a7:a7:64:af:21:7a:2b:
                    18:62:71:11:fd:9e:55:6c:7f:e3:8b:cb:7b:db:ae:
                    87:0d:7f:3f:56:67:6b:7e:08:33:68:a1:f0:b1:c2:
                    cc:d8:0d:ce:93:e6:ed:28:b6:a4:9b:9a:0f:71:61:
                    a7:61:13:55:cf:e3:52:43:93:e6:44:da:48:1f:68:
                    ca:93:a0:bf:77:c8:11:df:9c:71:70:0d:cb:2f:cc:
                    d2:cf:2f:d1:94:66:37:6a:66:24:84:7f:27:3e:10:
                    f0:a8:ad:01:03:e0:fe:16:8f:77:e4:54:48:3b:aa:
                    8f:1f:16:f0:65:78:4d:f0:37:50:d4:50:2f:48:68:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:DD:04:10:AE:49:03:54:A2:06:7B:AE:50:FA:31:0E:0F:1E:AC
            X509v3 Authority Key Identifier:
                keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:63:3e:20:1b:84:20:65:a8:87:37:9c:c6:5a:cf:1b:4e:
         95:99:e6:9d:73:dd:43:22:22:5d:32:dd:79:0b:7b:41:a4:ad:
         8a:d4:93:0b:3b:84:42:f9:ac:85:20:83:3f:05:3d:8d:d8:35:
         b4:63:85:2a:a2:c7:bf:8e:34:a0:bd:fc:56:c4:17:fa:7f:a3:
         2b:91:ed:09:73:a1:43:72:fb:bc:95:45:fc:a2:da:a0:7b:fe:
         11:06:e7:c4:7e:2d:9d:47:66:74:0e:fb:dd:4a:ae:76:dc:f7:
         be:f7:ba:64:ff:00:9f:6c:52:1f:a4:e8:3b:02:70:35:83:fa:
         f5:88:66:1d:b6:81:b3:20:4d:74:18:e6:7e:65:f4:36:3f:67:
         58:7d:7d:9c:85:16:d5:50:f7:ed:28:4d:49:95:79:9c:85:86:
         d4:96:15:37:03:0f:b7:9e:20:48:89:05:f3:54:54:9c:83:be:
         0e:7e:1b:4f:3a:6d:b7:7d:f3:2c:56:9f:6f:a9:73:c3:4c:bc:
         41:d0:7a:cf:60:ee:23:01:d0:3e:b9:9b:f9:65:88:ac:ee:4e:
         c9:58:e2:33:21:56:ec:ab:a8:88:fa:10:10:1e:e0:b4:ef:39:
         7a:4c:2a:4f:b0:bc:e1:11:e1:7b:f6:6a:ad:50:ac:cf:15:3d:
         95:e8:f9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW1azhu+lpI4Q3bTf0+YQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTI2YjQ1OGFkNDFkNDdkMjYxYTc2ZDhjNWRjMGZjOGQx
YTllMmMwHhcNMjQwNTE3MjEwMDM4WhcNMjQwNTE4MjEwMDM4WjAzMTEwLwYDVQQD
EygyZTAwZGQwNDEwYWU0OTAzNTRhMjA2N2JhZTUwZmEzMTBlMGYxZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcaGP+87zdw7jKrE53fnFsaINjBx
Ow6uh2iu/mYI0RieH3h4XvhjTpTBDHnuUnZfgfPXumy1uFL1grmHojhfof8hDTWh
PHuB5m0/mz+2JPAXu9PzjaVb2FkeFrIuD6mqVufLvtvTFVA/YtQOHICiV4EK+DyI
WVzSHjpU4MRRGKenZK8heisYYnER/Z5VbH/ji8t7266HDX8/VmdrfggzaKHwscLM
2A3Ok+btKLakm5oPcWGnYRNVz+NSQ5PmRNpIH2jKk6C/d8gR35xxcA3LL8zSzy/R
lGY3amYkhH8nPhDwqK0BA+D+Fo935FRIO6qPHxbwZXhN8DdQ1FAvSGiMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4A3QQQrkkDVKIGe65Q+jEODx6sMB8GA1UdIwQY
MBaAFI6ia0WK1B1H0mGnbYxdwPyNGp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYt
Mjg5MDA1NTkxNGM1LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYtMjg5MDA1NTkxNGM1
LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4JjPiAb
hCBlqIc3nMZazxtOlZnmnXPdQyIiXTLdeQt7QaStitSTCzuEQvmshSCDPwU9jdg1
tGOFKqLHv440oL38VsQX+n+jK5HtCXOhQ3L7vJVF/KLaoHv+EQbnxH4tnUdmdA77
3Uqudtz3vve6ZP8An2xSH6ToOwJwNYP69YhmHbaBsyBNdBjmfmX0Nj9nWH19nIUW
1VD37ShNSZV5nIWG1JYVNwMPt54gSIkF81RUnIO+Dn4bTzptt33zLFafb6lzw0y8
QdB6z2DuIwHQPrmb+WWIrO5OyVjiMyFW7KuoiPoQEB7gtO85ekwqT7C84RHhe/Zq
rVCszxU9lej5mQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:44:02 2024 by rpki-client on console-fra.rpki-client.org