Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
File:                     OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft (raw, json)
Hash identifier:          KB9d0gH6u7HDRmA4z7IMRNbFw3drQ0oxbuEtO3u1ulE=
Subject key identifier:   05:6E:04:16:88:78:F4:19:21:B1:46:1A:CB:E0:38:E0:E4:24:7D:CF
Authority key identifier: 38:49:33:61:DF:7F:38:AB:55:74:DB:82:20:A6:C4:FE:5C:FE:6B:40
Certificate issuer:       /CN=38493361df7f38ab5574db8220a6c4fe5cfe6b40
Certificate serial:       018F877F3BEA3227D7BEA3CFF5E152356BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
Manifest number:          BD
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: OEkzYd9_OKtVdNuCIKbE_lz-a0A.crl (hash: s1trV7MgHvoiHzIKb9qEOYN3vdNjws/UQsCWgUumdkY=)
                          2: vGRL3OWhaHljAP5xsmgK5sjCLGc.roa (hash: LoIbpfsK0A0uSUzIaFc4GIV7Mz1GCf9ayNoavk0uae0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3b:ea:32:27:d7:be:a3:cf:f5:e1:52:35:6b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38493361df7f38ab5574db8220a6c4fe5cfe6b40
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=056e04168878f41921b1461acbe038e0e4247dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:5a:63:0d:d2:e7:7b:57:fe:dc:6c:ad:3b:
                    ee:5a:90:4e:2b:9a:f0:47:05:e1:bb:64:b2:b5:d3:
                    95:99:bc:28:3f:30:05:21:90:6d:7e:1c:02:4c:f9:
                    47:8d:bc:80:71:ef:1a:f8:79:34:99:6f:b2:d7:2a:
                    5f:a4:0c:d6:37:07:0c:04:9e:f7:52:29:6f:c4:6b:
                    54:be:be:11:88:72:c4:55:1f:52:4d:d4:36:9c:89:
                    c6:e7:72:3b:38:3f:ef:65:bf:17:15:55:78:90:c3:
                    32:55:b9:4c:c7:a7:2a:3c:df:f7:21:8b:43:6f:78:
                    46:98:16:01:dc:4d:41:54:85:97:74:07:5c:57:96:
                    cb:e7:b7:24:14:b8:de:b7:8b:2a:5c:36:85:14:71:
                    9f:f7:d1:8f:79:ee:d5:64:04:b3:27:45:cb:7b:c1:
                    6b:55:88:45:9c:50:8c:0c:9c:01:1c:ee:19:ed:b3:
                    b2:b3:32:84:14:77:59:59:a6:9e:e2:03:0b:89:41:
                    96:74:fd:70:85:c3:1f:6e:04:26:97:7d:14:5a:1f:
                    12:ee:5d:38:8a:44:e5:c1:8c:ab:32:6e:db:4d:df:
                    10:11:77:58:ed:8c:31:17:23:70:8b:47:bf:ad:45:
                    d6:bb:b3:84:46:86:4b:c2:53:92:63:d8:5d:54:7a:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:04:16:88:78:F4:19:21:B1:46:1A:CB:E0:38:E0:E4:24:7D:CF
            X509v3 Authority Key Identifier:
                keyid:38:49:33:61:DF:7F:38:AB:55:74:DB:82:20:A6:C4:FE:5C:FE:6B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:ca:66:c7:b3:2e:23:07:42:47:1a:2e:da:78:4e:8e:bb:
         1f:84:4e:fa:ae:f0:ec:33:42:db:ea:86:5f:af:c0:1d:76:d1:
         bb:86:f3:bb:9e:45:66:61:03:5b:72:6b:2c:15:41:b6:6f:62:
         43:87:40:1b:e6:24:e3:1f:97:6b:b4:50:70:e6:10:ba:e9:18:
         61:84:90:f9:c8:01:69:c5:5d:28:bd:aa:ad:9c:a6:49:ba:be:
         5f:22:ea:0f:81:c0:5f:5d:26:fc:cc:dc:3a:c1:5c:de:01:3f:
         9d:fe:89:91:ae:77:f2:56:8b:f8:b9:6b:55:14:34:eb:f3:fc:
         5d:1d:27:b2:d8:1d:9f:f2:33:13:f0:80:94:05:28:d6:90:67:
         0f:b9:a9:da:db:af:28:a8:ac:b4:7a:c8:7e:27:78:ed:80:22:
         47:de:84:dd:b4:0c:a1:df:70:3b:07:db:04:3f:1a:4b:35:b7:
         fb:4e:10:69:6c:f0:51:86:a8:40:d6:5f:2f:02:36:16:3a:a1:
         ab:c4:a2:5f:34:3b:bb:2c:32:04:4a:30:16:3b:93:75:f0:fe:
         3d:ec:46:b9:45:56:05:b8:78:af:e0:6a:1b:b6:fc:f9:f8:0a:
         57:e2:af:f4:cc:46:ca:ba:0f:8f:db:0a:c3:eb:79:14:ec:0b:
         92:4e:48:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HfzvqMifXvqPP9eFSNWvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDkzMzYxZGY3ZjM4YWI1NTc0ZGI4MjIwYTZjNGZlNWNm
ZTZiNDAwHhcNMjQwNTE3MTcwMDEzWhcNMjQwNTE4MTcwMDEzWjAzMTEwLwYDVQQD
EygwNTZlMDQxNjg4NzhmNDE5MjFiMTQ2MWFjYmUwMzhlMGU0MjQ3ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj91aYw3S53tX/txsrTvuWpBOK5rw
RwXhu2SytdOVmbwoPzAFIZBtfhwCTPlHjbyAce8a+Hk0mW+y1ypfpAzWNwcMBJ73
UilvxGtUvr4RiHLEVR9STdQ2nInG53I7OD/vZb8XFVV4kMMyVblMx6cqPN/3IYtD
b3hGmBYB3E1BVIWXdAdcV5bL57ckFLjet4sqXDaFFHGf99GPee7VZASzJ0XLe8Fr
VYhFnFCMDJwBHO4Z7bOyszKEFHdZWaae4gMLiUGWdP1whcMfbgQml30UWh8S7l04
ikTlwYyrMm7bTd8QEXdY7YwxFyNwi0e/rUXWu7OERoZLwlOSY9hdVHqZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVuBBaIePQZIbFGGsvgOODkJH3PMB8GA1UdIwQY
MBaAFDhJM2HffzirVXTbgiCmxP5c/mtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VrellkOV9PS3RWZE51Q0lLYkVfbHotYTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZmFkODQtZThjOS00ZjEzLWI2YzEt
NGU2ZjI2ZGQzZGRiLzEvT0VrellkOV9PS3RWZE51Q0lLYkVfbHotYTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZmFkODQtZThjOS00ZjEzLWI2YzEtNGU2ZjI2ZGQzZGRi
LzEvT0VrellkOV9PS3RWZE51Q0lLYkVfbHotYTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb3KZsez
LiMHQkcaLtp4To67H4RO+q7w7DNC2+qGX6/AHXbRu4bzu55FZmEDW3JrLBVBtm9i
Q4dAG+Yk4x+Xa7RQcOYQuukYYYSQ+cgBacVdKL2qrZymSbq+XyLqD4HAX10m/Mzc
OsFc3gE/nf6Jka538laL+LlrVRQ06/P8XR0nstgdn/IzE/CAlAUo1pBnD7mp2tuv
KKistHrIfid47YAiR96E3bQMod9wOwfbBD8aSzW3+04QaWzwUYaoQNZfLwI2Fjqh
q8SiXzQ7uywyBEowFjuTdfD+PexGuUVWBbh4r+BqG7b8+fgKV+Kv9MxGyroPj9sK
w+t5FOwLkk5ILA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:17:14 2024 by rpki-client on console-ams.rpki-client.org