Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File:                     B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier:          OWcvZZ0yeV+2XenjlPerq28d9Fy8B+f+LnfV2OsfDTY=
Subject key identifier:   12:62:B0:02:E5:7E:42:DD:1C:C3:74:2A:94:AB:4E:49:D9:C6:E0:98
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer:       /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial:       018F5325743B6810C589D8758629F483D934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number:          0A1B
Signing time:             Tue 07 May 2024 13:01:54 +0000
Manifest this update:     Tue 07 May 2024 13:01:54 +0000
Manifest next update:     Wed 08 May 2024 13:01:54 +0000
Files and hashes:         1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: g3ZpxxsxmWo8zd3i8Kz81UXk2kZ7B/qEWcxS4zvUaVQ=)
                          2: Uu1J__-yTKvR63rlTd24AnmAO80.roa (hash: zugdrnBohGQp/KEN0uLVP7ptm+kQznKGEzlATfccX2I=)
                          3: kHhR6XXw5W4OrK3DDWGkt6y3LqQ.roa (hash: SnsZrKOJ+51083mkqFkmUXyLNlZFwWd3H0I4nDouxCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:74:3b:68:10:c5:89:d8:75:86:29:f4:83:d9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
        Validity
            Not Before: May  7 13:01:54 2024 GMT
            Not After : May  8 13:01:54 2024 GMT
        Subject: CN=1262b002e57e42dd1cc3742a94ab4e49d9c6e098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:49:cc:d6:bf:43:55:ac:1d:40:7d:19:78:
                    52:55:82:3d:c9:dc:ef:e8:f0:70:a0:69:ef:1d:f8:
                    6a:23:19:e6:09:d8:95:30:a6:45:a9:97:3c:a6:cc:
                    a1:3c:af:c6:48:73:b4:dc:0f:71:b4:21:20:99:5c:
                    d5:49:a2:bb:2e:5c:b2:ba:46:7a:5f:ba:8c:65:bf:
                    7e:12:02:6d:4f:3d:16:e7:35:6f:ea:a9:8d:d5:6f:
                    68:c5:56:3a:f8:bb:88:c3:70:34:9e:03:90:6f:fe:
                    e9:a6:45:39:35:4a:47:8d:7f:67:bb:55:54:b6:a8:
                    3e:c7:1c:ab:91:e3:12:96:58:d5:af:27:d5:72:94:
                    6b:4f:71:9f:ee:17:8f:9e:f0:59:d8:41:a0:6e:15:
                    80:34:f7:99:36:90:79:0b:a8:28:4f:d3:5e:53:7b:
                    4d:b8:67:47:f5:be:c9:46:ec:ae:df:64:8b:bd:21:
                    bb:eb:92:79:00:42:b0:77:9d:4c:10:87:07:e1:af:
                    98:2e:02:37:c8:b9:07:fb:51:ba:00:d4:6e:03:39:
                    ca:91:33:82:7b:ab:52:75:25:3d:26:a3:68:64:bb:
                    87:c7:1a:98:f5:af:fb:93:21:50:71:8f:82:9e:31:
                    6f:15:7d:bc:65:c5:7d:5d:fa:8d:44:72:09:a6:a6:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:B0:02:E5:7E:42:DD:1C:C3:74:2A:94:AB:4E:49:D9:C6:E0:98
            X509v3 Authority Key Identifier:
                keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:46:61:72:8c:2b:b7:8a:17:a3:ca:50:90:5e:9a:f1:ba:b5:
         27:8e:b6:eb:ef:41:7f:f6:67:0c:82:e9:29:31:e8:95:de:bd:
         e1:09:2d:a6:b8:d2:79:97:18:15:9f:b2:36:19:4d:f4:df:65:
         15:35:63:8e:10:48:66:ed:6c:5f:50:bf:37:94:c7:3c:88:1e:
         c5:84:f5:11:a7:7f:7b:2b:68:c6:fc:d8:fc:1b:eb:16:b6:72:
         9e:d9:26:50:47:49:02:12:47:ce:37:ff:d4:be:ec:d0:62:ec:
         4c:97:ab:98:cb:47:5b:06:27:3b:50:96:9c:67:1f:73:32:45:
         48:06:c9:21:0b:52:49:37:62:89:cb:89:40:38:65:8a:f1:43:
         53:71:88:ae:9c:34:0b:71:bb:be:6b:27:0b:08:9c:16:d8:8f:
         94:c1:5b:b5:73:af:a8:cd:17:70:1a:8d:bb:00:51:31:7b:95:
         37:f8:a5:8b:1c:bf:1b:4d:9b:38:ee:b7:1d:a4:35:e5:d7:76:
         93:a8:3c:5b:8f:76:f9:3a:94:7c:e3:0d:39:82:d8:5d:c2:92:
         84:e9:93:0b:1d:0a:e2:ae:92:9e:6b:44:b4:75:06:8f:c4:d0:
         f2:ca:2b:36:0a:be:93:17:b3:e7:d5:ad:02:3b:56:5e:1d:a0:
         b4:87:c5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TJXQ7aBDFidh1hin0g9k0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjQwNTA3MTMwMTU0WhcNMjQwNTA4MTMwMTU0WjAzMTEwLwYDVQQD
EygxMjYyYjAwMmU1N2U0MmRkMWNjMzc0MmE5NGFiNGU0OWQ5YzZlMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqxJzNa/Q1WsHUB9GXhSVYI9ydzv
6PBwoGnvHfhqIxnmCdiVMKZFqZc8psyhPK/GSHO03A9xtCEgmVzVSaK7LlyyukZ6
X7qMZb9+EgJtTz0W5zVv6qmN1W9oxVY6+LuIw3A0ngOQb/7ppkU5NUpHjX9nu1VU
tqg+xxyrkeMSlljVryfVcpRrT3Gf7hePnvBZ2EGgbhWANPeZNpB5C6goT9NeU3tN
uGdH9b7JRuyu32SLvSG765J5AEKwd51MEIcH4a+YLgI3yLkH+1G6ANRuAznKkTOC
e6tSdSU9JqNoZLuHxxqY9a/7kyFQcY+CnjFvFX28ZcV9XfqNRHIJpqb8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJisALlfkLdHMN0KpSrTknZxuCYMB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUZhcowr
t4oXo8pQkF6a8bq1J4626+9Bf/ZnDILpKTHold694QktprjSeZcYFZ+yNhlN9N9l
FTVjjhBIZu1sX1C/N5THPIgexYT1Ead/eytoxvzY/BvrFrZyntkmUEdJAhJHzjf/
1L7s0GLsTJermMtHWwYnO1CWnGcfczJFSAbJIQtSSTdiicuJQDhlivFDU3GIrpw0
C3G7vmsnCwicFtiPlMFbtXOvqM0XcBqNuwBRMXuVN/ilixy/G02bOO63HaQ15dd2
k6g8W492+TqUfOMNOYLYXcKShOmTCx0K4q6SnmtEtHUGj8TQ8sorNgq+kxez59Wt
AjtWXh2gtIfF8A==
-----END CERTIFICATE-----
Generated at Tue May 7 18:51:23 2024 by rpki-client on console-fra.rpki-client.org