Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File:                     c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier:          Xj3JV2r420cMNX/Dhg1KlJw1oVZpJ3i82nAEUjdc1vw=
Subject key identifier:   F5:1E:46:90:0D:4B:A6:8B:9F:9E:1F:CE:09:39:DB:0C:51:F5:C7:7E
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer:       /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial:       018F8D1450269540C6CC8A69649AA1502AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number:          097B
Signing time:             Sat 18 May 2024 19:01:09 +0000
Manifest this update:     Sat 18 May 2024 19:01:09 +0000
Manifest next update:     Sun 19 May 2024 19:01:09 +0000
Files and hashes:         1: KY0cRWQfsJpiyusBxDSmoB2UZjM.roa (hash: L2C2HMPbJS2Kv5bJ2NLXJVSu+jStvN+1QR4ixo/zh4w=)
                          2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: r3YTSUqxcZAM9qhpdPLProBr9Hn6tNCCiP5g+Le2o9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:50:26:95:40:c6:cc:8a:69:64:9a:a1:50:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
        Validity
            Not Before: May 18 19:01:09 2024 GMT
            Not After : May 19 19:01:09 2024 GMT
        Subject: CN=f51e46900d4ba68b9f9e1fce0939db0c51f5c77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:63:d7:8f:eb:ce:19:90:59:ee:2b:48:34:
                    aa:22:23:36:e0:81:33:29:80:63:21:5b:2a:95:2e:
                    5c:b5:e2:06:ce:f7:b6:4b:1b:f3:f2:72:c7:3b:a2:
                    1a:0c:34:c1:9f:de:36:c2:85:6e:4d:fe:12:37:07:
                    43:a6:c2:a8:3d:8e:12:02:8f:70:c2:b7:cf:71:19:
                    1f:e4:9a:39:aa:2f:64:fe:bf:2f:4c:0c:7f:65:af:
                    8b:69:86:46:08:18:cf:23:c6:04:66:8a:b3:94:81:
                    e0:c0:e4:a5:05:22:6b:9d:b6:32:1d:c8:bc:32:96:
                    77:f2:97:1c:ea:a2:3d:6c:90:db:13:4a:51:42:ff:
                    0e:73:3b:16:e9:44:cb:18:38:57:b6:a0:cd:e3:98:
                    b3:04:c4:35:be:da:75:54:2a:19:b4:3c:16:cb:9f:
                    78:9b:45:1e:62:9b:57:9b:c0:fe:6c:90:1d:7c:72:
                    cd:40:1d:6e:1f:61:dc:49:4d:f2:da:07:db:34:33:
                    de:0c:2a:5b:b7:2f:b2:0d:83:45:f8:aa:77:38:97:
                    f3:0f:96:19:01:92:ff:d2:a2:fb:aa:a6:16:ba:05:
                    eb:be:d9:4a:ed:aa:c8:1f:1f:36:dc:44:2f:70:4a:
                    75:ef:1e:fb:5f:bd:3a:7a:10:d3:bd:8b:e9:53:af:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1E:46:90:0D:4B:A6:8B:9F:9E:1F:CE:09:39:DB:0C:51:F5:C7:7E
            X509v3 Authority Key Identifier:
                keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:81:52:6b:28:4a:0e:d7:7e:7e:b5:57:d9:c6:c7:a2:07:
         43:80:f7:1c:d3:3a:3f:8c:24:77:1b:e1:61:2c:40:01:fd:ea:
         b5:25:7f:d9:53:07:8a:fb:54:46:6c:cb:39:90:0d:e4:43:71:
         f9:1a:63:1c:fc:ce:bf:c3:ec:69:c4:e7:7f:99:31:27:2d:88:
         89:12:1a:92:01:f2:4f:32:d1:29:15:b1:b9:3c:6d:8c:01:f7:
         a8:16:d0:68:3c:fc:00:35:d6:50:48:c4:39:7a:3d:13:70:9d:
         2b:4f:9e:c1:43:c0:a3:4f:6a:1a:8e:8f:7d:5f:5f:9d:bf:2c:
         a1:06:2c:0d:f1:22:08:7d:ed:e3:04:84:21:b3:0f:8e:c2:cd:
         25:43:f9:28:a0:64:94:d3:ac:5e:73:4f:8c:fe:9c:6e:3e:5d:
         24:ba:4e:54:ff:18:c4:17:dd:cc:9d:ce:2a:77:5a:e6:52:cf:
         ac:49:cb:7e:d3:83:9f:0f:1a:f6:64:49:a0:99:2e:74:ac:2b:
         cb:e2:c4:9a:68:a0:19:6b:b5:ff:a6:ff:9d:bb:f3:78:2a:e8:
         ba:aa:4f:c5:28:1d:ba:e1:d4:a1:4d:af:7f:ae:d6:29:ae:dc:
         94:e1:e9:7d:a1:19:5e:ed:17:ac:70:43:03:df:1a:39:d0:cf:
         b3:e5:2c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NFFAmlUDGzIppZJqhUCrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGU2NWZiMDNlNmQ2MDdkOGJlMjA0MzQ1ZDZlMDVhNDYw
YjlhNGYwHhcNMjQwNTE4MTkwMTA5WhcNMjQwNTE5MTkwMTA5WjAzMTEwLwYDVQQD
EyhmNTFlNDY5MDBkNGJhNjhiOWY5ZTFmY2UwOTM5ZGIwYzUxZjVjNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBRj14/rzhmQWe4rSDSqIiM24IEz
KYBjIVsqlS5cteIGzve2Sxvz8nLHO6IaDDTBn942woVuTf4SNwdDpsKoPY4SAo9w
wrfPcRkf5Jo5qi9k/r8vTAx/Za+LaYZGCBjPI8YEZoqzlIHgwOSlBSJrnbYyHci8
MpZ38pcc6qI9bJDbE0pRQv8OczsW6UTLGDhXtqDN45izBMQ1vtp1VCoZtDwWy594
m0UeYptXm8D+bJAdfHLNQB1uH2HcSU3y2gfbNDPeDCpbty+yDYNF+Kp3OJfzD5YZ
AZL/0qL7qqYWugXrvtlK7arIHx823EQvcEp17x77X706ehDTvYvpU687oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUeRpANS6aLn54fzgk52wxR9cd+MB8GA1UdIwQY
MBaAFHOOZfsD5tYH2L4gQ0XW4FpGC5pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmIt
ZGQ1MTVlNjNjZmNiLzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmItZGQ1MTVlNjNjZmNi
LzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEuBUmso
Sg7Xfn61V9nGx6IHQ4D3HNM6P4wkdxvhYSxAAf3qtSV/2VMHivtURmzLOZAN5ENx
+RpjHPzOv8PsacTnf5kxJy2IiRIakgHyTzLRKRWxuTxtjAH3qBbQaDz8ADXWUEjE
OXo9E3CdK0+ewUPAo09qGo6PfV9fnb8soQYsDfEiCH3t4wSEIbMPjsLNJUP5KKBk
lNOsXnNPjP6cbj5dJLpOVP8YxBfdzJ3OKnda5lLPrEnLftODnw8a9mRJoJkudKwr
y+LEmmigGWu1/6b/nbvzeCrouqpPxSgduuHUoU2vf67WKa7clOHpfaEZXu0XrHBD
A98aOdDPs+Ussw==
-----END CERTIFICATE-----
Generated at Sat May 18 22:53:40 2024 by rpki-client on console-ams.rpki-client.org