Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          iCtmLc1H6T9tMl2hh3EBXwML+D2Fq5QO4YKMGGBKNSs=
Subject key identifier:   FC:7E:E3:32:C9:C9:40:70:4D:69:B4:25:3C:77:D2:8F:71:CD:97:BB
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       018F50FF4B7F5F61C95753279766AA884B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          03E5
Signing time:             Tue 07 May 2024 03:00:59 +0000
Manifest this update:     Tue 07 May 2024 03:00:59 +0000
Manifest next update:     Wed 08 May 2024 03:00:59 +0000
Files and hashes:         1: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: iGwB+YAEGHqdqSluBjKZt78hDjz92qlabisb9ARdH2s=)
                          2: wH8dKoeGJgGmweQofWa1pKLttjs.roa (hash: q734lCUvqcbixBUU0tIHN9nSC2QLyXLQ0pIDYY0+ZTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:ff:4b:7f:5f:61:c9:57:53:27:97:66:aa:88:4b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: May  7 03:00:59 2024 GMT
            Not After : May  8 03:00:59 2024 GMT
        Subject: CN=fc7ee332c9c940704d69b4253c77d28f71cd97bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:e9:67:4d:28:3a:c6:ee:f0:0c:7e:42:a2:
                    8f:70:ad:b2:29:90:4a:7e:2c:a8:42:a1:f7:db:1a:
                    4d:65:dc:bc:98:37:66:84:a0:65:09:ab:5d:c2:84:
                    b3:e0:7c:87:8a:fe:ee:c2:12:0b:7f:c5:d5:28:74:
                    de:8c:e1:d6:fe:4f:61:15:7e:4c:64:ca:5d:0e:c2:
                    19:a8:24:9b:c2:b7:f7:a3:ca:0b:80:98:c0:56:fd:
                    77:4f:51:04:f7:d4:4f:58:b2:ff:b6:2e:32:0d:6d:
                    31:db:a7:8d:79:7b:4d:7f:d8:42:d7:49:cc:61:b4:
                    c6:9f:ee:92:76:19:db:2e:d5:cc:9a:f2:bf:91:a2:
                    f5:80:e0:ac:1f:df:8f:fd:b2:4a:91:2e:ed:ef:d0:
                    d3:fb:e4:30:50:05:57:85:2b:e0:0e:2d:89:39:08:
                    1f:92:26:8a:00:c9:1c:5c:60:1a:21:15:13:fb:3c:
                    e0:86:17:4f:a3:56:5e:b2:aa:3f:08:02:b6:11:7b:
                    3c:e3:fb:1a:12:fe:be:92:95:0f:b6:34:3a:52:fc:
                    d1:07:a5:b2:68:40:2e:63:ed:d8:c2:20:59:71:b9:
                    e2:44:6c:82:e2:6e:23:ab:21:95:ca:1f:66:f2:52:
                    ef:aa:fa:2d:f9:c6:b3:61:2f:c4:d2:d6:1e:92:87:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:E3:32:C9:C9:40:70:4D:69:B4:25:3C:77:D2:8F:71:CD:97:BB
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:85:62:c7:1f:f9:80:f1:b4:3c:2c:33:29:20:5d:bd:91:4a:
         c3:fa:23:36:ae:ba:33:2a:16:50:c0:f7:2f:3a:0b:9f:61:da:
         e4:c2:f1:ce:d3:02:fb:5e:b0:df:8e:7b:0d:eb:19:54:47:8f:
         ed:08:8f:0f:0a:cc:2a:0d:83:b1:b6:3b:8b:8f:5a:74:16:10:
         cd:19:6a:4f:00:0a:7b:90:5a:61:cb:50:e6:9d:b6:8e:da:8a:
         c8:3a:03:83:69:40:8c:f6:46:c9:20:ea:4e:57:7a:80:5b:4f:
         cd:a6:68:79:de:d8:cb:83:59:cd:58:75:1b:22:85:93:11:1a:
         61:e0:b7:32:fb:64:df:73:e6:f6:35:f3:60:2a:4e:63:e1:84:
         40:eb:8b:9f:e1:a9:26:c5:14:9d:b0:95:8c:e5:f9:f3:f5:ac:
         11:3f:c2:45:22:d9:11:f8:f4:71:50:8d:69:cf:e5:e9:4c:4d:
         1a:6e:5b:bd:e1:2b:50:32:ae:98:69:d9:c5:44:65:eb:76:90:
         40:b2:ee:f6:8a:b1:7d:1f:0b:ec:ca:e5:35:78:fd:f8:35:2a:
         18:b5:d8:a9:13:49:f5:15:3e:e9:6a:34:91:53:91:6f:f0:9a:
         47:7a:50:38:b0:e2:40:37:9e:82:69:6d:05:1e:e4:70:ee:01:
         7f:ca:c8:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Q/0t/X2HJV1Mnl2aqiEsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2
MThkZDIwHhcNMjQwNTA3MDMwMDU5WhcNMjQwNTA4MDMwMDU5WjAzMTEwLwYDVQQD
EyhmYzdlZTMzMmM5Yzk0MDcwNGQ2OWI0MjUzYzc3ZDI4ZjcxY2Q5N2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTfpZ00oOsbu8Ax+QqKPcK2yKZBK
fiyoQqH32xpNZdy8mDdmhKBlCatdwoSz4HyHiv7uwhILf8XVKHTejOHW/k9hFX5M
ZMpdDsIZqCSbwrf3o8oLgJjAVv13T1EE99RPWLL/ti4yDW0x26eNeXtNf9hC10nM
YbTGn+6SdhnbLtXMmvK/kaL1gOCsH9+P/bJKkS7t79DT++QwUAVXhSvgDi2JOQgf
kiaKAMkcXGAaIRUT+zzghhdPo1Zesqo/CAK2EXs84/saEv6+kpUPtjQ6UvzRB6Wy
aEAuY+3YwiBZcbniRGyC4m4jqyGVyh9m8lLvqvot+cazYS/E0tYekoeddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPx+4zLJyUBwTWm0JTx30o9xzZe7MB8GA1UdIwQY
MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt
ZGQxZWM1N2Q3ZTc0LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0
LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIVixx/5
gPG0PCwzKSBdvZFKw/ojNq66MyoWUMD3LzoLn2Ha5MLxztMC+16w3457DesZVEeP
7QiPDwrMKg2DsbY7i49adBYQzRlqTwAKe5BaYctQ5p22jtqKyDoDg2lAjPZGySDq
Tld6gFtPzaZoed7Yy4NZzVh1GyKFkxEaYeC3Mvtk33Pm9jXzYCpOY+GEQOuLn+Gp
JsUUnbCVjOX58/WsET/CRSLZEfj0cVCNac/l6UxNGm5bveErUDKumGnZxURl63aQ
QLLu9oqxfR8L7MrlNXj9+DUqGLXYqRNJ9RU+6Wo0kVORb/CaR3pQOLDiQDeegmlt
BR7kcO4Bf8rIzw==
-----END CERTIFICATE-----
Generated at Tue May 7 13:14:22 2024 by rpki-client on console-fra.rpki-client.org