Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File:                     PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier:          NO1GmOfuwMlhjDnvmOL9eghQ8qP+ePEznMcieDauvtk=
Subject key identifier:   EB:B0:5A:47:56:78:BE:70:88:AB:4A:D0:55:6E:DE:B7:80:74:34:B1
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer:       /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial:       018F8823EFBEB296F84DDDE55104AA242122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 20:00:07 +0000
Manifest this update:     Fri 17 May 2024 20:00:07 +0000
Manifest next update:     Sat 18 May 2024 20:00:07 +0000
Files and hashes:         1: 6pN85hKFa7K7Euw-gUwr13NF1QY.roa (hash: rsaqP1O4rYfx74g0d6CyI56rEnMevBErhopmhEt7GHg=)
                          2: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: +svTzFuH8Z1yvxz7hrztwX6buKCflIcf4k4JC/GoNbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:ef:be:b2:96:f8:4d:dd:e5:51:04:aa:24:21:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
        Validity
            Not Before: May 17 20:00:07 2024 GMT
            Not After : May 18 20:00:07 2024 GMT
        Subject: CN=ebb05a475678be7088ab4ad0556edeb7807434b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:b0:44:c5:da:53:e7:de:b5:a5:16:f1:39:
                    e6:f8:15:ee:69:d8:e5:04:e2:6c:c2:00:79:0a:46:
                    44:e3:a7:14:6f:40:28:83:06:96:23:e2:1c:7b:21:
                    88:08:f9:ae:c8:8f:f9:70:41:62:98:b9:de:3a:2c:
                    56:f9:bc:6f:0b:7d:c6:30:d2:f7:2b:00:0b:70:88:
                    b9:9b:91:d3:d2:7b:47:78:87:87:fe:6e:55:bb:42:
                    59:c3:f7:c2:a0:97:3b:4c:a1:07:be:30:eb:de:e7:
                    37:98:d4:68:85:c5:6d:13:d3:1d:ab:7e:63:43:0f:
                    cc:a0:1f:ea:de:c4:85:41:8f:95:fd:67:30:7f:b7:
                    f7:46:44:98:0e:a7:ed:7d:67:8c:09:b3:0a:2e:1b:
                    ed:5f:b0:89:bc:78:57:c4:5b:cc:1f:3f:38:2f:1c:
                    62:5b:0f:9d:69:ce:bd:bf:b5:10:c4:0e:db:e7:e1:
                    7f:a2:2c:d4:01:82:47:de:c2:27:a6:d9:40:75:02:
                    9f:96:be:44:b2:b2:4e:91:db:89:c8:83:0a:f4:54:
                    7c:b3:10:c7:0a:26:be:83:07:c1:f6:9a:6c:a0:43:
                    4a:e7:57:36:1d:35:a2:9b:43:e0:b6:46:a2:8f:34:
                    19:b7:a6:8c:a9:32:e5:74:1c:84:31:ab:04:7a:a5:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B0:5A:47:56:78:BE:70:88:AB:4A:D0:55:6E:DE:B7:80:74:34:B1
            X509v3 Authority Key Identifier:
                keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:07:39:22:59:12:69:6b:ea:12:dd:9c:fe:ac:32:ed:19:64:
         2f:40:b7:fb:25:2d:1e:0c:86:7e:ef:ab:dd:47:6d:33:d3:b0:
         44:54:90:3a:d5:46:18:9f:94:ad:28:18:15:b5:bf:ba:77:38:
         d0:b6:2f:25:48:99:45:c1:38:c3:07:92:5a:16:cb:12:04:b3:
         a4:6a:ee:a8:e4:b1:f9:af:6d:54:17:73:48:b7:6c:16:75:0a:
         8c:ba:eb:33:dd:18:60:ea:64:f2:22:13:92:8c:11:0c:6e:3e:
         1e:f7:4d:3a:87:4f:d2:8a:cf:83:27:5e:4d:45:49:47:3a:28:
         10:71:79:cb:41:1d:40:50:46:73:48:86:49:59:9b:19:46:50:
         52:d1:87:a4:21:22:60:1c:71:b4:39:08:52:4c:7b:45:0d:75:
         69:22:63:37:10:06:00:78:0e:21:29:3b:d2:d0:53:6a:03:f0:
         79:6b:10:55:04:ce:64:e8:fc:17:05:a4:8d:df:cc:c0:d0:27:
         ba:2a:4f:e9:09:04:71:eb:2e:29:77:19:eb:27:ab:ef:c3:fd:
         ea:6b:b0:39:ac:98:43:ac:8d:5e:94:89:60:0d:69:a4:67:83:
         e9:2a:34:f8:1c:06:46:5f:47:d8:4a:81:dd:fb:d6:bd:62:49:
         97:90:bd:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II+++spb4Td3lUQSqJCEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODZlYzMyMWU3MmZkNDZjOThkY2MwY2Q3YzcwYmNhZDU1
N2Q1OWMwHhcNMjQwNTE3MjAwMDA3WhcNMjQwNTE4MjAwMDA3WjAzMTEwLwYDVQQD
EyhlYmIwNWE0NzU2NzhiZTcwODhhYjRhZDA1NTZlZGViNzgwNzQzNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOuwRMXaU+fetaUW8Tnm+BXuadjl
BOJswgB5CkZE46cUb0AogwaWI+IceyGICPmuyI/5cEFimLneOixW+bxvC33GMNL3
KwALcIi5m5HT0ntHeIeH/m5Vu0JZw/fCoJc7TKEHvjDr3uc3mNRohcVtE9Mdq35j
Qw/MoB/q3sSFQY+V/Wcwf7f3RkSYDqftfWeMCbMKLhvtX7CJvHhXxFvMHz84Lxxi
Ww+dac69v7UQxA7b5+F/oizUAYJH3sInptlAdQKflr5EsrJOkduJyIMK9FR8sxDH
Cia+gwfB9ppsoENK51c2HTWim0PgtkaijzQZt6aMqTLldByEMasEeqURMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuwWkdWeL5wiKtK0FVu3reAdDSxMB8GA1UdIwQY
MBaAFDyG7DIecv1GyY3MDNfHC8rVV9WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2It
NWYxNWJlYWZhOWIxLzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2ItNWYxNWJlYWZhOWIx
LzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQc5IlkS
aWvqEt2c/qwy7RlkL0C3+yUtHgyGfu+r3UdtM9OwRFSQOtVGGJ+UrSgYFbW/unc4
0LYvJUiZRcE4wweSWhbLEgSzpGruqOSx+a9tVBdzSLdsFnUKjLrrM90YYOpk8iIT
kowRDG4+HvdNOodP0orPgydeTUVJRzooEHF5y0EdQFBGc0iGSVmbGUZQUtGHpCEi
YBxxtDkIUkx7RQ11aSJjNxAGAHgOISk70tBTagPweWsQVQTOZOj8FwWkjd/MwNAn
uipP6QkEcesuKXcZ6yer78P96muwOayYQ6yNXpSJYA1ppGeD6So0+BwGRl9H2EqB
3fvWvWJJl5C9dQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:28:46 2024 by rpki-client on console-ams.rpki-client.org