Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File:                     TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier:          WcOLfn+L9Bl98chn29W0VEqOdQb5Qp4E6/Xzg3dBy1k=
Subject key identifier:   B0:00:69:68:03:A6:E2:2B:00:BF:47:45:85:28:2A:83:62:57:37:B0
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer:       /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial:       018F8891F447C44E73289433288628747CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: 5eHTVnQ/5lvYhjJZ2kdHNtM9cf6Axp1/bqJzZPryszA=)
                          2: f4H3r4NrA132mPbNIypSh4LY2wQ.roa (hash: PLB89yuiKEc1cL7xwcN2E9vN5v20DRPFhJt+vibPmi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f4:47:c4:4e:73:28:94:33:28:86:28:74:7c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=b000696803a6e22b00bf474585282a83625737b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:c8:29:d5:c7:46:90:11:64:56:59:b6:b4:
                    46:97:5c:6e:5e:c7:c7:26:8c:0b:8f:cc:2b:fa:18:
                    27:f2:17:26:5f:f4:34:20:ff:df:fd:1e:cb:76:22:
                    7f:81:f3:f5:ca:f7:8e:df:de:f1:1f:f8:4b:65:9b:
                    29:5e:30:07:5f:91:94:dd:85:1d:16:7a:9b:05:f9:
                    d0:0d:5b:1a:2d:14:74:96:04:d0:08:c2:43:45:16:
                    45:04:2d:29:ce:be:4c:14:fc:e9:56:03:e0:71:ac:
                    9f:b1:c0:6e:c9:9b:0d:ff:78:66:d5:95:da:e5:52:
                    93:ed:9e:98:81:40:21:ef:31:f3:08:70:cb:54:c1:
                    fd:d1:3b:c4:ed:ce:f5:cc:9d:bf:42:7d:34:2f:20:
                    6d:84:d0:bb:1b:be:21:5a:fd:5d:7c:56:96:b5:83:
                    e6:b7:0a:a4:0d:92:9c:5c:be:fa:42:cf:71:5d:7f:
                    00:d4:a2:ca:c9:e7:05:4b:da:fa:05:02:0d:62:af:
                    80:78:c7:53:ac:24:ef:d2:31:18:a0:69:c9:89:15:
                    80:5e:d1:e9:06:70:9d:0e:b2:a2:54:34:fd:29:35:
                    a5:3d:f7:2e:84:89:a1:fc:ec:10:02:1c:dc:60:39:
                    86:bc:82:4c:b4:65:c9:8b:45:67:99:a3:60:72:f5:
                    46:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:69:68:03:A6:E2:2B:00:BF:47:45:85:28:2A:83:62:57:37:B0
            X509v3 Authority Key Identifier:
                keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:bb:5a:ce:f4:e0:8e:cf:5a:16:b5:7a:35:22:c2:97:1c:
         1e:c0:19:fe:8a:8c:d4:68:f0:1b:f5:f1:fb:6a:03:44:bc:d3:
         2d:10:50:44:f8:7d:ae:7a:8a:b3:a6:7a:a6:38:cc:b0:be:8c:
         c6:4d:f2:c8:3c:85:bc:ef:a3:31:aa:15:95:96:27:27:a4:96:
         9b:8c:36:e0:36:b0:23:72:3c:7a:ab:7d:a4:a7:26:f8:4e:97:
         f0:ec:2d:0d:ed:1e:d6:82:47:3d:b4:40:39:8d:13:ad:a4:a7:
         62:ed:9c:fc:46:3b:39:ef:b5:34:d9:ae:6f:6f:76:e9:ec:70:
         63:bd:ea:62:43:5a:52:aa:e1:38:19:59:16:57:9a:f8:64:18:
         df:45:77:5a:d1:31:43:c6:05:d5:9d:b1:01:54:29:34:94:0d:
         40:22:1f:42:f2:1c:c5:60:54:cf:75:b2:41:65:de:5f:c5:70:
         49:2a:9c:da:e5:af:d1:29:36:49:87:ec:8f:bd:af:46:ee:77:
         3a:ab:61:9d:3b:fd:e9:f4:e5:cd:e1:cd:69:d5:df:53:17:4a:
         b7:5c:b0:b7:76:ad:f7:ba:05:fb:ba:00:24:c6:a0:41:f6:6f:
         ac:7b:09:e6:b5:1b:3a:b1:da:ef:80:7d:a4:b3:8f:dc:e0:a2:
         07:49:91:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkfRHxE5zKJQzKIYodHzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWNhZjVlNTQ5NWY1NGIwMzlmMWQwZjI0NzExMTI0Njdj
OTc5MWMwHhcNMjQwNTE3MjIwMDE3WhcNMjQwNTE4MjIwMDE3WjAzMTEwLwYDVQQD
EyhiMDAwNjk2ODAzYTZlMjJiMDBiZjQ3NDU4NTI4MmE4MzYyNTczN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1abIKdXHRpARZFZZtrRGl1xuXsfH
JowLj8wr+hgn8hcmX/Q0IP/f/R7LdiJ/gfP1yveO397xH/hLZZspXjAHX5GU3YUd
FnqbBfnQDVsaLRR0lgTQCMJDRRZFBC0pzr5MFPzpVgPgcayfscBuyZsN/3hm1ZXa
5VKT7Z6YgUAh7zHzCHDLVMH90TvE7c71zJ2/Qn00LyBthNC7G74hWv1dfFaWtYPm
twqkDZKcXL76Qs9xXX8A1KLKyecFS9r6BQINYq+AeMdTrCTv0jEYoGnJiRWAXtHp
BnCdDrKiVDT9KTWlPfcuhImh/OwQAhzcYDmGvIJMtGXJi0VnmaNgcvVGwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAAaWgDpuIrAL9HRYUoKoNiVzewMB8GA1UdIwQY
MBaAFE5cr15UlfVLA58dDyRxESRnyXkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMt
MDlkYjU3NDY5YmI4LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMtMDlkYjU3NDY5YmI4
LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUy7Ws70
4I7PWha1ejUiwpccHsAZ/oqM1GjwG/Xx+2oDRLzTLRBQRPh9rnqKs6Z6pjjMsL6M
xk3yyDyFvO+jMaoVlZYnJ6SWm4w24DawI3I8eqt9pKcm+E6X8OwtDe0e1oJHPbRA
OY0TraSnYu2c/EY7Oe+1NNmub2926exwY73qYkNaUqrhOBlZFlea+GQY30V3WtEx
Q8YF1Z2xAVQpNJQNQCIfQvIcxWBUz3WyQWXeX8VwSSqc2uWv0Sk2SYfsj72vRu53
OqthnTv96fTlzeHNadXfUxdKt1ywt3at97oF+7oAJMagQfZvrHsJ5rUbOrHa74B9
pLOP3OCiB0mRkg==
-----END CERTIFICATE-----
Generated at Fri May 17 22:57:23 2024 by rpki-client on console-fra.rpki-client.org