Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File:                     _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier:          BRRktMLfLgeIk2MY7RdsRzHAo0kGvSnIyTDKkMxRytc=
Subject key identifier:   58:B3:7A:27:7B:AE:02:14:C0:9A:C9:8B:73:F2:88:A9:74:10:07:BD
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer:       /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial:       018F87489A76CB1E87C330FC3B31BB37B12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: 2ugYllZr21fHjn47aTD2GPv8xY8GKRDiIF33PSZpVgE=)
                          2: aSmXro7WJi3RQU-0WohfEO90HiQ.roa (hash: bjXqKrzXk0ZWnsiTen0MeODqqJeqNan8TxyUQG3N9Xk=)
                          3: gKjRoJufT0XO9onmh9u9gyc84KA.roa (hash: DsBL54Ff7QvPbJj91FhZSvzcjqpgmjzEt2mcohbuX60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9a:76:cb:1e:87:c3:30:fc:3b:31:bb:37:b1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=58b37a277bae0214c09ac98b73f288a9741007bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9c:39:32:69:40:4f:40:98:e4:df:f0:e5:c8:
                    3c:84:59:13:eb:2b:73:00:93:72:16:01:91:f4:f4:
                    a6:94:b2:e1:22:a5:7f:35:fb:f3:fe:b6:c6:f4:0d:
                    75:06:3f:9a:bf:bf:62:23:23:e5:67:e6:9d:26:47:
                    3d:d5:26:2b:2a:53:fd:ae:76:00:04:e8:28:76:bf:
                    33:41:5f:71:65:bd:1f:c1:25:ef:05:5f:9d:2f:ab:
                    81:1e:a4:d0:fe:7e:56:90:f6:e6:aa:2b:cc:00:19:
                    dc:54:54:0a:76:41:53:a6:c0:b1:ee:40:76:db:08:
                    99:99:ae:31:1c:6d:f8:46:30:69:26:31:0f:a7:0c:
                    a4:ec:54:10:6b:78:58:ab:1a:c1:85:a2:fc:92:40:
                    7b:64:7f:6b:16:e2:59:22:dd:cf:a3:49:22:d7:2f:
                    98:36:48:b2:25:3e:7e:cc:fa:0a:4f:a8:37:e0:0f:
                    41:2c:5d:28:58:bb:eb:93:3e:62:b9:15:59:09:9a:
                    d3:b6:fc:f3:7c:36:87:85:8c:66:86:f7:05:c7:d4:
                    65:9e:eb:72:63:75:b4:fb:e1:fb:d9:23:f0:3a:6b:
                    8a:a6:1f:da:f2:7e:20:30:82:94:c0:47:47:9a:64:
                    fe:36:ba:5d:af:54:ea:c3:71:f6:5c:bf:7c:c6:b4:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B3:7A:27:7B:AE:02:14:C0:9A:C9:8B:73:F2:88:A9:74:10:07:BD
            X509v3 Authority Key Identifier:
                keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:14:43:7c:55:a4:97:1e:65:b5:ab:06:8b:4d:5b:1b:42:bf:
         51:29:aa:35:1b:b9:94:08:08:21:f5:c8:67:38:cd:f0:16:2f:
         4c:d2:c6:93:6d:f5:8e:c6:c1:3d:20:65:5a:46:40:66:63:ab:
         7f:05:1c:84:d4:cd:44:fb:d7:60:ec:96:9e:27:53:e6:f7:10:
         d4:9e:0b:d7:49:1c:fb:7c:56:5a:ad:bf:0a:c0:6c:7d:b1:a0:
         b6:00:0d:c2:db:02:15:e2:9a:79:82:95:c6:8d:bb:e5:b8:b3:
         dc:ae:a7:f5:8b:04:fd:6f:1c:43:6b:1a:29:0c:df:dd:07:45:
         5f:90:a9:77:d4:34:a7:74:83:5e:26:93:95:8d:05:5f:4b:59:
         d8:28:83:db:74:71:ca:33:e1:b7:ba:dd:91:5e:30:ed:8a:b1:
         d4:39:eb:f5:7d:e0:76:40:7b:75:8b:dd:ea:01:65:5e:73:0a:
         00:d5:40:cd:0b:18:2f:04:fb:b8:1e:60:a7:8c:29:64:e6:ce:
         8e:e7:54:40:fb:6c:8d:19:a0:a1:cd:88:d1:a6:9d:bc:b3:ce:
         a3:e9:51:24:3a:bf:5a:93:57:6b:4b:66:ec:40:85:78:f1:51:
         0c:99:bf:93:9c:8d:f3:91:98:8d:88:30:54:fe:ec:3c:04:06:
         e4:d3:d5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSJp2yx6HwzD8OzG7N7EqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDdhNzIxZWRhNDU5ZWJkZjk4ZTAyOWY4N2M5MGE5ODBl
ODFkOTQwHhcNMjQwNTE3MTYwMDMzWhcNMjQwNTE4MTYwMDMzWjAzMTEwLwYDVQQD
Eyg1OGIzN2EyNzdiYWUwMjE0YzA5YWM5OGI3M2YyODhhOTc0MTAwN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Zw5MmlAT0CY5N/w5cg8hFkT6ytz
AJNyFgGR9PSmlLLhIqV/Nfvz/rbG9A11Bj+av79iIyPlZ+adJkc91SYrKlP9rnYA
BOgodr8zQV9xZb0fwSXvBV+dL6uBHqTQ/n5WkPbmqivMABncVFQKdkFTpsCx7kB2
2wiZma4xHG34RjBpJjEPpwyk7FQQa3hYqxrBhaL8kkB7ZH9rFuJZIt3Po0ki1y+Y
NkiyJT5+zPoKT6g34A9BLF0oWLvrkz5iuRVZCZrTtvzzfDaHhYxmhvcFx9Rlnuty
Y3W0++H72SPwOmuKph/a8n4gMIKUwEdHmmT+Nrpdr1Tqw3H2XL98xrQSqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFizeid7rgIUwJrJi3PyiKl0EAe9MB8GA1UdIwQY
MBaAFPzXpyHtpFnr35jgKfh8kKmA6B2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYt
MTRkYzdlYzA0OTVkLzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYtMTRkYzdlYzA0OTVk
LzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1BRDfFWk
lx5ltasGi01bG0K/USmqNRu5lAgIIfXIZzjN8BYvTNLGk231jsbBPSBlWkZAZmOr
fwUchNTNRPvXYOyWnidT5vcQ1J4L10kc+3xWWq2/CsBsfbGgtgANwtsCFeKaeYKV
xo275biz3K6n9YsE/W8cQ2saKQzf3QdFX5Cpd9Q0p3SDXiaTlY0FX0tZ2CiD23Rx
yjPht7rdkV4w7Yqx1Dnr9X3gdkB7dYvd6gFlXnMKANVAzQsYLwT7uB5gp4wpZObO
judUQPtsjRmgoc2I0aadvLPOo+lRJDq/WpNXa0tm7ECFePFRDJm/k5yN85GYjYgw
VP7sPAQG5NPVGg==
-----END CERTIFICATE-----