Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File:                     Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier:          sweqiB1ne+iXU/5OgkRytkzOS6NKv3ho5Iy14FmQBzo=
Subject key identifier:   31:5A:07:54:71:0E:5C:9D:F9:5E:22:ED:E7:7E:BC:96:09:20:32:62
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer:       /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial:       018F87ED1F2CAA9D54D8BC037FCF3D7B9174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number:          05D8
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: 6suDv7lDtaUmRAvwfvUVAPU3u80.roa (hash: b3TM5yoCuHsTel6ogjDgrvahMlNTdlRAFLegKb4Ldqw=)
                          2: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: +1t9FLM0D+l5nLx0aQkh5cfHVsO2fNWta0LUEVj/Ub0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:1f:2c:aa:9d:54:d8:bc:03:7f:cf:3d:7b:91:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=315a0754710e5c9df95e22ede77ebc9609203262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:57:03:82:38:1a:72:32:46:20:b8:0f:16:
                    d7:ec:31:61:78:5e:7e:e8:f5:21:64:09:f7:cb:4e:
                    46:c3:56:27:6b:34:b0:75:bf:4d:a0:48:76:c4:ee:
                    cf:1e:25:7e:39:e5:ca:3d:0c:41:ea:52:74:d4:a3:
                    b3:2a:11:b4:d3:66:e6:8c:e0:05:7c:f9:93:2c:c7:
                    dd:5d:d8:66:f4:e0:ab:1c:9d:d0:22:55:e1:69:f4:
                    53:94:9f:e7:8d:4b:3c:17:b0:01:e9:64:c9:c3:69:
                    b1:b7:36:4a:f8:50:33:f2:de:78:ce:1a:33:00:a2:
                    ec:f4:6e:a0:0e:fd:66:d3:c1:95:0a:9e:cd:fe:64:
                    69:5a:2e:0c:f0:f4:c3:c1:89:eb:b4:36:f9:c9:29:
                    2a:0d:1f:7b:45:b5:4a:c1:5e:66:4d:b4:ff:0c:d3:
                    73:35:d6:f2:a6:4a:8d:8a:20:f4:d3:e0:69:bb:52:
                    9b:9f:d9:c3:a3:be:e4:41:d0:09:73:4b:a8:01:74:
                    93:db:f1:8c:fc:96:3b:e0:73:a8:07:5f:68:ed:ca:
                    0c:00:e8:e6:43:4e:52:f0:1a:fc:3a:32:1c:fd:0a:
                    4f:fe:b6:3a:41:c0:3f:09:df:2d:8b:64:ed:18:70:
                    80:b4:35:1d:fb:a8:c4:61:e7:b6:15:79:9c:02:20:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5A:07:54:71:0E:5C:9D:F9:5E:22:ED:E7:7E:BC:96:09:20:32:62
            X509v3 Authority Key Identifier:
                keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:e1:55:a0:3a:33:bc:a3:2b:9b:12:0c:67:b2:d3:ca:59:
         0e:7a:84:9b:4c:3b:5a:fc:c8:89:ed:37:42:42:18:fb:ba:4a:
         98:44:7f:e3:70:40:b8:3b:f8:b6:2f:b5:e1:8c:1d:5e:b7:6a:
         27:a6:ed:1a:22:c8:dc:54:74:a3:b6:ce:a8:79:18:22:a1:2d:
         50:e6:ff:b6:4c:26:f4:7e:1e:9e:46:25:05:e5:dd:83:18:95:
         0f:de:61:d8:c5:0a:eb:17:5f:18:52:cf:02:50:37:64:85:9e:
         35:83:0e:e9:b4:ac:68:d1:92:85:86:29:63:60:e2:23:24:0a:
         b1:b6:95:14:4f:dc:ad:d4:08:be:6f:f5:5b:fb:95:a7:ce:1f:
         ab:3d:a9:5d:c9:a9:b0:f6:9a:67:0e:33:cb:26:bd:68:16:15:
         eb:9c:87:df:3b:2d:18:c6:5d:6f:2a:0e:10:ad:1c:bb:24:18:
         e4:11:bf:a5:4c:e7:8b:2e:0d:17:77:df:ac:e0:03:5c:0a:75:
         f8:43:53:09:29:f1:9c:44:98:c5:1a:8d:76:bd:bb:23:48:52:
         e8:2e:6b:45:e2:a7:f5:2f:c3:d9:d7:77:69:04:55:57:9d:0e:
         a1:bd:59:be:d5:29:8f:15:0e:77:30:d1:07:58:32:64:2f:e6:
         c9:0b:76:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7R8sqp1U2LwDf889e5F0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2M2VkZGI5MWI1MzhmODNlOGFlZGY1NTY1Yzk2MGRmMGIx
MDdlYTIwHhcNMjQwNTE3MTkwMDE1WhcNMjQwNTE4MTkwMDE1WjAzMTEwLwYDVQQD
EygzMTVhMDc1NDcxMGU1YzlkZjk1ZTIyZWRlNzdlYmM5NjA5MjAzMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwhXA4I4GnIyRiC4DxbX7DFheF5+
6PUhZAn3y05Gw1YnazSwdb9NoEh2xO7PHiV+OeXKPQxB6lJ01KOzKhG002bmjOAF
fPmTLMfdXdhm9OCrHJ3QIlXhafRTlJ/njUs8F7AB6WTJw2mxtzZK+FAz8t54zhoz
AKLs9G6gDv1m08GVCp7N/mRpWi4M8PTDwYnrtDb5ySkqDR97RbVKwV5mTbT/DNNz
NdbypkqNiiD00+Bpu1Kbn9nDo77kQdAJc0uoAXST2/GM/JY74HOoB19o7coMAOjm
Q05S8Br8OjIc/QpP/rY6QcA/Cd8ti2TtGHCAtDUd+6jEYee2FXmcAiChIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFaB1RxDlyd+V4i7ed+vJYJIDJiMB8GA1UdIwQY
MBaAFEY+3bkbU4+D6K7fVWXJYN8LEH6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUt
MTg3NjI1MDBmZTI1LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUtMTg3NjI1MDBmZTI1
LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPfhVaA6
M7yjK5sSDGey08pZDnqEm0w7WvzIie03QkIY+7pKmER/43BAuDv4ti+14YwdXrdq
J6btGiLI3FR0o7bOqHkYIqEtUOb/tkwm9H4enkYlBeXdgxiVD95h2MUK6xdfGFLP
AlA3ZIWeNYMO6bSsaNGShYYpY2DiIyQKsbaVFE/crdQIvm/1W/uVp84fqz2pXcmp
sPaaZw4zyya9aBYV65yH3zstGMZdbyoOEK0cuyQY5BG/pUzniy4NF3ffrOADXAp1
+ENTCSnxnESYxRqNdr27I0hS6C5rReKn9S/D2dd3aQRVV50Oob1ZvtUpjxUOdzDR
B1gyZC/myQt2og==
-----END CERTIFICATE-----
Generated at Sat May 18 00:09:42 2024 by rpki-client on console-ams.rpki-client.org