Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File:                     UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier:          ngm/Lkhpkc/CXT5uM7RNRfRn2Eu/8EkLmCJjiwCFnq0=
Subject key identifier:   67:DE:37:D2:56:96:55:8E:51:C5:02:3C:AF:94:E4:F3:FB:DB:4B:28
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer:       /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial:       018F885B0EC4471C470FC76E6A0923E5F0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:19 +0000
Manifest this update:     Fri 17 May 2024 21:00:19 +0000
Manifest next update:     Sat 18 May 2024 21:00:19 +0000
Files and hashes:         1: 7be3KlVWtY9E6GU_jdoff4miTvA.roa (hash: aMLMj+8Ya41+zKbG2YsMmVyVQc7xiiZxfUrEegbEr4Q=)
                          2: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: vlWN5UobtlhBYJtM+/APzTxT+2cFnL31oo7vTxvDyzc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:0e:c4:47:1c:47:0f:c7:6e:6a:09:23:e5:f0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
        Validity
            Not Before: May 17 21:00:19 2024 GMT
            Not After : May 18 21:00:19 2024 GMT
        Subject: CN=67de37d25696558e51c5023caf94e4f3fbdb4b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:b4:35:37:1c:f6:d7:fa:b8:e7:71:ae:17:
                    35:8c:7a:d7:b2:cf:60:0c:0e:f7:83:85:bc:41:91:
                    95:7f:3c:8a:fd:5e:00:fe:6f:5c:7d:9e:68:12:08:
                    01:53:ad:ca:28:9b:24:d9:07:26:db:31:c4:72:34:
                    30:2c:d3:ee:de:3b:e1:1f:02:23:66:bf:d8:f3:38:
                    86:7b:0f:f7:ea:e7:87:81:8f:67:c2:8b:68:aa:60:
                    c5:19:83:d9:af:71:07:45:da:12:eb:6f:8f:fa:44:
                    8a:c9:b9:cc:11:1c:62:85:6a:3d:61:c3:8b:c6:a5:
                    30:39:cb:ce:9c:0b:c8:5f:d7:89:de:a3:01:5d:d2:
                    b4:53:40:2c:1a:5d:f5:0e:f7:dd:a2:8d:01:8a:c8:
                    8e:a2:fe:98:3e:04:6c:81:a1:65:a4:7b:e3:68:f6:
                    05:92:bf:c8:1f:fa:97:e3:a5:ff:aa:20:88:fb:14:
                    7f:df:3d:2d:11:8a:77:89:c6:7a:fe:6d:3c:a1:9a:
                    f8:56:14:6c:04:c5:e3:55:50:eb:d8:ff:2d:7a:4e:
                    e4:52:86:78:c8:d0:9c:6d:5c:e7:db:73:1d:bc:6e:
                    57:c5:d5:88:6a:a0:8e:d3:0f:82:9d:f1:b1:e1:91:
                    36:d5:93:85:e9:6a:fd:9e:74:aa:47:66:c7:9f:4d:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:37:D2:56:96:55:8E:51:C5:02:3C:AF:94:E4:F3:FB:DB:4B:28
            X509v3 Authority Key Identifier:
                keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:35:19:43:74:f7:f0:0c:5f:3e:db:f0:5e:ad:84:8d:d8:3a:
         fb:1d:97:7b:eb:cb:2d:65:40:83:0d:e3:a6:c6:e3:20:bc:f9:
         a0:3c:1b:38:8f:5c:e2:e4:8f:b5:bb:0a:e7:b2:04:e7:ad:58:
         0c:89:d0:13:56:aa:11:8b:ba:ea:42:d6:e4:a3:80:2d:8a:73:
         6f:aa:8e:c0:32:fb:e6:f2:2c:b3:af:2b:77:e5:10:73:bb:6a:
         73:4b:62:25:75:28:4e:fc:64:2c:f7:cf:f5:e6:25:a2:c1:07:
         0a:52:f2:21:8c:1d:a6:07:05:6d:4a:09:1f:c3:9c:d1:be:87:
         07:03:53:e7:75:4f:cb:d1:44:bb:bc:83:ab:84:eb:49:f2:3a:
         ed:ac:14:6a:31:a5:f0:19:64:91:ba:40:79:29:da:91:22:98:
         60:ac:40:58:e9:55:cf:d3:51:78:9f:78:08:d8:b3:d4:6e:83:
         65:65:1a:21:0b:a4:47:eb:ef:90:fa:07:69:1b:60:7c:d2:66:
         d0:07:d1:9b:a1:64:b8:a4:8b:e2:29:c7:41:42:bc:69:9b:94:
         f7:9f:5e:ea:67:b5:cf:38:54:55:a5:5d:71:ac:d5:e0:3f:03:
         80:af:45:b3:55:ea:98:ca:5b:7c:8e:a2:29:f5:75:f7:2d:d8:
         b9:b7:c6:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWw7ERxxHD8duagkj5fDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWYzOTFmMjlkOTIwNzhiYTZlMmM3NmZhYTJmOGFlOTQ3
MzQzZTYwHhcNMjQwNTE3MjEwMDE5WhcNMjQwNTE4MjEwMDE5WjAzMTEwLwYDVQQD
Eyg2N2RlMzdkMjU2OTY1NThlNTFjNTAyM2NhZjk0ZTRmM2ZiZGI0YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrW0NTcc9tf6uOdxrhc1jHrXss9g
DA73g4W8QZGVfzyK/V4A/m9cfZ5oEggBU63KKJsk2Qcm2zHEcjQwLNPu3jvhHwIj
Zr/Y8ziGew/36ueHgY9nwotoqmDFGYPZr3EHRdoS62+P+kSKybnMERxihWo9YcOL
xqUwOcvOnAvIX9eJ3qMBXdK0U0AsGl31Dvfdoo0BisiOov6YPgRsgaFlpHvjaPYF
kr/IH/qX46X/qiCI+xR/3z0tEYp3icZ6/m08oZr4VhRsBMXjVVDr2P8tek7kUoZ4
yNCcbVzn23MdvG5XxdWIaqCO0w+CnfGx4ZE21ZOF6Wr9nnSqR2bHn01QyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfeN9JWllWOUcUCPK+U5PP720soMB8GA1UdIwQY
MBaAFFCfOR8p2SB4um4sdvqi+K6Uc0PmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYt
MjhkMGYyMDJlMzZkLzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9kNWRkMWEtN2I1OS00NDM1LWFiZGYtMjhkMGYyMDJlMzZk
LzEvVUo4NUh5blpJSGk2Yml4Mi1xTDRycFJ6US1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTUZQ3T3
8AxfPtvwXq2Ejdg6+x2Xe+vLLWVAgw3jpsbjILz5oDwbOI9c4uSPtbsK57IE561Y
DInQE1aqEYu66kLW5KOALYpzb6qOwDL75vIss68rd+UQc7tqc0tiJXUoTvxkLPfP
9eYlosEHClLyIYwdpgcFbUoJH8Oc0b6HBwNT53VPy9FEu7yDq4TrSfI67awUajGl
8BlkkbpAeSnakSKYYKxAWOlVz9NReJ94CNiz1G6DZWUaIQukR+vvkPoHaRtgfNJm
0AfRm6FkuKSL4inHQUK8aZuU959e6me1zzhUVaVdcazV4D8DgK9Fs1XqmMpbfI6i
KfV19y3YubfGjw==
-----END CERTIFICATE-----
Generated at Sat May 18 00:04:10 2024 by rpki-client on console-fra.rpki-client.org