Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          j0AWJrbpSyn3AvxaZsIFNrwYrDX/A20GkZ+oC1I65vU=
Subject key identifier:   81:AC:68:EB:F4:D1:64:EF:AF:2F:3C:B3:94:88:AD:2B:52:A9:DC:DD
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       018F87ED0D8EDA9BB9D97549892FEF0E56E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          0C5B
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: M_d2Kh6Ca1TRQXO9NP-3v9PR3jA.roa (hash: qLLe/B/cRKjLVL0b+lK/xu1RvDI6u2VKb2zILLVIAHU=)
                          2: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: J4nHc4EyP4ayYIClWD45IWQhAJipfUAQc9YACgxRPbs=)
                          3: TZ9HHR7bGQRjDsbDdsLsls6wyfQ.roa (hash: nmiNDw0mlTS2GRoWIUmEprwYMFwKPaGYKoguqpTNKuo=)
                          4: Z2JmVlcZ5ETaPcpqRYotg3uDctY.roa (hash: +swLJ43pjjAD6Z9rHPw5YoBeeo080blyujraqkrt70M=)
                          5: s8OMML9zcdY9bd1pRXlcrq1ftT4.roa (hash: jYzRc9QQIybIwaWR1aK5jXMtdD0FUISOUCQnFE7tJ1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0d:8e:da:9b:b9:d9:75:49:89:2f:ef:0e:56:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=81ac68ebf4d164efaf2f3cb39488ad2b52a9dcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:89:4a:dd:12:c7:41:0f:01:4a:de:a8:4b:
                    ef:d0:0d:6f:88:fb:d0:2f:2e:7e:3a:fd:5a:9c:3e:
                    1c:45:72:95:51:2d:0d:3a:97:de:88:f4:23:49:29:
                    d9:e2:03:78:7b:03:f5:8d:bc:e8:b7:b7:4a:04:dc:
                    2e:3c:74:c6:ff:69:a9:80:f3:cf:5f:43:36:47:ff:
                    73:6c:05:2c:2a:6f:6d:c9:09:23:6e:8f:94:28:36:
                    88:8f:dc:3e:9e:88:75:e5:54:8b:9a:50:de:38:90:
                    ef:8b:8d:52:85:9d:05:00:5f:6e:3f:1a:10:fc:3d:
                    41:c2:4d:ba:97:14:2a:2f:8e:b4:fe:d5:7a:45:f7:
                    d8:e7:5f:a6:28:61:2a:a1:b3:ca:e3:58:00:4c:6e:
                    05:36:c1:d6:e3:a7:eb:5a:96:dc:5f:4c:47:4f:3b:
                    d1:c0:9a:05:3f:6f:4f:b2:20:a5:51:97:bd:54:ac:
                    25:05:38:7e:1e:bc:01:63:b1:a2:2a:a7:59:54:88:
                    80:29:05:50:67:39:ae:04:8b:ce:4b:f6:d2:12:8c:
                    6f:65:6c:41:ba:2b:1b:3b:f1:28:0e:e6:a1:6c:af:
                    ee:31:d1:76:01:60:7f:e8:f3:51:bf:db:2e:d1:b8:
                    23:15:4b:fa:65:92:1b:fa:e2:f6:db:f3:b2:9f:e3:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AC:68:EB:F4:D1:64:EF:AF:2F:3C:B3:94:88:AD:2B:52:A9:DC:DD
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:52:95:73:c3:1f:85:5c:4a:c6:fc:e7:55:fc:50:75:29:
         c0:e2:35:54:18:18:0c:52:9c:5d:db:5f:9d:30:92:7c:05:18:
         e6:ab:71:08:c8:da:bf:39:66:da:d8:f7:4c:13:f0:7c:3d:c1:
         51:23:be:96:96:fa:11:07:28:33:18:3b:1b:7f:51:07:b8:37:
         5f:0d:74:61:81:ec:65:82:31:ec:88:6c:11:58:22:2b:dd:19:
         8c:6d:62:69:84:7e:8d:a0:25:a1:99:b5:30:2c:64:25:ea:10:
         1c:fa:59:4d:ff:9d:ef:31:13:ce:94:73:0c:4c:5a:34:f6:3e:
         85:55:21:f4:a2:bd:62:ab:f9:cc:95:6e:27:5e:71:f5:d4:c8:
         f4:c0:4a:18:d7:96:4d:c0:f4:f5:fa:41:4b:98:45:20:05:f9:
         fc:6e:be:9e:47:92:42:e8:06:45:68:77:e8:35:69:7c:6f:58:
         e3:92:5e:9a:59:49:5d:40:03:89:de:09:14:13:ae:1c:55:b1:
         23:23:ab:d0:d0:61:0e:0c:1d:f7:9f:b2:ed:c3:4a:a1:e3:35:
         78:d2:00:ac:ac:97:cd:d9:03:ad:f8:6e:f5:01:89:07:5f:cb:
         09:70:d2:c7:29:02:bb:8e:de:df:7a:4f:9b:c4:37:ba:37:9a:
         d5:40:8d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Q2O2pu52XVJiS/vDlbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDRlZTRhZmZmNTVlNjc0NDRkNDdkNDliNTEyYTgzNjhi
ZjllZjYwHhcNMjQwNTE3MTkwMDEwWhcNMjQwNTE4MTkwMDEwWjAzMTEwLwYDVQQD
Eyg4MWFjNjhlYmY0ZDE2NGVmYWYyZjNjYjM5NDg4YWQyYjUyYTlkY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OWJSt0Sx0EPAUreqEvv0A1viPvQ
Ly5+Ov1anD4cRXKVUS0NOpfeiPQjSSnZ4gN4ewP1jbzot7dKBNwuPHTG/2mpgPPP
X0M2R/9zbAUsKm9tyQkjbo+UKDaIj9w+noh15VSLmlDeOJDvi41ShZ0FAF9uPxoQ
/D1Bwk26lxQqL460/tV6RffY51+mKGEqobPK41gATG4FNsHW46frWpbcX0xHTzvR
wJoFP29PsiClUZe9VKwlBTh+HrwBY7GiKqdZVIiAKQVQZzmuBIvOS/bSEoxvZWxB
uisbO/EoDuahbK/uMdF2AWB/6PNRv9su0bgjFUv6ZZIb+uL22/Oyn+O8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGsaOv00WTvry88s5SIrStSqdzdMB8GA1UdIwQY
MBaAFDHU7kr/9V5nRE1H1JtRKoNov572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDIt
YmFiNTc2ZTIwMzkzLzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDItYmFiNTc2ZTIwMzkz
LzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVldSlXPD
H4VcSsb851X8UHUpwOI1VBgYDFKcXdtfnTCSfAUY5qtxCMjavzlm2tj3TBPwfD3B
USO+lpb6EQcoMxg7G39RB7g3Xw10YYHsZYIx7IhsEVgiK90ZjG1iaYR+jaAloZm1
MCxkJeoQHPpZTf+d7zETzpRzDExaNPY+hVUh9KK9Yqv5zJVuJ15x9dTI9MBKGNeW
TcD09fpBS5hFIAX5/G6+nkeSQugGRWh36DVpfG9Y45JemllJXUADid4JFBOuHFWx
IyOr0NBhDgwd95+y7cNKoeM1eNIArKyXzdkDrfhu9QGJB1/LCXDSxykCu47e33pP
m8Q3ujea1UCN6Q==
-----END CERTIFICATE-----
Generated at Sat May 18 00:21:18 2024 by rpki-client on console-fra.rpki-client.org