Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File:                     8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier:          ayVYUlMJyR6/JdHLHwxZQmWjO+G1j4I2oeuv4pzzAt0=
Subject key identifier:   9B:63:9F:82:9E:ED:C2:46:3E:6F:B1:F0:C2:28:74:F8:16:C1:96:F5
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer:       /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial:       018F98AB9261F83E730E862B80954EED57D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number:          0185
Signing time:             Tue 21 May 2024 01:02:11 +0000
Manifest this update:     Tue 21 May 2024 01:02:11 +0000
Manifest next update:     Wed 22 May 2024 01:02:11 +0000
Files and hashes:         1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: RfkLI540H/IUHWzuteTEbXu6RGenuAnPm1p5J9poWP8=)
                          2: RqM-sosJkdh-H9DbQhfUBazqt9w.roa (hash: b+1j8XdMh6ZEJE2rHNOa1SHYHJU7kyg28BPBgdACxFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:92:61:f8:3e:73:0e:86:2b:80:95:4e:ed:57:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
        Validity
            Not Before: May 21 01:02:11 2024 GMT
            Not After : May 22 01:02:11 2024 GMT
        Subject: CN=9b639f829eedc2463e6fb1f0c22874f816c196f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:24:fb:50:d6:40:00:8b:83:ed:0d:35:c2:
                    4f:95:7f:37:3d:92:32:5c:ee:d5:4a:97:28:25:26:
                    67:93:be:ef:26:fb:31:8c:0e:68:6d:9b:69:eb:0c:
                    61:11:84:d4:0b:9e:4f:f0:5b:3e:00:86:26:d9:78:
                    bd:a7:c9:fb:a3:d8:36:ad:c5:83:97:44:03:6a:10:
                    4f:dd:46:ba:98:85:c0:1a:45:d3:37:1c:f0:d6:e5:
                    45:35:ed:fe:0e:32:17:cf:9b:b6:c2:5d:8a:7b:14:
                    89:6d:b0:b1:9c:cb:e4:1f:09:f1:e9:89:81:23:f4:
                    cb:33:07:f9:a6:cb:88:cf:a6:58:31:e5:f1:8a:79:
                    4c:a6:76:a8:a0:de:1b:ba:0e:1b:ad:8b:73:c8:e0:
                    61:fe:63:f2:30:63:6c:dc:4d:7a:77:31:1e:c9:16:
                    ac:5c:c8:49:be:84:9d:9b:c9:fb:33:c3:cc:8c:86:
                    a6:f9:3c:48:d7:92:bd:2a:b3:8e:68:75:8b:d1:02:
                    77:9d:02:4f:12:d9:10:35:fb:4d:20:f0:c2:e1:27:
                    bb:85:8c:ac:62:a7:c4:5d:c1:b8:ae:79:8f:7b:84:
                    09:0a:1d:70:58:09:50:1f:00:8e:30:24:23:6f:95:
                    75:a5:6a:b3:06:be:d1:1f:cd:65:54:46:b8:42:7f:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:63:9F:82:9E:ED:C2:46:3E:6F:B1:F0:C2:28:74:F8:16:C1:96:F5
            X509v3 Authority Key Identifier:
                keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:56:b2:e3:66:7e:83:c5:dc:77:0b:70:f6:99:51:9c:0b:70:
         e1:2c:05:93:37:48:66:e7:ce:54:48:53:35:ef:42:a9:b0:ec:
         2b:f5:34:06:a2:db:27:4f:b0:ae:b1:42:d6:17:07:46:a1:a1:
         b7:25:da:95:78:d9:a1:45:3c:7d:09:b6:a0:b5:35:e4:dd:e9:
         d7:66:7a:2c:16:52:ff:b3:8c:87:62:a0:3b:bd:3b:96:22:86:
         aa:be:6f:d6:c3:f1:7b:d1:87:38:7e:ff:a2:62:4f:b2:a5:c7:
         3d:dd:7c:88:68:1a:bc:e6:27:37:38:b3:1c:8e:ab:82:0b:d5:
         71:af:66:ba:94:91:c8:fb:97:16:47:32:7c:d1:9a:4d:19:b3:
         4c:2d:14:f8:b6:d6:53:72:f4:8e:db:f6:a2:a6:9f:26:0b:5d:
         84:1e:38:d2:96:ca:be:4b:97:12:76:6f:c9:d5:e8:02:63:48:
         0d:35:6e:ac:cb:44:17:e0:9c:77:d5:76:58:c3:c4:cd:3d:8d:
         ad:2c:5e:72:ec:2c:a2:0d:89:62:28:60:3b:13:51:5f:f9:d3:
         dc:30:6c:24:b1:f5:e6:8a:66:2f:40:65:cf:1d:68:60:f3:ca:
         b5:1c:a8:70:d3:7e:23:ef:db:4b:3f:d4:0e:09:34:24:18:21:
         09:b1:2c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Yq5Jh+D5zDoYrgJVO7VfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx
ZTc2N2IwHhcNMjQwNTIxMDEwMjExWhcNMjQwNTIyMDEwMjExWjAzMTEwLwYDVQQD
Eyg5YjYzOWY4MjllZWRjMjQ2M2U2ZmIxZjBjMjI4NzRmODE2YzE5NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSUk+1DWQACLg+0NNcJPlX83PZIy
XO7VSpcoJSZnk77vJvsxjA5obZtp6wxhEYTUC55P8Fs+AIYm2Xi9p8n7o9g2rcWD
l0QDahBP3Ua6mIXAGkXTNxzw1uVFNe3+DjIXz5u2wl2KexSJbbCxnMvkHwnx6YmB
I/TLMwf5psuIz6ZYMeXxinlMpnaooN4bug4brYtzyOBh/mPyMGNs3E16dzEeyRas
XMhJvoSdm8n7M8PMjIam+TxI15K9KrOOaHWL0QJ3nQJPEtkQNftNIPDC4Se7hYys
YqfEXcG4rnmPe4QJCh1wWAlQHwCOMCQjb5V1pWqzBr7RH81lVEa4Qn9eOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtjn4Ke7cJGPm+x8MIodPgWwZb1MB8GA1UdIwQY
MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt
NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh
LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFay42Z+
g8Xcdwtw9plRnAtw4SwFkzdIZufOVEhTNe9CqbDsK/U0BqLbJ0+wrrFC1hcHRqGh
tyXalXjZoUU8fQm2oLU15N3p12Z6LBZS/7OMh2KgO707liKGqr5v1sPxe9GHOH7/
omJPsqXHPd18iGgavOYnNzizHI6rggvVca9mupSRyPuXFkcyfNGaTRmzTC0U+LbW
U3L0jtv2oqafJgtdhB440pbKvkuXEnZvydXoAmNIDTVurMtEF+Ccd9V2WMPEzT2N
rSxecuwsog2JYihgOxNRX/nT3DBsJLH15opmL0Blzx1oYPPKtRyocNN+I+/bSz/U
Dgk0JBghCbEsoA==
-----END CERTIFICATE-----
Generated at Tue May 21 02:30:35 2024 by rpki-client on console-ams.rpki-client.org