Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft
File:                     eHBUsWeqmIQc3CxLorhhOauYjn0.mft (raw, json)
Hash identifier:          rjT1Pdm2kw8U46M7J0/xlXlHVQGghW0uP1Rs7F/JHyQ=
Subject key identifier:   CD:CE:3E:97:AF:1B:65:06:3F:67:59:31:41:1E:9F:76:C3:47:59:77
Authority key identifier: 78:70:54:B1:67:AA:98:84:1C:DC:2C:4B:A2:B8:61:39:AB:98:8E:7D
Certificate issuer:       /CN=787054b167aa98841cdc2c4ba2b86139ab988e7d
Certificate serial:       018F87493DB68FED3E8A2F821C2E7892B834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHBUsWeqmIQc3CxLorhhOauYjn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft
Manifest number:          0E9F
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: 2KQvHEjDwPVipXRixpb-69LSYjI.roa (hash: umFh++hMqtfUkinUjOsedL2JD00xG5j8sp7QqKC3S5U=)
                          2: eHBUsWeqmIQc3CxLorhhOauYjn0.crl (hash: +6ZB11f4HMORAjSThUIP+yfSiIgaTChg45AlXK5FiRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHBUsWeqmIQc3CxLorhhOauYjn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3d:b6:8f:ed:3e:8a:2f:82:1c:2e:78:92:b8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787054b167aa98841cdc2c4ba2b86139ab988e7d
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=cdce3e97af1b65063f675931411e9f76c3475977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:5a:16:8c:a5:9b:c6:bc:f9:ba:7e:48:ed:
                    25:cb:fb:df:d6:1e:f9:c0:c4:ab:72:1c:0d:77:20:
                    a8:9e:54:2c:f6:71:2c:49:2d:5d:72:5e:a5:e8:2f:
                    97:5f:00:6b:c2:de:19:6d:71:34:f7:57:33:7a:9a:
                    6f:4e:94:b6:8a:87:8e:9c:07:c2:e8:24:89:5b:42:
                    5c:62:76:26:f6:06:b3:1e:f4:0e:45:5f:2b:69:32:
                    5a:2f:d4:ab:7e:a9:68:e4:59:80:d7:bd:4a:04:37:
                    45:ab:cf:ee:2b:a3:5b:dc:77:78:07:bb:f4:fc:74:
                    e0:cc:f6:54:6d:a0:86:d5:70:d6:68:8f:b2:48:e3:
                    e7:25:46:2f:e3:fa:e9:91:ba:2c:95:9d:57:f9:08:
                    bb:62:cb:1b:84:46:92:d0:20:1c:da:e3:a5:91:ce:
                    e9:49:db:e0:25:d1:be:12:f9:af:57:22:95:c5:05:
                    c0:06:a8:ae:aa:50:6b:8d:96:1c:c2:0e:18:33:08:
                    02:f5:cc:f2:76:16:af:fb:d4:e3:a4:87:15:78:73:
                    45:6c:87:c1:08:0d:61:61:f1:fc:9c:4c:d5:68:08:
                    64:2a:3d:4c:e0:a9:86:08:34:a3:65:c8:a8:49:71:
                    e6:84:1f:7f:66:a8:be:cd:90:c0:c2:88:bf:1a:08:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:3E:97:AF:1B:65:06:3F:67:59:31:41:1E:9F:76:C3:47:59:77
            X509v3 Authority Key Identifier:
                keyid:78:70:54:B1:67:AA:98:84:1C:DC:2C:4B:A2:B8:61:39:AB:98:8E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBUsWeqmIQc3CxLorhhOauYjn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:46:47:7d:92:a8:97:df:41:31:cd:40:4e:a6:f7:89:30:
         83:a5:4e:a7:f6:be:8b:8b:04:f3:6b:d4:5c:d2:6c:3e:9f:c6:
         2b:09:ab:73:67:25:55:ab:c9:e0:a6:4b:8d:a8:14:f6:c4:b4:
         d3:72:6d:12:3d:78:51:92:3d:ad:fb:2c:7e:74:b7:8e:ce:71:
         aa:cc:0c:4a:9b:52:be:7a:a6:b6:cf:e1:a7:bb:24:f5:90:5e:
         c0:0e:cb:db:9f:c1:de:a4:5b:a2:ee:b9:a2:fb:16:78:4c:c9:
         7c:21:99:53:ce:2b:b5:65:98:ea:e5:51:4e:85:87:ce:51:cf:
         e9:6d:80:ea:8b:9c:94:b9:3a:1f:31:66:ac:02:91:f2:fd:d4:
         90:46:47:47:f1:50:98:9e:2b:f8:0e:29:df:31:75:5f:45:b8:
         eb:0a:e4:ee:72:fa:1c:98:17:c3:8f:b7:8d:aa:7c:c7:c8:89:
         67:9a:00:cb:f3:e1:41:02:b6:ea:7a:67:d3:47:06:30:80:df:
         e5:08:9b:da:8e:49:e5:20:11:07:82:de:2c:79:eb:7f:0e:b2:
         3e:a5:10:15:97:4b:87:f4:1d:da:2e:21:a2:46:44:c2:71:79:
         b7:c5:95:68:40:3f:f9:c5:fd:02:34:7f:35:1d:07:bc:4c:a4:
         28:62:d3:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HST22j+0+ii+CHC54krg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzA1NGIxNjdhYTk4ODQxY2RjMmM0YmEyYjg2MTM5YWI5
ODhlN2QwHhcNMjQwNTE3MTYwMTE1WhcNMjQwNTE4MTYwMTE1WjAzMTEwLwYDVQQD
EyhjZGNlM2U5N2FmMWI2NTA2M2Y2NzU5MzE0MTFlOWY3NmMzNDc1OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq01aFoylm8a8+bp+SO0ly/vf1h75
wMSrchwNdyConlQs9nEsSS1dcl6l6C+XXwBrwt4ZbXE091czeppvTpS2ioeOnAfC
6CSJW0JcYnYm9gazHvQORV8raTJaL9Srfqlo5FmA171KBDdFq8/uK6Nb3Hd4B7v0
/HTgzPZUbaCG1XDWaI+ySOPnJUYv4/rpkboslZ1X+Qi7YssbhEaS0CAc2uOlkc7p
SdvgJdG+EvmvVyKVxQXABqiuqlBrjZYcwg4YMwgC9czydhav+9TjpIcVeHNFbIfB
CA1hYfH8nEzVaAhkKj1M4KmGCDSjZcioSXHmhB9/Zqi+zZDAwoi/GgjB5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3OPpevG2UGP2dZMUEen3bDR1l3MB8GA1UdIwQY
MBaAFHhwVLFnqpiEHNwsS6K4YTmrmI59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhCVXNXZXFtSVFjM0N4TG9yaGhPYXVZam4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mZmE3MDMtYjQ2Mi00MDIyLTllMWUt
NmQ3MDRjZGEwZWI5LzEvZUhCVXNXZXFtSVFjM0N4TG9yaGhPYXVZam4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mZmE3MDMtYjQ2Mi00MDIyLTllMWUtNmQ3MDRjZGEwZWI5
LzEvZUhCVXNXZXFtSVFjM0N4TG9yaGhPYXVZam4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgRGR32S
qJffQTHNQE6m94kwg6VOp/a+i4sE82vUXNJsPp/GKwmrc2clVavJ4KZLjagU9sS0
03JtEj14UZI9rfssfnS3js5xqswMSptSvnqmts/hp7sk9ZBewA7L25/B3qRbou65
ovsWeEzJfCGZU84rtWWY6uVRToWHzlHP6W2A6ouclLk6HzFmrAKR8v3UkEZHR/FQ
mJ4r+A4p3zF1X0W46wrk7nL6HJgXw4+3jap8x8iJZ5oAy/PhQQK26npn00cGMIDf
5Qib2o5J5SARB4LeLHnrfw6yPqUQFZdLh/Qd2i4hokZEwnF5t8WVaEA/+cX9AjR/
NR0HvEykKGLT0g==
-----END CERTIFICATE-----
Generated at Sat May 18 02:35:17 2024 by rpki-client on console-fra.rpki-client.org