Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File:                     Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier:          apetR9JoFgHae1Frbfvw1YgSlhWllFotOG+PEvijCqE=
Subject key identifier:   59:33:EE:87:5D:DA:68:E8:D8:77:0E:05:C0:14:34:6D:48:3C:52:73
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer:       /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial:       018F893917262F5E645083AC3A53B2744EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:02:51 +0000
Manifest this update:     Sat 18 May 2024 01:02:51 +0000
Manifest next update:     Sun 19 May 2024 01:02:51 +0000
Files and hashes:         1: MCMxDwSKwIAKJmqVzo3JaqsGDJk.roa (hash: Ygio4UJ6gp/d4JEhHQ9MDohsa4Dv2g/iak+IcIo/cTY=)
                          2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: uxw8KeceZfs+1/zfZ1pTwM39AFXqpeYCG1+yjIGKbjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:17:26:2f:5e:64:50:83:ac:3a:53:b2:74:4e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
        Validity
            Not Before: May 18 01:02:51 2024 GMT
            Not After : May 19 01:02:51 2024 GMT
        Subject: CN=5933ee875dda68e8d8770e05c014346d483c5273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:e6:72:b2:fb:5a:e4:d7:06:57:d2:07:da:
                    3e:ce:10:bb:1d:18:d6:77:c4:f9:03:d9:7e:5f:fe:
                    89:1f:97:f5:ba:7d:f6:6f:1a:89:0d:66:0c:9c:a1:
                    d8:1f:fe:bf:77:31:b5:8c:d1:40:99:93:4e:0c:cf:
                    0c:c0:2c:5c:c0:d6:9c:c6:35:fd:32:6e:d3:8c:37:
                    9a:6e:c5:a4:3e:69:31:14:47:82:44:ad:5f:6e:ad:
                    06:57:99:3e:8e:2c:46:f2:70:93:b0:4c:df:81:2a:
                    af:67:99:d4:ba:36:d6:eb:90:22:c4:8b:d6:11:c2:
                    0f:9e:d4:aa:e5:f9:f6:20:1b:45:d1:fc:ce:dc:f9:
                    ac:1f:ff:c0:ae:9f:4a:3f:4c:0e:00:13:a1:ee:44:
                    13:5a:86:ac:da:0e:6f:bb:ea:15:d1:09:7d:9f:f3:
                    9f:4b:18:ce:f2:7f:16:be:06:e9:04:19:84:48:a7:
                    55:86:a6:90:ef:8e:3e:2c:a3:75:97:38:8b:42:03:
                    73:f3:b7:c1:70:81:f0:65:97:f6:37:36:78:ec:11:
                    b1:7a:ba:9e:ce:e5:d9:bf:21:83:03:76:52:8f:4c:
                    32:4b:39:b4:4a:f9:5e:e4:c6:9b:60:99:75:23:58:
                    b9:dd:d2:88:18:79:20:a3:c6:45:b3:e8:0c:b0:5d:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:33:EE:87:5D:DA:68:E8:D8:77:0E:05:C0:14:34:6D:48:3C:52:73
            X509v3 Authority Key Identifier:
                keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:33:4e:a7:27:54:da:bf:1a:e9:3a:47:45:f8:71:ed:56:
         e7:50:6a:68:94:2b:f2:16:19:df:ea:53:27:51:37:5b:0b:99:
         56:44:23:66:2c:9c:75:83:bd:71:84:c0:cc:af:5c:26:11:20:
         6d:48:20:39:ad:a3:f5:7e:e7:8d:e3:fe:cc:5e:14:a3:ed:f0:
         17:2c:48:d3:32:a8:56:56:fb:fe:66:de:a0:51:d3:ce:b0:65:
         d0:5b:bf:2b:94:58:d7:a6:a8:2e:bf:f9:d7:dd:82:1a:e2:26:
         21:3b:d8:98:b7:e7:b3:9c:92:f9:e8:97:4c:f0:3c:e6:e3:58:
         a4:18:70:27:64:fe:64:9c:e0:b4:2e:76:1d:8b:40:67:f0:c1:
         8c:45:be:93:70:4d:cf:ba:47:76:ac:13:bd:50:75:c5:8d:bf:
         7c:bf:e1:cc:e7:7a:b3:72:a0:0d:f5:dc:86:03:43:c5:f4:a0:
         c1:e6:f9:83:25:bf:bc:a7:71:34:8d:fb:09:37:da:b0:57:55:
         e5:fc:df:1b:df:c5:d7:52:7a:72:41:9c:e8:c2:31:a2:ac:12:
         3f:ed:e6:73:28:08:1a:d8:fa:2d:2d:a2:89:db:b8:1f:6b:cc:
         10:0f:44:f5:48:4a:96:4e:e6:88:0e:ee:29:41:1b:2c:c7:21:
         e4:9e:b9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JORcmL15kUIOsOlOydE72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw
YzdmMDEwHhcNMjQwNTE4MDEwMjUxWhcNMjQwNTE5MDEwMjUxWjAzMTEwLwYDVQQD
Eyg1OTMzZWU4NzVkZGE2OGU4ZDg3NzBlMDVjMDE0MzQ2ZDQ4M2M1MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUzmcrL7WuTXBlfSB9o+zhC7HRjW
d8T5A9l+X/6JH5f1un32bxqJDWYMnKHYH/6/dzG1jNFAmZNODM8MwCxcwNacxjX9
Mm7TjDeabsWkPmkxFEeCRK1fbq0GV5k+jixG8nCTsEzfgSqvZ5nUujbW65AixIvW
EcIPntSq5fn2IBtF0fzO3PmsH//Arp9KP0wOABOh7kQTWoas2g5vu+oV0Ql9n/Of
SxjO8n8WvgbpBBmESKdVhqaQ744+LKN1lziLQgNz87fBcIHwZZf2NzZ47BGxerqe
zuXZvyGDA3ZSj0wySzm0Svle5MabYJl1I1i53dKIGHkgo8ZFs+gMsF3rbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkz7odd2mjo2HcOBcAUNG1IPFJzMB8GA1UdIwQY
MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt
ZWU4ODMxOTI0YjMyLzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy
LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOgzTqcn
VNq/Guk6R0X4ce1W51BqaJQr8hYZ3+pTJ1E3WwuZVkQjZiycdYO9cYTAzK9cJhEg
bUggOa2j9X7njeP+zF4Uo+3wFyxI0zKoVlb7/mbeoFHTzrBl0Fu/K5RY16aoLr/5
192CGuImITvYmLfns5yS+eiXTPA85uNYpBhwJ2T+ZJzgtC52HYtAZ/DBjEW+k3BN
z7pHdqwTvVB1xY2/fL/hzOd6s3KgDfXchgNDxfSgweb5gyW/vKdxNI37CTfasFdV
5fzfG9/F11J6ckGc6MIxoqwSP+3mcygIGtj6LS2iidu4H2vMEA9E9UhKlk7miA7u
KUEbLMch5J658A==
-----END CERTIFICATE-----
Generated at Sat May 18 02:49:27 2024 by rpki-client on console-ams.rpki-client.org