Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File:                     pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier:          6MWEp4ZgWkFO5skmShVNGg+AYpxzlBPt2mwEVKjmm10=
Subject key identifier:   D3:82:A8:4F:51:78:05:6D:07:DA:79:36:89:8E:CE:ED:BD:FE:DB:E7
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer:       /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial:       018F86DA5A21105524A044341652D8ED208C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 14:00:07 +0000
Manifest this update:     Fri 17 May 2024 14:00:07 +0000
Manifest next update:     Sat 18 May 2024 14:00:07 +0000
Files and hashes:         1: CKQJiW_Obz0BPYdJ9ju-U5ArGUQ.roa (hash: TzVHl0A9PDQHcOVGibTeXITOZ7VIyd+/unKvzfDV0ms=)
                          2: oYINVcZLN0kcaeeycLyJdAtF8fk.roa (hash: 2OKeLXMk+0IfqKOGtXy45pxTb39fHFSrB8l5Sk4NOc8=)
                          3: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: 5oDL54GHXZszIXQ52GgGdnTsbcrYmTP0tIp6WOg+s+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:5a:21:10:55:24:a0:44:34:16:52:d8:ed:20:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
        Validity
            Not Before: May 17 14:00:07 2024 GMT
            Not After : May 18 14:00:07 2024 GMT
        Subject: CN=d382a84f5178056d07da7936898eceedbdfedbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:13:52:6c:80:4a:e6:3c:1e:67:a9:ff:0a:
                    50:dd:d3:ea:46:ab:ed:5b:3d:6c:cb:b5:1e:8b:e0:
                    e9:60:a3:d6:81:43:24:12:00:0c:dd:2c:ae:5c:9b:
                    05:34:85:90:cb:5b:dd:fd:b5:7e:a0:f0:3c:d5:bc:
                    77:6a:17:03:e2:d3:52:2b:61:f7:04:71:ae:91:4c:
                    22:21:60:24:24:0a:ca:7d:b8:67:c6:9a:6f:2f:69:
                    03:4c:dc:93:e3:08:4f:3b:03:8f:94:2c:76:0e:b2:
                    78:35:ca:7c:28:70:07:88:31:8e:ad:9c:6d:0f:5f:
                    20:8e:8f:35:ee:28:e7:f4:25:3f:e0:a0:03:b9:70:
                    60:4c:d9:c9:74:81:b8:d1:dc:08:2a:2f:02:ee:12:
                    50:47:5d:d8:28:66:bf:61:d8:e4:22:a2:b6:14:be:
                    06:f0:8e:af:0a:e1:1d:16:64:4f:e1:f2:66:fc:f8:
                    3a:f9:57:d2:d2:bf:23:d6:9c:90:e0:af:5e:09:46:
                    4e:b2:6b:3c:aa:ea:12:8f:bb:78:fc:b8:d7:fb:a7:
                    e0:94:55:a3:20:1c:f1:15:55:46:d3:f2:93:4a:3c:
                    21:f9:d5:bd:97:c8:48:44:a6:46:c1:f8:ca:c9:b6:
                    74:d8:0b:75:22:3e:df:d5:f7:8d:00:b4:78:26:7c:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:82:A8:4F:51:78:05:6D:07:DA:79:36:89:8E:CE:ED:BD:FE:DB:E7
            X509v3 Authority Key Identifier:
                keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:e6:43:2e:c7:da:c8:c7:17:27:a3:b0:cf:10:95:b3:5b:
         19:3f:0f:6d:9a:4c:7a:33:c6:50:ac:03:ba:2a:30:a4:1d:24:
         93:49:1c:15:60:8e:26:b4:01:2c:74:99:15:d8:f9:5e:20:4d:
         b5:e6:61:36:9e:23:d2:63:3c:f9:48:87:19:c3:3f:a3:51:a4:
         9b:12:1b:bb:82:53:c5:6d:d7:c0:fb:f8:f3:ea:2b:d0:ac:fd:
         91:89:97:e8:df:75:c0:dd:f3:0a:63:f7:45:dc:1c:af:2d:4d:
         a3:a5:df:4e:d0:9e:80:a7:62:fd:28:7c:5b:5d:b2:1f:9e:90:
         a8:ec:10:06:db:ae:61:43:50:0a:ca:b2:94:3f:92:15:51:0a:
         e1:28:3f:1e:53:c7:5e:6b:c7:b6:7c:7a:3a:1d:f4:13:40:f4:
         3b:b7:3b:dc:b5:23:8f:e1:59:2d:8f:96:9e:68:93:d5:06:e3:
         19:1c:2d:69:28:e1:19:23:5b:72:ba:1e:f3:8a:79:b5:80:a8:
         98:c0:be:b0:4c:cd:6d:94:89:d2:83:79:1e:bd:a5:ec:b6:2e:
         01:11:81:07:1b:ef:65:2a:05:ad:5a:25:63:be:ba:f4:d5:02:
         e3:3e:4c:a5:42:c2:dc:74:4c:26:02:7a:87:94:36:6d:8a:c6:
         81:ad:9c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2lohEFUkoEQ0FlLY7SCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji
ZTc0NGUwHhcNMjQwNTE3MTQwMDA3WhcNMjQwNTE4MTQwMDA3WjAzMTEwLwYDVQQD
EyhkMzgyYTg0ZjUxNzgwNTZkMDdkYTc5MzY4OThlY2VlZGJkZmVkYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lsTUmyASuY8Hmep/wpQ3dPqRqvt
Wz1sy7Uei+DpYKPWgUMkEgAM3SyuXJsFNIWQy1vd/bV+oPA81bx3ahcD4tNSK2H3
BHGukUwiIWAkJArKfbhnxppvL2kDTNyT4whPOwOPlCx2DrJ4Ncp8KHAHiDGOrZxt
D18gjo817ijn9CU/4KADuXBgTNnJdIG40dwIKi8C7hJQR13YKGa/YdjkIqK2FL4G
8I6vCuEdFmRP4fJm/Pg6+VfS0r8j1pyQ4K9eCUZOsms8quoSj7t4/LjX+6fglFWj
IBzxFVVG0/KTSjwh+dW9l8hIRKZGwfjKybZ02At1Ij7f1feNALR4JnyFLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOCqE9ReAVtB9p5NomOzu29/tvnMB8GA1UdIwQY
MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct
MzBiZGI0OGRhNTIxLzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx
LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9nmQy7H
2sjHFyejsM8QlbNbGT8PbZpMejPGUKwDuiowpB0kk0kcFWCOJrQBLHSZFdj5XiBN
teZhNp4j0mM8+UiHGcM/o1GkmxIbu4JTxW3XwPv48+or0Kz9kYmX6N91wN3zCmP3
Rdwcry1No6XfTtCegKdi/Sh8W12yH56QqOwQBtuuYUNQCsqylD+SFVEK4Sg/HlPH
XmvHtnx6Oh30E0D0O7c73LUjj+FZLY+WnmiT1QbjGRwtaSjhGSNbcroe84p5tYCo
mMC+sEzNbZSJ0oN5Hr2l7LYuARGBBxvvZSoFrVolY7669NUC4z5MpULC3HRMJgJ6
h5Q2bYrGga2cIQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:41:24 2024 by rpki-client on console-ams.rpki-client.org