Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          m6GoF3oxbdqggOlztxEvrY3eOyYcFlwsRW0tAZP1KiI=
Subject key identifier:   F1:7B:FE:E6:18:FA:C5:E6:71:5D:95:99:E3:7D:9A:CE:14:A3:10:96
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       018F3A0BB2193A200DE80D2572B9A073100C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:03:16 +0000
Manifest this update:     Thu 02 May 2024 16:03:16 +0000
Manifest next update:     Fri 03 May 2024 16:03:16 +0000
Files and hashes:         1: 23PihBj3O8zVlWtW0eKRGrr20yA.roa (hash: 3AxANG4xm8m68OaKTmPe6xZxzvrYJyP/bXXLzVNlhZs=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: xTiPaBInJQVApOO1gCwqt1yYcXlF/rPyLzG9nj8iUi4=)
                          3: JnCkiKhvXxETkeqIMOxM3OpQiKQ.roa (hash: avpohwv7ZMLroTxc53x7L5cPqLLkDouG5Aw9z714tqc=)
                          4: ejJA3khtDDu_A5g2RXZA5gzR8HQ.roa (hash: kZzjuPyEUu9HhzEXyvKtwkchY0JLpUIY3hBE7gMDiPo=)
                          5: sibhsJ9dj3QzsQA_YvMgyw3mZ5U.roa (hash: IaWoSyrsL8F4mTaEJrgYPPRzPWqNqRo1l/Dog4YUvno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:b2:19:3a:20:0d:e8:0d:25:72:b9:a0:73:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: May  2 16:03:16 2024 GMT
            Not After : May  3 16:03:16 2024 GMT
        Subject: CN=f17bfee618fac5e6715d9599e37d9ace14a31096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:cf:66:da:de:11:25:42:5e:02:ed:af:37:
                    4d:76:39:46:f4:48:08:9d:26:be:82:49:d3:b7:ab:
                    c0:5f:6b:a9:ef:a9:56:3e:7a:25:8c:7b:02:5c:b7:
                    06:69:1d:27:cb:a1:b0:a0:58:3f:95:7e:22:6d:16:
                    e8:a0:08:d5:93:29:c3:a2:9b:aa:3d:0a:ac:5f:0c:
                    53:d3:28:12:b1:ca:b3:3a:27:8c:f2:53:80:d6:2a:
                    de:48:fc:ef:fb:10:87:9f:f4:c3:e9:24:77:2d:a1:
                    8c:dc:17:75:3d:12:91:59:5d:db:18:b4:6e:d1:7c:
                    c8:d7:ba:05:96:ec:da:90:37:9d:27:16:a3:2c:b9:
                    4a:f7:9c:67:61:ca:73:e8:f0:cb:09:3f:4c:df:2b:
                    2f:c6:0e:e0:34:2f:e6:8a:91:63:d6:20:5c:a5:af:
                    85:a6:1c:ba:8e:d0:79:f8:64:1b:2b:df:f0:2f:16:
                    0e:9b:18:44:76:9e:e2:20:ea:7c:78:67:a8:98:a6:
                    41:b5:80:cb:20:1c:b6:4d:1b:5c:95:2d:fd:aa:fc:
                    d1:3e:14:6e:0f:1a:e6:e0:1d:19:33:da:2b:41:0d:
                    1d:95:8c:de:a0:a0:7c:85:9c:87:55:6a:19:02:39:
                    62:9c:87:49:42:43:07:1e:e2:e0:80:8f:4a:80:9c:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7B:FE:E6:18:FA:C5:E6:71:5D:95:99:E3:7D:9A:CE:14:A3:10:96
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:13:ae:96:b2:d9:82:2c:16:b1:08:de:23:0d:bd:b8:35:
         e0:bd:fa:82:80:37:af:10:25:b0:0c:95:49:47:f1:8b:bc:e7:
         a3:5a:41:e2:69:93:55:a7:5d:be:ce:aa:77:c0:58:62:02:13:
         15:77:e1:6a:c1:4e:3f:2a:61:4b:3e:fc:e9:15:07:c8:71:a0:
         fe:af:b7:0a:93:9f:8c:8a:1f:b6:48:2b:68:78:04:dd:04:b1:
         0b:a1:1c:2c:5f:96:93:ad:5b:cc:98:73:0a:ed:09:b5:6b:e3:
         23:b5:a3:56:14:a2:ff:79:87:67:06:f7:c5:92:f0:10:28:20:
         c5:9f:62:86:92:01:85:0e:52:8f:52:4a:86:c1:87:8a:c5:d5:
         34:64:41:25:2c:a6:7c:2a:3c:ad:6a:a4:32:7a:3a:22:de:10:
         27:48:3c:d9:18:29:18:5f:7c:18:e5:4c:e9:1d:ac:6d:3f:80:
         f4:78:0f:66:72:54:b7:36:07:8b:2e:70:b3:8e:4c:a6:38:78:
         53:0c:2a:d3:4e:75:74:b6:47:b1:0d:77:5e:c6:04:b4:df:db:
         22:12:f7:df:6c:8f:d6:24:22:3b:f0:8f:30:a8:db:bd:e5:5c:
         d8:d5:8e:cf:5c:ab:be:85:8f:32:d0:9e:4a:ac:ef:5f:8c:2e:
         71:67:f2:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86C7IZOiAN6A0lcrmgcxAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5
NjMxZDEwHhcNMjQwNTAyMTYwMzE2WhcNMjQwNTAzMTYwMzE2WjAzMTEwLwYDVQQD
EyhmMTdiZmVlNjE4ZmFjNWU2NzE1ZDk1OTllMzdkOWFjZTE0YTMxMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6PPZtreESVCXgLtrzdNdjlG9EgI
nSa+gknTt6vAX2up76lWPnoljHsCXLcGaR0ny6GwoFg/lX4ibRbooAjVkynDopuq
PQqsXwxT0ygSscqzOieM8lOA1ireSPzv+xCHn/TD6SR3LaGM3Bd1PRKRWV3bGLRu
0XzI17oFluzakDedJxajLLlK95xnYcpz6PDLCT9M3ysvxg7gNC/mipFj1iBcpa+F
phy6jtB5+GQbK9/wLxYOmxhEdp7iIOp8eGeomKZBtYDLIBy2TRtclS39qvzRPhRu
Dxrm4B0ZM9orQQ0dlYzeoKB8hZyHVWoZAjlinIdJQkMHHuLggI9KgJwIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF7/uYY+sXmcV2VmeN9ms4UoxCWMB8GA1UdIwQY
MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt
MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh
LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkkTrpay
2YIsFrEI3iMNvbg14L36goA3rxAlsAyVSUfxi7zno1pB4mmTVaddvs6qd8BYYgIT
FXfhasFOPyphSz786RUHyHGg/q+3CpOfjIoftkgraHgE3QSxC6EcLF+Wk61bzJhz
Cu0JtWvjI7WjVhSi/3mHZwb3xZLwECggxZ9ihpIBhQ5Sj1JKhsGHisXVNGRBJSym
fCo8rWqkMno6It4QJ0g82RgpGF98GOVM6R2sbT+A9HgPZnJUtzYHiy5ws45Mpjh4
Uwwq0051dLZHsQ13XsYEtN/bIhL332yP1iQiO/CPMKjbveVc2NWOz1yrvoWPMtCe
SqzvX4wucWfy5A==
-----END CERTIFICATE-----
Generated at Thu May 2 19:21:23 2024 by rpki-client on console-fra.rpki-client.org