Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File:                     vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier:          /ZSCJScdRGIlXpQvanVkDwwYJMlvhLYpL7sqfMwMch8=
Subject key identifier:   0C:2D:B4:56:08:92:EE:BC:28:14:03:BB:2E:5C:56:9D:C7:2C:D8:24
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer:       /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial:       018F87ED7C1B4B58D2D3299E0C65F9C99E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number:          03BB
Signing time:             Fri 17 May 2024 19:00:38 +0000
Manifest this update:     Fri 17 May 2024 19:00:38 +0000
Manifest next update:     Sat 18 May 2024 19:00:38 +0000
Files and hashes:         1: L-y6jKLh5m9yAy9evJjKLDmuOuU.roa (hash: Dp+/d7x3Vr2epFRy0KnJEaz9WWUZvVueawywDk4lVyE=)
                          2: WCZSaewETaBj346OnIYW6EIC8E8.roa (hash: z1guzH1HjEfe/2KtaJ1AaKNTpkPltugRpJvdLVJ8O/g=)
                          3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: GxJUB3iWPxi1xa7aPClk0KK0Y1xaqeA32Sm57vsIIjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7c:1b:4b:58:d2:d3:29:9e:0c:65:f9:c9:9e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
        Validity
            Not Before: May 17 19:00:38 2024 GMT
            Not After : May 18 19:00:38 2024 GMT
        Subject: CN=0c2db4560892eebc281403bb2e5c569dc72cd824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:e0:21:de:3a:53:47:e7:da:f9:49:41:46:
                    31:1e:60:f3:39:2a:e5:31:8b:af:3f:da:15:81:d5:
                    48:d4:d8:34:ad:9d:1d:b0:7c:5b:35:28:2e:16:f3:
                    8d:bd:ed:fa:84:25:d3:a1:52:c2:4e:db:55:17:cb:
                    92:a9:19:35:85:ce:dc:77:90:8d:9d:66:5b:e2:97:
                    1d:65:5e:b5:08:19:0d:9b:a5:d9:f8:79:b2:fc:56:
                    ba:3a:e3:dd:64:d4:2a:11:8d:88:00:59:32:4a:d1:
                    db:dc:fb:fd:bc:3e:f5:b3:7d:ea:43:96:3f:83:0b:
                    a4:77:a1:ad:5a:ec:4e:26:56:f3:ec:19:a3:33:a4:
                    96:02:99:aa:df:60:e5:e0:95:d1:05:0e:b0:9d:0e:
                    27:a3:9c:5b:e7:f9:66:fb:87:a7:4d:4f:72:ba:cb:
                    ae:d5:be:ba:32:d3:76:b1:bd:8d:ba:a8:39:66:ad:
                    fe:cd:16:42:a2:6d:c0:0b:0b:25:3b:0b:5b:c2:4b:
                    b2:8c:c7:44:38:7a:95:10:db:9d:4a:21:78:0e:a7:
                    8e:66:19:99:6f:48:ae:f9:9a:54:9e:7b:20:3c:c1:
                    83:bd:f1:42:ad:eb:69:d2:82:33:38:d9:9f:be:01:
                    88:51:1e:28:22:2a:9a:b4:25:f4:f1:ef:24:29:10:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:B4:56:08:92:EE:BC:28:14:03:BB:2E:5C:56:9D:C7:2C:D8:24
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:06:3e:5d:c3:f2:a3:79:49:45:21:c4:f6:9f:3f:50:7b:
         8f:b5:8f:ce:5d:2f:69:75:61:6c:cf:47:e6:d6:d3:ff:05:37:
         b5:7f:75:78:46:ea:a6:bf:e1:ea:89:ba:6e:ab:ae:ba:c8:1f:
         33:4e:43:b1:33:24:b0:eb:6c:d0:50:5b:1f:b8:97:1d:46:10:
         a7:9e:00:21:bf:2f:74:c0:62:d3:cb:88:e2:f8:60:b9:24:71:
         6a:a2:e9:a3:b4:cf:c6:93:6f:96:bd:b6:eb:ae:56:8b:11:14:
         e6:a4:f5:c4:ef:63:a9:8d:dd:03:45:db:3a:ef:6c:2f:40:58:
         6c:5d:a6:6e:7d:1f:6c:b2:91:57:e6:a9:59:07:33:b5:05:3b:
         ca:25:4c:40:27:84:0f:a0:aa:34:6e:82:a1:48:4c:15:d2:21:
         a4:75:59:f2:63:24:32:1c:ce:df:57:7a:79:67:70:7a:9c:a0:
         7c:99:ad:46:62:1b:f0:fc:2d:f2:f2:06:cb:47:95:08:82:94:
         a0:a3:04:cf:84:34:2c:fc:3e:7b:df:0d:4c:8e:5d:ae:e8:30:
         9f:df:f2:86:0c:56:cd:2d:c6:9b:4d:f0:cf:e5:8f:0b:f2:78:
         eb:1c:c0:9b:a4:e1:36:9b:07:b9:44:d5:5b:5b:e2:71:d5:e6:
         ee:84:8c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7XwbS1jS0ymeDGX5yZ5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjQwNTE3MTkwMDM4WhcNMjQwNTE4MTkwMDM4WjAzMTEwLwYDVQQD
EygwYzJkYjQ1NjA4OTJlZWJjMjgxNDAzYmIyZTVjNTY5ZGM3MmNkODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3/gId46U0fn2vlJQUYxHmDzOSrl
MYuvP9oVgdVI1Ng0rZ0dsHxbNSguFvONve36hCXToVLCTttVF8uSqRk1hc7cd5CN
nWZb4pcdZV61CBkNm6XZ+Hmy/Fa6OuPdZNQqEY2IAFkyStHb3Pv9vD71s33qQ5Y/
gwukd6GtWuxOJlbz7BmjM6SWApmq32Dl4JXRBQ6wnQ4no5xb5/lm+4enTU9yusuu
1b66MtN2sb2Nuqg5Zq3+zRZCom3ACwslOwtbwkuyjMdEOHqVENudSiF4DqeOZhmZ
b0iu+ZpUnnsgPMGDvfFCretp0oIzONmfvgGIUR4oIiqatCX08e8kKRAOTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwttFYIku68KBQDuy5cVp3HLNgkMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbgGPl3D
8qN5SUUhxPafP1B7j7WPzl0vaXVhbM9H5tbT/wU3tX91eEbqpr/h6om6bquuusgf
M05DsTMksOts0FBbH7iXHUYQp54AIb8vdMBi08uI4vhguSRxaqLpo7TPxpNvlr22
665WixEU5qT1xO9jqY3dA0XbOu9sL0BYbF2mbn0fbLKRV+apWQcztQU7yiVMQCeE
D6CqNG6CoUhMFdIhpHVZ8mMkMhzO31d6eWdwepygfJmtRmIb8Pwt8vIGy0eVCIKU
oKMEz4Q0LPw+e98NTI5drugwn9/yhgxWzS3Gm03wz+WPC/J46xzAm6ThNpsHuUTV
W1vicdXm7oSMhA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:18:09 2024 by rpki-client on console-fra.rpki-client.org