Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
File:                     anNsvQAR2jHSmwYeX_TWOELaKko.mft (raw, json)
Hash identifier:          iOIBrSZUA1RKzGlNrAdJurkqbgeXSgnWoGi2Cv92Kes=
Subject key identifier:   48:6A:9D:D7:A2:7D:35:04:09:42:36:FA:4F:34:57:46:D3:7A:F7:6B
Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
Certificate issuer:       /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Certificate serial:       018F8748F8D7EF95BFB6E59D3E7518A47E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:57 +0000
Manifest this update:     Fri 17 May 2024 16:00:57 +0000
Manifest next update:     Sat 18 May 2024 16:00:57 +0000
Files and hashes:         1: anNsvQAR2jHSmwYeX_TWOELaKko.crl (hash: sdhWuK1BhdLw/2Mwf425/whTlkDWjWGNfPMOwU1iGtQ=)
                          2: cHlrmyx-7pla8H_XeRXMQKqiRrk.roa (hash: Jv5gEdC3zMoEzM5pVbWJL940mvVZSc38/d9867R8eFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f8:d7:ef:95:bf:b6:e5:9d:3e:75:18:a4:7e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
        Validity
            Not Before: May 17 16:00:57 2024 GMT
            Not After : May 18 16:00:57 2024 GMT
        Subject: CN=486a9dd7a27d3504094236fa4f345746d37af76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:d9:a6:97:16:e0:3c:28:55:2c:39:c5:ac:
                    08:ff:8f:ed:b7:a5:b3:8c:41:76:27:6a:cb:b6:20:
                    d0:19:bf:d8:8b:35:21:0b:ec:53:ac:15:af:3f:d4:
                    7c:23:e5:a9:c2:33:3b:1e:fb:aa:ea:be:1d:bb:6c:
                    32:86:72:c4:87:4a:1e:b1:0e:25:88:2c:65:01:67:
                    86:54:ba:81:6b:44:d2:1b:84:8f:51:d6:6c:0e:19:
                    e4:29:04:36:ae:36:cf:fd:34:b3:94:00:d0:5a:22:
                    30:f9:98:77:f1:69:d1:35:c4:12:17:41:1b:14:f3:
                    43:b0:7a:9c:f6:c7:ef:11:70:69:36:e1:04:e1:10:
                    f7:a5:68:c8:99:02:79:e9:1a:47:14:61:a4:fa:84:
                    2f:fa:16:9e:93:9f:60:f6:fd:c6:57:78:cb:dc:ac:
                    18:d5:30:5f:3c:f4:25:78:37:d0:e5:df:b8:3e:cd:
                    8e:34:fb:bd:92:bb:48:39:4a:84:12:13:bf:1c:9c:
                    79:8c:fe:16:ee:dd:a0:53:e5:1b:f7:af:57:55:8f:
                    c4:9f:45:a2:3c:24:00:e8:c4:a3:62:c0:fa:f7:0a:
                    d8:4f:b8:5c:59:fe:cf:41:32:ea:0d:ff:24:5f:06:
                    71:1b:b3:f8:b8:ec:eb:6b:41:a0:53:f7:fe:84:3e:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:9D:D7:A2:7D:35:04:09:42:36:FA:4F:34:57:46:D3:7A:F7:6B
            X509v3 Authority Key Identifier:
                keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:db:d7:a4:f8:4f:a6:94:82:16:5f:8a:b4:57:62:42:92:f4:
         61:35:8e:08:dd:4e:e2:5f:2a:7b:87:86:c7:59:d9:fd:92:6b:
         2d:24:ec:71:c4:ed:e2:19:d0:b3:80:9e:57:59:ed:d2:19:b1:
         a9:ab:ad:41:7c:6f:68:bb:c5:c1:e1:a1:af:53:dd:90:70:bd:
         79:95:49:d1:67:c2:ab:e6:1b:a0:70:85:f9:c4:d4:26:80:1e:
         5d:56:58:d5:7b:43:4b:7f:af:d2:2a:c5:80:a7:20:ea:02:30:
         f7:a2:75:30:d8:f9:72:9e:d1:c6:3a:76:83:b1:8d:79:94:95:
         fc:b9:c3:d6:19:0f:a5:5c:c4:04:6b:9a:be:d4:23:d3:42:57:
         68:40:dc:0e:3b:4a:76:a0:15:5d:7e:da:c3:37:88:06:7e:a0:
         4c:40:aa:58:fc:3a:cb:d1:68:93:a8:33:58:09:bb:a3:67:73:
         1c:4b:9c:2b:72:5c:a0:bd:b7:05:50:77:b1:18:5a:69:a7:49:
         19:de:5d:9d:5a:e5:0b:45:fd:eb:91:42:a6:47:0f:72:ad:75:
         b5:8f:13:0c:a9:ae:9c:f0:1c:a8:2d:c1:c2:6c:a2:f2:8b:0b:
         da:b1:76:54:25:ff:9a:d1:7c:12:d5:5f:dc:e5:39:05:2b:92:
         e9:23:a4:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSPjX75W/tuWdPnUYpH4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzM2Y2JkMDAxMWRhMzFkMjliMDYxZTVmZjRkNjM4NDJk
YTJhNGEwHhcNMjQwNTE3MTYwMDU3WhcNMjQwNTE4MTYwMDU3WjAzMTEwLwYDVQQD
Eyg0ODZhOWRkN2EyN2QzNTA0MDk0MjM2ZmE0ZjM0NTc0NmQzN2FmNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcrZppcW4DwoVSw5xawI/4/tt6Wz
jEF2J2rLtiDQGb/YizUhC+xTrBWvP9R8I+WpwjM7Hvuq6r4du2wyhnLEh0oesQ4l
iCxlAWeGVLqBa0TSG4SPUdZsDhnkKQQ2rjbP/TSzlADQWiIw+Zh38WnRNcQSF0Eb
FPNDsHqc9sfvEXBpNuEE4RD3pWjImQJ56RpHFGGk+oQv+haek59g9v3GV3jL3KwY
1TBfPPQleDfQ5d+4Ps2ONPu9krtIOUqEEhO/HJx5jP4W7t2gU+Ub969XVY/En0Wi
PCQA6MSjYsD69wrYT7hcWf7PQTLqDf8kXwZxG7P4uOzra0GgU/f+hD70VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhqndeifTUECUI2+k80V0bTevdrMB8GA1UdIwQY
MBaAFGpzbL0AEdox0psGHl/01jhC2ipKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYt
NGVhMTI1MTNjYzZmLzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYtNGVhMTI1MTNjYzZm
LzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltvXpPhP
ppSCFl+KtFdiQpL0YTWOCN1O4l8qe4eGx1nZ/ZJrLSTsccTt4hnQs4CeV1nt0hmx
qautQXxvaLvFweGhr1PdkHC9eZVJ0WfCq+YboHCF+cTUJoAeXVZY1XtDS3+v0irF
gKcg6gIw96J1MNj5cp7Rxjp2g7GNeZSV/LnD1hkPpVzEBGuavtQj00JXaEDcDjtK
dqAVXX7awzeIBn6gTECqWPw6y9Fok6gzWAm7o2dzHEucK3JcoL23BVB3sRhaaadJ
Gd5dnVrlC0X965FCpkcPcq11tY8TDKmunPAcqC3Bwmyi8osL2rF2VCX/mtF8EtVf
3OU5BSuS6SOkGg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:05:17 2024 by rpki-client on console-fra.rpki-client.org