Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File:                     1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier:          4mvXy2Me5/oK1uwz/kHvFLbfJm5WG7qXxNApsLoBd+4=
Subject key identifier:   7E:41:95:0E:1C:EC:C7:B3:51:B0:BD:51:F0:16:AD:02:91:F7:92:D0
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer:       /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial:       018F3FD50C8242BEE0290D7E12823ED387AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number:          0F20
Signing time:             Fri 03 May 2024 19:01:17 +0000
Manifest this update:     Fri 03 May 2024 19:01:17 +0000
Manifest next update:     Sat 04 May 2024 19:01:17 +0000
Files and hashes:         1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: tuNOVeeHEIVqos+US7w0UB36hFlH+CAFTcxLbgAbOWo=)
                          2: 26gFwF4G5h6wlg_W51YrCuA9_5k.roa (hash: 272kvgsL4vdRkK5SUJg+ExvDEW7yLvzeaekRkL1kzG0=)
                          3: PDCSXOIFYXDVa6FCdsNrt19w7Ag.roa (hash: WUf3rUIleKgTGPoiai8o+/nK9OY4B7qGbU7OqiPHBbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d5:0c:82:42:be:e0:29:0d:7e:12:82:3e:d3:87:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
        Validity
            Not Before: May  3 19:01:17 2024 GMT
            Not After : May  4 19:01:17 2024 GMT
        Subject: CN=7e41950e1cecc7b351b0bd51f016ad0291f792d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:ce:7c:b6:c4:42:e2:6c:7f:60:bc:dc:7e:
                    d1:ef:48:f8:3e:39:33:74:c0:ea:0c:cd:64:00:c8:
                    35:32:98:70:b7:7e:5a:5e:ff:4b:3e:4f:e1:d5:b5:
                    1e:7c:8e:87:96:ee:3a:d4:c2:a0:84:cb:51:db:f6:
                    60:85:52:75:f8:d5:e1:15:e1:df:bb:2b:bf:19:a8:
                    42:d8:ce:12:48:e5:f0:45:cf:8e:ce:a7:b6:4b:df:
                    97:59:64:df:34:9a:64:d0:87:27:5f:e1:36:ba:63:
                    75:13:a2:da:c0:39:ff:63:16:4f:c9:fc:97:5f:e2:
                    01:3d:9b:55:e6:f8:e0:a2:2f:6d:6d:9e:e6:45:c0:
                    54:11:b6:ef:96:5a:69:5e:14:b5:20:7b:51:a6:59:
                    57:1c:5b:b6:7d:b4:fd:f1:6c:db:e1:5b:8b:ea:52:
                    f3:85:e8:8f:18:d2:44:fb:c3:a7:dc:77:71:0b:6c:
                    6e:11:b9:3f:03:00:ff:88:27:d8:db:b6:26:06:9a:
                    5e:b1:54:13:a2:0c:84:6e:83:a8:c8:d8:38:51:8d:
                    dc:da:08:45:31:9b:90:68:08:90:a9:b4:04:ee:3c:
                    52:a5:f8:c7:98:a2:44:af:c7:e0:00:59:f5:72:1a:
                    67:49:b2:9b:55:e7:56:85:ed:22:c6:a6:43:60:57:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:41:95:0E:1C:EC:C7:B3:51:B0:BD:51:F0:16:AD:02:91:F7:92:D0
            X509v3 Authority Key Identifier:
                keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:64:ab:17:82:01:3d:07:e3:24:72:bd:ca:9d:2b:ca:df:
         02:78:fb:43:8a:80:81:0e:0c:56:21:4f:d8:8a:65:04:c6:98:
         e0:08:2f:b4:24:69:5f:c9:f9:e6:ad:22:e0:4e:15:1d:e6:f5:
         46:77:1d:c6:fc:56:be:52:83:c1:04:6f:f7:5d:b7:ab:7f:d7:
         66:a2:5d:92:7e:c6:c6:ac:13:1d:ad:56:0a:e0:39:89:ea:ae:
         81:78:2a:d6:7b:4c:09:08:b9:65:54:61:8e:f8:ef:7c:09:73:
         cf:db:b9:6f:86:c3:ac:4b:9c:1e:b7:5c:83:2a:c1:82:2b:1d:
         63:d5:dd:db:79:da:3d:5f:be:ab:19:27:c3:69:38:89:a2:9e:
         04:d2:fc:60:e8:87:8b:7c:a2:61:ff:9e:bb:7c:f7:30:8d:c1:
         f9:a8:4b:fd:14:40:db:0f:30:4f:a9:70:d7:81:1b:75:2e:e8:
         ce:aa:66:49:3f:e7:dc:20:95:e3:03:95:f5:de:e6:1b:78:18:
         f5:1d:21:e0:d1:d9:27:1c:0c:44:b3:fb:b4:ca:cc:c8:ce:03:
         ab:10:8c:f9:2a:15:8c:45:aa:d4:b6:08:e0:84:64:da:be:15:
         65:1f:08:3f:8d:fc:c8:2e:24:45:5b:fe:b0:29:14:6d:4c:01:
         be:54:86:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8/1QyCQr7gKQ1+EoI+04etMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1N2M3ZGIwNGU3OGMyMjFmM2RmMmEyYWYwODJiNTE4ZDk2
MmE4ZjAwHhcNMjQwNTAzMTkwMTE3WhcNMjQwNTA0MTkwMTE3WjAzMTEwLwYDVQQD
Eyg3ZTQxOTUwZTFjZWNjN2IzNTFiMGJkNTFmMDE2YWQwMjkxZjc5MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M7OfLbEQuJsf2C83H7R70j4Pjkz
dMDqDM1kAMg1Mphwt35aXv9LPk/h1bUefI6Hlu461MKghMtR2/ZghVJ1+NXhFeHf
uyu/GahC2M4SSOXwRc+Ozqe2S9+XWWTfNJpk0IcnX+E2umN1E6LawDn/YxZPyfyX
X+IBPZtV5vjgoi9tbZ7mRcBUEbbvllppXhS1IHtRpllXHFu2fbT98Wzb4VuL6lLz
heiPGNJE+8On3HdxC2xuEbk/AwD/iCfY27YmBppesVQTogyEboOoyNg4UY3c2ghF
MZuQaAiQqbQE7jxSpfjHmKJEr8fgAFn1chpnSbKbVedWhe0ixqZDYFeGeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5BlQ4c7MezUbC9UfAWrQKR95LQMB8GA1UdIwQY
MBaAFNV8fbBOeMIh898qKvCCtRjZYqjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgt
ZmU5NWE5YWYzYWRjLzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgtZmU5NWE5YWYzYWRj
LzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBRkqxeC
AT0H4yRyvcqdK8rfAnj7Q4qAgQ4MViFP2IplBMaY4AgvtCRpX8n55q0i4E4VHeb1
RncdxvxWvlKDwQRv9123q3/XZqJdkn7GxqwTHa1WCuA5iequgXgq1ntMCQi5ZVRh
jvjvfAlzz9u5b4bDrEucHrdcgyrBgisdY9Xd23naPV++qxknw2k4iaKeBNL8YOiH
i3yiYf+eu3z3MI3B+ahL/RRA2w8wT6lw14EbdS7ozqpmST/n3CCV4wOV9d7mG3gY
9R0h4NHZJxwMRLP7tMrMyM4DqxCM+SoVjEWq1LYI4IRk2r4VZR8IP438yC4kRVv+
sCkUbUwBvlSGjQ==
-----END CERTIFICATE-----
Generated at Sat May 4 00:42:36 2024 by rpki-client on console-ams.rpki-client.org