Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          lqJPO19bsdgH37Y6yXwGhRDLlJedNwpQSAebAgPBcdw=
Subject key identifier:   04:A5:88:25:B0:9E:90:18:F2:51:E1:3C:0E:27:5B:BE:63:77:C8:93
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       018F2426D5B7F33C720E9E132C35E6ED3F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          0959
Signing time:             Sun 28 Apr 2024 10:01:15 +0000
Manifest this update:     Sun 28 Apr 2024 10:01:15 +0000
Manifest next update:     Mon 29 Apr 2024 10:01:15 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: hZ7dD3oqPcXMhQgW0LtHI4k61THwq0aVO0otpQgp6ag=)
                          2: YN0IjUVCV36VWf0bc6p6qm9HeAE.roa (hash: tUw+ubOIW95dzzfnpD1zV/xBmwh2WzsRwZkSxLB2B6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:26:d5:b7:f3:3c:72:0e:9e:13:2c:35:e6:ed:3f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Apr 28 10:01:15 2024 GMT
            Not After : Apr 29 10:01:15 2024 GMT
        Subject: CN=04a58825b09e9018f251e13c0e275bbe6377c893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:5b:7d:a8:1c:2a:35:10:4c:19:0e:b1:2d:
                    a4:04:2c:57:4c:03:38:2f:12:09:b1:a5:03:60:6d:
                    a0:41:4e:27:cc:6a:47:39:00:2f:3b:56:2b:96:0c:
                    ad:3d:90:ac:cd:0d:72:d4:57:f0:fe:22:d9:71:c8:
                    bb:7d:24:77:5b:e5:33:9b:93:18:7a:81:e5:ef:9b:
                    3b:40:1b:69:3d:18:8f:1f:db:3d:b2:e6:db:ec:a0:
                    a3:dd:a9:f6:58:27:d0:1f:94:f6:76:55:89:05:d1:
                    4f:71:87:77:80:cb:d8:9e:e6:1c:27:62:de:5d:b7:
                    c5:e9:ce:67:e4:13:97:f3:b3:97:7f:9e:e3:5e:ad:
                    03:a1:8f:e7:ac:4a:be:5f:0a:0f:8c:32:51:04:d8:
                    37:35:d2:3e:85:4f:3d:a1:43:1a:21:ad:31:e3:0d:
                    3f:ae:6e:60:6a:f1:a8:9e:77:e4:44:de:80:d7:e3:
                    56:df:47:7e:05:29:d6:4e:cd:f0:29:1a:c0:3e:81:
                    cd:d4:eb:16:6e:8a:fd:b1:47:2a:b4:27:75:7f:e8:
                    42:a3:01:b4:65:81:52:fb:e4:09:3e:fc:83:f6:33:
                    8d:8a:2d:b3:07:b1:f8:6e:5f:3e:aa:19:7b:07:e2:
                    92:8c:63:4e:d5:18:44:2b:8e:4b:ef:30:10:d4:e0:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:88:25:B0:9E:90:18:F2:51:E1:3C:0E:27:5B:BE:63:77:C8:93
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:0f:56:7b:c1:e1:4b:55:78:30:30:c1:ce:dd:0c:92:2c:
         b5:c3:e6:2b:93:41:c7:52:5d:52:d7:47:53:02:c3:8b:47:e1:
         63:c5:6b:71:69:60:16:be:b2:69:cc:99:76:49:66:0c:ce:a3:
         69:46:8a:ac:86:c1:67:69:8e:48:71:c1:a9:d1:34:9c:55:1e:
         d4:e6:cc:ce:05:98:1c:19:61:a9:88:37:5c:a3:bb:db:22:60:
         99:d6:34:9e:1d:90:20:9c:4a:b0:dc:2a:ab:98:2e:d1:52:bb:
         ad:10:78:b3:62:bb:af:61:48:32:d4:38:fa:94:1e:a1:2d:3a:
         58:e5:1a:f3:7e:87:6c:97:19:1f:91:78:aa:71:c0:9d:a5:2f:
         0e:ed:48:95:16:64:6c:78:e9:df:9d:de:1d:67:3e:82:1d:07:
         17:26:dc:b1:ec:6f:f7:ef:6d:80:10:b4:12:03:c1:da:16:4d:
         a3:d9:bc:58:ec:b5:a8:da:aa:27:53:0f:62:4b:d6:4e:4e:a5:
         15:d4:b8:c1:23:ba:69:e8:73:2f:66:e2:9f:5b:74:20:a1:a1:
         60:0a:b1:9b:10:00:92:86:ea:a6:06:65:fc:ca:5a:b9:81:52:
         c1:7f:4d:9d:ab:2f:4c:6c:fc:c2:2a:6a:de:af:08:1e:53:f9:
         fc:9c:50:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8kJtW38zxyDp4TLDXm7T85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDBlZWQyOGYyZDk5NGViMmI4MzFjYjhlZmM2NDcwMzA2
ZDc0NjEwHhcNMjQwNDI4MTAwMTE1WhcNMjQwNDI5MTAwMTE1WjAzMTEwLwYDVQQD
EygwNGE1ODgyNWIwOWU5MDE4ZjI1MWUxM2MwZTI3NWJiZTYzNzdjODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bFbfagcKjUQTBkOsS2kBCxXTAM4
LxIJsaUDYG2gQU4nzGpHOQAvO1YrlgytPZCszQ1y1Ffw/iLZcci7fSR3W+Uzm5MY
eoHl75s7QBtpPRiPH9s9subb7KCj3an2WCfQH5T2dlWJBdFPcYd3gMvYnuYcJ2Le
XbfF6c5n5BOX87OXf57jXq0DoY/nrEq+XwoPjDJRBNg3NdI+hU89oUMaIa0x4w0/
rm5gavGonnfkRN6A1+NW30d+BSnWTs3wKRrAPoHN1OsWbor9sUcqtCd1f+hCowG0
ZYFS++QJPvyD9jONii2zB7H4bl8+qhl7B+KSjGNO1RhEK45L7zAQ1ODaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASliCWwnpAY8lHhPA4nW75jd8iTMB8GA1UdIwQY
MBaAFOdA7tKPLZlOsrgxy478ZHAwbXRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMt
MDk1OTVlOWNkNmMyLzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMtMDk1OTVlOWNkNmMy
LzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTUPVnvB
4UtVeDAwwc7dDJIstcPmK5NBx1JdUtdHUwLDi0fhY8VrcWlgFr6yacyZdklmDM6j
aUaKrIbBZ2mOSHHBqdE0nFUe1ObMzgWYHBlhqYg3XKO72yJgmdY0nh2QIJxKsNwq
q5gu0VK7rRB4s2K7r2FIMtQ4+pQeoS06WOUa836HbJcZH5F4qnHAnaUvDu1IlRZk
bHjp353eHWc+gh0HFybcsexv9+9tgBC0EgPB2hZNo9m8WOy1qNqqJ1MPYkvWTk6l
FdS4wSO6aehzL2bin1t0IKGhYAqxmxAAkobqpgZl/MpauYFSwX9NnasvTGz8wipq
3q8IHlP5/JxQXg==
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:26:53 2024 by rpki-client on console-ams.rpki-client.org