Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File:                     q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier:          KEyyxCZFrZhqSdbAmre/P6BiaSXrLJ+SrNmYVXAL604=
Subject key identifier:   D5:87:F3:7D:BD:22:B2:15:3D:CC:AA:D5:2B:03:C3:5E:35:3C:04:19
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer:       /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial:       018F87491538A6CA45EADA166599E5289025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number:          0866
Signing time:             Fri 17 May 2024 16:01:04 +0000
Manifest this update:     Fri 17 May 2024 16:01:04 +0000
Manifest next update:     Sat 18 May 2024 16:01:04 +0000
Files and hashes:         1: KpBTMl57rGzzcu0w512EyPOVbtM.roa (hash: hvS7r36Dcgot/8hP6uJBRpsVTGb9vM2YKt97fIxWbhM=)
                          2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: nGEfxRduImSMBqng97ck850GjEI/LFT/JzJMnmbA7hQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:15:38:a6:ca:45:ea:da:16:65:99:e5:28:90:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
        Validity
            Not Before: May 17 16:01:04 2024 GMT
            Not After : May 18 16:01:04 2024 GMT
        Subject: CN=d587f37dbd22b2153dccaad52b03c35e353c0419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:54:d8:ca:53:33:1d:72:85:43:26:02:75:
                    c5:1b:9b:f6:33:85:e8:0a:67:38:ff:26:1e:50:dc:
                    db:d7:c2:42:0e:9c:af:10:56:1b:ba:05:ce:f5:2b:
                    f2:b8:67:42:21:92:94:ec:e6:e2:45:ca:a7:e4:25:
                    ee:57:f2:93:3d:cb:09:8b:5d:a0:5a:92:bb:9c:63:
                    21:aa:fb:21:21:ec:40:8d:b7:e0:f9:38:10:8d:0a:
                    67:fc:93:de:41:14:eb:cc:2d:85:49:69:65:cf:f5:
                    45:94:ca:4f:eb:34:82:d1:ce:4c:e0:34:a0:88:b8:
                    b0:ca:d0:18:ad:22:14:a2:60:cb:36:c5:97:b8:cf:
                    11:2f:9a:8d:65:a0:98:ce:15:de:8f:1c:d1:a6:b5:
                    87:5e:3d:4c:ba:b0:11:2b:59:bf:77:5a:1f:c6:ba:
                    93:36:45:a7:f6:6b:ef:e2:9e:fd:ce:1f:9b:cd:80:
                    54:9b:84:5f:29:e1:ff:f4:58:33:6b:f8:f9:b1:b0:
                    df:4e:c1:92:ea:38:71:b6:22:2c:f2:c9:65:11:f7:
                    79:ca:3c:63:5e:79:a1:83:ad:32:e2:9d:59:ae:c9:
                    91:23:f1:65:87:d0:46:6d:cc:71:7f:9c:b8:b7:c9:
                    cd:c3:0e:82:fb:7a:97:07:1b:b3:6e:62:88:9b:0b:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:F3:7D:BD:22:B2:15:3D:CC:AA:D5:2B:03:C3:5E:35:3C:04:19
            X509v3 Authority Key Identifier:
                keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:2e:42:ae:c5:7c:56:c2:18:75:f6:56:f1:de:2d:2a:81:
         ba:82:9f:59:ce:c8:52:e8:29:d1:cd:49:a0:ae:1b:49:73:54:
         de:b2:1d:23:01:f5:79:11:e7:93:fe:0e:90:94:7b:12:28:65:
         b4:cc:e5:dc:ef:61:10:84:9f:6f:35:59:ef:b4:c4:d2:51:00:
         d6:6e:a6:40:21:64:c0:1f:57:6f:68:4a:20:08:54:da:4d:1c:
         d4:07:d8:bf:12:30:4d:38:f6:a1:7d:01:0f:99:61:ff:68:25:
         bb:72:71:62:46:b0:da:bf:0c:99:b2:a1:ce:5e:48:a4:43:a1:
         ef:b9:ed:92:d3:3c:07:01:c9:99:cb:22:e1:28:4e:9a:2d:da:
         b1:14:84:bd:d1:06:7f:64:0c:33:54:3d:ed:b1:8b:cf:6c:fe:
         28:f0:2d:e4:57:ef:00:b8:6c:87:3f:cb:29:44:0a:6b:6b:c1:
         e3:f1:a0:4b:ee:49:ce:62:27:b2:e3:9c:82:95:64:f9:ce:a8:
         34:8d:81:58:88:7b:13:25:7e:40:00:d7:cd:6c:f0:ae:66:76:
         70:79:59:a0:23:85:66:ba:c8:26:07:ea:c3:09:5b:50:30:e0:
         09:f0:1d:04:1a:7d:0f:c0:ab:12:ce:56:c9:9b:42:7f:a7:58:
         21:40:b1:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSRU4pspF6toWZZnlKJAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzExM2M3YWVhNmI3MTRhMDYwZTlmN2MzZTcxNTY5ZTYw
M2QzOTUwHhcNMjQwNTE3MTYwMTA0WhcNMjQwNTE4MTYwMTA0WjAzMTEwLwYDVQQD
EyhkNTg3ZjM3ZGJkMjJiMjE1M2RjY2FhZDUyYjAzYzM1ZTM1M2MwNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i1U2MpTMx1yhUMmAnXFG5v2M4Xo
Cmc4/yYeUNzb18JCDpyvEFYbugXO9SvyuGdCIZKU7ObiRcqn5CXuV/KTPcsJi12g
WpK7nGMhqvshIexAjbfg+TgQjQpn/JPeQRTrzC2FSWllz/VFlMpP6zSC0c5M4DSg
iLiwytAYrSIUomDLNsWXuM8RL5qNZaCYzhXejxzRprWHXj1MurARK1m/d1ofxrqT
NkWn9mvv4p79zh+bzYBUm4RfKeH/9Fgza/j5sbDfTsGS6jhxtiIs8sllEfd5yjxj
Xnmhg60y4p1ZrsmRI/Flh9BGbcxxf5y4t8nNww6C+3qXBxuzbmKImwvvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWH8329IrIVPcyq1SsDw141PAQZMB8GA1UdIwQY
MBaAFKvBE8euprcUoGDp98PnFWnmA9OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYt
MWQwYTRlYzgyN2FiLzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYtMWQwYTRlYzgyN2Fi
LzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcUuQq7F
fFbCGHX2VvHeLSqBuoKfWc7IUugp0c1JoK4bSXNU3rIdIwH1eRHnk/4OkJR7Eihl
tMzl3O9hEISfbzVZ77TE0lEA1m6mQCFkwB9Xb2hKIAhU2k0c1AfYvxIwTTj2oX0B
D5lh/2glu3JxYkaw2r8MmbKhzl5IpEOh77ntktM8BwHJmcsi4ShOmi3asRSEvdEG
f2QMM1Q97bGLz2z+KPAt5FfvALhshz/LKUQKa2vB4/GgS+5JzmInsuOcgpVk+c6o
NI2BWIh7EyV+QADXzWzwrmZ2cHlZoCOFZrrIJgfqwwlbUDDgCfAdBBp9D8CrEs5W
yZtCf6dYIUCxHg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:43:23 2024 by rpki-client on console-ams.rpki-client.org