Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File:                     tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier:          neluxYGuHoK9I8OpoT8IH1upf35QrbKPay83Iz7ZNQ8=
Subject key identifier:   AB:86:51:58:3E:E7:AC:8B:F8:33:A2:1A:BF:7B:CF:47:BA:44:20:AF
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer:       /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial:       018F8749A9DE3C1E2419ECC60774D9561015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number:          046B
Signing time:             Fri 17 May 2024 16:01:42 +0000
Manifest this update:     Fri 17 May 2024 16:01:42 +0000
Manifest next update:     Sat 18 May 2024 16:01:42 +0000
Files and hashes:         1: BLdCop2O9TvbimROAbT9rbrvBxE.roa (hash: DdK3Gq6eDbUi+PwWyzQKYuePFottNfpU6xSHiIHDU8I=)
                          2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: bUU/I9poAEz0p2/+P2a4AXn6M+JOtCn2qjdUVnXAdms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a9:de:3c:1e:24:19:ec:c6:07:74:d9:56:10:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
        Validity
            Not Before: May 17 16:01:42 2024 GMT
            Not After : May 18 16:01:42 2024 GMT
        Subject: CN=ab8651583ee7ac8bf833a21abf7bcf47ba4420af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:9d:96:06:d3:cd:97:d7:b0:49:f1:6f:6c:
                    91:d1:81:f8:13:28:c9:16:d3:4d:e8:30:03:48:7f:
                    0f:65:b9:c2:9f:aa:a2:c7:78:56:c7:64:a9:4f:3b:
                    bf:b9:a0:d4:ff:b7:24:70:cc:03:c4:8b:7b:d0:f8:
                    4a:61:2f:4b:55:1a:16:c3:65:76:20:85:19:5c:fd:
                    c0:bd:d2:27:73:88:54:c0:3d:eb:19:31:ac:c1:05:
                    44:17:ce:fa:58:5e:77:f2:11:28:0a:f3:2b:5a:12:
                    60:26:b9:8d:53:ec:0a:29:3c:7a:5b:90:14:6e:ed:
                    bf:19:96:21:33:dd:6e:15:f2:20:e4:55:50:9d:e8:
                    d1:76:36:14:bf:25:fd:91:48:e3:6e:e7:da:3b:ba:
                    1a:a3:70:32:11:58:45:8b:0d:e7:41:9b:52:49:01:
                    c0:04:b9:66:79:93:d8:08:f4:02:eb:cd:4b:6f:f4:
                    2e:aa:6c:41:dd:91:bb:33:05:d2:3f:40:16:e3:05:
                    c3:97:40:06:70:eb:ff:ce:d6:23:b6:1b:5e:43:f9:
                    35:12:16:6a:67:77:c6:77:12:a3:e9:1f:70:6b:a8:
                    78:a2:6f:1f:60:a8:eb:6b:f6:b7:05:9c:4f:72:4f:
                    42:4d:61:40:f9:25:c6:66:e1:61:6f:36:1b:86:4e:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:51:58:3E:E7:AC:8B:F8:33:A2:1A:BF:7B:CF:47:BA:44:20:AF
            X509v3 Authority Key Identifier:
                keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:66:ff:18:df:65:d8:a2:9a:e4:cb:1c:05:66:9b:16:8c:90:
         2c:01:40:b7:e0:22:83:0b:d1:48:67:ef:05:11:e6:74:d3:8a:
         da:fe:33:d5:f1:52:fa:50:1d:7d:ce:7b:8b:31:c9:08:98:69:
         08:7c:87:22:38:6b:f0:16:dd:a9:2c:c6:ff:f7:12:8a:73:2e:
         a4:b6:53:91:15:91:0b:2a:af:aa:a9:33:65:58:b4:4d:05:c1:
         53:bf:4f:4b:c1:1d:43:70:bf:0d:36:5e:e9:dd:eb:f5:df:b3:
         88:56:21:b0:f5:ea:89:f0:59:86:be:a7:f1:63:81:0a:dc:d8:
         f8:3b:df:7a:cb:b0:89:3a:9c:91:ba:5f:a0:62:46:94:81:0b:
         04:b6:ca:63:15:12:84:25:55:e8:e6:c8:a3:3b:22:bf:36:ad:
         6b:e0:db:52:85:1d:ae:34:52:dd:7e:d6:54:dd:53:8c:08:0f:
         59:fb:2a:28:b6:29:f9:e7:0a:c2:93:d4:a6:24:2e:8f:4d:31:
         1f:01:f8:75:3b:6b:72:5d:91:39:56:a6:19:a6:b0:15:73:31:
         ca:48:79:5c:fe:68:c6:52:4c:ef:62:9a:38:db:c1:ed:1d:d0:
         1d:16:1b:53:82:75:88:10:ff:d3:8d:61:ff:c1:7b:b8:19:d7:
         73:28:8d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSanePB4kGezGB3TZVhAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjQwNTE3MTYwMTQyWhcNMjQwNTE4MTYwMTQyWjAzMTEwLwYDVQQD
EyhhYjg2NTE1ODNlZTdhYzhiZjgzM2EyMWFiZjdiY2Y0N2JhNDQyMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y2dlgbTzZfXsEnxb2yR0YH4EyjJ
FtNN6DADSH8PZbnCn6qix3hWx2SpTzu/uaDU/7ckcMwDxIt70PhKYS9LVRoWw2V2
IIUZXP3AvdInc4hUwD3rGTGswQVEF876WF538hEoCvMrWhJgJrmNU+wKKTx6W5AU
bu2/GZYhM91uFfIg5FVQnejRdjYUvyX9kUjjbufaO7oao3AyEVhFiw3nQZtSSQHA
BLlmeZPYCPQC681Lb/QuqmxB3ZG7MwXSP0AW4wXDl0AGcOv/ztYjthteQ/k1EhZq
Z3fGdxKj6R9wa6h4om8fYKjra/a3BZxPck9CTWFA+SXGZuFhbzYbhk7OPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuGUVg+56yL+DOiGr97z0e6RCCvMB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2b/GN9l
2KKa5MscBWabFoyQLAFAt+AigwvRSGfvBRHmdNOK2v4z1fFS+lAdfc57izHJCJhp
CHyHIjhr8BbdqSzG//cSinMupLZTkRWRCyqvqqkzZVi0TQXBU79PS8EdQ3C/DTZe
6d3r9d+ziFYhsPXqifBZhr6n8WOBCtzY+DvfesuwiTqckbpfoGJGlIELBLbKYxUS
hCVV6ObIozsivzata+DbUoUdrjRS3X7WVN1TjAgPWfsqKLYp+ecKwpPUpiQuj00x
HwH4dTtrcl2ROVamGaawFXMxykh5XP5oxlJM72KaONvB7R3QHRYbU4J1iBD/041h
/8F7uBnXcyiNPA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:07:11 2024 by rpki-client on console-fra.rpki-client.org