Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
File:                     cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft (raw, json)
Hash identifier:          JWo9g2gKztfcqGh+R9KdUF47LgAZzX+NnB7JOTq3bFw=
Subject key identifier:   93:4D:D2:EF:47:69:7C:74:85:5B:08:13:88:73:69:05:11:65:0C:C2
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Certificate issuer:       /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial:       018F87B675C38841BBFCA01DBDC5D28F459C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
Manifest number:          0FEB
Signing time:             Fri 17 May 2024 18:00:32 +0000
Manifest this update:     Fri 17 May 2024 18:00:32 +0000
Manifest next update:     Sat 18 May 2024 18:00:32 +0000
Files and hashes:         1: Mv0ndK2HEF88sVwPUYiBgBgLL24.roa (hash: PA2B36LXk4gz3xeGksqWvMJPb0JcjgVXEcggY8FS4ec=)
                          2: cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl (hash: 7TIFcXmSY5jxNkHMm8Wu8aQ3jfgdFF2MbV7/l5YohVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:75:c3:88:41:bb:fc:a0:1d:bd:c5:d2:8f:45:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
        Validity
            Not Before: May 17 18:00:32 2024 GMT
            Not After : May 18 18:00:32 2024 GMT
        Subject: CN=934dd2ef47697c74855b08138873690511650cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:a2:a0:75:5f:5d:10:02:11:46:a6:8e:b5:
                    9b:bf:7e:2e:08:9b:fc:71:b7:a2:af:7b:79:5f:02:
                    d9:f8:3f:30:bc:d3:12:64:96:95:dd:4b:b4:4f:53:
                    6e:c5:f4:39:6a:b8:2c:a6:01:18:9a:09:46:e1:29:
                    b8:6f:15:b9:00:b8:08:e6:92:18:02:ba:94:ec:11:
                    15:6d:17:26:6d:cb:f6:d8:59:61:8b:21:52:0d:72:
                    1d:0e:56:10:53:50:b1:dc:89:65:01:a9:db:49:32:
                    14:14:74:e4:2b:cd:29:42:f8:b0:b5:6b:96:28:0b:
                    ec:8b:53:c6:91:08:a3:6a:e8:94:ff:64:f0:ff:8e:
                    f0:d1:e0:4e:8a:5a:d3:9c:37:ae:f7:e6:b8:40:55:
                    f9:43:29:a0:58:b9:08:ff:1a:0c:ab:d3:17:0e:c5:
                    12:da:85:33:ea:08:8c:eb:23:60:75:b8:e6:fe:92:
                    7c:30:df:2f:73:29:5d:c1:d3:3c:61:69:b5:6f:e9:
                    2d:ed:4a:9f:2a:df:8b:5b:89:26:3d:50:47:46:8a:
                    41:a5:33:f8:58:22:4c:2c:81:63:e3:70:1d:97:bc:
                    65:bc:a0:c7:44:62:7b:16:f8:7a:d3:1c:41:a5:80:
                    0b:e8:a2:39:12:34:82:e4:f2:71:59:61:6c:8a:bc:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:D2:EF:47:69:7C:74:85:5B:08:13:88:73:69:05:11:65:0C:C2
            X509v3 Authority Key Identifier:
                keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:da:40:03:83:65:53:be:47:13:1f:4a:51:94:6c:18:47:65:
         9a:a0:aa:6f:e1:ce:f4:ef:ae:76:ef:c3:b8:3c:2d:1d:51:72:
         f5:be:04:ba:ea:4d:e2:6e:ff:ac:9f:a7:cf:c4:23:30:17:72:
         b6:47:c5:f6:c5:3e:24:c6:53:82:a3:42:2c:ca:85:b6:8b:22:
         37:e0:42:af:a4:9d:61:04:8a:6a:55:8a:5e:3d:bd:08:f7:32:
         75:53:21:6a:c0:6c:90:b9:a4:e6:a4:a1:83:27:61:22:4d:88:
         4f:c0:a6:eb:24:0d:a3:88:24:db:21:50:44:f5:c1:51:34:a2:
         4a:7d:01:bc:7f:89:bf:35:4a:25:f8:b3:ca:75:9a:54:4d:ef:
         34:7d:a5:d4:a3:86:b4:b0:62:82:d6:cf:4f:60:a7:3e:b3:ee:
         2a:c1:04:f5:cd:03:f3:fc:b5:cf:b8:71:2e:5b:7a:f9:f4:8c:
         54:bc:34:4a:9d:74:89:8f:33:b3:1c:aa:7a:1b:8c:2f:43:4d:
         42:40:bc:87:cb:e6:bc:2e:00:a7:6d:e5:e7:69:6f:de:77:00:
         59:8f:a0:66:58:ba:2a:a3:9e:cd:b5:d7:3d:ae:1c:82:7d:e7:
         d6:1f:9f:69:7a:11:18:af:ef:9b:fc:39:19:b9:af:19:d4:95:
         6c:ee:bf:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtnXDiEG7/KAdvcXSj0WcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTBmNWQ1ZjkyYTQ4NjM2MjE3N2E0MmIzZDVlZmRhMjBl
MjIwZTEwHhcNMjQwNTE3MTgwMDMyWhcNMjQwNTE4MTgwMDMyWjAzMTEwLwYDVQQD
Eyg5MzRkZDJlZjQ3Njk3Yzc0ODU1YjA4MTM4ODczNjkwNTExNjUwY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mSioHVfXRACEUamjrWbv34uCJv8
cbeir3t5XwLZ+D8wvNMSZJaV3Uu0T1NuxfQ5argspgEYmglG4Sm4bxW5ALgI5pIY
ArqU7BEVbRcmbcv22FlhiyFSDXIdDlYQU1Cx3IllAanbSTIUFHTkK80pQviwtWuW
KAvsi1PGkQijauiU/2Tw/47w0eBOilrTnDeu9+a4QFX5QymgWLkI/xoMq9MXDsUS
2oUz6giM6yNgdbjm/pJ8MN8vcyldwdM8YWm1b+kt7UqfKt+LW4kmPVBHRopBpTP4
WCJMLIFj43Adl7xlvKDHRGJ7Fvh60xxBpYAL6KI5EjSC5PJxWWFsirxsNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNN0u9HaXx0hVsIE4hzaQURZQzCMB8GA1UdIwQY
MBaAFHGQ9dX5KkhjYhd6QrPV79og4iDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pEMTFma3FTR05pRjNwQ3M5WHYyaURpSU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82OGEwMTQtN2RiYS00NDMwLThkZGUt
MDFjODI3ZDZlMGZlLzEvY1pEMTFma3FTR05pRjNwQ3M5WHYyaURpSU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82OGEwMTQtN2RiYS00NDMwLThkZGUtMDFjODI3ZDZlMGZl
LzEvY1pEMTFma3FTR05pRjNwQ3M5WHYyaURpSU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdpAA4Nl
U75HEx9KUZRsGEdlmqCqb+HO9O+udu/DuDwtHVFy9b4EuupN4m7/rJ+nz8QjMBdy
tkfF9sU+JMZTgqNCLMqFtosiN+BCr6SdYQSKalWKXj29CPcydVMhasBskLmk5qSh
gydhIk2IT8Cm6yQNo4gk2yFQRPXBUTSiSn0BvH+JvzVKJfizynWaVE3vNH2l1KOG
tLBigtbPT2CnPrPuKsEE9c0D8/y1z7hxLlt6+fSMVLw0Sp10iY8zsxyqehuML0NN
QkC8h8vmvC4Ap23l52lv3ncAWY+gZli6KqOezbXXPa4cgn3n1h+faXoRGK/vm/w5
GbmvGdSVbO6/CQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:18:31 2024 by rpki-client on console-fra.rpki-client.org