Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File:                     XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier:          D+7t25OmNwWtrM0dK6AIjyDUid9m6+thwnvf+nT0/wQ=
Subject key identifier:   0C:D9:BC:28:17:89:8E:8C:55:27:C6:2A:62:9C:67:14:64:30:81:20
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer:       /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial:       018F86A3EC336A81A61EAA901302398BC155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number:          085E
Signing time:             Fri 17 May 2024 13:00:40 +0000
Manifest this update:     Fri 17 May 2024 13:00:40 +0000
Manifest next update:     Sat 18 May 2024 13:00:40 +0000
Files and hashes:         1: VmmlMzL1dfGzG-z9r5Ly5pdPOYc.roa (hash: d09cnyr7fmuUELdHm7mD1kVZKdb7QxAj2PstrKX52oM=)
                          2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: enOM6FdraPPjba/xe0Hsz7CbgxkNgiAmNWuv+xlctAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ec:33:6a:81:a6:1e:aa:90:13:02:39:8b:c1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
        Validity
            Not Before: May 17 13:00:40 2024 GMT
            Not After : May 18 13:00:40 2024 GMT
        Subject: CN=0cd9bc2817898e8c5527c62a629c671464308120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:16:28:ce:de:ea:1f:97:9c:63:81:b1:b2:
                    7f:e8:e5:69:b9:5e:4e:02:db:4d:b8:dc:18:c4:b1:
                    36:d4:82:d0:cd:85:d9:86:86:eb:f9:08:84:12:5f:
                    d8:21:84:0e:da:51:c8:60:db:3f:1c:b8:b7:1a:fd:
                    04:8b:86:ed:d2:70:28:72:35:32:0d:a6:82:0f:1a:
                    0c:dd:d7:23:66:64:53:1b:c6:cc:ff:12:b4:52:71:
                    b6:8b:ba:ee:82:21:1b:ec:92:98:58:b5:16:b5:7e:
                    e7:a7:9b:3b:e2:2b:53:b3:df:a4:26:23:4a:70:4f:
                    f7:d7:31:e0:b3:2f:8a:31:9a:fd:04:d1:ef:87:c8:
                    61:36:d0:7f:e4:c3:08:6f:f9:e8:e7:c8:22:21:f7:
                    13:ed:9b:e9:28:1d:14:77:61:90:67:83:e9:e3:ee:
                    a5:fd:51:e1:4b:33:b5:4f:33:03:8a:90:ee:8e:49:
                    60:75:2a:e1:4f:4d:4c:4e:d0:95:d0:3e:e2:4b:08:
                    a0:6f:0d:3e:78:08:24:1e:9a:21:a7:d6:e1:a5:b7:
                    00:33:00:44:25:07:bc:e8:c0:42:89:28:98:59:4d:
                    c5:4e:54:97:86:d0:b1:2c:11:46:f3:29:3d:03:3a:
                    8b:f3:17:bd:0f:7b:d4:e5:01:a0:5f:33:83:f2:5b:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D9:BC:28:17:89:8E:8C:55:27:C6:2A:62:9C:67:14:64:30:81:20
            X509v3 Authority Key Identifier:
                keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:3f:90:22:47:bd:56:ec:6e:39:f7:d2:01:5f:00:4c:f4:
         58:cc:46:46:c4:2c:5c:35:f1:b2:8b:34:e7:e8:9a:45:cc:e9:
         5a:70:23:a0:8e:c9:19:16:c1:74:28:0d:d1:8e:72:e9:24:1b:
         e3:b5:76:ce:49:60:f2:05:c4:13:af:73:cf:cb:c6:f1:d2:53:
         61:24:93:d8:12:b9:98:0b:06:30:2f:74:f4:97:59:c8:b0:2b:
         1d:fa:ff:a6:6a:39:7d:e7:ef:46:c8:2a:9a:83:04:23:06:89:
         4e:d1:47:fe:e3:e0:c3:9d:c4:6b:72:3d:cf:a5:49:c0:6f:b8:
         88:b5:08:08:0d:e2:b9:4e:06:ab:b8:9d:8e:31:d3:84:b9:38:
         5c:a3:1d:a5:fd:db:ac:81:24:f9:70:5a:90:68:ae:92:5c:f5:
         02:8b:47:53:31:37:52:44:3d:44:07:60:84:b6:77:f6:d0:31:
         29:3a:88:69:cc:13:2f:f8:75:57:51:49:f6:83:d6:86:42:c9:
         7e:07:93:64:e0:74:75:24:29:c5:38:ca:94:06:14:01:04:a4:
         53:9c:57:3a:84:f6:7f:54:13:c2:71:b9:30:0a:13:ea:2a:25:
         d2:30:92:b9:3b:bb:8c:a7:4d:8a:f7:e8:16:77:fd:c7:ed:11:
         91:4d:7e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go+wzaoGmHqqQEwI5i8FVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0
MmJjY2EwHhcNMjQwNTE3MTMwMDQwWhcNMjQwNTE4MTMwMDQwWjAzMTEwLwYDVQQD
EygwY2Q5YmMyODE3ODk4ZThjNTUyN2M2MmE2MjljNjcxNDY0MzA4MTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxIWKM7e6h+XnGOBsbJ/6OVpuV5O
AttNuNwYxLE21ILQzYXZhobr+QiEEl/YIYQO2lHIYNs/HLi3Gv0Ei4bt0nAocjUy
DaaCDxoM3dcjZmRTG8bM/xK0UnG2i7rugiEb7JKYWLUWtX7np5s74itTs9+kJiNK
cE/31zHgsy+KMZr9BNHvh8hhNtB/5MMIb/no58giIfcT7ZvpKB0Ud2GQZ4Pp4+6l
/VHhSzO1TzMDipDujklgdSrhT01MTtCV0D7iSwigbw0+eAgkHpohp9bhpbcAMwBE
JQe86MBCiSiYWU3FTlSXhtCxLBFG8yk9AzqL8xe9D3vU5QGgXzOD8lvsFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzZvCgXiY6MVSfGKmKcZxRkMIEgMB8GA1UdIwQY
MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt
OWFjMWE3ZTRjNDA2LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2
LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThU/kCJH
vVbsbjn30gFfAEz0WMxGRsQsXDXxsos05+iaRczpWnAjoI7JGRbBdCgN0Y5y6SQb
47V2zklg8gXEE69zz8vG8dJTYSST2BK5mAsGMC909JdZyLArHfr/pmo5fefvRsgq
moMEIwaJTtFH/uPgw53Ea3I9z6VJwG+4iLUICA3iuU4Gq7idjjHThLk4XKMdpf3b
rIEk+XBakGiuklz1AotHUzE3UkQ9RAdghLZ39tAxKTqIacwTL/h1V1FJ9oPWhkLJ
fgeTZOB0dSQpxTjKlAYUAQSkU5xXOoT2f1QTwnG5MAoT6iol0jCSuTu7jKdNivfo
Fnf9x+0RkU1+ZQ==
-----END CERTIFICATE-----
Generated at Fri May 17 19:07:41 2024 by rpki-client on console-fra.rpki-client.org