Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File:                     5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier:          ORQaxqFD3MxjVphwjZpB3SrV+YdDL2kFB4Wfy4BEdXc=
Subject key identifier:   83:27:2E:7D:E7:96:3A:BA:74:A8:15:3F:0A:CC:48:08:EA:31:EB:A4
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer:       /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial:       018F88249A16725D3EFB2A1C82E5502725A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number:          014F
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: G5egmguma6Qrk08BU5BNj+M+m9jNDrXnvIUEBXpm+v8=)
                          2: Qu6S8pXP6ePTY24gK5wpwtT0y70.roa (hash: RdnDGIeDq9XsUOB1UTn5/YoFkQukvoto3LKfruBfN+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9a:16:72:5d:3e:fb:2a:1c:82:e5:50:27:25:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=83272e7de7963aba74a8153f0acc4808ea31eba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:1c:03:c4:6c:f3:66:95:a8:a5:ed:18:fa:
                    0f:cf:76:3e:e2:3f:86:51:46:8a:a8:68:e2:cb:7c:
                    6f:a8:1b:8d:7b:33:77:af:85:7e:0d:58:11:8a:88:
                    12:8b:69:a7:5c:a3:43:1a:90:8c:f9:06:20:a8:b5:
                    d8:ea:c4:13:db:73:1d:d7:28:6a:83:01:62:81:b0:
                    d3:6b:19:d0:58:13:8d:22:a5:22:85:02:d8:ef:54:
                    6c:2c:2b:f4:f2:17:80:5a:f5:29:63:52:db:18:5a:
                    cd:a8:45:f1:ad:f3:56:4f:e2:40:40:0e:ce:b4:56:
                    e0:5d:e3:d9:c9:e0:94:68:02:f0:f5:85:33:c5:8b:
                    7d:b1:ab:fc:6e:4a:43:44:db:0c:2f:29:8d:7f:e9:
                    92:14:2e:07:32:0c:50:92:01:21:bb:69:27:30:86:
                    84:26:04:90:fc:ae:df:c5:4f:b6:11:26:76:e8:b2:
                    0b:90:93:72:d6:38:bf:21:aa:22:8e:eb:bc:60:60:
                    76:a6:6f:2e:1d:5c:53:2f:76:e1:2a:c3:a4:e0:b5:
                    40:de:79:17:a7:f7:7a:18:ca:05:f9:78:26:63:6b:
                    bc:a1:15:fd:89:42:70:90:69:31:c3:45:0e:51:07:
                    2c:a5:27:79:0b:14:70:96:c0:9f:25:09:53:5b:65:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:2E:7D:E7:96:3A:BA:74:A8:15:3F:0A:CC:48:08:EA:31:EB:A4
            X509v3 Authority Key Identifier:
                keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:5e:a5:e2:03:93:ab:cc:98:a4:61:04:d8:b5:7b:ca:0e:
         09:5c:9e:67:ef:c6:82:11:0f:18:03:78:52:c8:88:d9:a4:fb:
         35:f9:3b:26:46:e5:77:5b:3d:e1:83:bc:7e:a9:1b:03:67:73:
         d6:15:81:1d:e2:60:46:d0:3a:42:60:fb:5b:65:ff:7d:9a:82:
         1a:15:78:1a:df:10:1a:73:76:6c:43:1f:22:65:ce:ad:bc:de:
         f2:82:c9:52:ab:2a:27:8c:47:83:f3:e3:bf:f6:91:36:c6:73:
         e5:93:53:49:6b:ce:a2:c2:0f:f3:f1:88:33:46:0f:f2:43:e4:
         b3:17:24:45:6d:82:ae:45:4a:63:8d:9d:59:17:8c:df:eb:71:
         46:0f:f3:33:7d:70:4b:e3:eb:6e:d1:ab:bf:d5:7b:9d:ec:3a:
         8d:05:5e:4d:ff:ee:92:d8:bd:d6:e4:4b:a7:cd:70:7b:fe:51:
         7a:0e:f5:4b:a7:6b:e8:ac:e7:22:98:54:c9:28:14:24:f7:c2:
         a9:10:73:ff:e0:0d:1a:a1:1f:1b:d9:59:82:ba:42:43:09:c9:
         3d:59:bc:cc:8d:5a:35:64:5a:e5:72:1b:03:fa:46:6d:f4:bd:
         b8:2c:3c:09:20:04:ce:81:e8:15:d6:86:60:19:05:68:eb:30:
         6b:44:2e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJJoWcl0++yocguVQJyWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl
NzEwZDIwHhcNMjQwNTE3MjAwMDUxWhcNMjQwNTE4MjAwMDUxWjAzMTEwLwYDVQQD
Eyg4MzI3MmU3ZGU3OTYzYWJhNzRhODE1M2YwYWNjNDgwOGVhMzFlYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3agcA8Rs82aVqKXtGPoPz3Y+4j+G
UUaKqGjiy3xvqBuNezN3r4V+DVgRiogSi2mnXKNDGpCM+QYgqLXY6sQT23Md1yhq
gwFigbDTaxnQWBONIqUihQLY71RsLCv08heAWvUpY1LbGFrNqEXxrfNWT+JAQA7O
tFbgXePZyeCUaALw9YUzxYt9sav8bkpDRNsMLymNf+mSFC4HMgxQkgEhu2knMIaE
JgSQ/K7fxU+2ESZ26LILkJNy1ji/Iaoijuu8YGB2pm8uHVxTL3bhKsOk4LVA3nkX
p/d6GMoF+XgmY2u8oRX9iUJwkGkxw0UOUQcspSd5CxRwlsCfJQlTW2Xc3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMnLn3nljq6dKgVPwrMSAjqMeukMB8GA1UdIwQY
MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt
ZDE1MDJmN2NmMjM0LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjItZDE1MDJmN2NmMjM0
LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1ZepeID
k6vMmKRhBNi1e8oOCVyeZ+/GghEPGAN4UsiI2aT7Nfk7Jkbld1s94YO8fqkbA2dz
1hWBHeJgRtA6QmD7W2X/fZqCGhV4Gt8QGnN2bEMfImXOrbze8oLJUqsqJ4xHg/Pj
v/aRNsZz5ZNTSWvOosIP8/GIM0YP8kPksxckRW2CrkVKY42dWReM3+txRg/zM31w
S+PrbtGrv9V7new6jQVeTf/ukti91uRLp81we/5Reg71S6dr6KznIphUySgUJPfC
qRBz/+ANGqEfG9lZgrpCQwnJPVm8zI1aNWRa5XIbA/pGbfS9uCw8CSAEzoHoFdaG
YBkFaOswa0QugQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:14:10 2024 by rpki-client on console-ams.rpki-client.org