Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File:                     Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier:          58tfd1V284t8FM8Au6MmUd/CbhzbxpYyLWMtazlIzec=
Subject key identifier:   BC:57:2F:64:75:39:DF:FC:73:60:33:C3:75:84:FF:9E:BC:F6:F3:C2
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer:       /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial:       018F8749260CC2A45CFD5DE62F03F79D47AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number:          114B
Signing time:             Fri 17 May 2024 16:01:08 +0000
Manifest this update:     Fri 17 May 2024 16:01:08 +0000
Manifest next update:     Sat 18 May 2024 16:01:08 +0000
Files and hashes:         1: 7JoHMeEL2n3_5qbpl2p0aInl1io.roa (hash: F0eAr1RxIu/ibci5QaLMZ5HvriwD8yd3yy9Di8eTxqw=)
                          2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: qCbed86IYzONvsSdSSvAZzkd9bZyW2ojGRPu17Xj9eI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:26:0c:c2:a4:5c:fd:5d:e6:2f:03:f7:9d:47:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
        Validity
            Not Before: May 17 16:01:08 2024 GMT
            Not After : May 18 16:01:08 2024 GMT
        Subject: CN=bc572f647539dffc736033c37584ff9ebcf6f3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:6e:d8:24:ba:0e:f2:8b:fb:6e:27:fe:13:
                    15:43:77:c0:87:bc:98:94:42:6b:b2:34:b2:92:8a:
                    4c:92:d4:0b:5a:81:a3:4e:f1:b2:93:a7:58:b4:17:
                    c2:5c:52:29:74:58:9e:18:4d:e4:f1:f9:21:77:72:
                    bc:75:2a:44:30:be:74:29:1b:07:9a:df:99:9c:7c:
                    34:13:1f:c0:f4:af:38:03:b6:75:55:cb:be:9e:b1:
                    ab:b3:5b:cc:7e:63:45:39:1d:ff:1c:e4:7b:83:af:
                    24:34:da:a5:17:b6:15:ea:83:80:0b:69:eb:c0:13:
                    d2:7b:68:73:0c:37:2e:8e:f6:57:89:59:ca:6e:23:
                    0d:19:6a:9a:e6:de:c0:e4:99:cf:80:47:44:70:eb:
                    8a:a8:38:6c:1f:a9:1f:d2:02:20:e2:4f:c9:c3:e4:
                    22:b8:98:f1:22:40:fb:df:86:e8:79:56:c4:14:fb:
                    91:8d:05:1e:3a:f8:bd:fe:c5:38:95:0a:d0:9a:af:
                    f7:be:03:b0:d8:7c:58:bc:75:1b:1e:5f:3e:69:9b:
                    4c:bb:14:f6:77:a7:51:79:7c:25:b4:7a:76:08:e7:
                    01:00:ec:d0:5b:7e:65:dd:de:b7:90:a8:57:7f:92:
                    2d:d3:bb:e1:03:9c:cf:38:d0:5e:2f:68:91:dd:4d:
                    ec:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:2F:64:75:39:DF:FC:73:60:33:C3:75:84:FF:9E:BC:F6:F3:C2
            X509v3 Authority Key Identifier:
                keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cb:11:ad:2c:b1:dd:85:75:9a:b3:ce:0d:6c:38:a7:71:9e:
         af:33:17:a1:54:fe:0b:ae:45:d8:5b:f8:c3:e1:50:7c:43:77:
         bf:19:4e:76:11:fa:5b:22:0d:d6:09:84:c8:a9:ba:62:19:50:
         42:9c:7a:b5:e3:9b:19:3e:7e:2b:de:7a:5d:94:c9:8f:7f:95:
         1a:c4:f8:47:2e:8d:30:fb:80:81:a6:34:7d:d0:81:6a:ce:1c:
         65:8e:0a:35:44:9c:ac:6a:42:10:09:ec:c4:2f:92:a4:6c:24:
         ff:92:4a:78:c5:1f:2b:8f:6b:80:3d:cc:43:ca:29:82:cf:f5:
         58:e0:57:9f:a1:5e:e5:6a:69:de:5d:aa:af:fb:34:54:01:ca:
         4c:91:fc:68:0c:65:f9:b2:ce:c1:64:23:e0:22:ad:c9:58:71:
         5e:b7:42:6b:bb:84:81:72:3b:ea:56:23:14:38:6a:25:b2:e6:
         9f:a3:17:99:1f:df:b9:35:7a:c2:06:05:16:e0:06:1e:59:cc:
         a3:fa:60:33:53:dc:49:14:11:13:55:fa:aa:33:da:88:8b:f2:
         91:d6:46:26:6a:12:3f:7b:ec:aa:7c:c1:f0:55:7b:68:2d:07:
         09:cf:6a:dd:16:fb:48:20:05:d9:fe:16:a5:97:c2:96:bb:e1:
         79:eb:46:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSSYMwqRc/V3mLwP3nUeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OWY1YzhiOWI2M2FlNWUyODc4NmViYTEwYTFmNjU3MmE2
MGUzZmMwHhcNMjQwNTE3MTYwMTA4WhcNMjQwNTE4MTYwMTA4WjAzMTEwLwYDVQQD
EyhiYzU3MmY2NDc1MzlkZmZjNzM2MDMzYzM3NTg0ZmY5ZWJjZjZmM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6hu2CS6DvKL+24n/hMVQ3fAh7yY
lEJrsjSykopMktQLWoGjTvGyk6dYtBfCXFIpdFieGE3k8fkhd3K8dSpEML50KRsH
mt+ZnHw0Ex/A9K84A7Z1Vcu+nrGrs1vMfmNFOR3/HOR7g68kNNqlF7YV6oOAC2nr
wBPSe2hzDDcujvZXiVnKbiMNGWqa5t7A5JnPgEdEcOuKqDhsH6kf0gIg4k/Jw+Qi
uJjxIkD734boeVbEFPuRjQUeOvi9/sU4lQrQmq/3vgOw2HxYvHUbHl8+aZtMuxT2
d6dReXwltHp2COcBAOzQW35l3d63kKhXf5It07vhA5zPONBeL2iR3U3swwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxXL2R1Od/8c2Azw3WE/5689vPCMB8GA1UdIwQY
MBaAFGafXIubY65eKHhuuhCh9lcqYOP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGIt
NTVlYjgyMGZkNTk2LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGItNTVlYjgyMGZkNTk2
LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8sRrSyx
3YV1mrPODWw4p3GerzMXoVT+C65F2Fv4w+FQfEN3vxlOdhH6WyIN1gmEyKm6YhlQ
Qpx6teObGT5+K956XZTJj3+VGsT4Ry6NMPuAgaY0fdCBas4cZY4KNUScrGpCEAns
xC+SpGwk/5JKeMUfK49rgD3MQ8opgs/1WOBXn6Fe5Wpp3l2qr/s0VAHKTJH8aAxl
+bLOwWQj4CKtyVhxXrdCa7uEgXI76lYjFDhqJbLmn6MXmR/fuTV6wgYFFuAGHlnM
o/pgM1PcSRQRE1X6qjPaiIvykdZGJmoSP3vsqnzB8FV7aC0HCc9q3Rb7SCAF2f4W
pZfClrvheetGow==
-----END CERTIFICATE-----
Generated at Fri May 17 19:09:30 2024 by rpki-client on console-fra.rpki-client.org