Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File:                     x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier:          XlQ39zhUUTGmBFnQ6CMHqoOabEU6L791LNsojlkcMeQ=
Subject key identifier:   58:66:3E:EC:38:6D:8C:B6:4B:F0:E6:B2:1B:47:4D:66:F0:12:DE:BE
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       018F8522E78BED5FD83C11B4AE5DF3DF257E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number:          0B4B
Signing time:             Fri 17 May 2024 06:00:08 +0000
Manifest this update:     Fri 17 May 2024 06:00:08 +0000
Manifest next update:     Sat 18 May 2024 06:00:08 +0000
Files and hashes:         1: GPY_K1_sfXyPYe8-6LnYr6zIw9w.roa (hash: VJ6MSwljUbKvfUEr1ygFZO3gIO7CxWngBhfDGtjHfoY=)
                          2: JAyLYywo3_6H7w_Jbq8WYcS_5tk.roa (hash: g8QOA14pHSyNglfWIf6C5GuHjmogABGtz4h5JC3lnWc=)
                          3: NlI9WiQJdSYBSfNnSvKHpLzoXmM.roa (hash: 2IxPjS1fx+1UMUaF/aCaeCMu4YJJYTGwdmLPsHhlyBM=)
                          4: P9kA77lwNlnAjoP3RPLQ3vGz8gM.roa (hash: uGUZL6F9ZqmhNnqoptB1O3UNNKibyxZ99aP3ldN4wbw=)
                          5: PN-hNBC2YiRvBhT7CiQffYhGTZI.roa (hash: HlCF3505pz3FUxgf118Kbo0us350ojRdmyDphTKI9Bs=)
                          6: n5grmYLFusDXskduHNK0u8Uh7_8.roa (hash: Ot/hVRNHpI3TyJW49c6dgVaMjbZnxiCg+2OWKcBEwPs=)
                          7: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: uSSb7BaJRZNnTnywlA4n1C5az0C8FwOJBrsomth6AYk=)
                          8: zgrnwFwrYqHet0VOTL6GObVqaoI.roa (hash: 1GJv1hWWjnySvpXINDXo87s+shmbypQM+oObXHaGOnU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 06:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:22:e7:8b:ed:5f:d8:3c:11:b4:ae:5d:f3:df:25:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: May 17 06:00:08 2024 GMT
            Not After : May 18 06:00:08 2024 GMT
        Subject: CN=58663eec386d8cb64bf0e6b21b474d66f012debe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:6f:eb:85:39:46:b9:5e:e7:15:e3:6a:9e:
                    89:a3:c2:8a:f1:92:a3:30:d6:e7:c2:c7:9e:99:19:
                    e1:cd:0d:da:e0:2b:79:95:f5:cb:82:1f:d5:1a:7d:
                    7b:26:2f:6f:ec:82:e3:03:e1:39:87:1e:06:c8:51:
                    3a:25:c4:a7:6a:05:24:63:94:2a:16:17:9f:69:60:
                    84:33:7c:01:9a:63:f5:07:b5:65:d2:69:d0:32:49:
                    07:f0:56:55:56:e6:72:89:ab:16:07:06:d2:c9:cd:
                    3e:53:c4:c5:a3:a9:9d:45:62:aa:b3:6c:be:8a:39:
                    cb:e3:76:4b:fb:a1:57:5c:3b:a4:f8:08:e7:f8:f6:
                    e8:e8:c8:c7:2c:b7:7d:7a:4f:1d:0b:5c:8f:53:1b:
                    5d:09:92:00:65:f5:8c:4f:f5:77:76:8e:c5:ec:ec:
                    8e:bd:da:92:38:de:e0:6e:e1:92:de:41:65:b4:0a:
                    18:bd:a4:5a:f5:00:8c:5c:50:b0:2d:f6:f5:da:3a:
                    1d:96:54:60:e3:62:57:2d:d3:78:d4:b6:4f:87:c1:
                    3e:a6:e7:7b:80:8b:59:e2:28:eb:81:aa:5b:6a:fd:
                    29:34:da:18:f8:f0:d9:ce:8c:66:4c:62:ae:fb:a2:
                    4c:c0:a6:68:38:13:87:09:35:e4:32:18:a1:0a:b7:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:3E:EC:38:6D:8C:B6:4B:F0:E6:B2:1B:47:4D:66:F0:12:DE:BE
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:66:e2:d9:62:58:b6:74:5f:9b:74:4b:fa:3e:9a:52:ce:39:
         40:82:ab:81:62:62:f7:05:96:17:47:e2:31:4b:4a:c5:43:44:
         cc:fd:20:90:3c:60:ec:4f:69:39:0c:14:d5:ab:af:86:23:19:
         ba:6c:00:3a:89:5d:62:11:7b:41:28:73:f6:d9:5d:81:0c:68:
         a1:10:76:43:79:a5:cd:e8:e1:8f:48:f2:67:83:30:a2:3d:ec:
         00:a5:e5:76:81:47:2c:49:bf:93:07:be:60:0f:9c:ab:7f:c8:
         53:ff:d9:26:5c:a3:6b:26:95:4c:f4:e1:ba:cb:fe:06:7a:2e:
         66:fa:a1:ca:8d:75:c0:28:f7:af:81:d6:dd:c9:4a:44:85:22:
         79:28:46:1b:c0:71:88:4c:a3:7d:8f:a0:ef:e3:7c:52:8a:9b:
         7d:35:d4:6e:c8:97:b7:26:f6:36:b9:84:69:8a:39:57:95:0b:
         ef:d2:7d:05:58:74:6c:70:4e:e6:84:07:25:31:d5:04:ec:3c:
         cb:4c:4b:57:15:22:62:73:e3:9b:b4:fe:e6:3c:6c:a3:52:06:
         b5:6e:f8:50:6f:a0:bb:7b:de:79:2d:4b:73:49:94:94:3b:f1:
         ea:55:4b:a6:fd:14:5d:74:be:1e:09:2e:97:38:9e:f0:00:af:
         c1:db:1b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FIueL7V/YPBG0rl3z3yV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjQwNTE3MDYwMDA4WhcNMjQwNTE4MDYwMDA4WjAzMTEwLwYDVQQD
Eyg1ODY2M2VlYzM4NmQ4Y2I2NGJmMGU2YjIxYjQ3NGQ2NmYwMTJkZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oBv64U5Rrle5xXjap6Jo8KK8ZKj
MNbnwseemRnhzQ3a4Ct5lfXLgh/VGn17Ji9v7ILjA+E5hx4GyFE6JcSnagUkY5Qq
FhefaWCEM3wBmmP1B7Vl0mnQMkkH8FZVVuZyiasWBwbSyc0+U8TFo6mdRWKqs2y+
ijnL43ZL+6FXXDuk+Ajn+Pbo6MjHLLd9ek8dC1yPUxtdCZIAZfWMT/V3do7F7OyO
vdqSON7gbuGS3kFltAoYvaRa9QCMXFCwLfb12jodllRg42JXLdN41LZPh8E+pud7
gItZ4ijrgapbav0pNNoY+PDZzoxmTGKu+6JMwKZoOBOHCTXkMhihCrc0DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhmPuw4bYy2S/DmshtHTWbwEt6+MB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2bi2WJY
tnRfm3RL+j6aUs45QIKrgWJi9wWWF0fiMUtKxUNEzP0gkDxg7E9pOQwU1auvhiMZ
umwAOoldYhF7QShz9tldgQxooRB2Q3mlzejhj0jyZ4Mwoj3sAKXldoFHLEm/kwe+
YA+cq3/IU//ZJlyjayaVTPThusv+BnouZvqhyo11wCj3r4HW3clKRIUieShGG8Bx
iEyjfY+g7+N8UoqbfTXUbsiXtyb2NrmEaYo5V5UL79J9BVh0bHBO5oQHJTHVBOw8
y0xLVxUiYnPjm7T+5jxso1IGtW74UG+gu3veeS1Lc0mUlDvx6lVLpv0UXXS+Hgku
lzie8ACvwdsbUg==
-----END CERTIFICATE-----
Generated at Fri May 17 15:06:56 2024 by rpki-client on console-fra.rpki-client.org