Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File:                     f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier:          3yEs1Pi8aRc4Aa8opRXv3qP2qg25DPpr7wgsZ+Y9Yj8=
Subject key identifier:   F5:F6:14:A7:28:2A:86:A1:D9:97:BE:8D:C5:44:BC:94:E6:A0:22:3F
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer:       /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial:       018F87B66BF110E0BA4CFDA456DA97EAD8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number:          0EF0
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: aWaAP_Vq0N7VNyfThxzneJcXxno.roa (hash: IQHBW+5TT6AAb4/Jj/TJBNIIY4J0wU3h1uvbC15E3cU=)
                          2: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: cgB7EQvz4irXfaMB/JpKn9f8gR9VnPCxTCCNT4ZbpvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6b:f1:10:e0:ba:4c:fd:a4:56:da:97:ea:d8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=f5f614a7282a86a1d997be8dc544bc94e6a0223f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:59:3a:93:27:bf:c7:12:72:a8:94:67:2d:
                    dc:7b:97:d6:c5:c7:15:3a:27:e9:16:83:b7:06:bd:
                    d3:d3:75:18:6e:4a:78:53:b5:d1:72:07:31:75:2a:
                    a3:b1:56:c2:3c:c1:1f:36:62:4d:e9:7f:81:d3:cc:
                    c6:dd:f3:5a:24:32:79:3d:47:c6:0d:8d:e9:66:d5:
                    41:25:07:f3:c5:d5:c8:81:27:e5:41:25:f3:1c:0e:
                    55:3b:96:ef:54:39:dc:7a:9c:d4:33:9c:1e:70:41:
                    da:dd:64:c5:65:8b:c7:f4:4c:91:ef:00:b9:65:5e:
                    96:e7:2f:70:5a:6b:3d:d7:51:84:c9:44:2a:27:be:
                    be:e7:c4:e6:00:f0:85:99:72:b3:3f:80:1e:26:40:
                    67:f7:e9:eb:0f:a3:10:70:4c:df:ef:d2:b0:0c:69:
                    04:3a:0c:78:1b:87:06:df:3b:13:80:1f:39:60:c6:
                    e2:7c:58:b6:f0:21:7f:fe:38:b6:64:5d:96:d6:95:
                    65:fe:8a:f9:6c:b1:ee:ae:3b:f5:bb:f5:20:61:d7:
                    ab:20:90:72:46:1f:0d:c2:dd:43:0a:47:28:5b:e3:
                    96:e4:26:b2:69:37:a2:46:b5:18:44:a8:38:fa:bb:
                    b7:73:28:8c:65:dd:f3:9d:ee:99:d5:55:6c:f4:b5:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:14:A7:28:2A:86:A1:D9:97:BE:8D:C5:44:BC:94:E6:A0:22:3F
            X509v3 Authority Key Identifier:
                keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:c8:98:b4:6f:60:ec:c1:26:67:1c:58:46:65:07:44:99:
         ed:cb:af:31:01:16:b1:c1:9b:90:7f:c7:c0:4e:d7:6f:dd:e8:
         f3:6e:7a:42:a1:87:db:23:bc:ba:7c:d5:e6:72:34:46:97:33:
         a1:b9:0c:34:2e:9c:2a:dd:77:7c:4e:51:19:bd:d3:b4:d1:02:
         11:57:f1:31:bf:c5:de:a9:15:73:6e:3a:51:eb:c1:06:69:9b:
         7f:6a:eb:ad:16:b2:8f:c9:0e:a5:4a:97:d6:58:42:f4:33:cc:
         7e:e4:74:60:f2:e3:38:da:6f:81:af:c0:60:d6:18:e8:fb:dc:
         43:49:07:fb:57:99:c3:af:2b:e0:31:a4:47:54:55:93:92:4b:
         44:42:0c:9d:21:cd:03:f1:fd:4c:d8:95:e8:ab:44:3b:79:37:
         53:cc:02:4c:92:14:8d:20:7e:03:32:c4:68:4e:3b:5c:6f:90:
         4e:31:76:76:d3:8c:87:29:d9:ea:19:30:1c:12:27:ab:ea:9c:
         f4:94:fa:69:0a:b1:d5:96:27:f4:a7:23:88:5d:7a:2a:ed:55:
         9b:f9:56:ca:63:11:5f:d6:10:f9:03:d0:06:48:16:04:f2:24:
         d0:23:50:b9:2f:8c:38:7d:22:2c:33:4e:53:fd:d8:69:6d:22:
         8c:62:1e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtmvxEOC6TP2kVtqX6tjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2
Y2U0NzkwHhcNMjQwNTE3MTgwMDMwWhcNMjQwNTE4MTgwMDMwWjAzMTEwLwYDVQQD
EyhmNWY2MTRhNzI4MmE4NmExZDk5N2JlOGRjNTQ0YmM5NGU2YTAyMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvShZOpMnv8cScqiUZy3ce5fWxccV
OifpFoO3Br3T03UYbkp4U7XRcgcxdSqjsVbCPMEfNmJN6X+B08zG3fNaJDJ5PUfG
DY3pZtVBJQfzxdXIgSflQSXzHA5VO5bvVDncepzUM5wecEHa3WTFZYvH9EyR7wC5
ZV6W5y9wWms911GEyUQqJ76+58TmAPCFmXKzP4AeJkBn9+nrD6MQcEzf79KwDGkE
Ogx4G4cG3zsTgB85YMbifFi28CF//ji2ZF2W1pVl/or5bLHurjv1u/UgYderIJBy
Rh8Nwt1DCkcoW+OW5CayaTeiRrUYRKg4+ru3cyiMZd3zne6Z1VVs9LVzLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX2FKcoKoah2Ze+jcVEvJTmoCI/MB8GA1UdIwQY
MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt
NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4
LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimDImLRv
YOzBJmccWEZlB0SZ7cuvMQEWscGbkH/HwE7Xb93o8256QqGH2yO8unzV5nI0Rpcz
obkMNC6cKt13fE5RGb3TtNECEVfxMb/F3qkVc246UevBBmmbf2rrrRayj8kOpUqX
1lhC9DPMfuR0YPLjONpvga/AYNYY6PvcQ0kH+1eZw68r4DGkR1RVk5JLREIMnSHN
A/H9TNiV6KtEO3k3U8wCTJIUjSB+AzLEaE47XG+QTjF2dtOMhynZ6hkwHBInq+qc
9JT6aQqx1ZYn9KcjiF16Ku1Vm/lWymMRX9YQ+QPQBkgWBPIk0CNQuS+MOH0iLDNO
U/3YaW0ijGIehw==
-----END CERTIFICATE-----
Generated at Sat May 18 00:29:21 2024 by rpki-client on console-fra.rpki-client.org