Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File:                     lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier:          0bYe9yLDiV7iUvelfSyDGOpNASEVOoPV6Q4FlPXsubg=
Subject key identifier:   DE:42:9E:65:10:DA:F0:03:44:3F:76:81:03:72:9B:AC:3C:6E:71:3C
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer:       /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial:       018F87ED0B4E925807B55A6084B9D2B8DB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number:          0E12
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: cOeWGjPrfDbdekm50ETDxDiusso.roa (hash: phvh6yCE5Kio1WDnxkI47r7Ps+yHg0pk934hPDqZ19A=)
                          2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: Ae68BiPAxAlIeP1mnrj3BDet9MidaU2xONu6LfY4NSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0b:4e:92:58:07:b5:5a:60:84:b9:d2:b8:db:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=de429e6510daf003443f768103729bac3c6e713c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:60:22:92:7c:6e:34:e8:f3:64:8f:a4:f9:
                    cb:b7:4f:18:c5:94:76:65:e1:88:a3:c3:04:6a:ea:
                    c5:47:62:65:df:72:8d:21:7a:82:3b:1b:10:f9:24:
                    f0:74:75:40:78:05:3c:8c:5f:ac:37:0b:cf:c4:e0:
                    0b:ae:64:6b:b3:bc:cf:19:0f:8b:44:4b:be:a8:0c:
                    08:44:27:d1:7f:f6:f4:64:ed:88:8d:fd:1e:78:0d:
                    05:a6:4c:ef:51:81:ad:e0:c9:23:56:ba:10:10:bf:
                    21:8f:33:4a:ff:ff:96:96:c1:2f:9a:a8:3c:bc:03:
                    c3:68:08:f5:40:63:c8:e9:12:82:88:09:cc:2e:d7:
                    a5:e7:08:79:92:79:c4:e0:bb:5b:a6:0d:73:58:ef:
                    1f:a0:bc:c3:5d:5c:f5:f0:a0:a1:ed:c7:fe:27:1f:
                    af:fe:04:5e:dd:17:68:47:7d:aa:3b:29:a5:49:b5:
                    18:76:92:3d:a5:6f:10:03:fb:66:b9:c6:05:3f:52:
                    bc:e2:bb:57:6e:05:10:6a:a9:6d:ab:9c:f1:6e:dc:
                    76:7c:0e:94:5c:7e:3a:0b:c2:8e:09:31:19:64:08:
                    2a:2a:dc:96:48:4a:b6:f4:8d:11:7b:9c:61:91:85:
                    26:83:18:48:da:0b:b4:bd:4f:5e:10:1f:49:f8:a5:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:42:9E:65:10:DA:F0:03:44:3F:76:81:03:72:9B:AC:3C:6E:71:3C
            X509v3 Authority Key Identifier:
                keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d5:8f:0e:fd:db:f2:da:68:b1:2f:53:41:48:0c:68:e2:3f:
         d1:82:90:1b:0c:e3:cb:c7:ec:18:8f:5c:df:f2:62:52:d0:4f:
         a6:8e:6e:75:b3:f6:d5:8d:1e:6c:be:28:5d:6a:ca:b3:c7:ae:
         c3:42:83:7e:ef:1f:73:d3:71:c1:ba:68:c4:8f:f5:9f:d9:35:
         6c:55:01:25:76:4b:39:46:6c:0e:89:81:f0:82:57:54:ae:ba:
         8a:39:63:83:92:b2:8b:58:95:9b:48:92:d6:6c:2c:a6:c2:59:
         00:c7:13:2d:e3:b0:71:3b:4a:10:2e:88:50:c2:64:07:bd:cc:
         de:7f:e5:df:bb:67:0e:8d:50:69:e7:b7:18:5a:b7:3e:95:eb:
         8b:49:5f:c2:df:3c:9f:d2:f2:e4:3b:8e:d1:10:0a:01:0e:b3:
         45:7f:0b:4e:78:7b:c1:8c:d6:d9:9d:b8:14:60:8b:14:f0:1a:
         b2:27:7d:e5:d1:07:33:b1:8a:f1:83:c4:6d:0e:75:6d:e4:5f:
         26:2e:4d:7b:4c:d8:90:b1:78:37:9c:7b:52:d6:74:af:9f:11:
         52:87:7d:b5:5e:01:f1:f2:24:9b:28:f5:e1:12:74:c0:8f:f0:
         9e:06:74:46:30:e1:ee:7a:0c:f9:83:e5:9f:db:bf:04:1a:2a:
         c2:d6:4a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7QtOklgHtVpghLnSuNsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZmE2YzQyOTkzMjFkYzVmYzkxZmM3OTYzYWE1MTQ4N2U0
YWY1ZTYwHhcNMjQwNTE3MTkwMDEwWhcNMjQwNTE4MTkwMDEwWjAzMTEwLwYDVQQD
EyhkZTQyOWU2NTEwZGFmMDAzNDQzZjc2ODEwMzcyOWJhYzNjNmU3MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplFgIpJ8bjTo82SPpPnLt08YxZR2
ZeGIo8MEaurFR2Jl33KNIXqCOxsQ+STwdHVAeAU8jF+sNwvPxOALrmRrs7zPGQ+L
REu+qAwIRCfRf/b0ZO2Ijf0eeA0FpkzvUYGt4MkjVroQEL8hjzNK//+WlsEvmqg8
vAPDaAj1QGPI6RKCiAnMLtel5wh5knnE4Ltbpg1zWO8foLzDXVz18KCh7cf+Jx+v
/gRe3RdoR32qOymlSbUYdpI9pW8QA/tmucYFP1K84rtXbgUQaqltq5zxbtx2fA6U
XH46C8KOCTEZZAgqKtyWSEq29I0Re5xhkYUmgxhI2gu0vU9eEB9J+KWOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5CnmUQ2vADRD92gQNym6w8bnE8MB8GA1UdIwQY
MBaAFJT6bEKZMh3F/JH8eWOqUUh+SvXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80M2QyNTUtMjg0YS00NjhmLThiNmUt
ZmIxZTlkYjBjMzg4LzEvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80M2QyNTUtMjg0YS00NjhmLThiNmUtZmIxZTlkYjBjMzg4
LzEvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudWPDv3b
8tposS9TQUgMaOI/0YKQGwzjy8fsGI9c3/JiUtBPpo5udbP21Y0ebL4oXWrKs8eu
w0KDfu8fc9NxwbpoxI/1n9k1bFUBJXZLOUZsDomB8IJXVK66ijljg5Kyi1iVm0iS
1mwspsJZAMcTLeOwcTtKEC6IUMJkB73M3n/l37tnDo1Qaee3GFq3PpXri0lfwt88
n9Ly5DuO0RAKAQ6zRX8LTnh7wYzW2Z24FGCLFPAasid95dEHM7GK8YPEbQ51beRf
Ji5Ne0zYkLF4N5x7UtZ0r58RUod9tV4B8fIkmyj14RJ0wI/wngZ0RjDh7noM+YPl
n9u/BBoqwtZKWA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:22 2024 by rpki-client on console-fra.rpki-client.org