Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          wd9JNaIxvI6JaQtAqDoSSKdOpRDMPi5TTCBYjr4LuRE=
Subject key identifier:   46:6E:DB:C5:1A:A1:88:EA:25:C5:8D:44:19:71:AB:6A:38:7F:DF:B8
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       018F874AD659E56E02ED9163AC2ED212852A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          0D36
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: CqmYwnrTRD3vDawXL3egQK_PG9c.roa (hash: 6vU+2oe6HC12ht5UrKhOkLcSPDsgQMa+IDgIdxD6dZY=)
                          2: H67MDVO_sduWLnTrzdkwCeYk4jE.roa (hash: SB+XPDn89ame3uSsP3zxAMo+UL5fIFRLypghxapXndg=)
                          3: Unk3Iuw9eBGDYnylzZmKadRs7gI.roa (hash: IxvVMxNHLbMexzMLehCeyg2aMyK886Yt+5Qle8Ylhbg=)
                          4: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: Pb1Xcetbct5L16eBKvoMVo5qdX3toRBMvRUBoopmunw=)
                          5: dR5-16fvPW3r6rspiiVzQfZDtI4.roa (hash: tgUx1QDVt/FCYqngiOnq+mDntridv6gKo0d3vtQ+NDg=)
                          6: rEX_Ax4mdbPNLjoq2voqK2DB-S0.roa (hash: k+qAL/CtkD9b2vH7cBQ/eqhlOZGB0CwgpA7WK4gdqEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d6:59:e5:6e:02:ed:91:63:ac:2e:d2:12:85:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=466edbc51aa188ea25c58d441971ab6a387fdfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:9a:cd:94:37:77:46:80:a1:ba:d3:e5:60:
                    ed:be:e1:9c:74:77:63:cb:8b:b7:a3:f5:ac:b7:3d:
                    0b:39:de:f3:7d:32:c6:e9:c8:7a:82:5d:c5:66:2f:
                    5b:83:31:57:af:73:e2:f1:67:6e:44:d8:ae:8f:9e:
                    1d:41:a8:fc:20:e1:cd:9b:63:42:02:0e:7c:25:45:
                    62:19:ac:b4:c9:e4:8b:98:5b:e2:49:34:b3:7c:4d:
                    b4:f3:22:cf:be:1b:d4:b5:5f:15:97:aa:d3:21:95:
                    dc:e7:e8:65:b7:b0:26:34:e1:cf:22:1e:55:bb:79:
                    67:f5:d6:6d:93:67:d0:26:bd:fc:bd:e0:3f:53:49:
                    82:62:c4:1f:e2:70:c7:70:93:b9:5d:f1:eb:64:8f:
                    f2:23:41:d2:b1:8d:14:83:6d:58:1f:c4:55:39:7e:
                    26:cf:5c:11:0c:d0:52:6e:66:fa:a1:33:9c:2b:f2:
                    57:28:52:4f:19:58:cb:00:31:e2:80:bb:2a:92:c6:
                    a8:73:bf:4a:9f:da:7e:b3:3c:56:49:b3:97:d0:a9:
                    9c:cb:2d:68:92:7d:04:fb:dc:96:cb:3f:cd:a3:0e:
                    f8:6f:a3:2b:ec:39:a0:09:24:d1:23:fe:34:b4:ff:
                    82:74:35:8d:84:97:50:61:05:79:89:e2:8f:09:e2:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6E:DB:C5:1A:A1:88:EA:25:C5:8D:44:19:71:AB:6A:38:7F:DF:B8
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:f1:d8:f6:7e:14:04:91:8f:ff:97:c0:21:94:55:d0:67:
         ca:61:dc:f9:95:13:83:b6:59:51:7b:e7:98:7a:2c:ef:e7:a0:
         8a:5e:c1:14:da:d9:18:82:3b:05:73:7a:6e:5f:ee:0c:b9:79:
         fc:c9:6c:15:33:76:9d:35:96:d2:24:a2:7e:7f:26:b6:25:13:
         95:ea:40:8b:9d:c3:1e:d9:07:e7:01:7e:fc:a5:a8:7f:d4:cf:
         41:bd:be:af:a0:a8:b5:78:8b:7b:bc:a3:41:dd:b2:59:fd:20:
         4a:cc:6a:52:37:26:97:94:1a:33:18:bc:2c:03:ea:06:24:68:
         42:f2:ad:4b:1e:e7:17:c0:f3:85:1d:ff:55:bf:97:c1:7d:e6:
         1a:2b:f0:f6:55:2d:3d:07:fb:13:3e:b8:aa:fb:e2:2c:d1:e5:
         2d:c0:7b:a0:78:4c:40:a7:27:d6:e7:78:c8:48:25:4f:2d:a3:
         f1:32:55:ef:5d:aa:60:27:35:dc:e2:54:72:cc:31:ed:94:8e:
         50:b6:31:49:ba:38:fd:6e:c7:a5:4d:4d:95:ec:44:08:7c:9a:
         d4:dc:8c:c1:11:40:9b:6c:38:d4:e6:a3:a0:66:4d:35:54:36:
         24:93:bb:57:20:6b:97:ee:20:5c:f5:0d:c9:db:83:c3:30:73:
         f0:fb:2a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HStZZ5W4C7ZFjrC7SEoUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl
OGI4YzUwHhcNMjQwNTE3MTYwMjU5WhcNMjQwNTE4MTYwMjU5WjAzMTEwLwYDVQQD
Eyg0NjZlZGJjNTFhYTE4OGVhMjVjNThkNDQxOTcxYWI2YTM4N2ZkZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskSazZQ3d0aAobrT5WDtvuGcdHdj
y4u3o/Wstz0LOd7zfTLG6ch6gl3FZi9bgzFXr3Pi8WduRNiuj54dQaj8IOHNm2NC
Ag58JUViGay0yeSLmFviSTSzfE208yLPvhvUtV8Vl6rTIZXc5+hlt7AmNOHPIh5V
u3ln9dZtk2fQJr38veA/U0mCYsQf4nDHcJO5XfHrZI/yI0HSsY0Ug21YH8RVOX4m
z1wRDNBSbmb6oTOcK/JXKFJPGVjLADHigLsqksaoc79Kn9p+szxWSbOX0Kmcyy1o
kn0E+9yWyz/Now74b6Mr7DmgCSTRI/40tP+CdDWNhJdQYQV5ieKPCeIUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZu28UaoYjqJcWNRBlxq2o4f9+4MB8GA1UdIwQY
MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt
YzBiYTJmM2ZjNzJhLzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh
LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgp/x2PZ+
FASRj/+XwCGUVdBnymHc+ZUTg7ZZUXvnmHos7+egil7BFNrZGII7BXN6bl/uDLl5
/MlsFTN2nTWW0iSifn8mtiUTlepAi53DHtkH5wF+/KWof9TPQb2+r6CotXiLe7yj
Qd2yWf0gSsxqUjcml5QaMxi8LAPqBiRoQvKtSx7nF8DzhR3/Vb+XwX3mGivw9lUt
PQf7Ez64qvviLNHlLcB7oHhMQKcn1ud4yEglTy2j8TJV712qYCc13OJUcswx7ZSO
ULYxSbo4/W7HpU1NlexECHya1NyMwRFAm2w41OajoGZNNVQ2JJO7VyBrl+4gXPUN
yduDwzBz8Psq2A==
-----END CERTIFICATE-----
Generated at Fri May 17 19:12:30 2024 by rpki-client on console-fra.rpki-client.org