Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          TnIyibLdlYxa3061QWipb7BKbLlShhJ/GR6v/yqjKPo=
Subject key identifier:   C8:7D:76:37:B5:E5:A6:B9:1B:34:01:63:78:1E:7F:45:7F:D1:C3:20
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       018F94CDB5232BD74801FF176889710E1A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          1182
Signing time:             Mon 20 May 2024 07:01:00 +0000
Manifest this update:     Mon 20 May 2024 07:01:00 +0000
Manifest next update:     Tue 21 May 2024 07:01:00 +0000
Files and hashes:         1: bQ4swqybr6R6P4Q8l3iGBrVsEiE.roa (hash: Bhvsmo45+wmWMW15nbDfvt2nKI2Qc6lzlstDtngPRqo=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: AbdV5Vs5a6oYV3l/gfkbpa5PubrCyFhy3cs1DLB60s8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cd:b5:23:2b:d7:48:01:ff:17:68:89:71:0e:1a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: May 20 07:01:00 2024 GMT
            Not After : May 21 07:01:00 2024 GMT
        Subject: CN=c87d7637b5e5a6b91b340163781e7f457fd1c320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:1b:01:a9:a0:a3:df:db:8d:5e:cf:b6:6c:
                    28:08:ec:7d:84:38:87:5e:24:f6:b0:1a:41:32:4d:
                    ca:76:79:2e:d0:dc:ad:c2:25:90:55:f4:6f:5c:57:
                    0a:3d:d0:8e:a0:88:da:cd:b2:29:b9:e0:46:b9:42:
                    07:79:8c:66:04:8d:e4:72:cb:ef:66:50:a1:b1:1e:
                    ee:ae:4e:f8:dc:9b:a2:5d:41:57:2d:c8:1f:ff:eb:
                    f1:1d:92:96:ae:9d:2d:cd:4b:5b:0b:d6:18:60:cf:
                    fd:79:0d:38:ba:50:b9:3d:a4:d7:74:e5:1e:b9:51:
                    2b:68:f5:5a:45:f8:4a:c8:87:19:0f:34:11:58:24:
                    77:e8:9a:d8:89:07:6e:0a:60:17:0a:10:bb:cf:dc:
                    b5:59:cf:2c:22:dc:8b:35:ea:33:6f:ee:59:01:2a:
                    dd:a1:e6:1d:04:94:60:99:5b:25:59:77:16:d8:3b:
                    00:ac:15:fb:02:57:ee:ce:ee:b1:3a:c7:5e:5e:cd:
                    86:63:47:56:95:97:93:17:63:97:13:97:5a:fa:5d:
                    37:66:50:75:a9:fa:4c:98:37:35:16:79:e7:da:9d:
                    9b:42:20:5b:6f:f4:6c:c4:28:34:be:09:19:ec:94:
                    05:cf:4c:dc:d9:01:88:42:33:8d:5d:83:7b:fe:a6:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:76:37:B5:E5:A6:B9:1B:34:01:63:78:1E:7F:45:7F:D1:C3:20
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:3a:3d:f3:19:b4:47:f5:5e:dd:fe:4d:63:19:6b:c5:45:
         a8:54:af:45:92:25:e5:76:43:a3:1b:59:d9:ad:46:73:06:63:
         3f:e1:3b:5c:a3:e9:39:e1:eb:ab:6f:4f:3e:31:15:3c:1a:b7:
         86:9c:73:f6:b7:89:53:c9:ce:26:4a:8f:04:46:aa:d2:bb:55:
         5f:10:2b:16:27:da:c6:34:cd:c5:3b:90:12:05:9c:d7:d0:68:
         24:76:ff:f0:ef:0e:19:c9:63:18:81:f6:dc:16:34:29:2c:55:
         c3:73:6c:05:3b:e5:9d:71:7f:45:74:f3:f1:b6:ae:cf:97:84:
         b1:e3:7c:24:cb:03:91:de:c8:fd:63:48:5a:31:54:43:34:3d:
         ea:c8:6c:f3:aa:5c:eb:77:ce:a9:8d:a7:e2:73:7c:34:ef:4b:
         3c:d7:17:1d:3c:15:c7:4b:29:ef:7e:71:9c:95:bd:fc:9a:be:
         c5:54:c5:b8:fe:a8:e1:9a:d9:cb:cf:c1:4f:f5:13:1d:fa:5b:
         9a:58:e9:1e:be:67:ed:b5:2a:27:b1:ab:1a:fe:41:57:d5:8a:
         c2:2c:65:b6:74:3e:59:e5:9c:a9:ce:72:43:5d:5e:03:4c:41:
         d5:4e:f0:d7:fe:af:ad:76:09:0a:ff:22:23:47:93:53:24:97:
         e6:9b:41:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+UzbUjK9dIAf8XaIlxDhpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYxMzNkNWMyMTA5ZDhhNmY5YmJjYWE0OTZkYmVhZTM0
Nzk3NWMwHhcNMjQwNTIwMDcwMTAwWhcNMjQwNTIxMDcwMTAwWjAzMTEwLwYDVQQD
EyhjODdkNzYzN2I1ZTVhNmI5MWIzNDAxNjM3ODFlN2Y0NTdmZDFjMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eMbAamgo9/bjV7PtmwoCOx9hDiH
XiT2sBpBMk3Kdnku0NytwiWQVfRvXFcKPdCOoIjazbIpueBGuUIHeYxmBI3kcsvv
ZlChsR7urk743JuiXUFXLcgf/+vxHZKWrp0tzUtbC9YYYM/9eQ04ulC5PaTXdOUe
uVEraPVaRfhKyIcZDzQRWCR36JrYiQduCmAXChC7z9y1Wc8sItyLNeozb+5ZASrd
oeYdBJRgmVslWXcW2DsArBX7Alfuzu6xOsdeXs2GY0dWlZeTF2OXE5da+l03ZlB1
qfpMmDc1Fnnn2p2bQiBbb/RsxCg0vgkZ7JQFz0zc2QGIQjONXYN7/qY9zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMh9dje15aa5GzQBY3gef0V/0cMgMB8GA1UdIwQY
MBaAFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQt
NDUxYTlhZTRjZTUxLzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQtNDUxYTlhZTRjZTUx
LzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuk6PfMZ
tEf1Xt3+TWMZa8VFqFSvRZIl5XZDoxtZ2a1GcwZjP+E7XKPpOeHrq29PPjEVPBq3
hpxz9reJU8nOJkqPBEaq0rtVXxArFifaxjTNxTuQEgWc19BoJHb/8O8OGcljGIH2
3BY0KSxVw3NsBTvlnXF/RXTz8bauz5eEseN8JMsDkd7I/WNIWjFUQzQ96shs86pc
63fOqY2n4nN8NO9LPNcXHTwVx0sp735xnJW9/Jq+xVTFuP6o4ZrZy8/BT/UTHfpb
mljpHr5n7bUqJ7GrGv5BV9WKwixltnQ+WeWcqc5yQ11eA0xB1U7w1/6vrXYJCv8i
I0eTUySX5ptBjQ==
-----END CERTIFICATE-----
Generated at Mon May 20 16:20:12 2024 by rpki-client on console-fra.rpki-client.org