Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File:                     Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier:          42ZsRm6Tu6mORlekPusfKZ87qTWa6XaS7Atl9tig0Ys=
Subject key identifier:   8A:5E:A2:30:B0:DF:9D:6A:4B:CD:02:65:99:5B:27:4A:88:D1:E9:B4
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer:       /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial:       018F87495F4CC42064F86C8C5783BECDB6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: 3KPQLaMdfoDKUgK0z2FqtVTZkSs.roa (hash: MpnQLdQYE4bfhGUktVv5KRvxzcU9DYuiKry+q1c/xPw=)
                          2: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: pbe3fwRk2p4UHUKQflZEAPDHLzJYeb1/toNM1UQzvMM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5f:4c:c4:20:64:f8:6c:8c:57:83:be:cd:b6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=8a5ea230b0df9d6a4bcd0265995b274a88d1e9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:6b:2e:80:43:ae:49:c0:85:0e:79:e0:a6:
                    0d:2b:b2:93:e1:d9:4d:0e:87:3e:d9:19:78:dd:cb:
                    3d:86:5b:86:6e:48:b0:89:51:94:a8:d0:7f:23:be:
                    16:25:c4:b2:64:10:f1:f1:07:d1:da:6b:aa:97:a3:
                    6f:f9:c7:60:22:f2:f2:d8:01:21:09:42:41:7d:06:
                    a7:12:91:86:5d:cb:89:fc:4c:4b:91:50:52:60:dd:
                    44:c6:6a:0a:3b:bb:f7:eb:9f:3f:b7:bb:6f:63:ab:
                    81:08:7a:c0:8e:2d:28:49:20:e2:7e:55:66:cf:fb:
                    e0:b8:b1:93:31:06:b8:42:bf:08:a4:35:16:78:55:
                    05:b5:55:a2:0c:a0:d6:0e:b8:6a:7a:e3:9a:1f:0e:
                    b9:00:f1:88:f7:96:21:15:1e:ff:b8:28:63:e3:e4:
                    a3:d0:31:a0:3b:3c:b8:50:d8:87:90:e9:97:77:c5:
                    4c:85:47:43:80:42:83:98:ed:6c:e0:33:e4:95:66:
                    38:0e:14:e4:bc:16:9e:f3:9b:9b:14:6b:40:15:28:
                    fa:bb:39:35:6a:c9:ce:3f:1a:41:1a:4d:43:51:b4:
                    00:49:51:88:54:01:93:24:5d:47:83:a3:87:7a:ca:
                    3d:1f:ec:9a:a8:a8:be:04:b7:b9:4c:d2:fd:85:60:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:A2:30:B0:DF:9D:6A:4B:CD:02:65:99:5B:27:4A:88:D1:E9:B4
            X509v3 Authority Key Identifier:
                keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:87:ea:ff:66:37:d2:28:2d:3c:aa:1a:c9:80:72:a8:d2:
         4b:92:0c:02:9d:3f:09:1c:70:66:8c:69:29:2b:75:2e:b8:84:
         b5:f2:ec:b8:ff:2b:57:4d:f5:b8:b5:37:84:dd:25:38:98:bf:
         0f:e5:12:a2:07:e8:b9:d1:9b:9c:d9:3b:6b:d2:45:96:14:9e:
         b6:36:c8:cb:69:93:c9:bf:bd:31:29:ea:85:e7:5a:dd:2d:9b:
         20:4e:3b:ef:36:2c:3b:5d:d5:a2:f9:bc:8f:8b:63:46:af:3a:
         00:c2:14:a0:8e:3c:93:a2:07:52:6b:9f:48:96:07:6e:fe:0f:
         f5:28:98:a9:96:32:0e:c8:43:a2:b7:53:e1:3d:06:e1:e1:9a:
         19:a9:6f:ca:92:f2:5d:63:f3:cd:bf:cf:84:d4:e3:0d:13:99:
         b9:a9:cc:fd:3c:e5:00:fe:cb:c7:d3:38:fe:a4:49:d5:c6:14:
         f1:1d:50:e2:e5:b5:70:9d:14:85:ae:4c:6c:2e:56:92:fc:34:
         0f:6a:29:2b:4b:c3:12:66:13:ee:df:0a:c4:93:67:6b:61:20:
         fa:2d:12:c9:f2:45:ef:22:f7:79:22:fa:44:33:80:2e:8d:6e:
         d7:34:0a:9c:5f:97:9b:1e:04:ff:41:42:b9:8a:cb:96:1f:f0:
         db:ac:ea:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSV9MxCBk+GyMV4O+zbapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZGZmYjUyMWVjNzM5ZWYxODI2NWM4Y2ZlN2ZkZjI5NWQ4
N2RjZjIwHhcNMjQwNTE3MTYwMTIzWhcNMjQwNTE4MTYwMTIzWjAzMTEwLwYDVQQD
Eyg4YTVlYTIzMGIwZGY5ZDZhNGJjZDAyNjU5OTViMjc0YTg4ZDFlOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgtrLoBDrknAhQ554KYNK7KT4dlN
Doc+2Rl43cs9hluGbkiwiVGUqNB/I74WJcSyZBDx8QfR2muql6Nv+cdgIvLy2AEh
CUJBfQanEpGGXcuJ/ExLkVBSYN1ExmoKO7v3658/t7tvY6uBCHrAji0oSSDiflVm
z/vguLGTMQa4Qr8IpDUWeFUFtVWiDKDWDrhqeuOaHw65APGI95YhFR7/uChj4+Sj
0DGgOzy4UNiHkOmXd8VMhUdDgEKDmO1s4DPklWY4DhTkvBae85ubFGtAFSj6uzk1
asnOPxpBGk1DUbQASVGIVAGTJF1Hg6OHeso9H+yaqKi+BLe5TNL9hWDWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpeojCw351qS80CZZlbJ0qI0em0MB8GA1UdIwQY
MBaAFC7f+1IexznvGCZcjP5/3yldh9zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjEwZWYtZDI0MC00ZDY4LTgwYzEt
NDE4OTNjNGRhMDYxLzEvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjEwZWYtZDI0MC00ZDY4LTgwYzEtNDE4OTNjNGRhMDYx
LzEvTHRfN1VoN0hPZThZSmx5TV9uX2ZLVjJIM1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwGH6v9m
N9IoLTyqGsmAcqjSS5IMAp0/CRxwZoxpKSt1LriEtfLsuP8rV031uLU3hN0lOJi/
D+USogfoudGbnNk7a9JFlhSetjbIy2mTyb+9MSnqheda3S2bIE477zYsO13Vovm8
j4tjRq86AMIUoI48k6IHUmufSJYHbv4P9SiYqZYyDshDordT4T0G4eGaGalvypLy
XWPzzb/PhNTjDROZuanM/TzlAP7Lx9M4/qRJ1cYU8R1Q4uW1cJ0Uha5MbC5Wkvw0
D2opK0vDEmYT7t8KxJNna2Eg+i0SyfJF7yL3eSL6RDOALo1u1zQKnF+Xmx4E/0FC
uYrLlh/w26zqkg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:13:02 2024 by rpki-client on console-fra.rpki-client.org