Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File:                     n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier:          /3Abkjhe9dhf7bRbmthJNajgKdRBP9sIUrtikklPBug=
Subject key identifier:   84:CF:F7:EC:D5:6E:70:3B:93:CC:8C:4B:BD:46:F6:3D:09:07:44:13
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer:       /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial:       018F874974330D11078B1E466406601A4FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number:          077E
Signing time:             Fri 17 May 2024 16:01:28 +0000
Manifest this update:     Fri 17 May 2024 16:01:28 +0000
Manifest next update:     Sat 18 May 2024 16:01:28 +0000
Files and hashes:         1: 8kRaQXRDJQ4I7a3f07040S3USZo.roa (hash: ErugwSJpUUl8ojXnUH0nJh6es3NqSrCRZZJPPptIdz4=)
                          2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: IfwfFwvNubtof744fEhjnKECLBaju+YIS+hVxDG5uSQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:74:33:0d:11:07:8b:1e:46:64:06:60:1a:4f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
        Validity
            Not Before: May 17 16:01:28 2024 GMT
            Not After : May 18 16:01:28 2024 GMT
        Subject: CN=84cff7ecd56e703b93cc8c4bbd46f63d09074413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:5c:b1:eb:eb:c1:aa:60:30:ca:94:67:5f:
                    8c:ce:bc:c1:77:43:3f:21:8d:02:0d:0b:2d:38:d4:
                    11:50:1e:3f:e4:4b:c5:e3:d9:9a:13:b9:eb:5f:01:
                    2e:0f:90:ea:45:31:c6:16:5d:31:e9:f9:ee:7f:d7:
                    1a:c8:19:e6:ab:8d:b0:63:61:a9:8f:72:d8:56:64:
                    c9:92:10:dc:33:a0:0d:a5:f8:82:d8:91:b8:01:3f:
                    69:16:8f:77:dc:dd:50:6c:5b:f3:0f:19:a8:f8:c0:
                    d6:b0:4a:d7:37:f8:ae:4c:93:55:d4:ca:01:ff:b5:
                    c0:77:b1:31:fd:f6:ad:3f:ab:b9:f9:a1:67:a0:b6:
                    4b:dc:65:ae:9d:6e:7f:0c:b0:11:c3:33:51:ca:ad:
                    fc:39:b9:15:e4:e1:36:a4:c9:63:17:95:0d:8e:06:
                    ca:5b:c5:7f:32:1d:7d:bd:fa:d6:5f:1a:90:ec:0a:
                    f4:1c:30:72:69:a4:ee:2c:16:70:73:20:26:2d:42:
                    37:6c:06:c1:a7:dc:26:a0:91:5f:93:6b:80:ba:1b:
                    d3:f8:a5:7f:61:89:e6:fc:53:0b:bd:fb:cc:1c:b3:
                    07:00:d0:32:52:9c:65:20:ea:65:9a:96:87:5b:a9:
                    62:fa:30:bc:60:c9:3a:c6:09:6e:04:8f:a4:09:6c:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CF:F7:EC:D5:6E:70:3B:93:CC:8C:4B:BD:46:F6:3D:09:07:44:13
            X509v3 Authority Key Identifier:
                keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:df:5d:0e:11:0c:ee:b8:3c:11:d7:35:0a:a2:d1:3a:f4:
         de:56:bf:23:dd:6d:68:9a:d6:07:b7:0f:cf:8c:ca:29:34:cc:
         76:84:ff:61:1a:4d:a0:b9:61:b6:68:ec:fb:7e:af:1a:b9:8b:
         76:d0:b7:be:ad:b2:29:2c:a2:41:9e:96:55:4e:51:b7:26:31:
         3b:97:e8:91:5b:a0:30:fd:cb:4e:3b:a6:b2:38:1f:a1:f1:8f:
         b5:da:42:51:02:1e:13:39:6f:38:e6:58:82:1f:78:85:83:c2:
         16:64:36:d4:25:59:52:b0:25:ca:06:1f:78:94:2b:95:2d:5d:
         6c:70:a7:06:5c:3c:cc:dc:fe:92:be:1a:fa:ec:e3:3e:44:de:
         80:7d:ad:bf:0b:d5:3b:cc:d9:10:67:97:8d:fd:53:06:12:cd:
         64:f4:5c:57:24:f4:16:8f:a3:46:6f:83:90:40:b4:d5:2d:7f:
         e4:42:b4:b0:19:e7:4f:68:25:01:f0:e3:03:e8:22:f3:c6:81:
         5a:65:24:0c:7f:58:1d:22:4e:98:30:25:f0:ea:08:38:e5:1d:
         b5:74:7b:56:54:ed:b0:2e:07:03:19:fa:08:65:f6:2b:b5:25:
         03:c9:be:de:59:02:49:10:44:ec:8e:65:fb:0b:92:e7:f0:02:
         77:65:70:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSXQzDREHix5GZAZgGk/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3
ZGEyY2EwHhcNMjQwNTE3MTYwMTI4WhcNMjQwNTE4MTYwMTI4WjAzMTEwLwYDVQQD
Eyg4NGNmZjdlY2Q1NmU3MDNiOTNjYzhjNGJiZDQ2ZjYzZDA5MDc0NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywNcsevrwapgMMqUZ1+MzrzBd0M/
IY0CDQstONQRUB4/5EvF49maE7nrXwEuD5DqRTHGFl0x6fnuf9cayBnmq42wY2Gp
j3LYVmTJkhDcM6ANpfiC2JG4AT9pFo933N1QbFvzDxmo+MDWsErXN/iuTJNV1MoB
/7XAd7Ex/fatP6u5+aFnoLZL3GWunW5/DLARwzNRyq38ObkV5OE2pMljF5UNjgbK
W8V/Mh19vfrWXxqQ7Ar0HDByaaTuLBZwcyAmLUI3bAbBp9wmoJFfk2uAuhvT+KV/
YYnm/FMLvfvMHLMHANAyUpxlIOplmpaHW6li+jC8YMk6xgluBI+kCWx7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITP9+zVbnA7k8yMS71G9j0JB0QTMB8GA1UdIwQY
MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt
NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3
LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPnfXQ4R
DO64PBHXNQqi0Tr03la/I91taJrWB7cPz4zKKTTMdoT/YRpNoLlhtmjs+36vGrmL
dtC3vq2yKSyiQZ6WVU5RtyYxO5fokVugMP3LTjumsjgfofGPtdpCUQIeEzlvOOZY
gh94hYPCFmQ21CVZUrAlygYfeJQrlS1dbHCnBlw8zNz+kr4a+uzjPkTegH2tvwvV
O8zZEGeXjf1TBhLNZPRcVyT0Fo+jRm+DkEC01S1/5EK0sBnnT2glAfDjA+gi88aB
WmUkDH9YHSJOmDAl8OoIOOUdtXR7VlTtsC4HAxn6CGX2K7UlA8m+3lkCSRBE7I5l
+wuS5/ACd2VwNw==
-----END CERTIFICATE-----
Generated at Fri May 17 19:13:17 2024 by rpki-client on console-fra.rpki-client.org