Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File:                     ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier:          z2JDIaHMltJ8F++1IoPX6JGdjYWG8l7T7VzGlFNmjgw=
Subject key identifier:   6F:CF:72:C4:8B:70:16:BE:ED:BD:3A:41:DA:63:A2:25:75:F9:5B:3F
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer:       /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial:       018F60AB4B49C1359A21040875FE532EDFBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number:          088C
Signing time:             Fri 10 May 2024 04:03:09 +0000
Manifest this update:     Fri 10 May 2024 04:03:09 +0000
Manifest next update:     Sat 11 May 2024 04:03:09 +0000
Files and hashes:         1: EQcHivCETSgQLQBH5xq1dagC6d4.roa (hash: lvfPqAS1CpuLTfZwW2xAIoUP9mKALyDsq4nhBUV7+w8=)
                          2: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: AohHnx8a1u+G/omq8U2XY/qOXm8wI5WSokBTsDCzwjo=)
                          3: pXoGjpljzvnzuCfg74waoB_ek_0.roa (hash: J9e84tHx4YOorhubrLupVEu9hos8PU08Qt2TxPWBp7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 04:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:60:ab:4b:49:c1:35:9a:21:04:08:75:fe:53:2e:df:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
        Validity
            Not Before: May 10 04:03:09 2024 GMT
            Not After : May 11 04:03:09 2024 GMT
        Subject: CN=6fcf72c48b7016beedbd3a41da63a22575f95b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:7f:66:72:4a:1a:60:61:1d:de:a9:11:8b:
                    e0:c8:42:3b:5b:7e:5a:24:c8:f1:58:29:15:c4:2d:
                    a0:c5:da:c2:52:05:86:54:15:e4:3e:98:35:fd:ea:
                    92:60:57:5a:54:27:0b:88:ce:47:b6:fe:1b:66:54:
                    5c:af:8f:e5:fa:38:c9:60:c0:aa:69:e3:f7:fa:fd:
                    3c:65:03:0b:52:bf:b4:45:72:f0:74:2e:7d:bb:8b:
                    f4:4d:c3:ba:59:7b:4e:0a:2d:23:a2:ca:71:5d:41:
                    8b:17:8d:b7:55:c4:04:91:05:07:b9:5f:e5:bb:90:
                    b8:86:b8:f4:77:64:2a:fb:f0:b0:f4:9e:36:1f:80:
                    6b:9c:99:c7:df:ff:03:e3:e8:72:87:ca:d9:34:18:
                    89:32:94:04:b5:a8:2e:eb:e3:4d:5f:c6:da:ac:ce:
                    4a:8c:f8:65:ae:b2:aa:83:f5:3a:81:fa:47:69:3c:
                    20:80:9d:d6:2c:d1:a0:00:a4:19:40:01:89:fe:5f:
                    10:35:9b:4c:b8:af:1d:49:6c:b5:66:63:e1:26:a7:
                    74:c6:7a:49:a7:86:67:54:a1:82:d7:08:07:92:0f:
                    c0:33:af:84:5a:a0:a0:3c:cb:7d:f3:7b:27:75:d6:
                    e7:2a:d6:75:b3:1b:e0:07:01:99:73:31:83:a0:aa:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CF:72:C4:8B:70:16:BE:ED:BD:3A:41:DA:63:A2:25:75:F9:5B:3F
            X509v3 Authority Key Identifier:
                keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:22:6d:d0:2e:64:18:4e:a6:12:6c:6e:2a:9e:13:c7:4c:
         e2:b5:6d:be:09:6e:73:f5:28:03:52:4b:47:ca:92:dd:4b:88:
         f6:84:9f:a3:9c:9d:95:60:ec:f9:fe:1a:ab:36:8d:97:86:27:
         a8:1d:a4:d3:84:fe:6f:04:09:10:55:1f:a0:69:f4:81:69:b0:
         e6:c9:2f:91:b7:18:bf:e7:ed:14:f5:ba:3b:db:dc:da:52:4c:
         59:70:d8:15:c0:b0:91:5b:8d:d0:29:6a:b2:29:75:97:fd:79:
         97:01:c2:39:82:30:ff:b9:7b:44:26:f7:3b:97:cc:91:09:f6:
         1d:3c:4a:4a:13:bb:e8:4a:a9:b1:87:b0:61:36:3f:14:f3:14:
         cd:86:2a:4b:df:41:10:78:58:a5:b2:d3:cf:38:e0:08:83:78:
         73:a0:f4:1a:a3:39:30:25:04:bb:2b:25:79:26:73:e3:9c:b2:
         e4:4f:01:66:a4:95:d3:a9:96:73:18:13:d7:9d:8c:76:4f:fb:
         0f:b6:2d:1b:6c:e2:d5:0e:86:fd:17:68:24:45:2d:de:e2:f1:
         76:cb:03:ec:aa:b6:0b:8f:e4:2f:9f:4e:b9:53:73:5d:71:5e:
         81:14:42:62:fb:c3:b2:9e:c0:2c:c2:c2:d2:c2:04:f3:45:5a:
         4d:1a:e5:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9gq0tJwTWaIQQIdf5TLt+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjQwNTEwMDQwMzA5WhcNMjQwNTExMDQwMzA5WjAzMTEwLwYDVQQD
Eyg2ZmNmNzJjNDhiNzAxNmJlZWRiZDNhNDFkYTYzYTIyNTc1Zjk1YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF5/ZnJKGmBhHd6pEYvgyEI7W35a
JMjxWCkVxC2gxdrCUgWGVBXkPpg1/eqSYFdaVCcLiM5Htv4bZlRcr4/l+jjJYMCq
aeP3+v08ZQMLUr+0RXLwdC59u4v0TcO6WXtOCi0jospxXUGLF423VcQEkQUHuV/l
u5C4hrj0d2Qq+/Cw9J42H4BrnJnH3/8D4+hyh8rZNBiJMpQEtagu6+NNX8barM5K
jPhlrrKqg/U6gfpHaTwggJ3WLNGgAKQZQAGJ/l8QNZtMuK8dSWy1ZmPhJqd0xnpJ
p4ZnVKGC1wgHkg/AM6+EWqCgPMt983snddbnKtZ1sxvgBwGZczGDoKr9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/PcsSLcBa+7b06QdpjoiV1+Vs/MB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEAibdAu
ZBhOphJsbiqeE8dM4rVtvgluc/UoA1JLR8qS3UuI9oSfo5ydlWDs+f4aqzaNl4Yn
qB2k04T+bwQJEFUfoGn0gWmw5skvkbcYv+ftFPW6O9vc2lJMWXDYFcCwkVuN0Clq
sil1l/15lwHCOYIw/7l7RCb3O5fMkQn2HTxKShO76EqpsYewYTY/FPMUzYYqS99B
EHhYpbLTzzjgCIN4c6D0GqM5MCUEuysleSZz45yy5E8BZqSV06mWcxgT152Mdk/7
D7YtG2zi1Q6G/RdoJEUt3uLxdssD7Kq2C4/kL59OuVNzXXFegRRCYvvDsp7ALMLC
0sIE80VaTRrlIg==
-----END CERTIFICATE-----
Generated at Fri May 10 10:19:53 2024 by rpki-client on console-fra.rpki-client.org