Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File:                     TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier:          PjOqB9TUH6N1iKnuTXvnLt9wCoUTsjE+71U5ZtaSYXA=
Subject key identifier:   42:0C:B8:7C:5C:B4:16:34:B0:1E:7C:69:F4:CD:70:B9:88:49:10:F3
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer:       /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial:       018F88920755667BD4E23F2488FED38346C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:22 +0000
Manifest this update:     Fri 17 May 2024 22:00:22 +0000
Manifest next update:     Sat 18 May 2024 22:00:22 +0000
Files and hashes:         1: 2FzY2ViHems5N3NZrAj98pXy7UU.roa (hash: YxH9fGsz6/FHLRNOXsJS+PDFsk8uIht4g1PW7pD5pd0=)
                          2: CM9tT4tG9NJfH_vJLTes11s9t4U.roa (hash: PLXanPEGYp7NGcq0Zr0qe/EoSfPytorX09jucvlErJU=)
                          3: QLFSNVPPHNwk4AUJejw6lLuWIYs.roa (hash: 78WFOD9VBRSswSf51K2ZDbHRDmQx4Ey/OhB74wcECt8=)
                          4: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: a3ZB8pH3/31iDgQI8p2SN8jQ6vt1DiG3Bqtf9sIzfd8=)
                          5: jEqR1MN7AxSHH4nC3HvBhGZ4qe4.roa (hash: lE4S1XiCRvSe8+5zoMVTjl51GbQirkwD8Mf8nHcv9pI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:07:55:66:7b:d4:e2:3f:24:88:fe:d3:83:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
        Validity
            Not Before: May 17 22:00:22 2024 GMT
            Not After : May 18 22:00:22 2024 GMT
        Subject: CN=420cb87c5cb41634b01e7c69f4cd70b9884910f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:83:52:11:bc:f5:a3:5e:16:e6:f6:db:92:
                    ff:e3:a4:ef:f5:bd:99:0f:12:69:34:60:69:ff:6e:
                    0e:b9:5c:3e:a2:84:ac:63:4d:42:d9:d9:70:1f:6e:
                    42:63:b0:bc:96:23:28:ca:03:9a:3e:00:14:20:16:
                    33:71:8f:78:04:ff:b7:29:07:ca:9b:ac:22:55:84:
                    ef:59:95:2f:28:49:cc:68:8f:eb:1c:59:07:31:6d:
                    83:17:2f:67:a0:c1:d3:33:ad:9b:af:b6:76:11:3c:
                    b5:5b:e2:50:f8:22:e4:56:88:13:d8:b8:47:a2:aa:
                    a4:7a:2c:0c:d0:41:dc:a1:7b:c9:d9:04:31:c5:23:
                    73:80:23:e0:55:57:d3:c5:65:76:18:9e:29:37:83:
                    43:0a:93:54:0d:d0:43:f4:dc:08:4d:70:e6:0d:a8:
                    dd:6c:b8:1f:cc:de:59:6c:2c:9e:39:7e:31:c8:0a:
                    34:5a:e2:75:fc:ff:c8:1b:ce:5a:1f:38:59:84:c3:
                    d8:91:e0:8d:15:df:36:9a:04:40:53:83:d0:c0:70:
                    8c:5a:b9:29:60:42:50:06:8a:0d:de:cb:38:e5:45:
                    72:28:8d:16:f9:86:90:e1:c7:36:16:45:31:d8:8c:
                    91:06:08:c5:48:73:96:98:b5:17:9a:93:02:96:2b:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:B8:7C:5C:B4:16:34:B0:1E:7C:69:F4:CD:70:B9:88:49:10:F3
            X509v3 Authority Key Identifier:
                keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:f9:d0:c3:12:3e:be:d3:92:35:45:14:fd:4f:04:51:71:
         de:a6:4f:fb:79:67:f0:5e:1e:b5:31:d6:44:22:89:34:40:2a:
         c5:af:2a:1b:2b:30:7f:d5:90:88:c9:68:2d:e7:3d:44:3a:0f:
         62:32:23:6b:64:3b:79:35:31:d9:06:5c:5f:e0:9b:0b:22:3e:
         47:37:b7:5f:29:86:93:26:f8:ac:98:24:ae:d9:2e:05:6d:86:
         05:4c:13:52:1f:58:ed:7c:96:3b:59:4b:ab:fc:5d:12:c9:7f:
         94:02:24:c7:f9:ee:ba:68:df:41:66:82:1e:c2:e1:64:ca:6e:
         78:5b:b2:14:bb:db:0b:8b:c4:d2:57:6d:e1:54:b2:6a:bf:0a:
         07:b4:c3:f5:b2:1d:ca:3a:dc:6d:8d:d5:4a:35:04:96:e5:09:
         85:bc:0a:c3:2c:df:19:4b:be:fc:25:2b:db:f2:28:c0:b5:2d:
         74:e1:ad:8d:09:8a:ca:f7:60:fd:f9:f4:62:d9:bd:e6:d0:48:
         ee:d6:2c:5a:db:01:91:f7:b7:c8:63:2f:4e:ee:3b:3e:fd:ce:
         c9:e2:20:c4:b2:dd:51:bf:41:f6:79:8a:c1:1a:f3:54:5d:73:
         ab:99:45:71:66:56:3c:6a:64:71:87:09:b2:15:03:27:93:c0:
         d7:1d:57:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkgdVZnvU4j8kiP7Tg0bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1
NzUxMTMwHhcNMjQwNTE3MjIwMDIyWhcNMjQwNTE4MjIwMDIyWjAzMTEwLwYDVQQD
Eyg0MjBjYjg3YzVjYjQxNjM0YjAxZTdjNjlmNGNkNzBiOTg4NDkxMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqyDUhG89aNeFub225L/46Tv9b2Z
DxJpNGBp/24OuVw+ooSsY01C2dlwH25CY7C8liMoygOaPgAUIBYzcY94BP+3KQfK
m6wiVYTvWZUvKEnMaI/rHFkHMW2DFy9noMHTM62br7Z2ETy1W+JQ+CLkVogT2LhH
oqqkeiwM0EHcoXvJ2QQxxSNzgCPgVVfTxWV2GJ4pN4NDCpNUDdBD9NwITXDmDajd
bLgfzN5ZbCyeOX4xyAo0WuJ1/P/IG85aHzhZhMPYkeCNFd82mgRAU4PQwHCMWrkp
YEJQBooN3ss45UVyKI0W+YaQ4cc2FkUx2IyRBgjFSHOWmLUXmpMClis5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIMuHxctBY0sB58afTNcLmISRDzMB8GA1UdIwQY
MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt
Y2E1OTVlMzRkNWFjLzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj
LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhL50MMS
Pr7TkjVFFP1PBFFx3qZP+3ln8F4etTHWRCKJNEAqxa8qGyswf9WQiMloLec9RDoP
YjIja2Q7eTUx2QZcX+CbCyI+Rze3XymGkyb4rJgkrtkuBW2GBUwTUh9Y7XyWO1lL
q/xdEsl/lAIkx/nuumjfQWaCHsLhZMpueFuyFLvbC4vE0ldt4VSyar8KB7TD9bId
yjrcbY3VSjUEluUJhbwKwyzfGUu+/CUr2/IowLUtdOGtjQmKyvdg/fn0Ytm95tBI
7tYsWtsBkfe3yGMvTu47Pv3OyeIgxLLdUb9B9nmKwRrzVF1zq5lFcWZWPGpkcYcJ
shUDJ5PA1x1X9g==
-----END CERTIFICATE-----
Generated at Sat May 18 00:32:37 2024 by rpki-client on console-fra.rpki-client.org