Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          AnHpeWAXaC34lxJUdlm7Rt56XCMDjH5IhtVKX5ZqbwI=
Subject key identifier:   93:8F:04:27:8E:C7:05:C0:D7:AB:0D:88:DA:8A:B3:C8:65:1F:4F:18
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       018F866CCF60B6C54747CEE6E64FE042E29E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 12:00:28 +0000
Manifest this update:     Fri 17 May 2024 12:00:28 +0000
Manifest next update:     Sat 18 May 2024 12:00:28 +0000
Files and hashes:         1: eYNFH-29Oui3Th6TuJesedKkRKg.roa (hash: e81cFoFLvA3o7qveJmmHFpvxM4a4ob0TGnWlEPqXMxI=)
                          2: qE9gGXYUSJ75m7FSreNdTRRqJks.roa (hash: dZijzHDc9AJvlk4qp7rRWmglzXa9mzuRZ39B1gmsieQ=)
                          3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: 05I7OhYLbd+bTTcm1LN/kaDxqZ3rEPx2JuG0KGDL2tQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:cf:60:b6:c5:47:47:ce:e6:e6:4f:e0:42:e2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: May 17 12:00:28 2024 GMT
            Not After : May 18 12:00:28 2024 GMT
        Subject: CN=938f04278ec705c0d7ab0d88da8ab3c8651f4f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:08:28:05:8f:d3:da:07:ad:17:6c:1f:fb:
                    dd:43:82:6d:2e:97:45:37:59:a2:82:60:80:e9:1f:
                    d1:2d:20:3c:74:46:68:51:83:68:a5:3c:49:71:c4:
                    d8:4a:23:91:bd:b9:d0:01:93:cd:56:c3:c7:49:6b:
                    06:33:30:c7:73:de:e6:5d:87:99:74:4f:84:17:09:
                    83:73:74:87:6f:e9:97:67:f6:e6:ed:5f:c7:d4:e7:
                    3d:69:c8:2e:27:44:5f:37:54:ac:53:4a:60:80:07:
                    30:64:e1:03:0a:b4:3a:ae:52:ad:b2:a0:2c:9b:ee:
                    fa:41:30:7f:74:4f:eb:94:64:58:b4:ea:bd:4d:f4:
                    2e:d0:df:6b:ed:21:71:46:1e:0a:14:a5:33:1d:d0:
                    59:cc:86:d5:34:dc:a7:4d:c6:a5:c4:8f:50:88:d9:
                    54:8c:65:f6:57:38:b3:02:35:7d:d5:b0:3c:cb:ed:
                    02:a8:d3:32:89:a8:b2:dd:ad:66:54:25:7f:ae:4c:
                    73:be:7d:48:ed:b8:bd:62:af:1c:da:a5:db:ec:e6:
                    3b:51:46:ac:a5:ca:32:52:b9:bb:7f:9d:cd:59:13:
                    f3:e5:57:0a:50:32:f4:df:3a:4c:ea:e9:7b:7d:d1:
                    6d:ba:64:e1:23:14:08:c3:d1:e3:e7:96:7f:6f:0c:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8F:04:27:8E:C7:05:C0:D7:AB:0D:88:DA:8A:B3:C8:65:1F:4F:18
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:75:60:47:4a:5f:01:9c:e8:39:64:35:29:39:05:8a:d8:
         9c:81:63:a1:cf:19:08:48:d0:c1:82:51:ee:02:eb:a4:42:e9:
         d1:31:65:ad:92:6c:8c:a2:66:68:d2:b7:39:86:1a:89:c1:c4:
         64:32:e6:17:83:d7:d1:dd:8f:29:9c:e5:29:1b:7a:dd:00:cf:
         e0:98:50:e3:af:3e:b4:b5:96:3a:c6:42:88:a2:ff:32:2d:9c:
         b2:4f:ee:97:09:3f:fb:b8:94:e4:41:aa:5b:7e:aa:b8:0e:a1:
         96:41:09:53:c0:a9:e3:ac:23:3f:4d:25:f7:d6:f6:52:f7:b5:
         f1:b5:a2:8a:d2:e3:f8:26:5c:de:a4:44:45:0f:39:c0:da:f0:
         a9:09:39:7b:24:a3:dc:2b:f9:fd:bf:6d:30:11:6d:fd:e1:9c:
         29:48:33:b2:d4:71:e4:73:7f:32:f2:c9:b0:cb:5f:9a:40:0b:
         09:b4:50:ea:79:b0:76:27:1a:d9:8f:fb:46:0e:5d:f5:fe:01:
         c9:a3:5b:95:76:53:7b:0e:48:0d:79:eb:06:2f:a8:a6:70:5f:
         70:44:e7:67:4b:1f:64:8f:82:aa:c7:03:1b:87:d4:14:f9:e5:
         03:00:06:d7:57:a4:e8:3d:30:84:0e:ec:8c:0b:e8:cb:f5:15:
         28:a0:b6:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbM9gtsVHR87m5k/gQuKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTE2NTRkYWU5NmM1MzI1NzhjZTFkZjFlYmI4MjIxZGJi
NjgxNDUwHhcNMjQwNTE3MTIwMDI4WhcNMjQwNTE4MTIwMDI4WjAzMTEwLwYDVQQD
Eyg5MzhmMDQyNzhlYzcwNWMwZDdhYjBkODhkYThhYjNjODY1MWY0ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj4IKAWP09oHrRdsH/vdQ4JtLpdF
N1migmCA6R/RLSA8dEZoUYNopTxJccTYSiORvbnQAZPNVsPHSWsGMzDHc97mXYeZ
dE+EFwmDc3SHb+mXZ/bm7V/H1Oc9acguJ0RfN1SsU0pggAcwZOEDCrQ6rlKtsqAs
m+76QTB/dE/rlGRYtOq9TfQu0N9r7SFxRh4KFKUzHdBZzIbVNNynTcalxI9QiNlU
jGX2VzizAjV91bA8y+0CqNMyiaiy3a1mVCV/rkxzvn1I7bi9Yq8c2qXb7OY7UUas
pcoyUrm7f53NWRPz5VcKUDL03zpM6ul7fdFtumThIxQIw9Hj55Z/bwxSnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOPBCeOxwXA16sNiNqKs8hlH08YMB8GA1UdIwQY
MBaAFLahZU2ulsUyV4zh3x67giHbtoFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMt
ZTBiZTg5YzRmMTY5LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMtZTBiZTg5YzRmMTY5
LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8Z1YEdK
XwGc6DlkNSk5BYrYnIFjoc8ZCEjQwYJR7gLrpELp0TFlrZJsjKJmaNK3OYYaicHE
ZDLmF4PX0d2PKZzlKRt63QDP4JhQ468+tLWWOsZCiKL/Mi2csk/ulwk/+7iU5EGq
W36quA6hlkEJU8Cp46wjP00l99b2Uve18bWiitLj+CZc3qRERQ85wNrwqQk5eySj
3Cv5/b9tMBFt/eGcKUgzstRx5HN/MvLJsMtfmkALCbRQ6nmwdica2Y/7Rg5d9f4B
yaNblXZTew5IDXnrBi+opnBfcETnZ0sfZI+CqscDG4fUFPnlAwAG11ek6D0whA7s
jAvoy/UVKKC2IA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:15:21 2024 by rpki-client on console-fra.rpki-client.org