Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File:                     9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier:          mj4NZblaiozVa17Th+GFhExEBtWODytogcKIyFPrxgA=
Subject key identifier:   65:53:41:34:BC:C8:81:DF:5F:8E:E4:DD:48:D7:6D:07:27:2F:6A:1D
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer:       /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial:       018F855BF0B7DDEB83E6FB11BABA6CC9C3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 07:02:25 +0000
Manifest this update:     Fri 17 May 2024 07:02:25 +0000
Manifest next update:     Sat 18 May 2024 07:02:25 +0000
Files and hashes:         1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: N/W0fswEf3h185JaHfo+UYVq/x/rBzZLcDmb+rglUnU=)
                          2: A0wNRtYNAv5pN1_gcmsf_bUnfRk.roa (hash: 4qrjlA1OwrQa2t6aCVFRejTm2sBkHP6eFx4xuqVqR3U=)
                          3: syBkKQClvaM6RRHgEwquGxOSftQ.roa (hash: K7H/kt//ExG7naqhre/MwmM9UTRWpXoRFhJRpmZVCjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:f0:b7:dd:eb:83:e6:fb:11:ba:ba:6c:c9:c3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
        Validity
            Not Before: May 17 07:02:25 2024 GMT
            Not After : May 18 07:02:25 2024 GMT
        Subject: CN=65534134bcc881df5f8ee4dd48d76d07272f6a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:d1:bf:7c:42:2c:b6:c9:a5:cd:b9:c4:0a:
                    14:2d:a3:42:1b:ec:a3:17:3b:4b:4e:bf:c0:7d:30:
                    9f:b8:5c:45:15:76:51:f1:a8:01:7d:6b:dc:55:86:
                    f4:e2:2c:31:9f:ed:d3:f4:a9:ee:95:99:57:29:81:
                    05:b6:21:3c:5e:cc:53:58:ae:ac:8a:27:10:9c:a3:
                    35:ee:ad:da:6c:d2:98:2f:dc:df:74:c4:db:0f:32:
                    f0:d3:48:e6:b6:a8:56:fe:f7:61:37:7e:ae:17:ef:
                    38:8e:09:a5:30:1a:58:d2:c4:9c:95:55:ac:5c:08:
                    7e:f7:56:e8:68:51:68:1f:db:38:f9:4d:59:de:16:
                    ef:34:ea:db:2a:e2:f4:6b:76:3b:6a:32:6f:5f:2c:
                    35:58:8e:b3:9d:c5:bf:62:98:10:7a:84:b9:eb:92:
                    7e:70:aa:d7:9c:52:e6:4c:b0:d1:27:e8:b5:a4:66:
                    ce:8b:02:76:08:53:86:6d:c3:36:59:1b:8d:bf:35:
                    ed:25:ab:2a:44:de:fa:5b:60:8a:bf:32:97:14:da:
                    da:cc:05:6a:5c:ec:09:35:0c:1f:05:c1:41:53:81:
                    51:28:fd:7e:36:74:65:42:c3:30:12:51:37:87:99:
                    cd:39:b7:21:7e:eb:06:88:d4:2c:96:d2:30:c5:17:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:41:34:BC:C8:81:DF:5F:8E:E4:DD:48:D7:6D:07:27:2F:6A:1D
            X509v3 Authority Key Identifier:
                keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:dd:04:3a:d9:08:18:1b:94:33:10:4b:5d:b0:05:94:08:
         28:49:f8:a9:4d:9e:2c:02:1b:8d:48:6a:89:9e:d4:f1:18:e9:
         f2:65:94:65:d3:59:f7:a9:32:bd:a2:04:a8:63:39:bd:50:67:
         60:f2:d6:97:11:23:08:85:5b:45:27:de:10:12:98:76:2d:a0:
         84:a7:a6:e7:b4:85:43:4c:4a:4f:4c:3e:24:f6:5c:33:06:a2:
         40:f4:dc:7d:92:9c:32:b5:21:88:dc:0f:5e:67:9d:e8:f5:15:
         de:77:64:4c:32:f0:4b:eb:66:55:9a:c6:f1:70:f6:65:2c:1f:
         22:21:e6:71:29:96:c6:25:a3:23:00:c9:ae:bf:9c:00:f2:03:
         a9:4a:f5:eb:1e:75:55:c7:f3:20:7e:17:5c:47:64:74:9d:b1:
         e5:9a:79:0b:f4:a4:22:17:a8:f8:df:95:98:0e:e6:f1:2a:e5:
         9c:81:41:52:c1:d5:d2:c3:ed:bc:43:7b:59:65:23:69:c3:be:
         ac:79:80:9b:32:cc:df:79:42:fd:01:5b:5b:a7:b5:f9:3f:d7:
         d5:22:b1:db:7c:a2:ed:c8:ce:38:97:ee:e6:ef:90:d5:d1:a4:
         51:b4:0a:7a:a2:d8:e4:d0:ae:63:52:39:b0:dc:39:eb:6b:bc:
         3d:64:60:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+FW/C33euD5vsRurpsycO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk
OGNiNmMwHhcNMjQwNTE3MDcwMjI1WhcNMjQwNTE4MDcwMjI1WjAzMTEwLwYDVQQD
Eyg2NTUzNDEzNGJjYzg4MWRmNWY4ZWU0ZGQ0OGQ3NmQwNzI3MmY2YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDzRv3xCLLbJpc25xAoULaNCG+yj
FztLTr/AfTCfuFxFFXZR8agBfWvcVYb04iwxn+3T9KnulZlXKYEFtiE8XsxTWK6s
iicQnKM17q3abNKYL9zfdMTbDzLw00jmtqhW/vdhN36uF+84jgmlMBpY0sSclVWs
XAh+91boaFFoH9s4+U1Z3hbvNOrbKuL0a3Y7ajJvXyw1WI6zncW/YpgQeoS565J+
cKrXnFLmTLDRJ+i1pGbOiwJ2CFOGbcM2WRuNvzXtJasqRN76W2CKvzKXFNrazAVq
XOwJNQwfBcFBU4FRKP1+NnRlQsMwElE3h5nNObchfusGiNQsltIwxRcTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVTQTS8yIHfX47k3UjXbQcnL2odMB8GA1UdIwQY
MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt
MGVjN2VjYjI1MDMwLzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw
LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/zdBDrZ
CBgblDMQS12wBZQIKEn4qU2eLAIbjUhqiZ7U8Rjp8mWUZdNZ96kyvaIEqGM5vVBn
YPLWlxEjCIVbRSfeEBKYdi2ghKem57SFQ0xKT0w+JPZcMwaiQPTcfZKcMrUhiNwP
Xmed6PUV3ndkTDLwS+tmVZrG8XD2ZSwfIiHmcSmWxiWjIwDJrr+cAPIDqUr16x51
VcfzIH4XXEdkdJ2x5Zp5C/SkIheo+N+VmA7m8SrlnIFBUsHV0sPtvEN7WWUjacO+
rHmAmzLM33lC/QFbW6e1+T/X1SKx23yi7cjOOJfu5u+Q1dGkUbQKeqLY5NCuY1I5
sNw562u8PWRgng==
-----END CERTIFICATE-----
Generated at Fri May 17 09:15:30 2024 by rpki-client on console-fra.rpki-client.org