Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File:                     h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier:          ZMWLOOaRTlu8qi0gY//yFvfAv1Igq/49Oho2HDNdSKs=
Subject key identifier:   24:27:ED:38:E6:7B:23:A4:24:85:E8:6E:6C:4A:8B:09:40:19:48:D7
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer:       /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial:       018F882434B21350E3105AB2F19DB15681A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number:          0712
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: 2ecBYvHyQpRZfJTkIIBNPM5H0W0.roa (hash: buLBc9AjGfXqQyyU0XYtqGiGhecbvwHgUSX2lEmsem8=)
                          2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: q4GxU/NkLWT96eO9jEA7tq7TROnucCfDJR0E/m5CsH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:34:b2:13:50:e3:10:5a:b2:f1:9d:b1:56:81:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=2427ed38e67b23a42485e86e6c4a8b09401948d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:7f:2c:46:15:c7:8a:d9:4f:4f:f2:e2:5a:
                    56:9d:14:62:45:55:3b:ae:ae:e7:f3:46:18:ad:5c:
                    bd:d1:c3:45:fa:27:a5:66:dd:60:f5:b4:58:34:67:
                    3a:c8:7d:f1:1b:b1:8f:a0:4c:a2:4d:1d:cd:49:dd:
                    1c:70:ed:aa:14:29:83:42:2f:86:08:4b:f6:76:50:
                    b0:de:03:37:2e:31:9f:da:3d:5d:bb:e8:b1:f8:70:
                    24:71:15:d1:6d:7a:1b:94:47:89:da:4f:78:e9:5a:
                    44:c7:c3:95:ff:aa:62:c9:5a:3b:48:ab:5c:2c:a2:
                    0e:ff:44:67:05:da:ad:6d:c3:de:bb:4a:b7:2c:34:
                    c3:dd:2e:37:e6:e2:1d:ee:a6:6a:33:f8:0d:69:72:
                    44:b0:29:06:96:7f:fa:89:b9:00:78:08:af:55:40:
                    71:27:16:30:f5:e3:0b:85:c3:5d:72:81:d9:23:68:
                    fa:52:48:46:ee:83:bb:e9:c7:ea:05:73:b4:1c:4a:
                    57:95:e5:48:ed:05:06:8b:ff:18:6e:87:b2:01:bd:
                    48:86:73:f4:98:78:d5:2c:e4:82:86:a9:01:97:e2:
                    c3:0e:a3:aa:f0:7a:9f:cb:0c:59:6c:b5:ba:78:58:
                    e2:8f:7e:ff:54:ae:5c:56:1a:3d:bd:20:cc:89:51:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:ED:38:E6:7B:23:A4:24:85:E8:6E:6C:4A:8B:09:40:19:48:D7
            X509v3 Authority Key Identifier:
                keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:27:91:10:72:ca:ef:cf:f5:09:5b:13:e1:47:3c:29:b4:af:
         5e:dc:03:1b:6e:c1:e2:f3:2c:87:56:f2:b5:e1:e4:76:86:97:
         d7:fa:c6:af:ef:70:b7:e1:59:49:47:6d:68:bf:72:85:9e:b9:
         28:eb:ec:97:44:83:a8:93:0d:c2:67:7b:b2:81:4f:e7:35:ef:
         a2:1a:c7:cc:5c:de:5d:26:4d:1f:54:8f:a3:e2:91:e3:57:9e:
         32:7d:5b:7e:89:6e:72:97:f1:03:10:21:4f:f6:f0:b4:c4:7a:
         96:1f:c9:c1:03:0c:cb:d3:a7:36:7e:48:47:10:16:95:f4:8f:
         5e:af:e3:35:fc:9e:5d:e4:df:27:8c:f0:19:06:cd:cc:3f:f8:
         1a:fb:5e:83:25:3c:15:33:58:e0:0e:f4:83:9d:10:b7:16:14:
         e2:39:8a:1b:52:62:3a:25:2b:16:42:ee:b1:45:67:3c:67:f9:
         fc:13:0d:1c:8a:7e:8b:e6:48:52:6c:27:c5:ea:80:70:3e:5d:
         f9:3a:c1:73:76:2e:89:32:af:56:2c:c0:8a:a3:b4:1c:94:a4:
         95:aa:78:0b:a0:93:25:a4:fb:b3:24:77:65:69:b5:93:39:b3:
         1f:5b:e8:14:8a:ca:11:17:02:38:1d:e0:94:b2:7a:08:4b:33:
         46:1b:0f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJDSyE1DjEFqy8Z2xVoGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2QxODEwMDQ4ZjQzNzIwNTA2ZTRjMTgyMGY2ZmUwOGZm
N2NhNmUwHhcNMjQwNTE3MjAwMDI1WhcNMjQwNTE4MjAwMDI1WjAzMTEwLwYDVQQD
EygyNDI3ZWQzOGU2N2IyM2E0MjQ4NWU4NmU2YzRhOGIwOTQwMTk0OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTp/LEYVx4rZT0/y4lpWnRRiRVU7
rq7n80YYrVy90cNF+ielZt1g9bRYNGc6yH3xG7GPoEyiTR3NSd0ccO2qFCmDQi+G
CEv2dlCw3gM3LjGf2j1du+ix+HAkcRXRbXoblEeJ2k946VpEx8OV/6piyVo7SKtc
LKIO/0RnBdqtbcPeu0q3LDTD3S435uId7qZqM/gNaXJEsCkGln/6ibkAeAivVUBx
JxYw9eMLhcNdcoHZI2j6UkhG7oO76cfqBXO0HEpXleVI7QUGi/8YboeyAb1IhnP0
mHjVLOSChqkBl+LDDqOq8HqfywxZbLW6eFjij37/VK5cVho9vSDMiVHMIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQn7TjmeyOkJIXobmxKiwlAGUjXMB8GA1UdIwQY
MBaAFId9GBAEj0NyBQbkwYIPb+CP98puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMt
N2U4OWI3MjAxOTBkLzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMtN2U4OWI3MjAxOTBk
LzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQieREHLK
78/1CVsT4Uc8KbSvXtwDG27B4vMsh1byteHkdoaX1/rGr+9wt+FZSUdtaL9yhZ65
KOvsl0SDqJMNwmd7soFP5zXvohrHzFzeXSZNH1SPo+KR41eeMn1bfolucpfxAxAh
T/bwtMR6lh/JwQMMy9OnNn5IRxAWlfSPXq/jNfyeXeTfJ4zwGQbNzD/4GvtegyU8
FTNY4A70g50QtxYU4jmKG1JiOiUrFkLusUVnPGf5/BMNHIp+i+ZIUmwnxeqAcD5d
+TrBc3YuiTKvVizAiqO0HJSklap4C6CTJaT7syR3ZWm1kzmzH1voFIrKERcCOB3g
lLJ6CEszRhsPdQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:32:59 2024 by rpki-client on console-fra.rpki-client.org