Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File:                     m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier:          hYa8OV/p6y1dHambQpCiMwsP+bD9IKNUpWgchka0lDQ=
Subject key identifier:   40:81:90:14:71:58:0A:E0:9F:28:95:68:8B:31:CD:3F:FA:D8:E4:CB
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer:       /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial:       018F87B632E220843BAF46DEB5920921538B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:15 +0000
Manifest this update:     Fri 17 May 2024 18:00:15 +0000
Manifest next update:     Sat 18 May 2024 18:00:15 +0000
Files and hashes:         1: 8biKB2vGMJbBGX3tgDBGmh72Ojg.roa (hash: YbxuPjnf684l1nWNU/gBnzQbAVBcmVDQEqLtHqmYfMI=)
                          2: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: nSQGcvnXpK3V9x2nFwoH1cgY7JZqIoaiZqZPMKCE4Ao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:32:e2:20:84:3b:af:46:de:b5:92:09:21:53:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
        Validity
            Not Before: May 17 18:00:15 2024 GMT
            Not After : May 18 18:00:15 2024 GMT
        Subject: CN=4081901471580ae09f2895688b31cd3ffad8e4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:13:f9:c8:9f:76:a6:cc:6b:e0:f2:c6:d4:
                    f3:99:64:f1:e7:f5:50:14:3d:de:bd:71:a2:8a:ab:
                    c5:d7:af:00:c7:29:39:6e:8f:2c:52:af:dd:f0:f5:
                    43:c6:93:fc:56:98:1f:0d:5b:ec:12:29:1e:9d:b5:
                    35:ac:2a:95:29:38:31:2e:57:bc:01:aa:d0:f7:63:
                    98:76:bd:cc:fa:e2:da:92:ff:7f:64:6b:b1:7d:2f:
                    ab:43:3e:e3:d0:8b:c4:0e:b7:c0:27:c3:d9:7a:d0:
                    76:8f:0d:54:cb:f3:6b:95:e8:6b:fb:7b:76:cf:3a:
                    27:18:d3:f1:b1:76:af:c3:63:e3:64:54:f9:54:76:
                    29:5b:7e:47:64:62:0b:5c:7f:41:54:01:9d:98:30:
                    02:42:a7:8f:4b:b6:5e:3a:18:fc:1f:8e:15:59:21:
                    e0:b2:28:70:d6:a9:42:52:27:c7:32:e0:d2:c0:df:
                    e6:11:0a:af:31:b6:39:e6:a3:51:88:02:23:a4:97:
                    76:ac:e3:22:d3:06:96:a6:7c:69:c8:6c:b6:8f:bc:
                    13:9f:16:e5:0a:e4:d2:2e:03:9d:b1:b5:fc:2d:df:
                    95:ac:29:cc:ad:d5:ed:a0:d0:dc:18:57:7e:5e:50:
                    fe:dc:fc:50:2c:56:e0:c2:de:81:cb:38:17:04:04:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:81:90:14:71:58:0A:E0:9F:28:95:68:8B:31:CD:3F:FA:D8:E4:CB
            X509v3 Authority Key Identifier:
                keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:08:e6:a8:59:7f:a7:f1:c5:e9:0c:cd:26:f3:2f:18:ec:bb:
         a3:37:08:38:2f:41:37:f6:45:1e:4a:b4:6f:ab:5c:7d:01:ff:
         cb:82:cf:59:a9:09:e1:a3:fb:6e:36:87:b6:c6:7f:d4:f7:d7:
         d8:e0:d8:fc:e9:27:0e:52:02:0e:9a:13:e3:20:3f:c5:4b:8c:
         1e:c0:51:8e:d4:50:96:38:dd:cc:8d:ab:fe:d8:66:de:7b:54:
         9c:03:4a:4f:ad:df:24:ff:1f:a0:ea:3d:79:fb:7d:a5:cf:85:
         be:2b:dd:35:75:e8:37:eb:b6:3a:08:7a:1c:f5:c4:9a:64:86:
         68:17:6b:b7:35:3a:e4:62:f9:73:c5:15:cb:92:fa:2d:ea:79:
         62:c5:57:5a:15:e3:00:14:bd:89:8d:ba:94:f3:90:f6:6e:5d:
         b8:ac:a0:9d:81:4a:50:18:e3:48:51:7a:ad:f0:f3:b1:9e:26:
         b0:25:23:ca:85:8b:c6:4d:81:78:a9:b4:e2:36:e4:af:ea:f4:
         25:1e:f7:b6:e0:c3:08:4f:28:f8:ac:81:4c:ea:96:1f:18:39:
         12:8d:80:61:d1:86:2e:eb:0b:5e:41:59:87:48:de:4a:e0:7b:
         de:34:62:ce:c2:82:72:6a:1f:c4:12:91:46:77:50:8d:a8:79:
         33:cd:8d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtjLiIIQ7r0betZIJIVOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTBhNjExZTA2NzhiOGQzMjllZTU1MDMxMmIyNDZlMGRj
ZjQ2OTgwHhcNMjQwNTE3MTgwMDE1WhcNMjQwNTE4MTgwMDE1WjAzMTEwLwYDVQQD
Eyg0MDgxOTAxNDcxNTgwYWUwOWYyODk1Njg4YjMxY2QzZmZhZDhlNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2QT+cifdqbMa+DyxtTzmWTx5/VQ
FD3evXGiiqvF168Axyk5bo8sUq/d8PVDxpP8VpgfDVvsEikenbU1rCqVKTgxLle8
AarQ92OYdr3M+uLakv9/ZGuxfS+rQz7j0IvEDrfAJ8PZetB2jw1Uy/Nrlehr+3t2
zzonGNPxsXavw2PjZFT5VHYpW35HZGILXH9BVAGdmDACQqePS7ZeOhj8H44VWSHg
sihw1qlCUifHMuDSwN/mEQqvMbY55qNRiAIjpJd2rOMi0waWpnxpyGy2j7wTnxbl
CuTSLgOdsbX8Ld+VrCnMrdXtoNDcGFd+XlD+3PxQLFbgwt6ByzgXBATM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECBkBRxWArgnyiVaIsxzT/62OTLMB8GA1UdIwQY
MBaAFJvgphHgZ4uNMp7lUDErJG4Nz0aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAt
ZWFkMWFmODY5MWJhLzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAtZWFkMWFmODY5MWJh
LzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAjmqFl/
p/HF6QzNJvMvGOy7ozcIOC9BN/ZFHkq0b6tcfQH/y4LPWakJ4aP7bjaHtsZ/1PfX
2ODY/OknDlICDpoT4yA/xUuMHsBRjtRQljjdzI2r/thm3ntUnANKT63fJP8foOo9
eft9pc+FvivdNXXoN+u2Ogh6HPXEmmSGaBdrtzU65GL5c8UVy5L6Lep5YsVXWhXj
ABS9iY26lPOQ9m5duKygnYFKUBjjSFF6rfDzsZ4msCUjyoWLxk2BeKm04jbkr+r0
JR73tuDDCE8o+KyBTOqWHxg5Eo2AYdGGLusLXkFZh0jeSuB73jRizsKCcmofxBKR
RndQjah5M82NEQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:20:09 2024 by rpki-client on console-fra.rpki-client.org