Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          6mHVEN5gmeXOM2o1bu5fdCH+85llrFxuotH+ojo+xSg=
Subject key identifier:   2E:4E:B0:3C:6A:1A:D7:83:A9:59:A1:DB:DF:45:75:02:5E:F5:46:65
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       018F87499C055D246F607177BE567BF31819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:39 +0000
Manifest this update:     Fri 17 May 2024 16:01:39 +0000
Manifest next update:     Sat 18 May 2024 16:01:39 +0000
Files and hashes:         1: BXjHYSdmDSEHKTsenLvDNNU4Xvs.roa (hash: T5M6lFO35AZn04m3cY96C0wdH9dTvV0IidC/CepIZdI=)
                          2: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: opnlxjKgK1lIsYdcu8iKCsOiCCwgs05GVBvXmGeM4Dw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9c:05:5d:24:6f:60:71:77:be:56:7b:f3:18:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: May 17 16:01:39 2024 GMT
            Not After : May 18 16:01:39 2024 GMT
        Subject: CN=2e4eb03c6a1ad783a959a1dbdf4575025ef54665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:78:2f:cb:71:3e:cc:dd:88:fc:50:fb:66:
                    f6:37:d8:38:d7:ec:fb:94:c5:98:a8:89:b8:7a:68:
                    36:24:09:a4:24:34:03:3f:97:53:ef:c7:b3:68:4e:
                    3c:8e:5f:06:3e:a8:2f:bb:a2:d0:6c:7a:90:88:c0:
                    82:8d:8a:d7:c6:02:fa:b7:2e:1a:a1:2b:b2:38:71:
                    bb:1a:a1:43:61:16:03:b7:9d:d2:2e:20:3a:97:97:
                    71:b8:69:75:2f:21:bf:b0:a7:dc:71:c3:ff:9a:c5:
                    d8:0b:9d:4a:99:ab:b6:47:ea:60:06:e1:69:0e:92:
                    ed:e8:65:00:1e:a9:a8:ae:8f:e2:e7:66:88:6f:d0:
                    72:5d:76:33:89:0d:6c:41:f8:de:f1:35:03:34:66:
                    fe:e0:90:dc:4a:5e:43:48:91:b6:4f:c2:3d:8f:6f:
                    e3:ec:cd:cc:a6:fe:bf:57:c8:f9:ee:d5:b3:07:95:
                    e7:67:ab:e3:0e:35:f8:90:aa:da:e1:f3:b4:c5:6e:
                    f5:91:7f:4a:78:fe:62:29:45:4d:25:a3:07:a1:a4:
                    6f:9f:01:b6:59:e5:2d:de:2d:10:b8:d0:c4:10:5b:
                    79:db:e9:fd:af:78:6f:63:bd:f6:d2:b6:55:53:d3:
                    03:55:af:a0:9c:f6:9d:e2:85:5f:2d:e0:5c:23:5e:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:B0:3C:6A:1A:D7:83:A9:59:A1:DB:DF:45:75:02:5E:F5:46:65
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:07:37:e5:f8:cf:90:a2:64:ce:ee:41:7f:6c:9e:57:e7:80:
         02:e2:de:9b:97:f5:c3:7a:a8:9f:af:df:56:ba:0d:e1:bf:33:
         f9:01:55:c5:d1:0d:d3:f1:e7:ff:7b:8a:38:ec:40:2f:bb:f6:
         e7:84:78:cf:0a:e0:dd:fb:70:22:30:83:40:c2:32:18:86:2c:
         b4:06:65:91:9d:5a:a7:3c:9a:12:82:9b:f4:c1:e7:bb:b2:6e:
         78:5d:94:ae:5a:a9:6b:00:5b:c7:ff:5e:d3:e8:fa:d5:cd:a6:
         44:d8:8d:d8:a8:d5:b3:fa:88:62:ef:d6:21:c7:6b:e0:de:14:
         39:e7:a1:d0:88:a7:85:78:1a:30:58:b1:85:45:09:f6:e5:cc:
         50:f7:80:45:08:08:ed:4d:5a:28:59:9c:db:1d:97:99:6c:1d:
         65:d5:8f:ff:d0:92:9b:ce:2d:7a:d8:1e:30:b7:68:b6:d2:79:
         69:0b:48:e3:06:db:66:9f:0a:57:4a:45:93:84:a9:18:ed:90:
         39:67:9f:28:a1:ee:a7:f7:a5:4d:a7:7c:7c:2c:7b:41:f0:52:
         eb:11:4d:70:0f:50:68:ba:1c:ce:9d:0d:05:ad:d7:e9:a5:66:
         de:78:bf:e5:90:88:ed:7f:b5:b5:60:94:ec:53:93:91:cb:3e:
         69:bd:2f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZwFXSRvYHF3vlZ78xgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTk4ZTE4NGQ0ZmM0YWZmYTIwNTA5MDk5ZDkxOWEzMWEw
Nzk0N2IwHhcNMjQwNTE3MTYwMTM5WhcNMjQwNTE4MTYwMTM5WjAzMTEwLwYDVQQD
EygyZTRlYjAzYzZhMWFkNzgzYTk1OWExZGJkZjQ1NzUwMjVlZjU0NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqN4L8txPszdiPxQ+2b2N9g41+z7
lMWYqIm4emg2JAmkJDQDP5dT78ezaE48jl8GPqgvu6LQbHqQiMCCjYrXxgL6ty4a
oSuyOHG7GqFDYRYDt53SLiA6l5dxuGl1LyG/sKfcccP/msXYC51Kmau2R+pgBuFp
DpLt6GUAHqmoro/i52aIb9ByXXYziQ1sQfje8TUDNGb+4JDcSl5DSJG2T8I9j2/j
7M3Mpv6/V8j57tWzB5XnZ6vjDjX4kKra4fO0xW71kX9KeP5iKUVNJaMHoaRvnwG2
WeUt3i0QuNDEEFt52+n9r3hvY7320rZVU9MDVa+gnPad4oVfLeBcI17tQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5OsDxqGteDqVmh299FdQJe9UZlMB8GA1UdIwQY
MBaAFFuZjhhNT8Sv+iBQkJnZGaMaB5R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTIt
MmZmOGU5ZDIzZjk3LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTItMmZmOGU5ZDIzZjk3
LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAc35fjP
kKJkzu5Bf2yeV+eAAuLem5f1w3qon6/fVroN4b8z+QFVxdEN0/Hn/3uKOOxAL7v2
54R4zwrg3ftwIjCDQMIyGIYstAZlkZ1apzyaEoKb9MHnu7JueF2UrlqpawBbx/9e
0+j61c2mRNiN2KjVs/qIYu/WIcdr4N4UOeeh0IinhXgaMFixhUUJ9uXMUPeARQgI
7U1aKFmc2x2XmWwdZdWP/9CSm84tetgeMLdottJ5aQtI4wbbZp8KV0pFk4SpGO2Q
OWefKKHup/elTad8fCx7QfBS6xFNcA9QaLoczp0NBa3X6aVm3ni/5ZCI7X+1tWCU
7FOTkcs+ab0vbg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:16:16 2024 by rpki-client on console-fra.rpki-client.org