Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File:                     yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier:          OH9Ck1RUNoPe8L/F5B1IqZoXxIAPzErmTCQiFQuM2xE=
Subject key identifier:   10:2D:8D:34:3C:04:13:41:99:56:80:50:AC:38:BE:D0:FE:90:05:85
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer:       /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial:       018F8891CC0E7C5E2A9110A5DD7B913DE6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number:          9A
Signing time:             Fri 17 May 2024 22:00:07 +0000
Manifest this update:     Fri 17 May 2024 22:00:07 +0000
Manifest next update:     Sat 18 May 2024 22:00:07 +0000
Files and hashes:         1: 7YRDJN-w13cUbzRWPPNysebcPV4.roa (hash: T4+fVdvNRRmq/pVoO5rJIC+IuYlEzUDSS3NCkdsYkfg=)
                          2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: HxkLHjhh90LirF6SWc0kT0xHe+CLwMzmSHN8TQyLPFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:cc:0e:7c:5e:2a:91:10:a5:dd:7b:91:3d:e6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
        Validity
            Not Before: May 17 22:00:07 2024 GMT
            Not After : May 18 22:00:07 2024 GMT
        Subject: CN=102d8d343c04134199568050ac38bed0fe900585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:11:23:9b:07:30:39:1e:66:79:73:b4:93:
                    e7:9b:bf:f0:6e:81:33:48:5a:78:4c:a1:f5:47:65:
                    20:ca:9b:f7:ea:75:1e:d5:6c:f8:6e:bf:d4:03:10:
                    bd:11:f9:3d:25:dd:4c:de:a5:a9:0e:0e:e5:88:11:
                    45:2d:c2:84:80:32:cc:75:c3:0b:0b:bc:1b:f2:15:
                    c7:ed:18:2a:f7:44:63:c5:01:66:1b:81:05:41:3f:
                    6e:e0:9a:ef:cd:89:11:a9:5a:99:7a:75:62:a2:2e:
                    79:ab:d8:92:8e:b4:68:c9:f9:4d:3d:2f:c3:dc:c9:
                    0e:5f:5c:6c:00:6b:fd:8e:83:6f:a5:9b:b9:4b:72:
                    2d:97:18:ba:62:25:af:03:9c:b9:15:61:fb:37:f0:
                    55:21:25:ca:31:94:c4:75:b1:5f:28:57:7c:07:2c:
                    30:5d:83:b8:51:7b:3d:66:f5:7c:f2:d1:7d:94:16:
                    5d:03:81:5f:93:de:b1:8d:0b:8a:ef:b6:0b:49:1c:
                    b4:08:76:cc:79:ba:c6:b0:c0:11:8d:f5:01:f6:75:
                    60:27:3b:b8:f8:cb:6a:eb:09:ae:0b:33:df:6b:36:
                    da:7d:58:f1:f9:67:56:7c:da:58:49:cf:17:1a:2b:
                    a8:0a:82:63:4b:ce:80:22:22:98:74:97:6e:00:dc:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:8D:34:3C:04:13:41:99:56:80:50:AC:38:BE:D0:FE:90:05:85
            X509v3 Authority Key Identifier:
                keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ba:f1:3e:29:ae:2d:a0:0b:4d:36:1d:6a:44:aa:36:1a:75:
         db:05:ec:0e:10:ad:22:9c:35:8c:c1:03:7b:49:ca:f6:e8:93:
         76:d7:83:8b:4d:05:7c:3f:32:b8:e2:cd:8c:4e:3b:82:cc:30:
         a4:fe:79:97:88:ba:dd:6c:0a:cf:71:4c:98:09:7f:e6:2c:47:
         5e:dc:8a:f1:b6:45:17:0a:8a:45:77:a0:da:91:2e:21:de:eb:
         2b:07:5c:30:b2:8e:07:a3:6e:4d:be:0e:d9:2a:7e:d1:f2:31:
         6d:fd:bb:cc:71:bf:b2:cf:42:f0:46:fe:83:c3:f1:59:2c:e5:
         99:a5:df:a3:c5:47:ad:30:45:b0:1b:7a:f6:88:e8:8d:af:0e:
         d4:ff:95:e2:fd:c2:30:1d:23:d5:7b:64:5b:99:41:05:52:d7:
         c2:73:c0:7a:49:fd:c0:97:bf:65:fe:0e:1b:1b:0d:66:24:39:
         aa:c2:07:1c:d8:0d:15:2d:ab:df:12:2b:47:eb:31:04:cd:a1:
         e5:24:d8:55:4f:71:f0:16:20:b2:21:90:29:6a:af:eb:58:9a:
         fc:38:17:e0:28:fd:61:dd:40:15:b1:32:bb:cc:80:5d:73:ec:
         3a:e3:2c:90:16:f3:20:4d:b8:71:f7:46:dc:86:ac:cf:15:f4:
         a5:54:7c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkcwOfF4qkRCl3XuRPebwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi
MTZmNTgwHhcNMjQwNTE3MjIwMDA3WhcNMjQwNTE4MjIwMDA3WjAzMTEwLwYDVQQD
EygxMDJkOGQzNDNjMDQxMzQxOTk1NjgwNTBhYzM4YmVkMGZlOTAwNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEURI5sHMDkeZnlztJPnm7/wboEz
SFp4TKH1R2Ugypv36nUe1Wz4br/UAxC9Efk9Jd1M3qWpDg7liBFFLcKEgDLMdcML
C7wb8hXH7Rgq90RjxQFmG4EFQT9u4JrvzYkRqVqZenVioi55q9iSjrRoyflNPS/D
3MkOX1xsAGv9joNvpZu5S3Itlxi6YiWvA5y5FWH7N/BVISXKMZTEdbFfKFd8Byww
XYO4UXs9ZvV88tF9lBZdA4Ffk96xjQuK77YLSRy0CHbMebrGsMARjfUB9nVgJzu4
+Mtq6wmuCzPfazbafVjx+WdWfNpYSc8XGiuoCoJjS86AIiKYdJduANxl2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAtjTQ8BBNBmVaAUKw4vtD+kAWFMB8GA1UdIwQY
MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrrxPimu
LaALTTYdakSqNhp12wXsDhCtIpw1jMEDe0nK9uiTdteDi00FfD8yuOLNjE47gsww
pP55l4i63WwKz3FMmAl/5ixHXtyK8bZFFwqKRXeg2pEuId7rKwdcMLKOB6NuTb4O
2Sp+0fIxbf27zHG/ss9C8Eb+g8PxWSzlmaXfo8VHrTBFsBt69ojoja8O1P+V4v3C
MB0j1XtkW5lBBVLXwnPAekn9wJe/Zf4OGxsNZiQ5qsIHHNgNFS2r3xIrR+sxBM2h
5STYVU9x8BYgsiGQKWqv61ia/DgX4Cj9Yd1AFbEyu8yAXXPsOuMskBbzIE24cfdG
3IaszxX0pVR8/g==
-----END CERTIFICATE-----
Generated at Fri May 17 22:58:48 2024 by rpki-client on console-fra.rpki-client.org