Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File:                     Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier:          kYUOM0rZQW1r24GUU1J9vOOubgiUl27JF/bSPjzpBWg=
Subject key identifier:   86:92:85:B1:A2:BB:63:D3:B0:CE:18:63:61:09:95:46:30:90:42:9A
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer:       /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial:       018F9CF4B3EDEE47C5BE4C9F216158BA33CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number:          025F
Signing time:             Tue 21 May 2024 21:00:33 +0000
Manifest this update:     Tue 21 May 2024 21:00:33 +0000
Manifest next update:     Wed 22 May 2024 21:00:33 +0000
Files and hashes:         1: 45Lq6bVmkhAwJ-5HoglaFlTjC7I.roa (hash: a0BKFhyNQy3t1VOY9sei7ff7oLoFQMoAuoPNAC5CgAM=)
                          2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: m/c6hVYTFcc2sN5UouUCwrphcNVUJtQ6FaYY7LyetHg=)
                          3: vo8AmKfBKlaLoGIqYfKJ-vXqH3k.roa (hash: 5ANCrVebzfXFUslEIOLD2VJPPIwtlsJI9kHeFQag/88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:f4:b3:ed:ee:47:c5:be:4c:9f:21:61:58:ba:33:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
        Validity
            Not Before: May 21 21:00:33 2024 GMT
            Not After : May 22 21:00:33 2024 GMT
        Subject: CN=869285b1a2bb63d3b0ce1863610995463090429a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:53:1c:44:88:3d:74:73:09:bf:c7:aa:76:
                    3d:25:c2:58:53:0a:fa:e2:a0:78:8b:64:4e:1e:bd:
                    85:24:d7:c2:87:06:fe:e9:1f:ac:1b:ef:cc:af:c0:
                    03:78:2f:d7:46:47:bd:e8:6f:ad:8c:5b:0e:21:23:
                    76:fd:39:4b:42:1d:02:ef:87:b8:4e:44:11:a8:26:
                    4b:5a:b0:2d:6a:a3:ac:2e:5a:8f:91:96:79:a5:78:
                    7f:3f:d7:fd:56:e5:c7:e0:d2:87:ba:54:d2:59:04:
                    00:73:54:c4:0a:1e:a4:88:e1:89:95:d2:46:21:e0:
                    75:ea:e4:5d:c4:4e:1e:79:87:04:66:40:c5:c9:17:
                    5b:15:71:e1:82:77:d8:b1:4f:80:a7:46:17:b3:26:
                    a6:96:4e:70:39:fd:f5:95:44:64:aa:07:8d:98:86:
                    51:97:f5:63:44:ca:4d:01:44:fc:9e:4a:b4:65:c0:
                    71:70:f8:c9:70:9c:d9:36:78:37:f7:c7:c6:df:57:
                    ae:f7:66:73:79:0f:1f:2a:d1:55:75:f1:6f:6b:1c:
                    fd:67:d7:92:f4:3b:f7:48:d9:b0:f5:50:77:3b:65:
                    f9:c5:6d:a6:59:b3:7e:22:9e:ef:3c:05:07:f1:2b:
                    7e:52:86:78:b1:58:5a:05:2f:e7:66:1a:11:e3:42:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:92:85:B1:A2:BB:63:D3:B0:CE:18:63:61:09:95:46:30:90:42:9A
            X509v3 Authority Key Identifier:
                keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cb:d7:85:a4:c3:d8:21:e3:00:6a:69:a5:86:1c:96:b1:a9:
         83:83:5e:38:d3:28:a7:dd:cb:83:67:a5:a3:65:d6:ce:cc:9c:
         35:f1:af:fc:94:c0:f5:33:d0:51:8c:23:1e:6c:d9:a7:ce:46:
         a1:c7:b2:1d:19:fd:36:44:36:28:e8:43:ba:90:e9:30:97:e6:
         4a:0b:e8:dc:46:e0:a8:b1:58:89:d4:f0:d9:18:e6:d9:f2:1f:
         b1:b8:c7:c5:9b:dd:dc:ca:86:1f:7c:1c:53:2c:0f:02:fa:8c:
         32:a1:05:8f:e5:90:ad:22:1c:7f:9e:1e:f0:9f:ad:62:88:51:
         4d:f3:41:16:98:d8:f8:d8:05:c9:ad:f8:54:6a:17:f3:f5:c9:
         e9:fe:81:01:cf:a5:8e:74:16:95:04:b9:79:d9:20:26:ea:40:
         3b:11:ac:90:8e:39:b4:66:2f:9e:a3:c0:55:f1:54:a6:0d:02:
         c6:52:88:f9:e5:25:30:55:7f:fb:45:9a:80:42:a2:c0:8b:a4:
         6e:d2:9d:06:c6:c0:30:77:5b:e7:67:4c:8e:aa:87:9e:bd:10:
         79:0c:54:19:ec:ff:f7:57:38:ce:cc:1f:c1:9d:32:72:4a:27:
         77:57:28:ea:be:23:0b:74:97:40:f2:e4:9f:91:f6:1f:b2:be:
         2e:6a:d1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+c9LPt7kfFvkyfIWFYujPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmU0ODMyOWM4YmU4ZWYyMDllOTk1OGRhNjZhYjAyNDAx
NDVlMTkwHhcNMjQwNTIxMjEwMDMzWhcNMjQwNTIyMjEwMDMzWjAzMTEwLwYDVQQD
Eyg4NjkyODViMWEyYmI2M2QzYjBjZTE4NjM2MTA5OTU0NjMwOTA0MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto1THESIPXRzCb/HqnY9JcJYUwr6
4qB4i2ROHr2FJNfChwb+6R+sG+/Mr8ADeC/XRke96G+tjFsOISN2/TlLQh0C74e4
TkQRqCZLWrAtaqOsLlqPkZZ5pXh/P9f9VuXH4NKHulTSWQQAc1TECh6kiOGJldJG
IeB16uRdxE4eeYcEZkDFyRdbFXHhgnfYsU+Ap0YXsyamlk5wOf31lURkqgeNmIZR
l/VjRMpNAUT8nkq0ZcBxcPjJcJzZNng398fG31eu92ZzeQ8fKtFVdfFvaxz9Z9eS
9Dv3SNmw9VB3O2X5xW2mWbN+Ip7vPAUH8St+UoZ4sVhaBS/nZhoR40IEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaShbGiu2PTsM4YY2EJlUYwkEKaMB8GA1UdIwQY
MBaAFBYuSDKci+jvIJ6ZWNpmqwJAFF4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2Ut
NjlmMzNmZTFiNTMwLzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2UtNjlmMzNmZTFiNTMw
LzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMvXhaTD
2CHjAGpppYYclrGpg4NeONMop93Lg2elo2XWzsycNfGv/JTA9TPQUYwjHmzZp85G
oceyHRn9NkQ2KOhDupDpMJfmSgvo3EbgqLFYidTw2Rjm2fIfsbjHxZvd3MqGH3wc
UywPAvqMMqEFj+WQrSIcf54e8J+tYohRTfNBFpjY+NgFya34VGoX8/XJ6f6BAc+l
jnQWlQS5edkgJupAOxGskI45tGYvnqPAVfFUpg0CxlKI+eUlMFV/+0WagEKiwIuk
btKdBsbAMHdb52dMjqqHnr0QeQxUGez/91c4zswfwZ0yckond1co6r4jC3SXQPLk
n5H2H7K+LmrRDQ==
-----END CERTIFICATE-----
Generated at Tue May 21 21:55:59 2024 by rpki-client on console-fra.rpki-client.org