Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File:                     dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier:          H/PXZLK9vwyzJkQ1+9/v1jesqiIgZS23VIiHtHVP2q0=
Subject key identifier:   A1:17:36:6F:0F:73:8C:DC:81:DA:C8:E5:51:33:69:4F:6A:4D:54:A0
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer:       /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial:       018F931581B36D39AFB152004F02A94BF544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number:          1116
Signing time:             Sun 19 May 2024 23:00:11 +0000
Manifest this update:     Sun 19 May 2024 23:00:11 +0000
Manifest next update:     Mon 20 May 2024 23:00:11 +0000
Files and hashes:         1: 6J60-z9ylaZOYtMzmcJl9a69KoA.roa (hash: mE9GFirVWsaQpVReBrRzKVdbuNON/HBhtT2ETTM95ko=)
                          2: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: nqjmwKr2/JCucqmeCC3IqShEwzKKD0j2JNSFKU2X9pw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:15:81:b3:6d:39:af:b1:52:00:4f:02:a9:4b:f5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
        Validity
            Not Before: May 19 23:00:11 2024 GMT
            Not After : May 20 23:00:11 2024 GMT
        Subject: CN=a117366f0f738cdc81dac8e55133694f6a4d54a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:d7:8c:a3:4f:c2:88:6c:1c:53:6c:7d:5d:
                    a7:9e:92:35:9e:ae:21:a9:5e:b5:da:75:36:0b:ef:
                    69:7b:be:2d:48:32:ed:c2:8f:01:70:ed:f0:f4:10:
                    fd:db:35:71:a6:70:f1:1b:8d:a7:87:ea:38:9e:06:
                    03:58:30:a6:ae:06:28:f7:6f:2c:64:1f:df:f7:a1:
                    3d:c7:a6:05:c0:18:7d:0e:19:b5:74:35:31:70:c2:
                    4c:66:a8:f3:79:71:a1:01:61:24:9c:eb:98:51:cc:
                    52:23:e3:42:fe:72:25:1d:ce:37:e3:bd:d1:20:b8:
                    4b:0e:15:6f:2d:c7:a8:48:6b:e1:b4:4c:d2:6f:fa:
                    4d:7e:34:ae:79:8f:a7:4f:69:5b:2b:c5:81:bd:a2:
                    06:d6:57:92:ad:ed:d1:a9:2d:ab:90:02:ac:e4:bd:
                    dd:3c:1c:21:f1:fe:19:e2:d9:92:ed:8b:47:00:ef:
                    c8:99:f7:03:ca:2a:dd:78:b7:38:61:a1:ca:2e:72:
                    9c:fe:05:88:76:da:77:89:09:b2:dc:b7:8c:29:46:
                    ca:4c:c0:f1:b3:5c:48:40:02:08:df:16:18:64:b0:
                    d7:e7:14:8a:19:bf:ee:40:8f:8e:f9:15:b7:f1:8d:
                    b8:3b:66:e3:3a:72:bf:e2:da:65:7c:ea:51:71:1a:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:36:6F:0F:73:8C:DC:81:DA:C8:E5:51:33:69:4F:6A:4D:54:A0
            X509v3 Authority Key Identifier:
                keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:80:97:b8:71:b8:4b:51:bf:f6:02:3b:a2:d4:90:1e:e1:
         d2:19:04:18:75:ca:5f:51:b6:41:d8:bd:9f:3b:8c:53:60:7c:
         8a:fa:ed:42:66:d0:7a:6a:e6:5d:8c:be:94:3d:21:bb:47:0e:
         b2:e7:5c:fe:3b:39:85:80:db:17:8b:e7:67:93:cb:1a:73:31:
         94:2d:12:91:17:6d:11:d7:5f:3b:7a:54:f9:29:73:67:c9:6b:
         ee:39:8b:71:7c:de:68:e9:4b:3d:02:90:55:85:a5:a3:2a:46:
         19:0a:a1:5d:59:81:1f:6c:cd:14:06:d5:85:3d:6d:77:f1:7d:
         4f:f2:b3:20:06:c4:04:ba:c2:92:6a:69:ae:c6:96:ae:3d:3e:
         df:bd:a4:b8:d3:cc:3f:cf:0d:4b:4f:0b:67:42:6d:37:56:c5:
         1a:31:a0:fa:16:a0:b9:88:24:a7:3d:bf:8f:ed:d9:77:dc:e3:
         a8:18:fd:03:2e:01:22:12:78:be:4b:c9:50:cc:5b:0d:aa:95:
         c2:0f:ff:0f:57:c5:93:41:57:c7:4a:c6:d9:43:2b:ef:a4:47:
         2a:b8:33:e5:98:a8:69:71:af:8f:5e:d0:a6:6a:b9:62:1d:a9:
         cf:e7:2e:7a:56:6f:fc:98:6c:6e:78:cc:4b:e2:bb:2e:d5:5b:
         1f:23:14:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+TFYGzbTmvsVIATwKpS/VEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDFlZTRjMWEyMjZmOWY2MjQyOWYzNTc1NmE3ODk4MGE1
YjQ1N2EwHhcNMjQwNTE5MjMwMDExWhcNMjQwNTIwMjMwMDExWjAzMTEwLwYDVQQD
EyhhMTE3MzY2ZjBmNzM4Y2RjODFkYWM4ZTU1MTMzNjk0ZjZhNGQ1NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+TXjKNPwohsHFNsfV2nnpI1nq4h
qV612nU2C+9pe74tSDLtwo8BcO3w9BD92zVxpnDxG42nh+o4ngYDWDCmrgYo928s
ZB/f96E9x6YFwBh9Dhm1dDUxcMJMZqjzeXGhAWEknOuYUcxSI+NC/nIlHc43473R
ILhLDhVvLceoSGvhtEzSb/pNfjSueY+nT2lbK8WBvaIG1leSre3RqS2rkAKs5L3d
PBwh8f4Z4tmS7YtHAO/ImfcDyirdeLc4YaHKLnKc/gWIdtp3iQmy3LeMKUbKTMDx
s1xIQAII3xYYZLDX5xSKGb/uQI+O+RW38Y24O2bjOnK/4tplfOpRcRrpsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEXNm8Pc4zcgdrI5VEzaU9qTVSgMB8GA1UdIwQY
MBaAFHcB7kwaIm+fYkKfNXVqeJgKW0V6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdIdVRCb2liNTlpUXA4MWRXcDRtQXBiUlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNzI5OTktMDk1Mi00NTc2LWIxMTgt
MjFlNzM5NTYzNjgzLzEvZHdIdVRCb2liNTlpUXA4MWRXcDRtQXBiUlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iNzI5OTktMDk1Mi00NTc2LWIxMTgtMjFlNzM5NTYzNjgz
LzEvZHdIdVRCb2liNTlpUXA4MWRXcDRtQXBiUlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2+Al7hx
uEtRv/YCO6LUkB7h0hkEGHXKX1G2Qdi9nzuMU2B8ivrtQmbQemrmXYy+lD0hu0cO
sudc/js5hYDbF4vnZ5PLGnMxlC0SkRdtEddfO3pU+SlzZ8lr7jmLcXzeaOlLPQKQ
VYWloypGGQqhXVmBH2zNFAbVhT1td/F9T/KzIAbEBLrCkmpprsaWrj0+372kuNPM
P88NS08LZ0JtN1bFGjGg+haguYgkpz2/j+3Zd9zjqBj9Ay4BIhJ4vkvJUMxbDaqV
wg//D1fFk0FXx0rG2UMr76RHKrgz5ZioaXGvj17Qpmq5Yh2pz+cuelZv/JhsbnjM
S+K7LtVbHyMUxw==
-----END CERTIFICATE-----
Generated at Sun May 19 23:43:23 2024 by rpki-client on console-fra.rpki-client.org