Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File:                     0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier:          WMDJPpk/pJT4dP84bBHs0iwhrLGdI+5qHX3XiZBRuDw=
Subject key identifier:   1B:91:15:64:81:11:8D:E3:E3:2A:0F:05:98:DC:D9:82:1D:0D:72:18
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer:       /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial:       018F44FB7EEBB41F72C66A80BB7C7C4871B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 19:01:23 +0000
Manifest this update:     Sat 04 May 2024 19:01:23 +0000
Manifest next update:     Sun 05 May 2024 19:01:23 +0000
Files and hashes:         1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: JomM/Ped8DCWf5IQyu7dyhxYPYV+x1FAYlcSxbNzXNw=)
                          2: j85bv2xY0RdudiXwAD63IPhEVIo.roa (hash: DJl+6q12Xnm0qOgmJkPa55MrJcUNiRRi6v9ReUBM19Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:7e:eb:b4:1f:72:c6:6a:80:bb:7c:7c:48:71:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
        Validity
            Not Before: May  4 19:01:23 2024 GMT
            Not After : May  5 19:01:23 2024 GMT
        Subject: CN=1b91156481118de3e32a0f0598dcd9821d0d7218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:5f:e1:27:ef:21:0f:1e:86:6c:38:47:8d:
                    23:3d:71:5a:6f:df:1b:02:aa:24:93:ce:67:8e:9d:
                    df:8d:a5:ca:b3:cc:78:bd:06:0f:7a:76:89:4d:bd:
                    4b:67:b8:44:89:a7:5e:44:c0:c9:7c:ce:2d:ec:d8:
                    b3:3c:64:c2:93:0d:52:b8:6c:9d:18:52:43:57:61:
                    3a:b7:34:dc:b4:08:dc:c8:34:31:04:ce:67:97:45:
                    93:97:60:be:3a:bc:f6:24:1b:5c:cb:87:56:6b:e4:
                    59:3e:76:55:18:e0:33:8c:c5:6e:9a:74:bb:9b:1a:
                    a8:2e:ef:40:e5:c8:c8:b2:ae:b3:8b:d8:d2:0b:ef:
                    ff:4d:5e:6a:48:8d:7c:ef:f4:14:60:07:e4:89:38:
                    da:77:4d:a4:6b:c8:01:44:2b:96:4a:7e:5b:4c:21:
                    4f:f9:cf:64:91:1c:99:51:9e:aa:e4:bd:bd:3d:e8:
                    b3:07:1b:d1:50:14:9b:b5:d9:60:21:32:5a:14:50:
                    87:a4:09:c6:79:42:a0:09:e1:52:c4:f8:ff:41:98:
                    5f:47:a2:23:a5:73:91:4d:4f:dd:07:32:68:60:5c:
                    f6:f6:5a:db:87:37:9c:5f:a6:6b:59:71:b4:44:80:
                    a5:c2:09:44:7b:02:03:7b:1f:c2:fc:e8:e6:d6:e4:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:91:15:64:81:11:8D:E3:E3:2A:0F:05:98:DC:D9:82:1D:0D:72:18
            X509v3 Authority Key Identifier:
                keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:06:61:0c:08:b2:a4:29:d8:07:f7:0d:62:cd:d8:2f:81:ee:
         2e:5d:8f:42:35:37:2c:22:17:c2:8d:a1:c0:a3:2e:4d:e5:26:
         55:9c:a8:d5:f6:19:17:0e:7c:7d:75:f3:68:ef:c2:8f:92:bb:
         71:04:3b:55:c4:52:86:17:6f:df:e9:9d:a9:d0:67:6e:29:f0:
         7c:e1:0a:6c:33:fc:b6:3b:78:8c:80:a3:8f:0f:99:bc:b8:42:
         d1:1a:e7:ce:89:55:18:59:55:89:76:41:66:97:1e:af:12:7e:
         75:a6:58:b2:e2:5a:2d:82:06:6f:42:89:d4:b5:8c:57:5a:c5:
         ac:88:58:a3:d3:67:07:66:7d:70:49:6f:49:08:f4:75:eb:5c:
         81:47:60:ad:ac:ec:98:a8:3e:9f:f8:7d:08:21:a9:cf:e4:b9:
         f1:8e:a1:46:4b:67:24:57:fb:57:04:b5:4d:51:f3:70:2a:80:
         cc:37:5d:73:b6:ab:ea:39:3d:e9:20:2a:17:40:24:01:09:e6:
         ce:4d:22:0a:29:a4:0b:dc:81:77:09:84:04:ea:13:df:6d:6b:
         09:14:26:66:c0:70:07:59:a4:08:6f:04:10:84:2a:d6:d3:9f:
         c6:4c:12:ee:9a:bd:42:83:db:72:be:a5:76:e1:de:c3:f5:e0:
         e7:03:ea:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9E+37rtB9yxmqAu3x8SHG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4
ZGUxMGYwHhcNMjQwNTA0MTkwMTIzWhcNMjQwNTA1MTkwMTIzWjAzMTEwLwYDVQQD
EygxYjkxMTU2NDgxMTE4ZGUzZTMyYTBmMDU5OGRjZDk4MjFkMGQ3MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZZf4SfvIQ8ehmw4R40jPXFab98b
Aqokk85njp3fjaXKs8x4vQYPenaJTb1LZ7hEiadeRMDJfM4t7NizPGTCkw1SuGyd
GFJDV2E6tzTctAjcyDQxBM5nl0WTl2C+Orz2JBtcy4dWa+RZPnZVGOAzjMVumnS7
mxqoLu9A5cjIsq6zi9jSC+//TV5qSI187/QUYAfkiTjad02ka8gBRCuWSn5bTCFP
+c9kkRyZUZ6q5L29PeizBxvRUBSbtdlgITJaFFCHpAnGeUKgCeFSxPj/QZhfR6Ij
pXORTU/dBzJoYFz29lrbhzecX6ZrWXG0RIClwglEewIDex/C/Ojm1uSBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuRFWSBEY3j4yoPBZjc2YIdDXIYMB8GA1UdIwQY
MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct
ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw
LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwZhDAiy
pCnYB/cNYs3YL4HuLl2PQjU3LCIXwo2hwKMuTeUmVZyo1fYZFw58fXXzaO/Cj5K7
cQQ7VcRShhdv3+mdqdBnbinwfOEKbDP8tjt4jICjjw+ZvLhC0RrnzolVGFlViXZB
ZpcerxJ+daZYsuJaLYIGb0KJ1LWMV1rFrIhYo9NnB2Z9cElvSQj0detcgUdgrazs
mKg+n/h9CCGpz+S58Y6hRktnJFf7VwS1TVHzcCqAzDddc7ar6jk96SAqF0AkAQnm
zk0iCimkC9yBdwmEBOoT321rCRQmZsBwB1mkCG8EEIQq1tOfxkwS7pq9QoPbcr6l
duHew/Xg5wPqiw==
-----END CERTIFICATE-----
Generated at Sat May 4 23:07:49 2024 by rpki-client on console-fra.rpki-client.org