Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File:                     Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier:          2tD9Roh5JdyKoVOWszlWhlfKuwM1oPqUi+dVvmPnDaA=
Subject key identifier:   E3:10:D9:61:07:93:F3:1D:E8:2C:E4:D1:07:EA:28:20:F7:9D:02:B8
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer:       /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial:       018F56CA78A53260FB582FB96B70E3A2D6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number:          10BA
Signing time:             Wed 08 May 2024 06:01:00 +0000
Manifest this update:     Wed 08 May 2024 06:01:00 +0000
Manifest next update:     Thu 09 May 2024 06:01:00 +0000
Files and hashes:         1: 0iwEXWEtQYK7D_wbAhy_g6-umGQ.roa (hash: 3eUj/VWztPg//6wmOag0zXKR4J+cCUbs1/BtEytZdiQ=)
                          2: 5YR5HSWJecRq47NtC_Vf71ZRuRM.roa (hash: jrSx1MZNn7clX31lni/jOsDXl3gTl7+5V8tzmXD5qPE=)
                          3: 7kav7ynlT__54lgPeSQjuoj5MUs.roa (hash: b+2B3lVGn++CvNO41lq9DuB++/+YjIyJeGIWJ3rHVM0=)
                          4: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: u4AwggdPqpXkeOQI8tFvs5+gLNOeH5lHQAUGZ9GHUyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:56:ca:78:a5:32:60:fb:58:2f:b9:6b:70:e3:a2:d6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
        Validity
            Not Before: May  8 06:01:00 2024 GMT
            Not After : May  9 06:01:00 2024 GMT
        Subject: CN=e310d9610793f31de82ce4d107ea2820f79d02b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:fb:ec:55:ff:98:70:10:d3:3b:ef:2d:ec:
                    00:58:e0:53:30:51:28:8f:d1:ba:7e:7e:25:93:10:
                    44:48:53:c1:47:68:da:4d:62:c4:5d:84:32:a9:c9:
                    97:de:19:69:85:e8:d9:d3:5c:74:f2:98:f9:ab:46:
                    00:d1:ce:d9:70:c0:79:ed:8f:97:fc:79:13:34:87:
                    09:d3:63:0f:5e:52:d6:73:df:6d:92:c9:89:ae:d4:
                    e6:61:b0:56:dd:93:2b:3a:82:d6:a4:09:59:ed:1d:
                    62:f0:a0:ba:95:f8:61:45:e7:dd:fc:9f:33:6a:44:
                    37:46:93:01:5f:71:93:e7:07:74:a0:11:fe:7f:d6:
                    70:84:d5:f2:19:92:23:0e:35:52:ac:ff:d7:ad:02:
                    66:b0:86:6f:56:dc:93:d8:ce:6a:ce:77:61:db:cf:
                    96:1f:00:df:02:e8:05:5b:0c:87:1e:e1:94:fa:e7:
                    f6:a7:dc:8a:5a:29:f9:72:89:ee:9f:5a:ae:38:99:
                    8d:1f:ed:0e:61:6e:4c:3c:bf:58:a5:40:03:ce:78:
                    6d:06:c4:fc:8b:12:6d:4e:36:de:aa:14:92:a1:0b:
                    79:2d:ee:23:20:a8:d0:56:ab:00:a6:50:fc:c6:d6:
                    6b:96:e1:18:a4:af:45:6e:50:f6:59:c0:64:b5:d6:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:10:D9:61:07:93:F3:1D:E8:2C:E4:D1:07:EA:28:20:F7:9D:02:B8
            X509v3 Authority Key Identifier:
                keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:22:ee:b1:4e:fb:85:c5:f9:08:1c:71:15:50:73:90:bd:3e:
         cf:2c:48:54:e1:3e:70:0b:07:a3:f6:fc:f2:93:a8:d1:ef:5a:
         b8:bf:07:10:f3:66:93:c4:86:6e:00:c8:dc:2d:7e:90:5b:f9:
         45:7d:d6:58:24:a6:7c:12:a9:6e:89:79:f8:12:02:aa:82:bd:
         7c:96:72:a9:50:57:1d:82:9a:81:f5:c9:e4:18:ce:89:01:40:
         68:46:f2:84:64:c7:dd:9e:83:96:84:61:c6:df:ee:1c:51:88:
         dd:28:2e:4c:4d:a7:ee:2e:d7:1e:a3:a8:e5:d0:2e:0f:74:ce:
         84:0a:a2:06:93:41:b4:3a:9e:3a:ec:ba:56:d3:20:68:a2:b3:
         37:10:d4:55:73:81:d8:b0:35:17:0e:9b:cd:1a:cd:4d:a5:de:
         fb:6f:34:19:2a:9f:c8:ba:bc:d7:62:2a:e1:15:9d:9d:d9:26:
         8a:f3:14:4c:32:84:e6:28:57:34:b5:f9:16:9d:87:23:2f:0a:
         40:ba:31:94:17:bb:69:3c:ba:94:37:61:38:47:38:e3:27:ac:
         03:32:38:f0:73:3f:a8:e1:3b:09:81:c8:af:df:7f:05:e9:8a:
         61:4e:ac:d9:b4:64:8b:b0:cc:de:d5:f9:53:34:ef:72:fc:27:
         2f:bf:d1:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9WynilMmD7WC+5a3DjotbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy
YTYzZjgwHhcNMjQwNTA4MDYwMTAwWhcNMjQwNTA5MDYwMTAwWjAzMTEwLwYDVQQD
EyhlMzEwZDk2MTA3OTNmMzFkZTgyY2U0ZDEwN2VhMjgyMGY3OWQwMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDn77FX/mHAQ0zvvLewAWOBTMFEo
j9G6fn4lkxBESFPBR2jaTWLEXYQyqcmX3hlphejZ01x08pj5q0YA0c7ZcMB57Y+X
/HkTNIcJ02MPXlLWc99tksmJrtTmYbBW3ZMrOoLWpAlZ7R1i8KC6lfhhRefd/J8z
akQ3RpMBX3GT5wd0oBH+f9ZwhNXyGZIjDjVSrP/XrQJmsIZvVtyT2M5qzndh28+W
HwDfAugFWwyHHuGU+uf2p9yKWin5conun1quOJmNH+0OYW5MPL9YpUADznhtBsT8
ixJtTjbeqhSSoQt5Le4jIKjQVqsAplD8xtZrluEYpK9FblD2WcBktdba6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMQ2WEHk/Md6Czk0QfqKCD3nQK4MB8GA1UdIwQY
MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct
MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0
LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyLusU77
hcX5CBxxFVBzkL0+zyxIVOE+cAsHo/b88pOo0e9auL8HEPNmk8SGbgDI3C1+kFv5
RX3WWCSmfBKpbol5+BICqoK9fJZyqVBXHYKagfXJ5BjOiQFAaEbyhGTH3Z6DloRh
xt/uHFGI3SguTE2n7i7XHqOo5dAuD3TOhAqiBpNBtDqeOuy6VtMgaKKzNxDUVXOB
2LA1Fw6bzRrNTaXe+280GSqfyLq812Iq4RWdndkmivMUTDKE5ihXNLX5Fp2HIy8K
QLoxlBe7aTy6lDdhOEc44yesAzI48HM/qOE7CYHIr99/BemKYU6s2bRki7DM3tX5
UzTvcvwnL7/RIQ==
-----END CERTIFICATE-----
Generated at Wed May 8 16:26:04 2024 by rpki-client on console-ams.rpki-client.org