Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File:                     tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier:          jYkPhrRdQxf/UfK1GVmgy6yIq4uXN1M1I+GF0Wz61+I=
Subject key identifier:   F8:49:A9:B2:7E:52:D2:53:DF:8E:86:F1:C7:DB:2C:5B:C1:8E:45:BC
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer:       /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial:       018F98055FC570549AABA2326AC63ECC3169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number:          08A7
Signing time:             Mon 20 May 2024 22:00:40 +0000
Manifest this update:     Mon 20 May 2024 22:00:40 +0000
Manifest next update:     Tue 21 May 2024 22:00:40 +0000
Files and hashes:         1: W1cZdKR50C4EnLFMpDKZpn0htWY.roa (hash: evfEiQKOXHV9xIXcfYaEmg+fI9+lexJiFa3HzNH0/jM=)
                          2: Zw0--NFR50J5vX8KY301aowntNg.roa (hash: lzsEJLdo1oDYdGN7Qyl20Sny6rou+TbxBKljABj+T44=)
                          3: bGn5E8rrqpY5ta5t3VZl6OMr47c.roa (hash: 2hdJtnM7XRr9Z4WkoeSl5VKEHZugkD3BkPLuArviLv4=)
                          4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: Xn2i2YEbf1sAp3XhBAWDWGoSG7zJC4JiGLkGouuXtJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:5f:c5:70:54:9a:ab:a2:32:6a:c6:3e:cc:31:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
        Validity
            Not Before: May 20 22:00:40 2024 GMT
            Not After : May 21 22:00:40 2024 GMT
        Subject: CN=f849a9b27e52d253df8e86f1c7db2c5bc18e45bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:d8:05:42:fe:3a:c7:9f:b4:5a:8d:79:0c:
                    42:1e:98:e3:0d:dd:a7:36:22:89:1b:5f:f5:14:f9:
                    68:cb:21:1b:c4:28:83:f2:77:83:85:a3:13:69:43:
                    80:0c:18:64:72:e4:44:49:94:82:89:e5:97:11:fa:
                    62:a8:50:da:fe:c1:ed:27:13:6f:12:e9:cb:ae:8e:
                    2e:82:63:f4:21:aa:46:41:cd:4f:71:4b:25:c0:9d:
                    dc:db:d0:2a:0c:8f:69:7d:05:f8:ce:04:8a:0f:6e:
                    e8:50:0b:72:3c:36:1b:12:76:7d:23:9c:88:a8:ba:
                    7f:27:c6:76:9d:7b:bf:a8:0d:67:9a:38:ef:fa:1d:
                    ef:8e:6a:ce:ab:14:58:08:ff:24:33:71:cc:99:2c:
                    05:df:ea:47:35:a5:eb:c0:21:8c:62:f9:86:ad:18:
                    39:de:e5:6b:c2:35:30:5e:21:1d:fc:41:ca:28:c0:
                    51:e6:cf:5c:11:50:9a:17:92:d4:d3:87:98:07:bd:
                    4e:a8:c1:09:af:11:ba:e4:21:c0:91:1c:60:40:dd:
                    c4:dd:2c:1e:11:3a:0f:74:5e:1e:cd:ad:4f:4d:bb:
                    8b:e4:e6:68:dd:8c:cb:61:e2:79:92:ff:d7:3d:18:
                    93:35:5f:b2:18:2c:c9:f6:d4:9f:de:ca:a0:b6:78:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:49:A9:B2:7E:52:D2:53:DF:8E:86:F1:C7:DB:2C:5B:C1:8E:45:BC
            X509v3 Authority Key Identifier:
                keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:32:4f:ba:3b:46:67:da:dc:a7:71:4e:f6:49:09:56:e9:92:
         a8:62:aa:3b:cd:e0:01:c4:9e:f7:a8:8d:7e:80:a7:ad:f6:13:
         93:13:62:66:ae:ee:68:53:f5:01:82:75:e5:3e:28:d6:f1:10:
         92:6b:fb:6b:67:a3:f4:07:36:12:a4:26:aa:0a:0f:6e:b1:c9:
         09:3c:f9:43:7c:d5:ce:b8:98:5d:c9:71:e3:6b:56:f5:55:20:
         b9:13:5c:92:bf:71:ae:b8:77:13:ee:76:9f:80:aa:31:fb:2a:
         8c:40:16:6c:26:90:81:84:87:f7:ed:85:2a:34:fc:9a:bb:94:
         39:66:08:06:64:73:6d:41:9e:9a:1e:c8:2f:6f:7b:78:e5:48:
         c3:df:40:f8:bb:55:ca:58:ea:ac:50:0b:19:bf:28:4f:d6:95:
         eb:6c:b9:4f:18:ce:db:7a:d1:78:26:35:f0:b6:91:05:fe:27:
         a7:bb:d6:79:5f:b8:e0:c1:62:ee:87:fe:aa:57:6e:d8:88:d5:
         ae:d7:be:11:5d:f1:32:ca:aa:81:c7:09:e9:93:0a:39:94:00:
         0a:36:67:8f:e4:f6:73:0f:43:d1:d5:9d:78:e9:58:05:d5:91:
         67:ec:04:2f:54:6b:24:c4:97:83:ed:e2:fa:b3:f0:0f:e4:70:
         7c:3c:b9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+YBV/FcFSaq6IyasY+zDFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx
ODI1ZWYwHhcNMjQwNTIwMjIwMDQwWhcNMjQwNTIxMjIwMDQwWjAzMTEwLwYDVQQD
EyhmODQ5YTliMjdlNTJkMjUzZGY4ZTg2ZjFjN2RiMmM1YmMxOGU0NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPfYBUL+OseftFqNeQxCHpjjDd2n
NiKJG1/1FPloyyEbxCiD8neDhaMTaUOADBhkcuRESZSCieWXEfpiqFDa/sHtJxNv
EunLro4ugmP0IapGQc1PcUslwJ3c29AqDI9pfQX4zgSKD27oUAtyPDYbEnZ9I5yI
qLp/J8Z2nXu/qA1nmjjv+h3vjmrOqxRYCP8kM3HMmSwF3+pHNaXrwCGMYvmGrRg5
3uVrwjUwXiEd/EHKKMBR5s9cEVCaF5LU04eYB71OqMEJrxG65CHAkRxgQN3E3Swe
EToPdF4eza1PTbuL5OZo3YzLYeJ5kv/XPRiTNV+yGCzJ9tSf3sqgtnir5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhJqbJ+UtJT346G8cfbLFvBjkW8MB8GA1UdIwQY
MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt
NzU0YjYwYzViNTY4LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4
LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjJPujtG
Z9rcp3FO9kkJVumSqGKqO83gAcSe96iNfoCnrfYTkxNiZq7uaFP1AYJ15T4o1vEQ
kmv7a2ej9Ac2EqQmqgoPbrHJCTz5Q3zVzriYXclx42tW9VUguRNckr9xrrh3E+52
n4CqMfsqjEAWbCaQgYSH9+2FKjT8mruUOWYIBmRzbUGemh7IL297eOVIw99A+LtV
yljqrFALGb8oT9aV62y5TxjO23rReCY18LaRBf4np7vWeV+44MFi7of+qldu2IjV
rte+EV3xMsqqgccJ6ZMKOZQACjZnj+T2cw9D0dWdeOlYBdWRZ+wEL1RrJMSXg+3i
+rPwD+RwfDy56g==
-----END CERTIFICATE-----