Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
File:                     c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft (raw, json)
Hash identifier:          l2LKv+3IB7CeTHEAqIGgBBIdRTodsawF2PrVu0Xm9KI=
Subject key identifier:   6A:69:D5:FF:D6:90:88:48:22:9C:E4:7A:93:7F:0F:B8:1C:63:84:DC
Authority key identifier: 73:C1:59:69:40:47:89:C8:15:22:5C:37:46:3A:A7:E1:DB:3F:2E:45
Certificate issuer:       /CN=73c15969404789c815225c37463aa7e1db3f2e45
Certificate serial:       018F87ED35348730D89C2D643BDC27DE3B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
Manifest number:          0158
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: c8FZaUBHicgVIlw3Rjqn4ds_LkU.crl (hash: GnjiWvY6eyUaOZcMXP+l3LCQ1qElXqwz8UjOTqnZZFg=)
                          2: pwXRtHONVqgIkOU9pk3Id4btOpI.roa (hash: tVHD1zQhr9W4iK7a8TmbY1MeoQRVmQr3nz2vN6gNVqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:35:34:87:30:d8:9c:2d:64:3b:dc:27:de:3b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c15969404789c815225c37463aa7e1db3f2e45
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=6a69d5ffd6908848229ce47a937f0fb81c6384dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:a4:93:82:2e:4a:1a:8d:29:04:c2:a3:22:
                    4f:24:0e:5d:7b:fe:80:9e:b5:f2:85:e5:fe:ae:44:
                    28:87:e4:c1:e5:3b:80:3d:cd:e7:2d:f4:26:c8:43:
                    27:56:6a:11:dd:c9:55:2d:6b:70:6f:8d:44:30:e3:
                    db:d0:ef:0b:b1:97:27:2a:1b:41:db:e5:de:d0:c0:
                    2a:65:61:08:63:8d:36:a9:54:e7:79:b9:78:a1:b9:
                    8a:a3:7c:b8:9e:11:60:4b:d0:77:cc:0f:a6:26:d8:
                    f9:78:fa:e4:c0:c3:45:70:40:20:4f:92:19:d0:4a:
                    a6:4c:da:6a:2e:a4:db:2f:ec:c5:7e:26:fa:70:27:
                    c9:a3:ff:01:52:72:7c:48:c8:cf:8c:b9:f2:af:b1:
                    87:e7:f0:29:bf:f8:14:fd:7f:07:96:30:3d:64:c7:
                    a5:0d:9e:ee:26:bb:94:70:20:3e:f6:d2:16:79:9a:
                    cc:20:6b:e8:fc:35:52:74:bb:e6:3b:0c:1d:9d:90:
                    c7:5e:9d:00:92:b2:05:43:d4:3a:36:7f:8c:b6:2d:
                    54:7d:8e:b8:0b:58:49:b2:c5:ff:cd:59:33:ad:0c:
                    24:a6:0d:27:a3:34:07:d4:b0:f9:9c:e6:46:fb:23:
                    8e:df:4e:09:14:e9:cf:2c:88:db:b8:7d:42:a5:2f:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:D5:FF:D6:90:88:48:22:9C:E4:7A:93:7F:0F:B8:1C:63:84:DC
            X509v3 Authority Key Identifier:
                keyid:73:C1:59:69:40:47:89:C8:15:22:5C:37:46:3A:A7:E1:DB:3F:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:50:6b:be:0e:fa:5a:ab:42:1c:0e:c7:21:1f:a1:54:fa:41:
         87:63:c0:33:4f:d6:56:93:2d:d5:36:87:49:b3:bb:d0:7a:db:
         c4:8d:17:3c:80:6e:75:4c:89:4f:68:b5:af:3e:5c:2b:cb:76:
         48:ff:64:6c:f7:75:09:42:5a:79:81:97:91:29:dc:18:41:69:
         91:fa:86:00:c2:8b:af:be:dd:84:31:9c:28:96:50:16:e6:36:
         e8:96:b3:90:ec:25:df:a4:9a:d2:5b:79:58:e0:e5:aa:8f:0b:
         4b:30:63:4b:8a:a7:be:d2:6b:ef:67:0e:a4:8c:5a:eb:1b:63:
         e9:c7:e2:c7:39:23:80:e8:8e:cf:5a:ae:1c:24:2b:5c:8f:c5:
         2e:92:e7:45:03:94:37:46:8b:eb:df:6b:85:4d:22:a6:61:58:
         10:ca:3a:5e:5f:1f:c3:86:dd:a9:98:d0:f4:76:a0:db:61:cc:
         b4:45:6a:f1:b2:df:5b:e3:a2:ce:59:d8:5e:be:51:bf:b3:b6:
         1b:a0:ff:13:62:0a:f1:52:7d:1f:e7:30:c8:c6:06:3b:d3:ec:
         7e:1f:d2:ee:ee:bf:44:09:4d:ad:9b:51:92:69:86:b1:37:a2:
         de:72:71:8a:10:15:89:7d:a7:30:2a:65:fd:dd:86:7e:a0:2a:
         e7:23:b5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7TU0hzDYnC1kO9wn3jssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzE1OTY5NDA0Nzg5YzgxNTIyNWMzNzQ2M2FhN2UxZGIz
ZjJlNDUwHhcNMjQwNTE3MTkwMDIwWhcNMjQwNTE4MTkwMDIwWjAzMTEwLwYDVQQD
Eyg2YTY5ZDVmZmQ2OTA4ODQ4MjI5Y2U0N2E5MzdmMGZiODFjNjM4NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d+kk4IuShqNKQTCoyJPJA5de/6A
nrXyheX+rkQoh+TB5TuAPc3nLfQmyEMnVmoR3clVLWtwb41EMOPb0O8LsZcnKhtB
2+Xe0MAqZWEIY402qVTnebl4obmKo3y4nhFgS9B3zA+mJtj5ePrkwMNFcEAgT5IZ
0EqmTNpqLqTbL+zFfib6cCfJo/8BUnJ8SMjPjLnyr7GH5/Apv/gU/X8HljA9ZMel
DZ7uJruUcCA+9tIWeZrMIGvo/DVSdLvmOwwdnZDHXp0AkrIFQ9Q6Nn+Mti1UfY64
C1hJssX/zVkzrQwkpg0nozQH1LD5nOZG+yOO304JFOnPLIjbuH1CpS8YEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpp1f/WkIhIIpzkepN/D7gcY4TcMB8GA1UdIwQY
MBaAFHPBWWlAR4nIFSJcN0Y6p+HbPy5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhGWmFVQkhpY2dWSWx3M1JqcW40ZHNfTGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85NzQ2NzItMzJiNC00MzhmLWFiNGEt
NDQ1NGMyZmNkYjY4LzEvYzhGWmFVQkhpY2dWSWx3M1JqcW40ZHNfTGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85NzQ2NzItMzJiNC00MzhmLWFiNGEtNDQ1NGMyZmNkYjY4
LzEvYzhGWmFVQkhpY2dWSWx3M1JqcW40ZHNfTGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFBrvg76
WqtCHA7HIR+hVPpBh2PAM0/WVpMt1TaHSbO70HrbxI0XPIBudUyJT2i1rz5cK8t2
SP9kbPd1CUJaeYGXkSncGEFpkfqGAMKLr77dhDGcKJZQFuY26JazkOwl36Sa0lt5
WODlqo8LSzBjS4qnvtJr72cOpIxa6xtj6cfixzkjgOiOz1quHCQrXI/FLpLnRQOU
N0aL699rhU0ipmFYEMo6Xl8fw4bdqZjQ9Hag22HMtEVq8bLfW+OizlnYXr5Rv7O2
G6D/E2IK8VJ9H+cwyMYGO9Psfh/S7u6/RAlNrZtRkmmGsTei3nJxihAViX2nMCpl
/d2GfqAq5yO1SQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:20:58 2024 by rpki-client on console-fra.rpki-client.org