Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File:                     e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier:          qvMxI/Bn4sTWzRDVSXeyM/TtAxjwebm7G5v74JKz4Zg=
Subject key identifier:   F7:95:E6:5B:F1:8C:E1:EB:AC:FE:8C:14:50:7F:69:E0:0D:A0:56:7E
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer:       /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial:       018F87B65F63CFEE04DCD16B0D49F5B3ADA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number:          0168
Signing time:             Fri 17 May 2024 18:00:27 +0000
Manifest this update:     Fri 17 May 2024 18:00:27 +0000
Manifest next update:     Sat 18 May 2024 18:00:27 +0000
Files and hashes:         1: E-JHUc5H66LstcTKTXvSBqJ0OfU.roa (hash: oI3di4LCDMJmS4QX+QT1aUYpmhB69KkXbDDz/KtOkjw=)
                          2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: PrrtwKXp+BzmpVd/c+mMcsh50aAGnxJ9NB/0vECbwO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5f:63:cf:ee:04:dc:d1:6b:0d:49:f5:b3:ad:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
        Validity
            Not Before: May 17 18:00:27 2024 GMT
            Not After : May 18 18:00:27 2024 GMT
        Subject: CN=f795e65bf18ce1ebacfe8c14507f69e00da0567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:81:a4:c2:fa:5b:9b:f6:03:73:4f:b0:f8:
                    4d:45:dc:97:ec:e6:04:be:0c:67:ce:24:d0:dd:1e:
                    47:6f:9e:e9:ee:d8:d6:ec:34:ad:98:34:38:43:81:
                    30:12:bf:d8:8a:bb:25:53:fc:f9:1f:96:06:40:15:
                    0f:ae:80:d9:25:e5:02:f7:a3:7b:df:af:fc:87:e9:
                    9a:87:52:73:49:46:45:18:14:b4:58:d0:56:fd:d5:
                    38:16:22:b9:e1:e0:ee:10:2c:31:96:2e:36:80:4f:
                    da:ff:47:2c:e2:10:8d:66:e2:b7:74:5c:6f:7c:f6:
                    c5:3b:33:11:fc:65:2b:9e:10:c7:25:5e:f7:11:d0:
                    20:e6:52:d7:73:4b:a4:3e:21:cd:2d:c7:46:cb:14:
                    14:ba:f9:99:a4:5a:df:25:4f:45:d2:bc:d5:0e:6c:
                    7f:74:36:cb:0a:1d:15:da:2b:5f:e9:1e:28:63:57:
                    ff:e1:6d:3e:8d:f0:ff:12:6d:86:d0:fb:bc:d7:50:
                    9e:d0:3e:08:ae:7c:b2:17:5f:fe:06:f0:44:5b:db:
                    fa:09:fa:3b:5c:2d:8d:9d:b2:98:4a:a0:33:9b:bc:
                    a6:0d:7a:68:d0:c8:9a:6b:dc:b8:59:d3:0d:83:a8:
                    55:b1:14:b2:00:8e:f7:fd:af:17:e0:8d:d7:a3:df:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:95:E6:5B:F1:8C:E1:EB:AC:FE:8C:14:50:7F:69:E0:0D:A0:56:7E
            X509v3 Authority Key Identifier:
                keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5a:5f:4f:66:47:ef:2f:d6:35:d0:6b:9c:d9:79:c6:f2:9f:
         0d:80:c6:7f:f7:38:45:81:31:72:bc:ff:72:37:e5:51:cb:a0:
         8f:8a:53:89:de:6f:a9:23:65:40:59:48:05:58:53:77:6c:14:
         85:31:b9:7d:28:fe:20:ec:bb:e4:39:9b:1c:f0:79:5c:52:4a:
         12:06:80:0a:f3:1c:3a:a4:4d:1b:47:a6:33:47:ef:c1:c9:a3:
         b5:eb:06:1a:31:81:83:d6:75:fb:a1:67:86:7f:df:0f:0c:74:
         6e:e9:ae:04:d7:3b:b4:46:eb:2b:40:ac:76:24:4b:e2:ad:3f:
         1b:e0:85:88:ac:d5:dd:d6:27:63:73:d6:ce:36:e9:fb:6c:5b:
         eb:74:e4:da:bc:3a:87:47:47:6c:bf:d1:06:95:2d:af:b8:50:
         f6:88:5f:eb:05:31:db:bf:fa:1e:70:33:9b:01:41:2b:ce:2c:
         2c:c6:fa:29:b9:75:88:9f:0e:44:eb:c5:e8:e1:e8:0c:45:80:
         e4:69:97:9e:81:bd:65:86:21:fb:02:ba:00:1b:00:9f:cc:42:
         72:7e:ca:70:e3:69:da:f2:65:f1:a8:c5:08:fe:7b:59:ba:a4:
         32:a1:3c:72:0e:96:46:41:78:94:4f:71:e9:2e:4f:ba:8d:05:
         ac:50:ec:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htl9jz+4E3NFrDUn1s62pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiN2RlOGQxMzUzM2QxZTM2YjExMzVhNWQyZTlhNmZmMzk4
NWNkYTIwHhcNMjQwNTE3MTgwMDI3WhcNMjQwNTE4MTgwMDI3WjAzMTEwLwYDVQQD
EyhmNzk1ZTY1YmYxOGNlMWViYWNmZThjMTQ1MDdmNjllMDBkYTA1NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptGBpML6W5v2A3NPsPhNRdyX7OYE
vgxnziTQ3R5Hb57p7tjW7DStmDQ4Q4EwEr/YirslU/z5H5YGQBUProDZJeUC96N7
36/8h+mah1JzSUZFGBS0WNBW/dU4FiK54eDuECwxli42gE/a/0cs4hCNZuK3dFxv
fPbFOzMR/GUrnhDHJV73EdAg5lLXc0ukPiHNLcdGyxQUuvmZpFrfJU9F0rzVDmx/
dDbLCh0V2itf6R4oY1f/4W0+jfD/Em2G0Pu811Ce0D4IrnyyF1/+BvBEW9v6Cfo7
XC2NnbKYSqAzm7ymDXpo0Miaa9y4WdMNg6hVsRSyAI73/a8X4I3Xo999dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeV5lvxjOHrrP6MFFB/aeANoFZ+MB8GA1UdIwQY
MBaAFHt96NE1M9HjaxE1pdLppv85hc2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2It
MmU5YjJkODhkNTQ3LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2ItMmU5YjJkODhkNTQ3
LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1pfT2ZH
7y/WNdBrnNl5xvKfDYDGf/c4RYExcrz/cjflUcugj4pTid5vqSNlQFlIBVhTd2wU
hTG5fSj+IOy75DmbHPB5XFJKEgaACvMcOqRNG0emM0fvwcmjtesGGjGBg9Z1+6Fn
hn/fDwx0bumuBNc7tEbrK0CsdiRL4q0/G+CFiKzV3dYnY3PWzjbp+2xb63Tk2rw6
h0dHbL/RBpUtr7hQ9ohf6wUx27/6HnAzmwFBK84sLMb6Kbl1iJ8OROvF6OHoDEWA
5GmXnoG9ZYYh+wK6ABsAn8xCcn7KcONp2vJl8ajFCP57WbqkMqE8cg6WRkF4lE9x
6S5Puo0FrFDsgA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:20:59 2024 by rpki-client on console-fra.rpki-client.org