Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File:                     dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier:          OA4cJ0Vnvbkw//EL34b1hhvcigQm1wZzUZjUMuHdp68=
Subject key identifier:   75:F2:F2:00:D2:6E:83:4F:24:4B:06:C5:F6:7C:41:BF:F6:7C:FF:0A
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer:       /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial:       0190429E47F5494FB41748909F2D6842F894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number:          0C80
Signing time:             Sun 23 Jun 2024 01:03:07 +0000
Manifest this update:     Sun 23 Jun 2024 01:03:07 +0000
Manifest next update:     Mon 24 Jun 2024 01:03:07 +0000
Files and hashes:         1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: IzUzF4yZIbLdDNioOyXI3u1t99jOFGyXF0DCvy7BCk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9e:47:f5:49:4f:b4:17:48:90:9f:2d:68:42:f8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
        Validity
            Not Before: Jun 23 01:03:07 2024 GMT
            Not After : Jun 24 01:03:07 2024 GMT
        Subject: CN=75f2f200d26e834f244b06c5f67c41bff67cff0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:b7:e5:85:37:ca:96:b5:1a:d2:bd:0a:de:
                    6f:8a:fc:f8:e5:d9:85:f9:0f:2d:32:85:7e:f2:e8:
                    0f:df:46:f6:c5:c2:1a:12:38:8d:a9:f1:36:31:87:
                    9a:d7:67:e7:11:b7:98:19:9e:28:c6:18:d2:a8:1b:
                    6f:e6:46:b4:f0:61:b2:47:7a:fd:df:e7:00:c8:ec:
                    75:39:da:52:0f:52:13:ca:ac:72:ca:73:56:4b:58:
                    91:f4:58:c3:de:47:73:fa:35:ee:e1:4d:e5:1f:0a:
                    d6:72:7a:27:53:50:94:8c:c7:94:7c:11:45:34:c0:
                    14:0a:91:52:6f:e4:04:fa:d3:f6:10:5d:2c:0e:4e:
                    1e:6f:3e:75:a7:db:18:f5:9a:c3:14:5c:cd:2d:2e:
                    30:e3:f7:8b:4a:5a:00:79:7f:e2:77:42:a0:13:7d:
                    88:78:1f:1a:40:6e:3e:04:78:99:74:0a:53:be:50:
                    c8:3c:a4:d3:a6:02:0d:22:71:55:41:3e:00:f8:85:
                    59:a1:77:eb:00:14:93:7c:4f:a0:83:fb:7b:11:ce:
                    72:8c:a3:6c:c3:c2:9d:59:0b:5f:d2:59:89:af:71:
                    2f:46:cc:31:9f:13:03:10:bf:68:ff:3d:ff:38:cb:
                    e6:5e:37:38:31:2e:f5:09:d7:e0:94:66:bb:ed:b6:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:F2:00:D2:6E:83:4F:24:4B:06:C5:F6:7C:41:BF:F6:7C:FF:0A
            X509v3 Authority Key Identifier:
                keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:02:4b:d3:7b:f3:7c:9f:e4:e6:99:b0:c9:bc:82:48:fa:
         0b:1d:44:3f:d3:f8:8a:58:e0:7b:d2:a0:1f:aa:70:e4:6c:c0:
         e0:70:a7:19:c0:25:d1:19:07:05:29:79:a7:82:53:46:50:fb:
         ea:2b:e3:4d:73:2f:e4:22:45:cf:2d:53:80:bc:43:78:bc:cd:
         ef:d8:0f:db:26:ac:87:7f:d0:bb:83:db:c5:f1:56:5b:08:cd:
         d4:3b:a7:15:7d:73:84:d8:45:cd:30:80:3d:e8:e9:94:c1:fc:
         f7:72:f8:8e:ce:93:ae:eb:ac:98:96:83:f7:24:50:7f:27:85:
         55:dc:0e:17:52:8b:d4:13:68:11:9e:81:f2:a3:57:b8:4a:8e:
         07:af:88:b3:5b:bf:84:eb:67:a5:7e:09:7d:05:a4:e8:a7:7c:
         01:f8:35:5d:df:80:eb:c1:6f:ed:58:ca:67:4d:ae:4f:d1:f0:
         51:ca:42:cb:d3:98:fd:3e:62:1a:8e:00:1d:dc:96:1e:e7:d1:
         15:49:2a:70:ae:fb:17:5c:7c:24:d1:6a:90:77:e3:63:b3:90:
         c8:f1:bf:04:8c:3b:2e:a9:ed:b7:ef:9d:3b:bd:19:86:bf:79:
         d4:ad:e5:62:af:07:9f:74:b4:63:f0:58:48:8b:2f:29:d6:bc:
         d5:6f:e8:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBCnkf1SU+0F0iQny1oQviUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM3MmZlY2U5YmEzOTY2ZTE1ZTgwNTVjMDU4N2M1MDNj
MDM5YWIwHhcNMjQwNjIzMDEwMzA3WhcNMjQwNjI0MDEwMzA3WjAzMTEwLwYDVQQD
Eyg3NWYyZjIwMGQyNmU4MzRmMjQ0YjA2YzVmNjdjNDFiZmY2N2NmZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuW35YU3ypa1GtK9Ct5vivz45dmF
+Q8tMoV+8ugP30b2xcIaEjiNqfE2MYea12fnEbeYGZ4oxhjSqBtv5ka08GGyR3r9
3+cAyOx1OdpSD1ITyqxyynNWS1iR9FjD3kdz+jXu4U3lHwrWcnonU1CUjMeUfBFF
NMAUCpFSb+QE+tP2EF0sDk4ebz51p9sY9ZrDFFzNLS4w4/eLSloAeX/id0KgE32I
eB8aQG4+BHiZdApTvlDIPKTTpgINInFVQT4A+IVZoXfrABSTfE+gg/t7Ec5yjKNs
w8KdWQtf0lmJr3EvRswxnxMDEL9o/z3/OMvmXjc4MS71CdfglGa77baOiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXy8gDSboNPJEsGxfZ8Qb/2fP8KMB8GA1UdIwQY
MBaAFHRjcv7Om6OWbhXoBVwFh8UDwDmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zY2JiMWItNjkyNy00NWM5LWIxZDQt
MWQ3ZDU1YjIyY2M5LzEvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zY2JiMWItNjkyNy00NWM5LWIxZDQtMWQ3ZDU1YjIyY2M5
LzEvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofkCS9N7
83yf5OaZsMm8gkj6Cx1EP9P4iljge9KgH6pw5GzA4HCnGcAl0RkHBSl5p4JTRlD7
6ivjTXMv5CJFzy1TgLxDeLzN79gP2yash3/Qu4PbxfFWWwjN1DunFX1zhNhFzTCA
PejplMH893L4js6TruusmJaD9yRQfyeFVdwOF1KL1BNoEZ6B8qNXuEqOB6+Is1u/
hOtnpX4JfQWk6Kd8Afg1Xd+A68Fv7VjKZ02uT9HwUcpCy9OY/T5iGo4AHdyWHufR
FUkqcK77F1x8JNFqkHfjY7OQyPG/BIw7Lqntt++dO70Zhr951K3lYq8Hn3S0Y/BY
SIsvKda81W/opQ==
-----END CERTIFICATE-----