Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File:                     MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier:          r03T8GdQ6HAmTzg6jHtfJuL6B4lMQsD5Bwp4erYdUJ8=
Subject key identifier:   8B:F2:2A:62:9A:7B:D9:7E:75:5F:87:5D:24:54:D6:7A:DF:7E:0B:59
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer:       /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial:       0190494377839AB7347196097BE6224226C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number:          02B1
Signing time:             Mon 24 Jun 2024 08:01:16 +0000
Manifest this update:     Mon 24 Jun 2024 08:01:16 +0000
Manifest next update:     Tue 25 Jun 2024 08:01:16 +0000
Files and hashes:         1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: Sbwhp1YVGSeIqa0ZsMxO5yzRvL1gan9ZN1UGJkZioUA=)
                          2: U-YMaHS0vqJwPpWKmjsBImDiCW0.roa (hash: K2ZbvGcIZvpCrLHgRg5VnjtYtBYjWZd+yG9x7dQmrz4=)
                          3: V8pZYIeO8OawoZ2nwE3EVfCDTRQ.roa (hash: U1RcyurXzJkOGYBTR6dFvrHPU6WYfARMwZ/yCQlf3ow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:77:83:9a:b7:34:71:96:09:7b:e6:22:42:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
        Validity
            Not Before: Jun 24 08:01:16 2024 GMT
            Not After : Jun 25 08:01:16 2024 GMT
        Subject: CN=8bf22a629a7bd97e755f875d2454d67adf7e0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:50:e9:15:9e:d4:f1:2d:06:2d:13:fe:36:75:
                    bf:f4:e5:50:9f:e1:60:0b:17:4d:fc:2d:c0:05:69:
                    ce:9a:e4:f7:ca:54:61:9a:91:1a:ff:a5:2a:1a:4d:
                    02:70:e6:17:ad:93:bb:d4:69:18:6e:25:9e:34:e4:
                    bf:62:f9:67:d9:12:b2:cc:b4:57:95:0e:99:da:ff:
                    5c:c2:65:1a:ea:4a:24:d2:b2:5a:71:c3:bd:9f:4b:
                    cd:45:ee:4d:75:75:12:64:24:9f:46:1c:05:7d:8a:
                    80:b8:db:5a:d4:05:f5:20:5e:55:f5:c6:b4:ff:47:
                    a2:34:d7:92:81:f3:18:07:4b:72:d1:3c:7c:b6:18:
                    a4:ad:8b:f1:36:47:a9:90:1e:1a:4e:0d:d9:3a:24:
                    33:fd:0c:11:ef:2a:65:6c:dc:3e:9d:07:2b:16:a7:
                    39:a1:68:b2:7a:35:64:11:74:77:ec:89:a5:ef:7e:
                    3a:84:c4:4b:68:bd:1a:ae:3a:60:f9:bf:8c:6b:3c:
                    c2:4b:dd:97:67:9e:66:46:60:4f:a6:4c:cb:d5:1e:
                    c9:5e:db:73:a0:af:f7:6d:4c:30:55:bf:23:cc:84:
                    57:93:4e:35:c3:04:38:56:1d:08:f9:37:c6:a5:4c:
                    25:2c:df:60:da:2d:19:1f:21:9f:5e:24:ab:76:b9:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F2:2A:62:9A:7B:D9:7E:75:5F:87:5D:24:54:D6:7A:DF:7E:0B:59
            X509v3 Authority Key Identifier:
                keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:41:4d:a8:f3:bc:1f:ec:ec:9b:c5:e3:83:54:13:92:69:04:
         45:e7:da:7b:58:77:42:3c:30:53:72:1b:e9:9e:89:ba:45:bf:
         3a:db:51:43:49:75:31:bf:29:3f:cf:7b:d8:fa:97:d1:0d:54:
         68:56:f1:7d:73:1a:74:c7:96:00:b3:8e:9d:0e:45:8f:c0:f2:
         b9:bc:63:a0:41:e4:e6:30:65:53:54:a4:c3:0c:da:4a:d0:c9:
         fa:ab:e4:7c:5f:59:33:71:06:71:8e:df:3d:d4:33:6e:ca:cf:
         d2:56:93:18:f9:e2:86:28:37:f2:bc:4d:6f:c5:33:64:38:be:
         5d:5d:50:ad:61:3a:2b:e8:77:c3:6a:8b:cd:41:1f:f7:26:03:
         52:24:86:31:ef:c1:74:be:5d:8b:e2:a5:82:86:a6:f2:48:e3:
         ea:96:97:9a:b8:4e:48:cc:28:f9:30:f0:0d:f9:7f:17:6e:91:
         62:18:63:e7:1b:5f:fb:48:29:88:9d:9c:8f:12:aa:e9:f1:ab:
         e2:3a:0a:0a:ec:59:4b:b7:d4:d7:d2:af:f6:b2:c2:6a:b5:f6:
         fe:bc:f9:d3:87:ca:50:22:3d:11:d5:ca:b0:ff:f4:cb:42:63:
         9d:8b:1a:1f:8d:36:02:ee:46:f1:d0:be:b1:4a:84:97:39:61:
         54:0e:bb:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJQ3eDmrc0cZYJe+YiQibIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjQwNjI0MDgwMTE2WhcNMjQwNjI1MDgwMTE2WjAzMTEwLwYDVQQD
Eyg4YmYyMmE2MjlhN2JkOTdlNzU1Zjg3NWQyNDU0ZDY3YWRmN2UwYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FDpFZ7U8S0GLRP+NnW/9OVQn+Fg
CxdN/C3ABWnOmuT3ylRhmpEa/6UqGk0CcOYXrZO71GkYbiWeNOS/Yvln2RKyzLRX
lQ6Z2v9cwmUa6kok0rJaccO9n0vNRe5NdXUSZCSfRhwFfYqAuNta1AX1IF5V9ca0
/0eiNNeSgfMYB0ty0Tx8thikrYvxNkepkB4aTg3ZOiQz/QwR7yplbNw+nQcrFqc5
oWiyejVkEXR37Iml7346hMRLaL0arjpg+b+MazzCS92XZ55mRmBPpkzL1R7JXttz
oK/3bUwwVb8jzIRXk041wwQ4Vh0I+TfGpUwlLN9g2i0ZHyGfXiSrdrnR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvyKmKae9l+dV+HXSRU1nrffgtZMB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkFNqPO8
H+zsm8Xjg1QTkmkERefae1h3QjwwU3Ib6Z6JukW/OttRQ0l1Mb8pP8972PqX0Q1U
aFbxfXMadMeWALOOnQ5Fj8DyubxjoEHk5jBlU1SkwwzaStDJ+qvkfF9ZM3EGcY7f
PdQzbsrP0laTGPnihig38rxNb8UzZDi+XV1QrWE6K+h3w2qLzUEf9yYDUiSGMe/B
dL5di+Klgoam8kjj6paXmrhOSMwo+TDwDfl/F26RYhhj5xtf+0gpiJ2cjxKq6fGr
4joKCuxZS7fU19Kv9rLCarX2/rz504fKUCI9EdXKsP/0y0JjnYsaH402Au5G8dC+
sUqElzlhVA67QQ==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:37:15 2024 by rpki-client on console-fra.rpki-client.org