Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          f2qEw82e7B55iWoj19mASvFcjT6aVCmXIRiu1Ge1HGg=
Subject key identifier:   3E:8A:B1:8E:46:34:25:70:DD:8E:96:18:3C:69:B8:FD:DE:72:35:B8
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       01901EC6A874062C7658DFD7D22BF84CC369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          0F9A
Signing time:             Sun 16 Jun 2024 02:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:53 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: 0NFR8ItXgtj/VANbOWYn5fZP8tzmvyytTGQz49EYi/c=)
                          2: 8_summtSR7k6iruuWvnibQnIrZ0.roa (hash: w6UhYZ5ecYndoqrP+CzoxXJgRzgjpoToCF7YHfDH9c4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a8:74:06:2c:76:58:df:d7:d2:2b:f8:4c:c3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: Jun 16 02:00:53 2024 GMT
            Not After : Jun 17 02:00:53 2024 GMT
        Subject: CN=3e8ab18e46342570dd8e96183c69b8fdde7235b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:9f:19:d6:82:0d:34:a9:b2:ca:1f:fe:b5:
                    0d:e8:07:50:9b:26:96:28:ba:74:3c:c3:63:25:79:
                    1a:7f:6b:b9:7f:c1:06:58:9b:6c:e0:c4:fc:b7:9a:
                    3a:b2:c8:a6:c5:97:33:c5:5d:95:4b:30:d5:31:9c:
                    df:6b:e4:f0:1b:50:ef:2f:c8:d8:8d:83:f2:40:21:
                    e1:1e:b3:63:19:b0:f8:67:fb:8c:1e:26:7b:35:d8:
                    8c:bd:5b:ec:f4:d4:c0:dc:41:dc:12:37:5d:79:66:
                    ea:e3:07:51:7a:ef:8f:39:bd:47:de:23:38:c3:9d:
                    86:b7:bb:11:ed:81:ef:c1:78:66:b0:0d:3a:ba:8a:
                    f1:6b:48:82:04:7a:34:b0:bb:38:0b:d6:72:a6:d5:
                    e7:a7:c9:91:a3:32:c9:24:f2:bf:d1:e3:93:37:be:
                    8b:3f:78:d1:c1:70:3c:6e:de:bd:4b:a3:c2:2c:e6:
                    91:66:4c:68:7a:f2:e3:46:39:99:eb:61:9b:6b:66:
                    63:59:04:6c:71:ec:5f:c8:3f:01:b3:29:72:8b:3c:
                    6e:d6:07:11:6c:b5:23:63:07:3b:2f:fb:95:00:a8:
                    e1:06:c4:d4:38:f9:1b:a4:dd:6e:5f:50:ef:c7:e1:
                    70:b3:51:1f:89:02:f4:63:f8:07:fe:30:52:a9:91:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:B1:8E:46:34:25:70:DD:8E:96:18:3C:69:B8:FD:DE:72:35:B8
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:76:57:d6:3d:f2:f6:da:13:91:c2:7e:06:68:a2:9c:13:
         91:3e:30:7b:d7:e2:2c:1e:dd:f1:fc:dd:cc:ef:b7:f9:00:d9:
         8c:b8:e2:56:a4:90:71:73:21:3d:a7:48:c6:25:26:37:0c:57:
         58:74:18:93:b7:d2:24:f0:30:4f:08:c5:49:98:5d:94:5e:94:
         61:86:07:b7:a5:45:65:30:f4:29:da:ef:49:50:17:29:04:50:
         18:55:11:79:b6:89:b5:32:5f:be:38:b3:18:6e:02:0b:dc:6e:
         2b:e4:e7:41:d0:67:2b:d8:a0:a3:f9:5f:74:0b:89:64:25:0f:
         d2:f3:60:e6:f2:40:02:f0:88:89:47:f4:5c:60:a6:57:00:1a:
         14:68:67:03:f5:b8:fa:85:08:67:f4:36:59:ba:e8:a4:95:77:
         92:cc:64:7c:45:7d:d8:22:ff:a1:17:93:20:56:c6:2c:63:6d:
         8f:f4:5f:ef:c4:59:e5:4b:52:42:cc:10:63:8f:a3:fc:94:a9:
         4a:8e:03:e5:fc:17:7a:89:03:38:e3:6c:03:79:62:f0:3c:58:
         0f:77:f3:71:15:9e:77:16:a0:89:48:f5:d7:31:ac:32:7d:81:
         7e:18:ea:f7:25:6a:27:0f:d6:cc:bc:b1:7b:c4:02:93:b3:f4:
         2f:83:c3:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexqh0Bix2WN/X0iv4TMNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi
ODk1Y2IwHhcNMjQwNjE2MDIwMDUzWhcNMjQwNjE3MDIwMDUzWjAzMTEwLwYDVQQD
EygzZThhYjE4ZTQ2MzQyNTcwZGQ4ZTk2MTgzYzY5YjhmZGRlNzIzNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfyfGdaCDTSpssof/rUN6AdQmyaW
KLp0PMNjJXkaf2u5f8EGWJts4MT8t5o6ssimxZczxV2VSzDVMZzfa+TwG1DvL8jY
jYPyQCHhHrNjGbD4Z/uMHiZ7NdiMvVvs9NTA3EHcEjddeWbq4wdReu+POb1H3iM4
w52Gt7sR7YHvwXhmsA06uorxa0iCBHo0sLs4C9ZyptXnp8mRozLJJPK/0eOTN76L
P3jRwXA8bt69S6PCLOaRZkxoevLjRjmZ62Gba2ZjWQRscexfyD8Bsylyizxu1gcR
bLUjYwc7L/uVAKjhBsTUOPkbpN1uX1Dvx+Fws1EfiQL0Y/gH/jBSqZEKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6KsY5GNCVw3Y6WGDxpuP3ecjW4MB8GA1UdIwQY
MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt
ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw
LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOl2V9Y9
8vbaE5HCfgZoopwTkT4we9fiLB7d8fzdzO+3+QDZjLjiVqSQcXMhPadIxiUmNwxX
WHQYk7fSJPAwTwjFSZhdlF6UYYYHt6VFZTD0KdrvSVAXKQRQGFURebaJtTJfvjiz
GG4CC9xuK+TnQdBnK9igo/lfdAuJZCUP0vNg5vJAAvCIiUf0XGCmVwAaFGhnA/W4
+oUIZ/Q2WbropJV3ksxkfEV92CL/oReTIFbGLGNtj/Rf78RZ5UtSQswQY4+j/JSp
So4D5fwXeokDOONsA3li8DxYD3fzcRWedxagiUj11zGsMn2Bfhjq9yVqJw/WzLyx
e8QCk7P0L4PD8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:18 2024 by rpki-client on console-ams.rpki-client.org