Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File:                     _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier:          KYGizYQl8K7xNb230LbiZcv/O4ghDrpZWY7B0jwBo3c=
Subject key identifier:   12:96:94:02:BE:B5:0C:0E:A9:C3:23:85:76:2B:A5:84:6E:29:E6:16
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer:       /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial:       01901DEAFA303A12DF283E2B73C4F735CE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number:          0491
Signing time:             Sat 15 Jun 2024 22:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:57 +0000
Files and hashes:         1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: wAecD1tRPnYUTyYEESDITCch23KkfZwYD/mWHzfbj8w=)
                          2: rlhPxcWiiuEOf6fa-qnnGG4NNMc.roa (hash: 5UgFphAUkQ7dAI//QWWgkJf1uSl5Ox4PtfJiij8zG6M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:fa:30:3a:12:df:28:3e:2b:73:c4:f7:35:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
        Validity
            Not Before: Jun 15 22:00:57 2024 GMT
            Not After : Jun 16 22:00:57 2024 GMT
        Subject: CN=12969402beb50c0ea9c32385762ba5846e29e616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:15:5b:4f:3b:fb:03:51:eb:92:22:1f:ce:
                    c9:be:a7:94:01:f1:45:cc:17:c4:e0:fe:68:b3:0a:
                    1a:c7:94:c0:b1:db:f4:f4:c4:ba:45:73:0c:bf:05:
                    34:00:8e:0d:f9:66:5b:7e:84:3e:b5:77:81:30:db:
                    79:3e:b9:a4:0e:d2:67:b0:86:de:43:63:bc:3b:fc:
                    3a:22:2c:b4:e0:9e:37:e7:37:76:9c:6d:68:e1:e3:
                    ab:20:1e:e2:36:34:49:69:1d:2b:6b:61:47:ba:20:
                    3b:d4:2d:1f:82:80:24:2d:5c:fa:11:a0:d3:ae:a5:
                    c0:3d:8f:9c:a0:9a:ff:90:70:68:dc:88:37:3c:7e:
                    a6:8f:fa:b8:72:0f:d9:3a:a5:4c:10:76:1f:72:ad:
                    c6:62:38:20:b8:3c:45:c9:69:3d:bc:5f:2d:71:9b:
                    c0:af:00:2c:30:5c:cd:cd:98:c0:d3:5c:bb:7f:7f:
                    0a:d7:32:14:6e:90:8d:ae:f3:b2:3b:e7:42:ec:b1:
                    2c:52:dc:60:ba:81:93:38:d1:8f:3b:f5:24:5f:25:
                    6b:32:b0:9a:a7:c1:6e:24:cd:8b:32:71:52:7d:1d:
                    a8:4b:2c:05:31:d8:f9:34:c5:a8:f3:e6:94:06:4d:
                    90:79:5c:4b:b7:6b:06:d9:62:78:86:99:13:08:2f:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:94:02:BE:B5:0C:0E:A9:C3:23:85:76:2B:A5:84:6E:29:E6:16
            X509v3 Authority Key Identifier:
                keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:c8:0d:2a:75:ba:77:e5:8c:99:4b:46:4a:5e:49:21:2f:
         41:05:ad:51:11:aa:04:99:88:d3:71:1e:b7:9a:05:e5:ce:8a:
         8c:f4:29:44:fd:61:b7:29:3b:1e:9c:35:d2:5e:8a:f3:c6:dc:
         7f:b4:bd:c1:bb:21:33:52:52:fc:14:14:02:d9:02:ee:17:ce:
         84:5a:c7:e0:05:92:c5:a2:31:04:c8:9a:f9:a0:4d:79:ea:d1:
         16:70:40:81:4d:f0:22:d3:dc:4a:35:6a:b1:0b:3e:01:9c:f9:
         62:95:de:b6:be:b2:73:11:c4:65:f3:b4:43:f8:7c:ad:ea:6b:
         12:0b:98:63:f2:10:72:27:94:12:9d:1b:0d:1d:4b:f8:59:5e:
         14:96:3d:c1:ce:05:b8:74:77:2c:06:8b:f6:e1:45:4f:a9:9d:
         56:64:14:6f:dc:c9:a4:06:46:2b:0b:6d:e5:bb:22:4d:6f:cf:
         9e:51:c0:1e:95:cb:40:71:3e:fd:b4:e6:8b:2b:a0:c0:a3:41:
         94:e3:34:9c:70:a4:e8:5d:27:1e:c7:09:d8:c0:0c:28:8a:67:
         f3:b6:d8:37:c4:38:66:0b:a7:a4:d2:de:93:b3:06:c1:37:ce:
         f9:71:50:0f:cf:b7:22:f7:99:22:ba:d4:d1:8c:7e:ed:1c:e8:
         99:27:93:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6vowOhLfKD4rc8T3Nc4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZTFiZTQwYmQ0YzEwYTAyYzc4MzcxYWYzMTNkNGU3ZGEz
ZDQ0YTEwHhcNMjQwNjE1MjIwMDU3WhcNMjQwNjE2MjIwMDU3WjAzMTEwLwYDVQQD
EygxMjk2OTQwMmJlYjUwYzBlYTljMzIzODU3NjJiYTU4NDZlMjllNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNIVW087+wNR65IiH87JvqeUAfFF
zBfE4P5oswoax5TAsdv09MS6RXMMvwU0AI4N+WZbfoQ+tXeBMNt5PrmkDtJnsIbe
Q2O8O/w6Iiy04J435zd2nG1o4eOrIB7iNjRJaR0ra2FHuiA71C0fgoAkLVz6EaDT
rqXAPY+coJr/kHBo3Ig3PH6mj/q4cg/ZOqVMEHYfcq3GYjgguDxFyWk9vF8tcZvA
rwAsMFzNzZjA01y7f38K1zIUbpCNrvOyO+dC7LEsUtxguoGTONGPO/UkXyVrMrCa
p8FuJM2LMnFSfR2oSywFMdj5NMWo8+aUBk2QeVxLt2sG2WJ4hpkTCC89AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKWlAK+tQwOqcMjhXYrpYRuKeYWMB8GA1UdIwQY
MBaAFP7hvkC9TBCgLHg3GvMT1OfaPUShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMt
NWZkNzE2ZDY3ZTRjLzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMtNWZkNzE2ZDY3ZTRj
LzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGurIDSp1
unfljJlLRkpeSSEvQQWtURGqBJmI03Eet5oF5c6KjPQpRP1htyk7Hpw10l6K88bc
f7S9wbshM1JS/BQUAtkC7hfOhFrH4AWSxaIxBMia+aBNeerRFnBAgU3wItPcSjVq
sQs+AZz5YpXetr6ycxHEZfO0Q/h8reprEguYY/IQcieUEp0bDR1L+FleFJY9wc4F
uHR3LAaL9uFFT6mdVmQUb9zJpAZGKwtt5bsiTW/PnlHAHpXLQHE+/bTmiyugwKNB
lOM0nHCk6F0nHscJ2MAMKIpn87bYN8Q4ZgunpNLek7MGwTfO+XFQD8+3IveZIrrU
0Yx+7RzomSeT7A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:48 2024 by rpki-client on console-fra.rpki-client.org