Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File:                     slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier:          F8n/qN03q+JgDzho7WHdOdGt0dW2nBGugbMRQHeie/I=
Subject key identifier:   71:63:9C:B3:7E:AD:CA:0A:55:B1:76:BB:36:D3:9B:A2:38:B6:E5:52
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer:       /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial:       01901D4665C5751435EC479BC403265D5C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 19:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:11 +0000
Files and hashes:         1: ia7WlMCtWsawTPgbi6dV170BmWo.roa (hash: zRJtMHKkRwd5YCr1iTPTlQRiomhQhgOkbyCykd1/N/A=)
                          2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: GH+lV6NKtzto3f0evUjJ1PAKzSfQ4nshv901X5KNtbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:65:c5:75:14:35:ec:47:9b:c4:03:26:5d:5c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
        Validity
            Not Before: Jun 15 19:01:11 2024 GMT
            Not After : Jun 16 19:01:11 2024 GMT
        Subject: CN=71639cb37eadca0a55b176bb36d39ba238b6e552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:ab:38:a1:ed:06:c8:6d:21:26:82:96:d8:
                    38:8d:80:bf:fd:da:07:a6:24:a0:8d:a4:92:0f:7f:
                    85:bb:df:13:7e:b0:f6:57:28:63:db:3d:1e:bc:fb:
                    0a:d3:dd:54:88:14:99:7c:13:84:9f:20:7f:ec:29:
                    79:18:c7:0a:9c:18:32:0d:7a:86:96:00:76:5e:47:
                    b2:dc:09:6f:35:38:89:2b:dc:06:66:74:a1:e2:8a:
                    65:bb:9a:b8:25:e3:58:e4:6b:e9:ba:8e:d2:53:5a:
                    aa:83:cb:1a:5c:20:fd:a3:b5:e8:bc:0b:58:12:88:
                    c0:0c:ed:02:63:7b:1e:52:b0:15:de:a6:3e:75:76:
                    35:f6:49:fa:26:08:f8:b1:02:72:d3:4e:2b:5b:45:
                    2d:4a:aa:63:b0:00:8d:24:3d:7e:b0:e7:83:f4:fb:
                    c7:59:a6:a1:c8:7b:ea:bb:d9:ac:fb:31:67:ca:a4:
                    4e:c2:ae:bb:6c:38:28:48:db:75:27:ca:fb:8b:73:
                    22:7f:ba:e4:72:1f:78:bf:d7:73:6b:eb:94:d5:4f:
                    80:42:b0:48:7e:cc:37:c1:b6:b8:80:b5:63:c0:a8:
                    8f:65:9e:91:fd:c3:04:98:a5:52:2b:eb:39:e4:3b:
                    4a:3b:ce:5b:95:03:9c:40:d5:88:36:ec:46:0c:0b:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:9C:B3:7E:AD:CA:0A:55:B1:76:BB:36:D3:9B:A2:38:B6:E5:52
            X509v3 Authority Key Identifier:
                keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:de:e1:ff:4d:36:dd:25:72:76:7d:de:94:48:7e:35:c4:f5:
         01:b9:d8:fb:cd:37:c1:36:e9:81:60:8e:57:f2:e0:52:5d:d3:
         ff:c1:41:8b:cc:a6:2e:b1:37:33:6b:8c:08:10:e6:2e:d0:38:
         22:d9:60:b5:53:85:ed:7b:c6:1d:72:77:55:b5:10:a4:86:eb:
         bc:4e:54:45:1e:db:a5:d4:01:4d:a3:14:e7:93:d7:92:23:54:
         8a:1e:ba:ae:fc:03:99:ff:28:68:2e:61:45:74:13:c9:a8:7b:
         28:a3:9e:d2:67:dc:39:6f:fa:1f:3f:a8:62:ee:44:7a:83:8f:
         1f:21:16:a8:6b:30:c3:4d:b0:c2:86:7e:f9:c1:e1:5d:59:74:
         96:f2:a5:9a:54:63:32:e9:44:3b:0f:9b:ad:38:53:88:3e:18:
         46:3c:98:2e:a3:f3:6e:d8:0a:6e:b4:d2:1a:78:de:c3:df:81:
         56:07:94:01:5e:c9:53:1d:9c:80:65:94:64:c6:79:ab:0a:77:
         97:38:6c:42:75:c4:b0:d1:a8:b0:c4:9b:0b:2b:c1:e4:a7:ca:
         b2:14:17:bb:5c:d1:8a:67:7e:2a:91:4e:29:f4:20:49:32:c2:
         f4:62:f1:58:e4:ed:31:81:95:c8:5c:2f:df:30:73:ec:1f:42:
         ba:0a:ba:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRmXFdRQ17EebxAMmXVxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjQwNjE1MTkwMTExWhcNMjQwNjE2MTkwMTExWjAzMTEwLwYDVQQD
Eyg3MTYzOWNiMzdlYWRjYTBhNTViMTc2YmIzNmQzOWJhMjM4YjZlNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a2rOKHtBshtISaCltg4jYC//doH
piSgjaSSD3+Fu98TfrD2Vyhj2z0evPsK091UiBSZfBOEnyB/7Cl5GMcKnBgyDXqG
lgB2Xkey3AlvNTiJK9wGZnSh4oplu5q4JeNY5Gvpuo7SU1qqg8saXCD9o7XovAtY
EojADO0CY3seUrAV3qY+dXY19kn6Jgj4sQJy004rW0UtSqpjsACNJD1+sOeD9PvH
WaahyHvqu9ms+zFnyqROwq67bDgoSNt1J8r7i3Mif7rkch94v9dza+uU1U+AQrBI
fsw3wba4gLVjwKiPZZ6R/cMEmKVSK+s55DtKO85blQOcQNWINuxGDAvO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFjnLN+rcoKVbF2uzbTm6I4tuVSMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADd7h/002
3SVydn3elEh+NcT1AbnY+803wTbpgWCOV/LgUl3T/8FBi8ymLrE3M2uMCBDmLtA4
ItlgtVOF7XvGHXJ3VbUQpIbrvE5URR7bpdQBTaMU55PXkiNUih66rvwDmf8oaC5h
RXQTyah7KKOe0mfcOW/6Hz+oYu5EeoOPHyEWqGsww02wwoZ++cHhXVl0lvKlmlRj
MulEOw+brThTiD4YRjyYLqPzbtgKbrTSGnjew9+BVgeUAV7JUx2cgGWUZMZ5qwp3
lzhsQnXEsNGosMSbCyvB5KfKshQXu1zRimd+KpFOKfQgSTLC9GLxWOTtMYGVyFwv
3zBz7B9Cugq6pA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:38:38 2024 by rpki-client on console-fra.rpki-client.org