Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
File:                     ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft (raw, json)
Hash identifier:          GZmtHgeyeF8eSNNzl7RgBleUnhPrq89F9r43XygVCtk=
Subject key identifier:   6B:A0:07:58:55:55:B5:50:03:48:A8:14:7C:61:5F:29:70:A3:C7:13
Authority key identifier: 79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA
Certificate issuer:       /CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
Certificate serial:       01901BFD700F7A7FF96BB8A53658CDB0D937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
Manifest number:          05F3
Signing time:             Sat 15 Jun 2024 13:01:52 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:52 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:52 +0000
Files and hashes:         1: QsSb-NXqwEGb998W4IJ1akflpGQ.roa (hash: E+sjG2tbeo9BE+9T7qmdsWOB8p2SprY6F82jSXEqJIs=)
                          2: ed8QfWvxzMgY9m2NqN2F7pJKDOo.crl (hash: VCB/Bq8lkyDKuar9DmKLygDHHrck6q6f50VtnTuycec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:70:0f:7a:7f:f9:6b:b8:a5:36:58:cd:b0:d9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
        Validity
            Not Before: Jun 15 13:01:52 2024 GMT
            Not After : Jun 16 13:01:52 2024 GMT
        Subject: CN=6ba007585555b5500348a8147c615f2970a3c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:2d:d2:27:4c:e9:9e:1d:19:fc:f6:53:9f:
                    87:88:35:58:4f:f3:b4:33:0d:f0:d5:f8:c3:fd:35:
                    84:f7:dc:ca:46:a9:71:19:64:01:c4:16:79:46:79:
                    f8:a2:3f:3f:d7:d2:20:16:27:70:eb:ed:3a:5d:e0:
                    6e:96:f8:5a:65:da:07:1f:a4:b6:fd:fb:84:ef:8a:
                    f1:6a:dd:3a:79:37:56:c2:0a:8e:4b:99:cf:a6:54:
                    4d:93:89:83:4b:5f:14:02:6f:67:33:56:f9:9c:45:
                    c8:4e:bc:b9:70:59:32:98:a1:f6:c1:ca:f3:f9:10:
                    33:02:38:dd:e4:64:0c:66:2c:4c:7e:5d:7a:73:e8:
                    f5:66:12:2b:a4:60:e3:0f:ab:f2:ee:5e:07:7c:3d:
                    65:c0:96:b2:b4:cc:69:5d:6f:96:03:8f:e5:dc:f7:
                    16:be:7c:93:da:1a:ee:f5:21:ba:1e:37:fe:e4:5f:
                    09:20:78:64:a3:12:26:ad:2d:05:81:56:7f:c3:9c:
                    ab:09:fa:4d:56:89:d9:d4:91:8a:9c:3b:98:4e:40:
                    eb:3a:4d:02:74:16:ec:ad:22:69:d6:04:dd:11:7c:
                    62:03:c6:45:75:fe:f7:38:fc:35:f9:42:58:19:26:
                    7f:7e:2c:82:4b:93:ad:69:9c:0a:28:ae:b9:02:33:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:07:58:55:55:B5:50:03:48:A8:14:7C:61:5F:29:70:A3:C7:13
            X509v3 Authority Key Identifier:
                keyid:79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:07:c1:66:c6:b9:46:60:d8:45:5a:fd:3f:a9:70:6c:d2:77:
         02:e6:5d:81:ec:5b:65:44:4c:d8:50:d2:6b:57:93:a6:5c:1e:
         44:83:4e:e4:c2:6c:c1:1d:a1:06:0e:3c:40:35:45:eb:2d:1d:
         70:9e:33:ac:52:1b:72:28:80:b5:f7:eb:a7:4c:3c:b6:ba:b6:
         44:bd:4d:83:7c:dd:1e:5b:25:5e:79:2d:81:71:a3:f9:b2:d1:
         e9:2f:fe:ea:29:cf:97:8b:df:87:0d:76:33:74:e2:61:c0:fe:
         b7:8a:25:10:6f:a6:8a:33:9b:24:2c:03:3f:e1:ed:1f:e0:84:
         54:56:65:4d:e3:13:65:ae:9f:4d:76:79:05:bc:b6:fb:fc:e6:
         a1:00:e1:bd:60:8d:0f:64:51:cc:ff:39:bb:c2:76:ba:ca:af:
         68:b9:64:fa:b3:56:99:b5:8a:a3:8d:a2:56:ba:6b:e3:19:b1:
         0f:4e:da:b5:93:85:80:99:bb:3a:1d:cb:b2:1e:f2:c5:49:3e:
         84:be:a3:87:97:83:2d:d8:e9:df:a5:74:49:6f:f8:74:32:bb:
         24:bc:75:9e:c4:bf:70:07:0f:e2:c0:b0:ed:25:62:4c:0b:af:
         f9:bd:e8:a0:f4:72:dc:29:69:39:1e:79:3d:1a:46:2a:56:08:
         a4:8f:35:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/XAPen/5a7ilNljNsNk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZGYxMDdkNmJmMWNjYzgxOGY2NmQ4ZGE4ZGQ4NWVlOTI0
YTBjZWEwHhcNMjQwNjE1MTMwMTUyWhcNMjQwNjE2MTMwMTUyWjAzMTEwLwYDVQQD
Eyg2YmEwMDc1ODU1NTViNTUwMDM0OGE4MTQ3YzYxNWYyOTcwYTNjNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUAt0idM6Z4dGfz2U5+HiDVYT/O0
Mw3w1fjD/TWE99zKRqlxGWQBxBZ5Rnn4oj8/19IgFidw6+06XeBulvhaZdoHH6S2
/fuE74rxat06eTdWwgqOS5nPplRNk4mDS18UAm9nM1b5nEXITry5cFkymKH2wcrz
+RAzAjjd5GQMZixMfl16c+j1ZhIrpGDjD6vy7l4HfD1lwJaytMxpXW+WA4/l3PcW
vnyT2hru9SG6Hjf+5F8JIHhkoxImrS0FgVZ/w5yrCfpNVonZ1JGKnDuYTkDrOk0C
dBbsrSJp1gTdEXxiA8ZFdf73OPw1+UJYGSZ/fiyCS5OtaZwKKK65AjNMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGugB1hVVbVQA0ioFHxhXylwo8cTMB8GA1UdIwQY
MBaAFHnfEH1r8czIGPZtjajdhe6SSgzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWQ4UWZXdnh6TWdZOW0yTnFOMkY3cEpLRE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yMGJjNmQtOGM4ZC00ZTI3LTg5Yzct
ZjUxMmMyZGFjNGM0LzEvZWQ4UWZXdnh6TWdZOW0yTnFOMkY3cEpLRE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yMGJjNmQtOGM4ZC00ZTI3LTg5YzctZjUxMmMyZGFjNGM0
LzEvZWQ4UWZXdnh6TWdZOW0yTnFOMkY3cEpLRE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQfBZsa5
RmDYRVr9P6lwbNJ3AuZdgexbZURM2FDSa1eTplweRINO5MJswR2hBg48QDVF6y0d
cJ4zrFIbciiAtffrp0w8trq2RL1Ng3zdHlslXnktgXGj+bLR6S/+6inPl4vfhw12
M3TiYcD+t4olEG+mijObJCwDP+HtH+CEVFZlTeMTZa6fTXZ5Bby2+/zmoQDhvWCN
D2RRzP85u8J2usqvaLlk+rNWmbWKo42iVrpr4xmxD07atZOFgJm7Oh3Lsh7yxUk+
hL6jh5eDLdjp36V0SW/4dDK7JLx1nsS/cAcP4sCw7SViTAuv+b3ooPRy3ClpOR55
PRpGKlYIpI81dw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:41:08 2024 by rpki-client on console-fra.rpki-client.org