Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File:                     rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier:          Q6TKeldfJWt2G2Npoi0yooSnAlM0OCjMcgz9eSQcxRU=
Subject key identifier:   FC:F8:E4:22:21:34:D9:8A:9B:62:73:E5:C6:3E:3F:24:58:5F:CB:7F
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer:       /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial:       01901F3444250034B39262AADC3458579B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number:          0C93
Signing time:             Sun 16 Jun 2024 04:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:37 +0000
Files and hashes:         1: 6uLB4BMflRL7GsOqGJ2g85sbYWc.roa (hash: 2USTzbT+Mz7gGDO/X9FuOyTv0V/TZBiF94j4mHzGSW8=)
                          2: DENJM6QuSS-5vn1jLI27pgHo-as.roa (hash: DT6XsNINvQrMRTEyErcC/sERrE2ujNFHXet79PU7wWg=)
                          3: QSjWOlmunixr-NKnJQBJxMdk8sc.roa (hash: mLSCr/qQ0+EsCUBLDANCUQTNsVCwNLI1JXqnbrro2t8=)
                          4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: X6LlS8NbofF1+Dm3I2Kb98eEbcBfuPWdCRFbmm0Hi6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:44:25:00:34:b3:92:62:aa:dc:34:58:57:9b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
        Validity
            Not Before: Jun 16 04:00:37 2024 GMT
            Not After : Jun 17 04:00:37 2024 GMT
        Subject: CN=fcf8e4222134d98a9b6273e5c63e3f24585fcb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:96:84:5c:61:d6:e1:75:2a:e2:06:48:5a:
                    ff:18:72:17:3e:92:ad:7a:82:f6:88:c7:29:67:c6:
                    ba:dc:ab:33:b3:3f:34:a2:85:c6:d9:7b:4c:b7:b1:
                    03:56:3b:b0:41:a6:77:6c:8d:40:b6:fc:cb:f4:fa:
                    72:76:51:98:db:9b:d8:b8:6b:f2:ce:8b:11:1a:93:
                    2e:f2:6d:d1:34:5e:f1:50:33:40:f3:83:00:6b:f2:
                    d7:3b:91:63:89:6f:8b:71:56:9d:da:0c:f3:ed:c0:
                    01:56:c8:19:f6:54:56:01:3e:82:5e:89:f0:a6:f2:
                    64:c0:59:cf:e0:4d:15:6c:38:fb:cb:0c:20:66:d0:
                    08:19:a3:7e:3e:cb:a2:66:03:b7:3d:57:c2:7c:5c:
                    1d:28:14:42:f6:e7:6c:d4:5d:53:fa:fd:14:74:f8:
                    a4:7b:08:10:26:76:94:9a:17:e8:17:66:76:0a:47:
                    bc:25:11:0f:a7:42:c1:7e:62:be:42:b6:46:32:64:
                    2f:3e:21:a0:89:d1:13:1a:de:ff:81:a2:5f:e7:d9:
                    4e:79:65:8d:fd:e3:8c:4d:d8:91:77:07:bd:14:b5:
                    bd:5c:15:2e:60:ff:a3:a7:49:15:1c:3a:f3:4d:23:
                    7c:5d:4e:bc:5f:c9:49:47:ba:3f:79:43:37:98:66:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:E4:22:21:34:D9:8A:9B:62:73:E5:C6:3E:3F:24:58:5F:CB:7F
            X509v3 Authority Key Identifier:
                keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:85:00:6d:e1:e0:a6:72:51:3b:8e:9f:da:4a:5d:f2:82:
         9d:93:a2:09:c9:0e:80:8c:18:af:c2:9f:86:63:d5:58:9c:5b:
         c1:d5:fc:b1:25:8b:41:8a:b1:88:4e:d0:db:72:c7:70:79:f5:
         08:6b:4d:49:bb:ec:55:c8:3f:ce:97:19:cc:d6:0f:0c:63:27:
         53:01:60:e9:2e:42:93:99:35:70:20:d5:69:58:32:f9:ee:05:
         3e:28:4e:96:45:a0:0a:da:e6:62:28:59:e0:ee:a1:2c:89:4f:
         82:14:c8:b5:9d:ae:a6:5d:98:c0:e1:9e:4d:dc:e0:30:24:a3:
         61:2d:11:f7:5f:33:62:3d:73:7a:ad:21:ec:54:ac:58:ba:92:
         94:76:6e:ae:bd:b8:3e:aa:48:88:41:3b:d6:92:11:b1:85:b1:
         8c:a9:9b:e0:61:82:29:ed:77:b8:09:93:71:e0:13:71:fa:97:
         79:f9:e0:de:ac:cf:c1:c6:ab:19:f1:16:00:17:04:b3:1f:92:
         97:8f:12:8b:48:61:93:3f:a8:f2:c1:f6:35:2d:e9:04:7e:ba:
         59:d3:07:f2:5b:22:0f:63:15:04:2d:9e:38:44:aa:5a:05:0e:
         98:56:9f:75:04:2c:87:ad:4b:ed:9e:49:d3:10:79:06:62:6e:
         23:e5:b6:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNEQlADSzkmKq3DRYV5ufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5
NzRjZjIwHhcNMjQwNjE2MDQwMDM3WhcNMjQwNjE3MDQwMDM3WjAzMTEwLwYDVQQD
EyhmY2Y4ZTQyMjIxMzRkOThhOWI2MjczZTVjNjNlM2YyNDU4NWZjYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf+WhFxh1uF1KuIGSFr/GHIXPpKt
eoL2iMcpZ8a63Kszsz80ooXG2XtMt7EDVjuwQaZ3bI1AtvzL9PpydlGY25vYuGvy
zosRGpMu8m3RNF7xUDNA84MAa/LXO5FjiW+LcVad2gzz7cABVsgZ9lRWAT6CXonw
pvJkwFnP4E0VbDj7ywwgZtAIGaN+PsuiZgO3PVfCfFwdKBRC9uds1F1T+v0UdPik
ewgQJnaUmhfoF2Z2Cke8JREPp0LBfmK+QrZGMmQvPiGgidETGt7/gaJf59lOeWWN
/eOMTdiRdwe9FLW9XBUuYP+jp0kVHDrzTSN8XU68X8lJR7o/eUM3mGam/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz45CIhNNmKm2Jz5cY+PyRYX8t/MB8GA1UdIwQY
MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt
YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz
LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/2FAG3h
4KZyUTuOn9pKXfKCnZOiCckOgIwYr8KfhmPVWJxbwdX8sSWLQYqxiE7Q23LHcHn1
CGtNSbvsVcg/zpcZzNYPDGMnUwFg6S5Ck5k1cCDVaVgy+e4FPihOlkWgCtrmYihZ
4O6hLIlPghTItZ2upl2YwOGeTdzgMCSjYS0R918zYj1zeq0h7FSsWLqSlHZurr24
PqpIiEE71pIRsYWxjKmb4GGCKe13uAmTceATcfqXefng3qzPwcarGfEWABcEsx+S
l48Si0hhkz+o8sH2NS3pBH66WdMH8lsiD2MVBC2eOESqWgUOmFafdQQsh61L7Z5J
0xB5BmJuI+W2wg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:23 2024 by rpki-client on console-fra.rpki-client.org