Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
File:                     srV8B2efEIcOxTs576fQiwhXqRE.mft (raw, json)
Hash identifier:          c84FU9Gtqe2ZMmsoZRP2vNakACu9+VsgiXaa8K2fYME=
Subject key identifier:   EA:5F:88:03:55:9C:EE:DC:56:50:EE:62:AC:19:4A:87:44:E3:A0:7D
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Certificate issuer:       /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial:       01901B578D191FF48747F9C4F830832A6124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
Manifest number:          05F9
Signing time:             Sat 15 Jun 2024 10:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:40 +0000
Files and hashes:         1: AEDua-hWkVricQ7HIMlZBtgg2dc.roa (hash: T8JT1ffkYqsHZM48g9lCf2oRnoLGLnSW81jsWhBOwkE=)
                          2: srV8B2efEIcOxTs576fQiwhXqRE.crl (hash: 3T5XRmppC92x6VaBu3KPaCXyjaB3J8nrRAqoONvZuhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:8d:19:1f:f4:87:47:f9:c4:f8:30:83:2a:61:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
        Validity
            Not Before: Jun 15 10:00:40 2024 GMT
            Not After : Jun 16 10:00:40 2024 GMT
        Subject: CN=ea5f8803559ceedc5650ee62ac194a8744e3a07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:a3:33:ff:66:d1:d2:6e:75:86:03:39:39:
                    54:2f:12:84:57:7c:52:52:9c:02:cb:e6:d8:c6:b3:
                    24:8d:3d:88:45:8c:95:d1:ad:63:96:a9:ad:c8:45:
                    d9:a0:65:ed:6c:8e:d8:fa:e5:1b:11:7e:09:2b:88:
                    0e:73:59:eb:5f:9f:d7:6e:73:4a:4d:4a:08:89:12:
                    71:39:69:32:cd:88:a9:12:53:fd:7d:72:7c:7b:dd:
                    4c:3f:9b:b4:79:43:e6:95:51:4f:15:53:68:d1:70:
                    99:1c:1c:d8:04:05:b0:de:9b:74:af:01:72:88:49:
                    f5:45:ce:58:b4:68:3e:51:ff:68:da:86:01:f5:df:
                    fc:fd:a8:c2:ba:55:64:88:a6:43:6e:45:27:7e:b2:
                    d9:ee:a4:dd:fa:a8:52:b2:83:1c:04:0e:f6:68:b2:
                    46:f7:ca:9e:59:31:e5:b1:23:08:31:38:ea:e3:ac:
                    32:a9:93:e3:5d:94:86:1b:39:2e:f5:d2:8e:aa:fd:
                    0a:0f:54:55:0b:77:07:0a:49:a3:7e:7b:f0:33:9e:
                    2b:96:11:b5:8c:7e:98:9a:8e:70:5c:f5:ba:d3:06:
                    0d:60:49:40:87:9e:a4:a8:da:27:a6:f8:6a:68:98:
                    a8:c9:6c:46:b9:59:9d:ae:cd:b2:44:fa:08:48:e3:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5F:88:03:55:9C:EE:DC:56:50:EE:62:AC:19:4A:87:44:E3:A0:7D
            X509v3 Authority Key Identifier:
                keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:de:b7:a1:e7:09:d3:91:97:d9:3a:61:36:c1:0a:7f:9f:
         b4:7e:f7:d0:35:02:ab:64:2a:a4:0a:09:e3:3f:7e:5b:e6:01:
         d5:00:16:49:fe:bb:b4:78:16:1a:53:ad:2f:0a:b8:95:13:5a:
         d7:80:c8:76:37:80:a7:4e:4c:df:48:d8:fb:5c:2f:a5:4c:6d:
         78:b6:68:55:b6:d3:0f:63:40:ed:3c:76:91:11:ed:e9:6c:34:
         5c:f1:db:ac:16:c6:20:de:07:76:ff:86:80:84:90:1d:05:a0:
         57:9d:ac:6c:75:09:46:74:fa:fa:53:11:e3:81:30:ae:88:f0:
         05:e7:06:42:ca:66:70:0a:dc:66:39:4d:ab:dc:fd:96:c6:a8:
         9b:bd:1a:4d:a5:c1:40:c4:68:d1:a3:a1:35:e5:93:4b:58:23:
         b1:b7:5f:04:d2:d3:bc:1f:9e:48:e8:b7:b1:fe:ac:53:7f:9d:
         1f:65:cd:61:4b:52:fb:9f:10:a9:d1:8a:01:04:60:0e:fc:2f:
         c3:57:f9:c4:56:4e:68:72:c1:8c:93:68:aa:5a:1e:b4:72:37:
         45:dc:2b:6e:fe:42:2d:09:93:64:67:64:ba:d0:5c:00:17:8f:
         4e:4f:8f:2c:c1:46:cf:18:29:df:8f:af:dd:44:9c:9c:1d:65:
         b6:4c:96:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAbV40ZH/SHR/nE+DCDKmEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYjU3YzA3Njc5ZjEwODcwZWM1M2IzOWVmYTdkMDhiMDg1
N2E5MTEwHhcNMjQwNjE1MTAwMDQwWhcNMjQwNjE2MTAwMDQwWjAzMTEwLwYDVQQD
EyhlYTVmODgwMzU1OWNlZWRjNTY1MGVlNjJhYzE5NGE4NzQ0ZTNhMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkSjM/9m0dJudYYDOTlULxKEV3xS
UpwCy+bYxrMkjT2IRYyV0a1jlqmtyEXZoGXtbI7Y+uUbEX4JK4gOc1nrX5/XbnNK
TUoIiRJxOWkyzYipElP9fXJ8e91MP5u0eUPmlVFPFVNo0XCZHBzYBAWw3pt0rwFy
iEn1Rc5YtGg+Uf9o2oYB9d/8/ajCulVkiKZDbkUnfrLZ7qTd+qhSsoMcBA72aLJG
98qeWTHlsSMIMTjq46wyqZPjXZSGGzku9dKOqv0KD1RVC3cHCkmjfnvwM54rlhG1
jH6Ymo5wXPW60wYNYElAh56kqNonpvhqaJioyWxGuVmdrs2yRPoISOO+nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpfiANVnO7cVlDuYqwZSodE46B9MB8GA1UdIwQY
MBaAFLK1fAdnnxCHDsU7Oe+n0IsIV6kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3JWOEIyZWZFSWNPeFRzNTc2ZlFpd2hYcVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82YTFjNmUtMDM5YS00YjdkLTkyNTMt
MGE1ZTZhMzY4MDFmLzEvc3JWOEIyZWZFSWNPeFRzNTc2ZlFpd2hYcVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82YTFjNmUtMDM5YS00YjdkLTkyNTMtMGE1ZTZhMzY4MDFm
LzEvc3JWOEIyZWZFSWNPeFRzNTc2ZlFpd2hYcVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcXet6Hn
CdORl9k6YTbBCn+ftH730DUCq2QqpAoJ4z9+W+YB1QAWSf67tHgWGlOtLwq4lRNa
14DIdjeAp05M30jY+1wvpUxteLZoVbbTD2NA7Tx2kRHt6Ww0XPHbrBbGIN4Hdv+G
gISQHQWgV52sbHUJRnT6+lMR44EwrojwBecGQspmcArcZjlNq9z9lsaom70aTaXB
QMRo0aOhNeWTS1gjsbdfBNLTvB+eSOi3sf6sU3+dH2XNYUtS+58QqdGKAQRgDvwv
w1f5xFZOaHLBjJNoqloetHI3Rdwrbv5CLQmTZGdkutBcABePTk+PLMFGzxgp34+v
3UScnB1ltkyWfA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 13:53:24 2024 by rpki-client on console-ams.rpki-client.org