Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          jaGfELHczWTpTS5snlmzUHBGkg/UxS8dGxKQU9mQch4=
Subject key identifier:   5D:47:C1:C6:FB:BE:4C:71:BA:A2:EC:E1:B8:5B:CB:B6:5B:82:9F:D9
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       01901F6B37332AEDDC09EEAA726A70619A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 05:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 05:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 05:00:38 +0000
Files and hashes:         1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: yDlfKDiYFRtFRIbi/x6ukM+pAth0oaGg9q1GKfyGanY=)
                          2: 2COVhH4yhPdvhmDuhMznWdAdtkA.roa (hash: di9r1yyeiyk2cqdXnVic7Bh/hy/j1yjb/OMFPBEPQ3U=)
                          3: 5jGGSJF4C0EvaGtK2odvF8Fz3VQ.roa (hash: ASNn4tVN+o+IKJ+tM/Hmmn4cqkB4YpdW65GtjRpoXEs=)
                          4: 6M0pg-uzoUyOqQWo4OZCzfYIIv8.roa (hash: bfRyZvvl8P9/J8fuGStIams9hL+fVVt6I7EaLI+M49w=)
                          5: ZvG-wPwvWSeMXpuj414eAd_1t1c.roa (hash: MDU5vtIli40fDsbAPXa9MLL/r11h5GqgZBetoaF1nSE=)
                          6: gA5ufNfy6aAtQLo5xisFpgjmmIA.roa (hash: lCTpbMWUn/qlWUO71NRhxJtdGqLbfBQ56mZ+Vhr5GVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:6b:37:33:2a:ed:dc:09:ee:aa:72:6a:70:61:9a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Jun 16 05:00:38 2024 GMT
            Not After : Jun 17 05:00:38 2024 GMT
        Subject: CN=5d47c1c6fbbe4c71baa2ece1b85bcbb65b829fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:90:ce:2c:b5:ce:54:83:8e:11:7e:bd:5c:
                    20:bf:7e:61:51:8f:70:00:ec:82:e7:38:49:3c:b6:
                    39:91:5b:1d:37:ee:92:7a:53:d6:c4:8d:b6:9b:d4:
                    30:fe:50:85:ff:7f:bb:70:35:87:65:26:c0:ed:52:
                    5f:ac:97:dc:4f:b6:c0:20:7c:2c:13:2c:38:64:24:
                    8f:dc:d4:1d:70:c0:86:de:04:e0:a9:9e:36:5c:33:
                    be:e5:a5:ed:61:e8:89:d1:a8:5c:86:0a:c6:a1:f7:
                    dc:8e:66:51:d0:b0:8c:0e:03:2a:0b:d5:56:f0:97:
                    a8:e3:2f:ed:4a:3a:3a:d9:42:fc:32:dc:7d:12:cb:
                    72:68:91:d6:e0:88:9a:06:3b:d0:01:7a:ef:59:5d:
                    9d:fc:f3:7c:56:f5:c4:72:e9:1d:59:a8:28:4f:f3:
                    6d:9f:fe:a3:07:bb:33:be:8f:aa:07:08:8a:cb:1a:
                    a1:65:8b:22:6f:9b:a9:a4:e2:b3:43:2a:35:6d:aa:
                    ce:80:09:3f:4a:a2:2f:33:da:24:da:ad:a4:fa:ac:
                    b6:9b:2e:e4:eb:eb:82:11:d6:80:f5:2f:e5:b3:72:
                    53:ba:03:5c:55:bf:fc:ed:5d:38:eb:e6:2d:8a:5b:
                    00:dd:56:ef:52:54:30:fb:fb:05:17:4d:21:a5:e2:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:47:C1:C6:FB:BE:4C:71:BA:A2:EC:E1:B8:5B:CB:B6:5B:82:9F:D9
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:48:3f:1c:09:d0:57:93:e2:89:35:ba:98:04:3f:89:60:52:
         35:55:e8:27:ce:1b:ed:e1:d5:4c:f7:fa:ff:78:69:48:cf:92:
         2c:0d:87:05:79:4a:fe:04:d6:a4:43:b6:47:aa:30:3f:5d:bb:
         8b:8b:06:b9:b5:d5:b7:6c:6c:6c:53:e7:52:e8:57:fd:3e:31:
         da:36:1d:21:20:36:bd:b2:1d:8e:50:9f:39:73:ed:1a:a0:38:
         53:a6:d1:66:ba:f8:78:15:64:dc:cd:0e:26:15:62:75:d6:a3:
         91:42:9d:b1:53:11:8e:35:14:9f:9e:4e:3d:fb:f4:15:78:fd:
         e9:4a:6f:4d:09:91:fe:9f:73:53:bb:a1:69:70:62:03:64:77:
         89:fe:20:d4:f5:ac:3b:9d:4b:60:bc:9d:18:e5:32:ae:19:ca:
         09:d7:45:7f:aa:50:f0:46:bf:98:fc:d5:8b:56:1d:26:3a:4d:
         ae:6c:47:8b:05:41:1c:8b:b8:cb:b2:35:76:f3:d4:64:72:4f:
         3a:bb:d4:ac:9b:3f:c5:8d:29:f3:1e:05:5c:a3:43:d8:c3:b2:
         d4:7c:a2:10:52:f9:3d:ae:8c:8a:bb:59:64:77:87:87:55:15:
         8a:b7:bb:68:e0:74:d8:2b:d8:dd:2b:b5:22:22:a3:d3:ec:db:
         46:8c:38:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfazczKu3cCe6qcmpwYZpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx
N2VhMTMwHhcNMjQwNjE2MDUwMDM4WhcNMjQwNjE3MDUwMDM4WjAzMTEwLwYDVQQD
Eyg1ZDQ3YzFjNmZiYmU0YzcxYmFhMmVjZTFiODViY2JiNjViODI5ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZuQziy1zlSDjhF+vVwgv35hUY9w
AOyC5zhJPLY5kVsdN+6SelPWxI22m9Qw/lCF/3+7cDWHZSbA7VJfrJfcT7bAIHws
Eyw4ZCSP3NQdcMCG3gTgqZ42XDO+5aXtYeiJ0ahchgrGoffcjmZR0LCMDgMqC9VW
8Jeo4y/tSjo62UL8Mtx9EstyaJHW4IiaBjvQAXrvWV2d/PN8VvXEcukdWagoT/Nt
n/6jB7szvo+qBwiKyxqhZYsib5uppOKzQyo1barOgAk/SqIvM9ok2q2k+qy2my7k
6+uCEdaA9S/ls3JTugNcVb/87V046+YtilsA3VbvUlQw+/sFF00hpeIavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1Hwcb7vkxxuqLs4bhby7Zbgp/ZMB8GA1UdIwQY
MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et
YzhlODYzYzFhOGQxLzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx
LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyEg/HAnQ
V5PiiTW6mAQ/iWBSNVXoJ84b7eHVTPf6/3hpSM+SLA2HBXlK/gTWpEO2R6owP127
i4sGubXVt2xsbFPnUuhX/T4x2jYdISA2vbIdjlCfOXPtGqA4U6bRZrr4eBVk3M0O
JhViddajkUKdsVMRjjUUn55OPfv0FXj96UpvTQmR/p9zU7uhaXBiA2R3if4g1PWs
O51LYLydGOUyrhnKCddFf6pQ8Ea/mPzVi1YdJjpNrmxHiwVBHIu4y7I1dvPUZHJP
OrvUrJs/xY0p8x4FXKND2MOy1HyiEFL5Pa6MirtZZHeHh1UVire7aOB02CvY3Su1
IiKj0+zbRow4+g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:30:10 2024 by rpki-client on console-fra.rpki-client.org