Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
File:                     pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft (raw, json)
Hash identifier:          OaShwDMfjzVT35YZ7OJrqLsdI9h4oO388XUlfR6jQ2I=
Subject key identifier:   A2:9A:47:A5:9E:BE:FD:97:4B:F4:AC:4D:B5:F0:A3:F9:48:D3:32:E1
Authority key identifier: A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92
Certificate issuer:       /CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
Certificate serial:       01901DED2F494D2B61CFFE427DFB8510ADC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
Manifest number:          0CC3
Signing time:             Sat 15 Jun 2024 22:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:21 +0000
Files and hashes:         1: pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl (hash: aW84AX2+vpTpaIfbbFVg1J/HdrtQ9HymK6UMEGdTAxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2f:49:4d:2b:61:cf:fe:42:7d:fb:85:10:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
        Validity
            Not Before: Jun 15 22:03:21 2024 GMT
            Not After : Jun 16 22:03:21 2024 GMT
        Subject: CN=a29a47a59ebefd974bf4ac4db5f0a3f948d332e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:fa:c2:a0:40:b0:ad:5b:62:bf:58:62:a5:
                    22:dd:ae:1f:1c:94:09:66:ba:77:10:a8:65:59:3f:
                    85:0d:1f:ab:10:f8:e9:cc:e7:eb:87:11:5b:41:fe:
                    30:7f:71:5f:43:8a:c8:ba:55:b9:ad:a3:66:5b:13:
                    f4:fb:39:db:28:49:0c:1f:c7:c4:8c:cc:f0:eb:41:
                    af:6c:54:22:88:cd:3f:12:1f:b3:4f:af:fb:bf:df:
                    e1:b7:a1:ae:b3:6a:0f:4d:43:2d:14:4f:3c:ce:10:
                    cf:bf:fa:8c:f2:28:ae:8c:7c:75:8a:7a:b3:28:f3:
                    cd:86:e6:03:b5:f6:35:00:b3:46:d2:bf:2b:91:65:
                    47:84:19:9a:89:7b:b9:84:92:6b:fa:da:f1:a4:a9:
                    48:3c:fd:70:9e:97:a6:32:57:9d:47:02:95:22:22:
                    30:ea:98:b3:d2:d4:7a:69:cf:d3:d6:9e:b1:5c:b7:
                    f7:ec:a7:b3:3a:f6:85:42:ff:b9:56:d9:5f:6c:5a:
                    12:36:29:29:17:18:7a:d7:70:51:9f:10:24:3d:f9:
                    fc:3b:7d:fc:53:09:6b:d5:23:e4:ef:7e:e0:ff:c8:
                    9e:c7:60:2b:fe:91:1d:b7:a0:f7:c9:c9:e4:7c:d9:
                    c3:d1:3d:03:81:3f:3a:82:e4:61:4e:23:26:93:64:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:47:A5:9E:BE:FD:97:4B:F4:AC:4D:B5:F0:A3:F9:48:D3:32:E1
            X509v3 Authority Key Identifier:
                keyid:A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:56:aa:ce:77:40:e6:0b:8b:07:32:76:91:4c:63:a1:20:
         6b:34:0a:88:8f:b4:c7:fb:17:d9:56:fe:3b:75:de:36:1f:28:
         7a:2d:17:a9:89:05:80:5a:4b:4f:8b:4d:9f:02:c5:41:5c:6d:
         96:b8:6d:c5:91:61:6b:7f:c3:7d:ae:e5:2f:0a:cf:5e:e8:8b:
         f3:09:15:b6:5b:53:65:43:e5:72:cb:e6:4d:7c:f5:8d:1b:65:
         99:af:dd:e2:ed:d3:cb:f5:b5:fb:1b:66:7d:7e:82:18:ae:d2:
         81:26:df:45:6a:4c:6c:ba:55:89:d6:3c:de:c9:92:61:88:eb:
         5b:b7:36:e1:f4:9e:f3:59:d9:38:7f:08:c4:65:31:a5:28:6d:
         b2:7c:17:83:30:a6:df:ce:18:4e:06:76:6e:ef:9e:f6:9c:9f:
         09:9b:b5:16:66:6f:9d:78:82:77:b4:ee:2d:4c:4e:20:e4:79:
         0b:a4:29:54:40:1f:12:bd:91:2b:60:4d:14:21:6c:89:dd:2e:
         9d:6b:c9:94:3b:27:27:f4:eb:81:01:c4:91:88:a3:41:b3:d7:
         1e:b5:70:90:67:52:0a:09:98:84:48:7d:ef:e3:6a:98:03:23:
         1a:21:e3:22:87:c1:9c:4c:7e:16:e4:74:4e:23:1c:03:59:31:
         67:ad:32:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7S9JTSthz/5CffuFEK3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OGVmZDEwOGQ0YzViMGY0ZjlhODhhZTUzYmI3ZmVjOWQ1
OTRiOTIwHhcNMjQwNjE1MjIwMzIxWhcNMjQwNjE2MjIwMzIxWjAzMTEwLwYDVQQD
EyhhMjlhNDdhNTllYmVmZDk3NGJmNGFjNGRiNWYwYTNmOTQ4ZDMzMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywX6wqBAsK1bYr9YYqUi3a4fHJQJ
Zrp3EKhlWT+FDR+rEPjpzOfrhxFbQf4wf3FfQ4rIulW5raNmWxP0+znbKEkMH8fE
jMzw60GvbFQiiM0/Eh+zT6/7v9/ht6Gus2oPTUMtFE88zhDPv/qM8iiujHx1inqz
KPPNhuYDtfY1ALNG0r8rkWVHhBmaiXu5hJJr+trxpKlIPP1wnpemMledRwKVIiIw
6piz0tR6ac/T1p6xXLf37KezOvaFQv+5VtlfbFoSNikpFxh613BRnxAkPfn8O338
Uwlr1SPk737g/8iex2Ar/pEdt6D3ycnkfNnD0T0DgT86guRhTiMmk2TKCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKaR6Wevv2XS/SsTbXwo/lI0zLhMB8GA1UdIwQY
MBaAFKWO/RCNTFsPT5qIrlO7f+ydWUuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFk3OUVJMU1XdzlQbW9pdVU3dF83SjFaUzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hM2I1YjItNjYzOC00YTRiLTliODUt
MTVjYzVkYTA3ODI2LzEvcFk3OUVJMU1XdzlQbW9pdVU3dF83SjFaUzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hM2I1YjItNjYzOC00YTRiLTliODUtMTVjYzVkYTA3ODI2
LzEvcFk3OUVJMU1XdzlQbW9pdVU3dF83SjFaUzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8FWqs53
QOYLiwcydpFMY6EgazQKiI+0x/sX2Vb+O3XeNh8oei0XqYkFgFpLT4tNnwLFQVxt
lrhtxZFha3/Dfa7lLwrPXuiL8wkVtltTZUPlcsvmTXz1jRtlma/d4u3Ty/W1+xtm
fX6CGK7SgSbfRWpMbLpVidY83smSYYjrW7c24fSe81nZOH8IxGUxpShtsnwXgzCm
384YTgZ2bu+e9pyfCZu1FmZvnXiCd7TuLUxOIOR5C6QpVEAfEr2RK2BNFCFsid0u
nWvJlDsnJ/TrgQHEkYijQbPXHrVwkGdSCgmYhEh97+NqmAMjGiHjIofBnEx+FuR0
TiMcA1kxZ60yYg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:27 2024 by rpki-client on console-ams.rpki-client.org