Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File:                     u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier:          RnojO32i7YARk1AcHUQBQCuzbH27DaucZh/1TIuUu1I=
Subject key identifier:   CA:E6:67:2D:88:4B:D2:08:3C:5F:4B:5A:93:5C:DC:C4:AF:7A:81:A5
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer:       /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial:       01901BFEDEDC71112FE5DDABF1E169EBBFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number:          10A0
Signing time:             Sat 15 Jun 2024 13:03:26 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:26 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:26 +0000
Files and hashes:         1: gMXKuYY3VUIeAtmGhOy7amjQBjc.roa (hash: /ZXDIIFpfz3sPGstO361xbkLo1P5DyMJp94M8/NceMQ=)
                          2: kg-X3vXZg48bU6ImsIztKmS_FzE.roa (hash: nRM7rXh74ZxW2a1memTAGXkFe+xQ7LRRqBUOffrqzOw=)
                          3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: gwxSkzLjLYzWROkQXN7NXIFxTp3VKSFSCyDsK20K7o0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:de:dc:71:11:2f:e5:dd:ab:f1:e1:69:eb:bf:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
        Validity
            Not Before: Jun 15 13:03:26 2024 GMT
            Not After : Jun 16 13:03:26 2024 GMT
        Subject: CN=cae6672d884bd2083c5f4b5a935cdcc4af7a81a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:69:34:41:10:b7:31:b7:4d:2d:9e:52:79:
                    5b:9d:d1:c2:45:bb:09:b7:58:19:40:19:a7:66:d0:
                    6c:35:e9:ec:e2:70:eb:a3:87:65:2e:6a:24:4f:54:
                    fd:43:19:5b:51:bb:b9:ac:10:1d:b2:aa:4d:85:e8:
                    5f:c0:6c:b2:14:74:e1:af:24:2b:1b:58:d0:ed:40:
                    5f:b4:1a:65:3d:21:5a:f7:72:46:f5:8b:cc:0f:32:
                    8f:a4:dc:a2:e1:c5:bc:3e:d2:bf:e1:ab:c6:e8:59:
                    bf:6e:a3:f2:52:a1:f1:53:f3:96:e1:de:08:8c:f0:
                    cf:d0:15:29:5c:14:b5:c6:ae:c1:af:b2:b9:1e:da:
                    4d:03:f4:54:14:1e:21:b1:1a:92:00:72:db:62:c0:
                    9f:3c:a5:82:f3:05:1f:12:94:b9:2f:88:42:cc:a1:
                    b1:dc:65:9f:1c:61:70:1e:90:0e:bb:41:a9:f1:12:
                    91:77:ea:6e:a1:2c:8d:c2:93:b1:63:31:e8:02:5a:
                    2d:8a:ed:ac:c3:8b:da:43:4a:2f:e5:d3:a7:fa:65:
                    c9:b2:10:ca:fc:0c:48:12:ab:af:af:8a:33:9b:63:
                    67:36:82:a6:8f:1f:f2:3d:73:75:97:fd:9f:f7:b4:
                    13:13:ab:04:3d:23:2f:49:18:58:58:e9:76:03:e4:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E6:67:2D:88:4B:D2:08:3C:5F:4B:5A:93:5C:DC:C4:AF:7A:81:A5
            X509v3 Authority Key Identifier:
                keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c6:15:ac:0d:92:d3:c4:af:91:d6:3d:99:5f:5f:f9:42:6f:
         f0:0b:92:9e:07:b6:59:f2:96:6b:07:8d:08:70:53:0f:a9:ed:
         90:e4:fc:6d:47:a7:c5:7a:59:c2:24:c5:75:6c:dd:ac:89:d9:
         0f:a3:24:01:15:df:7e:90:91:97:6a:26:f6:18:64:93:42:94:
         ee:72:7c:47:89:c9:5b:35:8b:a0:df:35:78:1a:0d:e5:ee:ad:
         37:3b:b2:20:d3:2f:71:59:e9:42:44:f5:85:1e:8d:e2:96:f9:
         e0:76:88:15:ef:71:81:b7:c8:74:d9:60:92:87:4b:78:90:09:
         98:bc:34:4f:3f:a3:20:84:fc:5b:f9:33:88:25:b3:37:5d:39:
         02:65:20:c2:67:19:ca:05:67:07:7f:59:4c:6c:fd:c0:bc:eb:
         f1:66:1b:3f:ae:35:0f:9f:c9:1c:79:30:38:74:c7:fd:6a:d0:
         9d:1e:7c:c3:ac:d2:52:89:df:ca:ed:e9:4d:b3:87:6d:0d:9e:
         93:70:b6:f7:b2:d5:5c:48:35:28:92:19:e1:ac:48:12:25:91:
         56:1c:09:e1:33:ab:8f:56:ba:38:c7:c4:a8:6d:ce:85:b0:ce:
         48:e4:0b:a3:5e:2d:9d:a8:32:fc:be:66:a7:43:f5:27:55:50:
         7f:57:93:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/t7ccREv5d2r8eFp67+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTAyNmVmMjY5MjA5MDlkOTMxZWE0ZGFjOWQ5MzkwNDg2
YjQxNTMwHhcNMjQwNjE1MTMwMzI2WhcNMjQwNjE2MTMwMzI2WjAzMTEwLwYDVQQD
EyhjYWU2NjcyZDg4NGJkMjA4M2M1ZjRiNWE5MzVjZGNjNGFmN2E4MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35xpNEEQtzG3TS2eUnlbndHCRbsJ
t1gZQBmnZtBsNens4nDro4dlLmokT1T9QxlbUbu5rBAdsqpNhehfwGyyFHThryQr
G1jQ7UBftBplPSFa93JG9YvMDzKPpNyi4cW8PtK/4avG6Fm/bqPyUqHxU/OW4d4I
jPDP0BUpXBS1xq7Br7K5HtpNA/RUFB4hsRqSAHLbYsCfPKWC8wUfEpS5L4hCzKGx
3GWfHGFwHpAOu0Gp8RKRd+puoSyNwpOxYzHoAlotiu2sw4vaQ0ov5dOn+mXJshDK
/AxIEquvr4ozm2NnNoKmjx/yPXN1l/2f97QTE6sEPSMvSRhYWOl2A+QeXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrmZy2IS9IIPF9LWpNc3MSveoGlMB8GA1UdIwQY
MBaAFLvgJu8mkgkJ2THqTaydk5BIa0FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt
MDU5YmFiMDE1Y2MzLzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz
LzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8YVrA2S
08SvkdY9mV9f+UJv8AuSnge2WfKWaweNCHBTD6ntkOT8bUenxXpZwiTFdWzdrInZ
D6MkARXffpCRl2om9hhkk0KU7nJ8R4nJWzWLoN81eBoN5e6tNzuyINMvcVnpQkT1
hR6N4pb54HaIFe9xgbfIdNlgkodLeJAJmLw0Tz+jIIT8W/kziCWzN105AmUgwmcZ
ygVnB39ZTGz9wLzr8WYbP641D5/JHHkwOHTH/WrQnR58w6zSUonfyu3pTbOHbQ2e
k3C297LVXEg1KJIZ4axIEiWRVhwJ4TOrj1a6OMfEqG3OhbDOSOQLo14tnagy/L5m
p0P1J1VQf1eTDA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:17 2024 by rpki-client on console-fra.rpki-client.org