Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File:                     naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier:          6D2D2TGZ++ib77hwl8AgOzmumxACQo6fW1QjA2OEjAU=
Subject key identifier:   2B:73:6A:5E:BA:05:69:5C:C3:AD:AD:1F:C7:A9:60:3A:FB:83:52:34
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer:       /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial:       01901C6A1CCEF090E9AEA897942C3BFD91BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number:          10D1
Signing time:             Sat 15 Jun 2024 15:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:34 +0000
Files and hashes:         1: WlE0pnb_a8E0LWydKNNKkO-Wvms.roa (hash: OwFGuRY7hPFwg7QV9kjn3+RIiDCgK7LVwDC4mb4e/+c=)
                          2: kbVjWHUOhvK4ka2ezAqEHni7BbQ.roa (hash: pm2azc3oPkqvFCGq1T9SqVLLjFfTRuHeKQFs9NBjmCE=)
                          3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: lw1oz1uLlONpucaXUpEJQjZ13dDAdT9XANBYImfluKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:1c:ce:f0:90:e9:ae:a8:97:94:2c:3b:fd:91:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
        Validity
            Not Before: Jun 15 15:00:34 2024 GMT
            Not After : Jun 16 15:00:34 2024 GMT
        Subject: CN=2b736a5eba05695cc3adad1fc7a9603afb835234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:ac:f1:96:d1:d5:09:6c:ba:1f:f0:dd:47:
                    1e:30:95:e2:b3:15:2d:d5:fb:26:12:81:4f:5a:e1:
                    ef:45:b1:19:37:4e:1b:98:d7:a2:26:3c:3d:80:c0:
                    b3:d8:01:f2:3a:b0:01:e3:f9:12:4e:86:e1:35:64:
                    45:a2:64:c5:c6:bf:92:c5:23:5a:6a:21:a0:44:f7:
                    64:8e:d8:57:38:f5:0f:79:93:43:6d:95:e7:a0:56:
                    5d:1f:fe:00:1b:32:df:29:04:fd:88:fe:10:cd:d1:
                    47:80:18:e8:ce:4f:a6:28:c9:e0:5d:a2:d3:d1:8a:
                    29:6f:c2:26:c8:50:6e:15:af:de:7c:ba:1b:c9:32:
                    a3:d1:9d:52:ce:2c:96:9e:16:2e:60:45:31:e4:f6:
                    e0:a8:96:11:d7:7e:39:41:04:57:cb:5c:93:85:05:
                    df:d3:d9:88:8b:92:0d:94:ce:b3:91:53:c6:21:d0:
                    53:69:98:a1:b1:ff:4e:89:07:80:b8:e2:1d:d2:80:
                    14:36:6b:40:1e:f3:0d:e7:e4:a1:0a:f2:78:4d:24:
                    d7:f0:eb:a1:ad:ac:ae:51:38:0c:31:59:27:3d:46:
                    5f:ae:a5:66:9a:f7:88:2e:d5:95:48:86:3e:f6:3a:
                    c2:96:12:f5:3c:cc:f6:89:1a:1f:05:25:66:84:a2:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:6A:5E:BA:05:69:5C:C3:AD:AD:1F:C7:A9:60:3A:FB:83:52:34
            X509v3 Authority Key Identifier:
                keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:29:75:13:74:19:8b:22:68:cd:87:d2:63:5d:44:66:ed:
         89:af:0c:2d:fe:d2:93:51:9b:b9:85:05:15:8d:f9:ed:35:b5:
         60:6c:62:9e:40:ec:6c:2d:a1:ec:c2:62:e3:81:26:1f:73:97:
         46:4c:0a:70:11:50:68:2c:d9:89:ca:7b:cf:82:79:84:dc:77:
         12:01:4d:be:a4:e4:5b:13:26:61:6a:77:80:7e:36:98:c4:ed:
         86:c6:f9:32:cd:0c:9f:58:ab:2e:ab:36:7a:9d:42:62:7c:14:
         38:bb:43:6c:21:57:14:74:7c:76:ef:c0:d2:f0:1e:80:a3:9e:
         12:07:43:7c:0b:a6:58:bd:84:68:58:74:28:78:56:7e:8c:1f:
         5b:4d:73:1c:14:99:17:a1:e4:f7:dd:64:6d:e3:b7:91:c1:52:
         4b:e4:a6:10:ee:c8:18:e0:cd:eb:1a:f7:49:2d:48:72:1c:eb:
         c3:d7:c5:62:3d:dc:47:9d:e6:72:f6:e8:17:ba:f0:6c:0a:7f:
         28:d4:93:42:c4:b3:be:54:56:b4:9f:16:ff:17:53:59:9d:d3:
         f5:94:cf:3e:ae:b3:57:48:38:d9:78:50:62:d8:aa:e0:42:e9:
         02:96:a9:0e:ab:a1:e1:08:cd:9c:ff:06:07:1b:c6:6d:f4:37:
         70:62:c9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcahzO8JDprqiXlCw7/ZG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjQwNjE1MTUwMDM0WhcNMjQwNjE2MTUwMDM0WjAzMTEwLwYDVQQD
EygyYjczNmE1ZWJhMDU2OTVjYzNhZGFkMWZjN2E5NjAzYWZiODM1MjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Ks8ZbR1Qlsuh/w3UceMJXisxUt
1fsmEoFPWuHvRbEZN04bmNeiJjw9gMCz2AHyOrAB4/kSTobhNWRFomTFxr+SxSNa
aiGgRPdkjthXOPUPeZNDbZXnoFZdH/4AGzLfKQT9iP4QzdFHgBjozk+mKMngXaLT
0Yopb8ImyFBuFa/efLobyTKj0Z1SziyWnhYuYEUx5PbgqJYR1345QQRXy1yThQXf
09mIi5INlM6zkVPGIdBTaZihsf9OiQeAuOId0oAUNmtAHvMN5+ShCvJ4TSTX8Ouh
rayuUTgMMVknPUZfrqVmmveILtWVSIY+9jrClhL1PMz2iRofBSVmhKJ+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtzal66BWlcw62tH8epYDr7g1I0MB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRspdRN0
GYsiaM2H0mNdRGbtia8MLf7Sk1GbuYUFFY357TW1YGxinkDsbC2h7MJi44EmH3OX
RkwKcBFQaCzZicp7z4J5hNx3EgFNvqTkWxMmYWp3gH42mMTthsb5Ms0Mn1irLqs2
ep1CYnwUOLtDbCFXFHR8du/A0vAegKOeEgdDfAumWL2EaFh0KHhWfowfW01zHBSZ
F6Hk991kbeO3kcFSS+SmEO7IGODN6xr3SS1Ichzrw9fFYj3cR53mcvboF7rwbAp/
KNSTQsSzvlRWtJ8W/xdTWZ3T9ZTPPq6zV0g42XhQYtiq4ELpApapDquh4QjNnP8G
BxvGbfQ3cGLJeg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:51 2024 by rpki-client on console-fra.rpki-client.org