Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File:                     jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier:          V3Fxizabjy6MnbQE98oxCfcZRO+BfC28KzLdcxCN/Hs=
Subject key identifier:   15:1A:AF:84:DE:D9:C7:D1:F0:2D:26:E7:65:36:E3:FB:AE:E3:76:92
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer:       /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial:       01901D0EF2F9741811CE1C9EC0C10CD44A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number:          0D68
Signing time:             Sat 15 Jun 2024 18:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:37 +0000
Files and hashes:         1: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: zsNTLTLkNz9iV9nMaDAb3FTNHXCwVov2uvoWlVIkSaA=)
                          2: sL4aXJHvxyoKoJQl43SrZ8tUvj0.roa (hash: cUwC11AtC5URON0wuKpLkHQEC1E0/ekwRUbMQjhvvOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:f2:f9:74:18:11:ce:1c:9e:c0:c1:0c:d4:4a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
        Validity
            Not Before: Jun 15 18:00:37 2024 GMT
            Not After : Jun 16 18:00:37 2024 GMT
        Subject: CN=151aaf84ded9c7d1f02d26e76536e3fbaee37692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:3b:64:e7:60:6c:ca:4a:14:2f:35:11:fa:
                    41:69:bd:01:68:a0:8d:73:6a:01:ed:6c:c7:e7:c9:
                    db:94:08:cc:6a:72:7d:bf:63:8b:36:d2:f6:f7:d7:
                    6d:23:0b:f6:80:86:a5:85:92:c4:b8:88:23:a3:bd:
                    19:6d:d9:b7:cb:e0:00:76:d5:36:36:83:bf:6a:17:
                    d2:ad:bb:d1:49:e5:c7:d3:cf:d3:77:b7:93:27:33:
                    ba:4f:ab:97:2e:3c:c5:32:84:cc:8e:25:b6:98:cc:
                    f8:8f:68:35:24:7d:65:02:09:89:66:6c:cc:cc:74:
                    f5:9d:90:09:88:b1:b4:5e:a1:63:e1:49:6d:2a:84:
                    a0:87:7f:94:ad:10:5e:fd:e4:76:c9:0b:3f:0c:85:
                    33:b0:a1:d8:df:fb:39:d3:e8:96:89:97:d7:c1:fd:
                    fd:49:dc:33:ff:0a:b9:75:3d:71:e3:11:04:f9:79:
                    85:18:7f:4f:00:e7:49:b7:a8:0d:3b:88:21:90:93:
                    d0:68:8e:b4:b3:8b:dc:c9:32:f4:f2:cb:b3:58:c6:
                    a8:59:15:a4:d2:ec:c9:9a:64:03:21:79:54:33:d7:
                    02:03:4b:51:ce:31:3f:8a:b1:a5:1d:c9:3a:92:c7:
                    5a:0e:5c:6d:42:31:8b:5d:24:1d:7f:c5:63:77:46:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:AF:84:DE:D9:C7:D1:F0:2D:26:E7:65:36:E3:FB:AE:E3:76:92
            X509v3 Authority Key Identifier:
                keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:99:50:98:52:a9:9c:0c:f1:fb:5f:75:66:a2:78:45:e8:86:
         d2:d6:9b:6c:d7:38:08:e0:02:89:97:59:b6:51:ca:1a:2b:51:
         82:92:b2:f3:92:16:29:7f:d2:cc:96:90:d7:47:a3:f2:03:0b:
         98:c9:c7:d7:ad:0b:3a:98:b1:fb:db:3d:92:6c:cc:71:22:09:
         38:c0:9c:f1:62:63:23:38:81:bb:33:e0:e9:e3:63:ef:72:0a:
         f2:6a:f1:d8:67:b4:06:74:01:33:f1:a1:77:72:cf:c8:ac:0e:
         9c:61:1f:d8:95:96:dd:9c:4e:db:ac:ae:b3:42:b2:45:d3:10:
         a4:63:ea:f1:1c:75:df:59:48:3c:d0:db:78:6e:bb:40:fd:e9:
         7b:cf:b3:e1:c7:1c:4d:f1:4f:eb:8d:89:d3:0d:c1:8c:6c:41:
         1e:99:a7:f5:0a:16:64:3c:b4:97:74:3f:96:be:70:55:42:78:
         ae:b3:f2:9b:c0:60:c0:4c:27:c4:e8:50:0e:b5:c3:6a:45:a0:
         fd:ba:33:d7:9c:af:b2:68:b6:de:fa:c1:cf:43:e8:96:00:d2:
         40:df:e2:93:78:cb:17:21:86:41:e6:5e:ae:ea:43:1b:41:47:
         49:6b:3e:e7:52:e3:73:c1:39:4c:af:b5:6d:c6:a3:56:d9:eb:
         91:e9:65:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDvL5dBgRzhyewMEM1EqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy
ZTEyNjkwHhcNMjQwNjE1MTgwMDM3WhcNMjQwNjE2MTgwMDM3WjAzMTEwLwYDVQQD
EygxNTFhYWY4NGRlZDljN2QxZjAyZDI2ZTc2NTM2ZTNmYmFlZTM3NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkA7ZOdgbMpKFC81EfpBab0BaKCN
c2oB7WzH58nblAjManJ9v2OLNtL299dtIwv2gIalhZLEuIgjo70Zbdm3y+AAdtU2
NoO/ahfSrbvRSeXH08/Td7eTJzO6T6uXLjzFMoTMjiW2mMz4j2g1JH1lAgmJZmzM
zHT1nZAJiLG0XqFj4UltKoSgh3+UrRBe/eR2yQs/DIUzsKHY3/s50+iWiZfXwf39
Sdwz/wq5dT1x4xEE+XmFGH9PAOdJt6gNO4ghkJPQaI60s4vcyTL08suzWMaoWRWk
0uzJmmQDIXlUM9cCA0tRzjE/irGlHck6ksdaDlxtQjGLXSQdf8Vjd0YPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUar4Te2cfR8C0m52U24/uu43aSMB8GA1UdIwQY
MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt
OGYxODFkM2EzZThmLzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm
LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5lQmFKp
nAzx+191ZqJ4ReiG0tabbNc4COACiZdZtlHKGitRgpKy85IWKX/SzJaQ10ej8gML
mMnH160LOpix+9s9kmzMcSIJOMCc8WJjIziBuzPg6eNj73IK8mrx2Ge0BnQBM/Gh
d3LPyKwOnGEf2JWW3ZxO26yus0KyRdMQpGPq8Rx131lIPNDbeG67QP3pe8+z4ccc
TfFP642J0w3BjGxBHpmn9QoWZDy0l3Q/lr5wVUJ4rrPym8BgwEwnxOhQDrXDakWg
/boz15yvsmi23vrBz0PolgDSQN/ik3jLFyGGQeZerupDG0FHSWs+51Ljc8E5TK+1
bcajVtnrkellow==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:59 2024 by rpki-client on console-ams.rpki-client.org