Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File:                     Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier:          d2ExF9G9HmbhcFrUDVZYA8S/O+jbxxDUcp2gbRrSDQY=
Subject key identifier:   76:7B:1F:F1:0D:EF:A2:99:BF:0F:42:0B:5F:6A:DF:B9:00:8E:20:D8
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer:       /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial:       019048D584F02A929980B62D12E0E30DD498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number:          0C99
Signing time:             Mon 24 Jun 2024 06:01:11 +0000
Manifest this update:     Mon 24 Jun 2024 06:01:11 +0000
Manifest next update:     Tue 25 Jun 2024 06:01:11 +0000
Files and hashes:         1: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: OMdRkxQvQ5EVLdSWF4sk0rhq1yEPiDo63mJM6BncfMY=)
                          2: lEXlTYgc1VivLY8DRNAz_sz89Bw.roa (hash: CiPmwSFuqQy+UuaJiDK6CkaDyZSY8qHcd7zI7jlyf2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:84:f0:2a:92:99:80:b6:2d:12:e0:e3:0d:d4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
        Validity
            Not Before: Jun 24 06:01:11 2024 GMT
            Not After : Jun 25 06:01:11 2024 GMT
        Subject: CN=767b1ff10defa299bf0f420b5f6adfb9008e20d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:96:ba:e6:91:07:96:3a:ec:d5:09:f8:4f:
                    22:c2:d8:27:bc:75:a0:d9:c2:23:8f:8e:0f:f4:40:
                    e3:67:83:5c:a2:a5:3e:97:fc:8b:3f:9a:f5:34:74:
                    ec:31:d4:f9:ac:d3:6a:a8:6c:34:bc:c3:b1:1d:ce:
                    c3:77:fe:0a:96:ed:b2:b6:42:55:59:4f:9e:83:c9:
                    75:4c:a5:97:5a:74:52:d5:bc:36:56:52:66:5c:02:
                    fc:ac:ee:1e:69:7b:40:5d:75:eb:c6:73:8b:70:52:
                    60:e4:bc:a4:21:ec:2a:d5:54:df:8e:b4:e7:12:05:
                    10:c3:fb:82:63:b7:9c:64:2b:25:9a:80:21:2e:38:
                    45:98:22:50:70:8e:19:6f:8c:87:23:78:0b:83:79:
                    5f:8f:19:e5:c3:44:0a:61:ec:b7:c8:07:b8:39:c2:
                    27:f9:42:e1:e6:e6:93:49:a7:f7:02:74:1f:08:8d:
                    7d:e5:68:70:3b:37:5e:30:cc:33:3a:b5:f0:dd:c2:
                    5f:58:db:7a:66:07:97:66:8a:ea:2a:ac:92:75:0a:
                    2b:f1:c7:f9:9d:a0:3f:97:d7:14:5b:f6:6a:46:d7:
                    25:a1:f7:95:0c:01:f0:a4:63:ff:f3:a3:99:53:2a:
                    33:66:80:25:ad:35:d7:bc:23:29:ff:b3:4b:6f:b1:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:1F:F1:0D:EF:A2:99:BF:0F:42:0B:5F:6A:DF:B9:00:8E:20:D8
            X509v3 Authority Key Identifier:
                keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:80:1f:f4:62:36:22:40:5c:c2:d3:0a:53:3f:e1:c2:15:
         4a:57:d4:cc:73:0d:1d:dd:2d:55:8f:22:69:12:89:07:a3:d5:
         ff:da:22:f7:40:7a:02:5a:3d:b3:30:17:f7:b3:19:a7:71:12:
         c4:ec:db:af:66:66:b0:4b:55:89:f8:e0:75:f3:33:fb:65:9e:
         c7:c0:dd:e7:b4:9f:c9:49:01:04:b6:58:5f:e6:ed:b5:dc:80:
         72:84:77:34:53:11:c5:80:10:4e:61:67:fa:6e:ed:9c:eb:fa:
         09:27:4e:d5:68:53:87:65:c6:e9:3a:36:b1:1a:dd:dc:10:c5:
         26:cc:ec:82:df:d4:40:ba:0d:f8:a2:82:44:44:2c:d1:7a:87:
         1d:7d:8b:3c:2f:bb:5c:b7:e7:88:0d:c0:6c:f5:c2:47:61:48:
         a6:2c:36:77:eb:e5:91:53:fe:33:e4:2d:f8:df:90:d8:ab:9f:
         f9:65:d0:a3:09:6e:80:60:52:a5:7d:f0:c0:49:63:cd:1d:93:
         51:68:3e:ac:04:5f:3c:b8:07:ae:cb:11:e3:5c:30:a4:10:20:
         62:87:40:a2:4c:de:d3:66:f4:a8:8a:b1:57:6b:77:d7:0f:06:
         88:ce:39:fa:21:75:e6:6b:d3:1d:3f:39:07:34:bc:74:2b:c0:
         fd:da:52:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBI1YTwKpKZgLYtEuDjDdSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjQwNjI0MDYwMTExWhcNMjQwNjI1MDYwMTExWjAzMTEwLwYDVQQD
Eyg3NjdiMWZmMTBkZWZhMjk5YmYwZjQyMGI1ZjZhZGZiOTAwOGUyMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6CWuuaRB5Y67NUJ+E8iwtgnvHWg
2cIjj44P9EDjZ4NcoqU+l/yLP5r1NHTsMdT5rNNqqGw0vMOxHc7Dd/4Klu2ytkJV
WU+eg8l1TKWXWnRS1bw2VlJmXAL8rO4eaXtAXXXrxnOLcFJg5LykIewq1VTfjrTn
EgUQw/uCY7ecZCslmoAhLjhFmCJQcI4Zb4yHI3gLg3lfjxnlw0QKYey3yAe4OcIn
+ULh5uaTSaf3AnQfCI195WhwOzdeMMwzOrXw3cJfWNt6ZgeXZorqKqySdQor8cf5
naA/l9cUW/ZqRtclofeVDAHwpGP/86OZUyozZoAlrTXXvCMp/7NLb7ERQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ7H/EN76KZvw9CC19q37kAjiDYMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq6AH/Ri
NiJAXMLTClM/4cIVSlfUzHMNHd0tVY8iaRKJB6PV/9oi90B6Alo9szAX97MZp3ES
xOzbr2ZmsEtVifjgdfMz+2Wex8Dd57SfyUkBBLZYX+bttdyAcoR3NFMRxYAQTmFn
+m7tnOv6CSdO1WhTh2XG6To2sRrd3BDFJszsgt/UQLoN+KKCREQs0XqHHX2LPC+7
XLfniA3AbPXCR2FIpiw2d+vlkVP+M+Qt+N+Q2Kuf+WXQowlugGBSpX3wwEljzR2T
UWg+rARfPLgHrssR41wwpBAgYodAokze02b0qIqxV2t31w8GiM45+iF15mvTHT85
BzS8dCvA/dpSow==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:08:46 2024 by rpki-client on console-ams.rpki-client.org