Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          4MPQrKrvDO0i53+o5a15iHVNhGUNLB8MfXPNA1QaRU8=
Subject key identifier:   5C:D5:7C:AF:8C:88:6C:02:F2:99:2C:79:55:1F:3D:38:DB:CF:5B:A3
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       01901F34FEB2E3A85BD93A26BDB2F566BA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          11CD
Signing time:             Sun 16 Jun 2024 04:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:25 +0000
Files and hashes:         1: 8LR7E753kWKwrVyCsTuWcl7GCQo.roa (hash: xv7Kn/nHHoBfzHD+tyVsPM12ZkSeUwVtaFSTL+V9ySU=)
                          2: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: o6eOLOuW2aK2NQyjWN6sfuCTABJfQyF3UK0bk6KOcFY=)
                          3: sJs-qYwI-qHmaW2c1PbJ6llwbgE.roa (hash: Y32z34FaHYhMPAiR8OZ/boZhhYuRRwIuJ+ct+oV1P0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:fe:b2:e3:a8:5b:d9:3a:26:bd:b2:f5:66:ba:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Jun 16 04:01:25 2024 GMT
            Not After : Jun 17 04:01:25 2024 GMT
        Subject: CN=5cd57caf8c886c02f2992c79551f3d38dbcf5ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:79:e7:ac:be:13:33:a3:a4:26:e6:96:5e:
                    76:37:e1:dc:01:12:e7:48:51:37:8c:58:2f:6f:1f:
                    aa:88:cc:94:3f:c2:c0:59:2b:59:ef:09:2a:d6:7c:
                    6e:38:d6:55:b2:28:30:9e:1a:5e:40:4f:b6:04:72:
                    d9:69:a4:20:cd:10:01:bc:b3:76:fb:f0:04:fa:b5:
                    5e:2f:8a:7a:dc:ce:95:fa:50:dd:2a:b6:41:e5:f3:
                    41:eb:aa:bd:99:c4:ad:36:9f:cd:fa:12:cd:b9:b3:
                    e6:a2:db:32:ba:2c:8b:7a:49:ba:48:70:2f:f3:fb:
                    a5:05:ef:10:44:2a:cc:94:75:0f:7f:57:88:33:09:
                    5e:43:de:76:b5:aa:eb:87:f0:13:5a:06:b6:77:24:
                    b2:c5:b8:82:78:a6:85:cc:92:ee:00:6b:5a:a8:03:
                    2b:cf:57:8c:26:30:04:d7:59:ae:44:c9:54:c7:6a:
                    96:6b:5f:9c:85:39:b1:75:40:6c:a9:61:4c:32:2e:
                    0b:8c:b2:62:91:73:03:a0:9d:ce:4d:15:64:f2:d9:
                    40:52:2c:56:b9:79:74:d6:d8:34:03:03:a3:58:95:
                    16:d4:65:5a:69:6d:60:80:bf:6d:5d:2c:57:0e:68:
                    2d:36:5d:e8:f1:b3:0c:f5:2d:4c:bb:cf:bb:78:bb:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D5:7C:AF:8C:88:6C:02:F2:99:2C:79:55:1F:3D:38:DB:CF:5B:A3
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:3c:5f:12:30:41:29:6d:77:85:98:99:be:94:7e:dd:9c:
         49:ab:01:f1:33:ae:42:bd:31:9a:8d:38:1f:b1:ba:e2:d7:45:
         f2:4e:06:71:fc:d6:4b:07:cc:f8:2a:9e:8b:f8:37:e1:57:a0:
         65:38:0b:07:5a:c3:6b:a9:a4:3b:72:cb:1e:83:26:2d:32:58:
         b6:d0:5b:c9:b9:08:e3:46:56:cd:52:36:0a:27:55:f0:a3:9f:
         d5:6f:8a:1a:3b:a2:05:33:76:af:d3:39:d3:bb:f9:3f:12:a3:
         7d:12:54:0b:97:53:d1:e1:88:12:54:90:f0:96:53:c8:10:d1:
         df:75:9b:bf:62:de:f3:8a:5c:14:f8:b5:74:f9:f8:0b:0d:ae:
         c9:d9:e0:3c:dc:dd:87:e7:5d:32:08:06:0c:92:7b:ed:16:61:
         02:05:8d:83:94:bf:1a:89:15:c8:13:76:9f:41:18:b0:23:7f:
         13:74:29:73:fd:b4:f9:5b:3a:27:e3:bb:d1:e8:bf:f2:ab:7a:
         40:99:f9:5f:6e:b5:0a:65:0a:59:e5:2c:62:51:42:1d:7e:ea:
         16:1f:90:82:66:e6:f9:2b:51:66:7f:00:14:ec:7e:7a:e2:51:
         fd:52:b9:51:f6:24:31:11:ac:ef:55:26:4e:c3:fc:ee:f6:7b:
         72:58:b7:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNP6y46hb2TomvbL1ZrpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjQwNjE2MDQwMTI1WhcNMjQwNjE3MDQwMTI1WjAzMTEwLwYDVQQD
Eyg1Y2Q1N2NhZjhjODg2YzAyZjI5OTJjNzk1NTFmM2QzOGRiY2Y1YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzN556y+EzOjpCbmll52N+HcARLn
SFE3jFgvbx+qiMyUP8LAWStZ7wkq1nxuONZVsigwnhpeQE+2BHLZaaQgzRABvLN2
+/AE+rVeL4p63M6V+lDdKrZB5fNB66q9mcStNp/N+hLNubPmotsyuiyLekm6SHAv
8/ulBe8QRCrMlHUPf1eIMwleQ952tarrh/ATWga2dySyxbiCeKaFzJLuAGtaqAMr
z1eMJjAE11muRMlUx2qWa1+chTmxdUBsqWFMMi4LjLJikXMDoJ3OTRVk8tlAUixW
uXl01tg0AwOjWJUW1GVaaW1ggL9tXSxXDmgtNl3o8bMM9S1Mu8+7eLsS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzVfK+MiGwC8pkseVUfPTjbz1ujMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuc8XxIw
QSltd4WYmb6Uft2cSasB8TOuQr0xmo04H7G64tdF8k4GcfzWSwfM+Cqei/g34Veg
ZTgLB1rDa6mkO3LLHoMmLTJYttBbybkI40ZWzVI2CidV8KOf1W+KGjuiBTN2r9M5
07v5PxKjfRJUC5dT0eGIElSQ8JZTyBDR33Wbv2Le84pcFPi1dPn4Cw2uydngPNzd
h+ddMggGDJJ77RZhAgWNg5S/GokVyBN2n0EYsCN/E3Qpc/20+Vs6J+O70ei/8qt6
QJn5X261CmUKWeUsYlFCHX7qFh+Qgmbm+StRZn8AFOx+euJR/VK5UfYkMRGs71Um
TsP87vZ7cli3CQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:31:19 2024 by rpki-client on console-ams.rpki-client.org