Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File:                     8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier:          43QoOVSayRccvf7wp6u9PhXBCSWKIrELeZH1O6TJpR0=
Subject key identifier:   1E:E3:82:4B:BC:76:92:C6:96:A4:56:D7:93:91:82:26:4B:CE:5E:87
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer:       /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial:       01901D7CE53C2DF440B3F72F2C5103DF806F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number:          0128
Signing time:             Sat 15 Jun 2024 20:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:42 +0000
Files and hashes:         1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: Pz4VHDxV1ElmiUq2GQgxjqWrRnX5KM8b0Bs3oZkjsa4=)
                          2: SiSWH4dsJFFFCQZZ0Ap90gQIjAg.roa (hash: PA7eoym4jTOyLJlckbr0wbSvG/buGKIffU/+PUSTyR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e5:3c:2d:f4:40:b3:f7:2f:2c:51:03:df:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
        Validity
            Not Before: Jun 15 20:00:42 2024 GMT
            Not After : Jun 16 20:00:42 2024 GMT
        Subject: CN=1ee3824bbc7692c696a456d7939182264bce5e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:03:b3:ff:e3:bb:5c:d8:e8:f7:c3:fd:1d:
                    81:ac:c2:2e:98:41:40:69:d5:8d:67:4c:c2:4b:1c:
                    de:f1:ad:eb:b1:b0:61:60:ec:ff:a3:42:7e:86:d8:
                    16:c1:52:31:f9:9d:a7:7b:fd:74:e2:6e:24:fb:49:
                    35:70:55:04:5f:bb:ed:b7:58:0e:9f:42:e4:0a:e4:
                    3f:1f:97:80:ac:a9:6f:d3:9d:9b:bc:2a:d5:53:d9:
                    4f:ae:3c:f7:7b:d6:42:59:bd:e9:e4:31:aa:16:22:
                    32:d5:82:90:b9:01:80:9e:52:d0:30:85:da:a5:41:
                    4e:af:71:6c:53:8c:a1:62:3d:58:b3:c2:47:12:17:
                    5f:16:30:bb:60:43:f7:6a:79:11:91:7e:17:26:67:
                    cc:93:2a:c6:41:30:11:bd:12:5c:f6:5c:54:b8:48:
                    9a:a0:cc:40:43:92:cf:08:19:47:e1:c8:4f:a0:ac:
                    9a:3d:1b:37:23:13:e7:2e:d0:84:50:e3:39:49:42:
                    c8:31:97:15:11:db:83:91:1f:0c:37:ee:76:3d:5a:
                    ec:bd:f0:3e:50:b9:fd:e4:fd:ea:70:a4:c8:7d:b0:
                    49:70:66:f7:af:ce:ca:99:ae:36:6f:6b:c5:b6:c2:
                    42:ee:c1:a4:1f:eb:30:2e:8b:c1:a3:b8:8f:7d:ae:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:82:4B:BC:76:92:C6:96:A4:56:D7:93:91:82:26:4B:CE:5E:87
            X509v3 Authority Key Identifier:
                keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:e1:69:ee:4b:12:73:9a:26:82:82:c9:8a:d6:6d:37:00:
         05:35:8b:46:af:f5:6e:21:4d:12:4b:04:14:a8:56:e5:eb:e3:
         db:9d:a6:9d:4f:b4:66:ff:0d:40:84:4e:97:61:87:ef:de:78:
         7e:0a:84:9d:bd:69:92:45:7b:fe:fd:45:60:57:07:a8:53:d6:
         0d:84:98:00:fd:23:54:27:c6:d5:81:0b:b3:5c:45:ac:32:52:
         e9:e9:04:e7:6e:bd:0b:a0:54:02:f6:d8:12:07:dd:3b:75:22:
         27:47:71:f9:dc:27:10:f4:2f:a2:4e:55:d6:db:a5:71:95:42:
         7c:f5:dc:31:bd:f4:21:b4:0a:12:86:17:95:49:12:93:7b:28:
         5d:76:ac:ea:24:e0:2f:3b:e8:6c:dd:6e:a3:6a:66:ad:c8:82:
         0d:a1:08:e2:6e:d4:66:51:11:3e:17:03:e3:76:c4:1a:77:ca:
         9e:75:6f:d4:e8:a5:19:2f:0e:b7:d1:8e:a1:6e:68:ca:af:3e:
         b8:24:8c:18:df:cb:e8:17:09:c5:50:69:7a:91:67:0f:75:7d:
         eb:e1:ae:71:94:2d:cd:67:99:0e:e7:9a:29:c9:1a:16:f8:25:
         f7:5a:31:83:70:b3:41:c9:ab:b0:cc:16:2d:a3:65:83:01:8b:
         ea:e3:83:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdfOU8LfRAs/cvLFED34BvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjQwNjE1MjAwMDQyWhcNMjQwNjE2MjAwMDQyWjAzMTEwLwYDVQQD
EygxZWUzODI0YmJjNzY5MmM2OTZhNDU2ZDc5MzkxODIyNjRiY2U1ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrwDs//ju1zY6PfD/R2BrMIumEFA
adWNZ0zCSxze8a3rsbBhYOz/o0J+htgWwVIx+Z2ne/104m4k+0k1cFUEX7vtt1gO
n0LkCuQ/H5eArKlv052bvCrVU9lPrjz3e9ZCWb3p5DGqFiIy1YKQuQGAnlLQMIXa
pUFOr3FsU4yhYj1Ys8JHEhdfFjC7YEP3ankRkX4XJmfMkyrGQTARvRJc9lxUuEia
oMxAQ5LPCBlH4chPoKyaPRs3IxPnLtCEUOM5SULIMZcVEduDkR8MN+52PVrsvfA+
ULn95P3qcKTIfbBJcGb3r87Kma42b2vFtsJC7sGkH+swLovBo7iPfa60MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7jgku8dpLGlqRW15ORgiZLzl6HMB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmvhae5L
EnOaJoKCyYrWbTcABTWLRq/1biFNEksEFKhW5evj252mnU+0Zv8NQIROl2GH7954
fgqEnb1pkkV7/v1FYFcHqFPWDYSYAP0jVCfG1YELs1xFrDJS6ekE5269C6BUAvbY
EgfdO3UiJ0dx+dwnEPQvok5V1tulcZVCfPXcMb30IbQKEoYXlUkSk3soXXas6iTg
LzvobN1uo2pmrciCDaEI4m7UZlERPhcD43bEGnfKnnVv1OilGS8Ot9GOoW5oyq8+
uCSMGN/L6BcJxVBpepFnD3V96+GucZQtzWeZDueaKckaFvgl91oxg3CzQcmrsMwW
LaNlgwGL6uOD+A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:35 2024 by rpki-client on console-fra.rpki-client.org