Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File:                     nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier:          Mhl+2TwdWi/mZkshfPhaAOlgBSq7C5GsdfH25BLFTaQ=
Subject key identifier:   A9:33:EA:01:8B:BF:74:F4:43:DA:89:10:EF:E7:B5:1A:7F:3A:A4:CE
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer:       /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial:       01901D0EFA5FD7A82E10790DF46B77E0E878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number:          0C9D
Signing time:             Sat 15 Jun 2024 18:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:39 +0000
Files and hashes:         1: j-sy2l9EHktQdLQ1UzSC6KVZHLE.roa (hash: gb6ClP/TiYPCyus1lIoMNdCvP2VdAosplGBjLyov9w0=)
                          2: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: IJyVYpH7Q4NmxqSJunZ1JFoKMK6i25ocDlvtcXCVKn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:fa:5f:d7:a8:2e:10:79:0d:f4:6b:77:e0:e8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
        Validity
            Not Before: Jun 15 18:00:39 2024 GMT
            Not After : Jun 16 18:00:39 2024 GMT
        Subject: CN=a933ea018bbf74f443da8910efe7b51a7f3aa4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:28:83:f4:12:7d:86:30:5e:90:14:02:fd:
                    af:1f:1d:a0:6d:f5:0b:96:a9:e7:d0:78:f0:32:07:
                    1d:9b:83:72:4f:f1:e3:55:50:70:cd:71:67:30:a2:
                    98:07:b8:53:ed:a3:ef:63:cd:a7:18:4d:53:c2:db:
                    c4:d0:33:a7:bb:77:c6:92:f4:2c:3b:14:d8:98:d8:
                    2a:c5:32:c0:de:11:29:00:c0:3f:e5:8e:36:e0:18:
                    71:fb:e2:39:82:00:c1:45:ec:62:c3:89:10:b6:89:
                    15:a6:ce:09:d0:79:b6:de:86:ff:2a:a1:fd:49:e7:
                    da:db:dc:e9:5e:3e:cb:21:92:23:bc:82:8b:4b:fe:
                    a7:aa:05:af:ed:4d:ab:3d:6e:50:3f:d0:ca:38:4d:
                    4d:55:1d:b9:bc:00:9f:dc:5b:b2:31:6d:d8:59:2b:
                    84:b1:6f:b9:5b:64:60:62:8f:3c:0a:81:31:5c:e0:
                    e7:a4:e9:65:c2:d0:02:d6:f1:10:78:fe:08:e2:a0:
                    24:b4:b1:bb:64:ec:ee:90:b9:92:27:22:5b:17:2a:
                    57:05:b6:26:6b:79:53:10:49:6e:40:89:1b:96:27:
                    81:70:05:77:2b:bb:67:10:6b:09:b8:a4:ae:ec:e4:
                    41:d9:94:d8:45:06:58:00:3a:19:f6:c7:cf:84:82:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:33:EA:01:8B:BF:74:F4:43:DA:89:10:EF:E7:B5:1A:7F:3A:A4:CE
            X509v3 Authority Key Identifier:
                keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:0d:e0:91:8a:62:54:c3:24:5a:0a:36:9e:5d:f6:12:08:
         59:cf:26:29:a5:97:4d:de:19:f4:b1:35:b3:9e:b3:c9:d1:a1:
         81:7f:f9:f5:be:3e:61:59:be:07:63:7b:fd:d2:73:30:af:cb:
         44:dd:87:7f:40:58:dc:7c:4f:80:b0:28:e2:48:dd:74:66:98:
         dd:7c:a3:4d:5b:e7:45:b8:8d:f7:f4:98:e5:8a:13:79:56:eb:
         08:0c:e8:66:3e:ca:7b:12:66:97:d1:96:72:87:59:e9:b8:0c:
         c0:0e:ca:70:c9:b9:2e:71:c1:2a:36:d3:b1:2f:d8:26:ae:9e:
         1e:f5:e9:4b:bf:48:9d:fe:13:5f:a2:50:d4:43:54:88:37:3f:
         21:ae:23:44:63:ca:f4:8c:88:a2:5e:c7:be:4a:73:83:7e:9b:
         b3:b8:e3:8c:41:dc:74:f5:58:29:6f:9b:c3:70:6c:e5:b1:11:
         17:37:81:ef:2a:08:7d:ab:10:aa:8c:80:ad:88:d4:02:1d:3e:
         49:b3:09:da:c4:b4:c9:34:d2:b7:55:db:e5:bc:76:9d:6b:f0:
         f2:bf:d1:24:03:29:bb:6d:16:36:a6:67:84:4e:91:89:64:64:
         19:54:e5:76:9b:fc:6a:1a:3b:a5:f2:af:34:49:82:26:1a:eb:
         4e:f9:e1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDvpf16guEHkN9Gt34Oh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy
N2M5NTIwHhcNMjQwNjE1MTgwMDM5WhcNMjQwNjE2MTgwMDM5WjAzMTEwLwYDVQQD
EyhhOTMzZWEwMThiYmY3NGY0NDNkYTg5MTBlZmU3YjUxYTdmM2FhNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpgog/QSfYYwXpAUAv2vHx2gbfUL
lqnn0HjwMgcdm4NyT/HjVVBwzXFnMKKYB7hT7aPvY82nGE1TwtvE0DOnu3fGkvQs
OxTYmNgqxTLA3hEpAMA/5Y424Bhx++I5ggDBRexiw4kQtokVps4J0Hm23ob/KqH9
Sefa29zpXj7LIZIjvIKLS/6nqgWv7U2rPW5QP9DKOE1NVR25vACf3FuyMW3YWSuE
sW+5W2RgYo88CoExXODnpOllwtAC1vEQeP4I4qAktLG7ZOzukLmSJyJbFypXBbYm
a3lTEEluQIkblieBcAV3K7tnEGsJuKSu7ORB2ZTYRQZYADoZ9sfPhIKjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkz6gGLv3T0Q9qJEO/ntRp/OqTOMB8GA1UdIwQY
MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt
NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk
LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/cN4JGK
YlTDJFoKNp5d9hIIWc8mKaWXTd4Z9LE1s56zydGhgX/59b4+YVm+B2N7/dJzMK/L
RN2Hf0BY3HxPgLAo4kjddGaY3XyjTVvnRbiN9/SY5YoTeVbrCAzoZj7KexJml9GW
codZ6bgMwA7KcMm5LnHBKjbTsS/YJq6eHvXpS79Inf4TX6JQ1ENUiDc/Ia4jRGPK
9IyIol7Hvkpzg36bs7jjjEHcdPVYKW+bw3Bs5bERFzeB7yoIfasQqoyArYjUAh0+
SbMJ2sS0yTTSt1Xb5bx2nWvw8r/RJAMpu20WNqZnhE6RiWRkGVTldpv8aho7pfKv
NEmCJhrrTvnh4w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:57 2024 by rpki-client on console-ams.rpki-client.org