Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          q1R6Y6sQth+4sM4SH+8TQChttexUYX+8LpIsetnnmzo=
Subject key identifier:   F6:52:E4:B3:1B:86:99:28:D8:F9:FB:31:E9:9B:F0:EA:6D:0C:9B:7B
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       01901CD867FA980B600F9EFDA8EEBBA6E036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          0B04
Signing time:             Sat 15 Jun 2024 17:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:02 +0000
Files and hashes:         1: CXzhaginQm8wMXa5xQ8ZwG1naCM.roa (hash: EjINqhMlozpu5mlXsSbKPvUq3AcuVqdUt/ohLh+uhN4=)
                          2: UsZS8spxYoyfTqlhL5f51pDRWw4.roa (hash: uESjvjL2EDqML37vLZn3AXXagrr6OnDUWBZOxf282wA=)
                          3: gggO8DVV7iZwCSasEaLPQ42soKk.roa (hash: 8+/dNDI7lcw8y3xnk3m03RDxAtchKvl9eJ6s7qo82gU=)
                          4: hEDKa4ik2AZRGOVL80X309OnsT8.roa (hash: 5iRlVi/Dp13FRyPytbDcIxT4xVsccFTI4WiZ6hzMc0s=)
                          5: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: 2lODgWlnD+qcCBNH6tCMGpRgHRigwTiiqEfxZAan7r8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:67:fa:98:0b:60:0f:9e:fd:a8:ee:bb:a6:e0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Jun 15 17:01:02 2024 GMT
            Not After : Jun 16 17:01:02 2024 GMT
        Subject: CN=f652e4b31b869928d8f9fb31e99bf0ea6d0c9b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:88:94:b1:43:98:ba:25:1a:b7:e2:12:3d:
                    de:36:08:cf:2c:19:9f:f9:f6:f9:98:63:92:79:a4:
                    fa:f1:d6:23:9d:94:91:7c:3b:4f:34:df:ed:65:9b:
                    17:08:ab:22:f3:20:de:5c:38:b5:e2:52:1b:46:a3:
                    23:a0:49:43:31:71:a0:b0:3c:21:d9:1f:c8:6c:14:
                    d8:a4:b7:ca:02:20:7b:75:1f:fb:2d:94:01:c1:ff:
                    07:cd:72:db:37:27:ef:08:67:d6:32:f2:1a:0e:e7:
                    ad:8d:a4:b5:2b:da:a4:58:d9:84:11:5d:2e:00:d1:
                    49:26:97:71:62:0f:3c:c7:1b:81:bb:62:65:76:19:
                    60:db:db:53:37:4f:b1:1c:13:9d:9c:10:ec:00:fe:
                    f6:e8:db:56:b1:a3:fa:c3:fc:f5:47:77:d1:77:06:
                    a0:4d:b1:93:fb:30:c0:0e:1e:db:8e:57:00:43:62:
                    ab:d5:9f:99:ba:c1:24:37:9b:8c:c1:e5:aa:88:dc:
                    57:3c:20:c6:35:3f:e9:65:5a:d6:4a:bb:f0:43:d6:
                    7c:18:4f:0f:cd:03:2f:f4:78:55:46:38:16:12:d7:
                    d5:42:b6:ed:87:37:3a:14:d0:ec:89:1c:7a:fa:84:
                    fe:f3:53:79:7a:0f:fe:40:43:ad:80:d8:b0:f1:e5:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:E4:B3:1B:86:99:28:D8:F9:FB:31:E9:9B:F0:EA:6D:0C:9B:7B
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:97:27:36:58:02:e8:de:be:d1:8d:b2:c4:9f:64:62:a5:9e:
         d7:9a:51:44:d2:ec:e7:52:2d:9a:84:5c:78:fe:49:61:02:ce:
         f0:ca:58:53:c5:42:48:13:1d:9c:04:8c:93:78:33:a5:42:77:
         88:54:f0:cb:4a:34:c7:82:59:b2:a6:df:9d:21:39:03:0b:a4:
         0e:52:ec:55:4f:5a:7d:09:f0:9b:91:9a:43:74:49:2c:f0:42:
         9c:0d:f7:06:a5:a3:57:24:30:0d:86:67:e3:30:f0:06:77:ab:
         97:ef:74:92:33:d6:dc:ba:98:3d:0e:28:87:46:14:2d:99:e1:
         d4:ee:fc:fe:e1:68:2f:cb:54:f5:f5:4b:63:5b:11:aa:a3:02:
         84:e9:71:ff:ef:4c:7f:ab:30:e9:33:c4:3e:29:61:8f:46:f8:
         8f:8d:f9:fb:a7:99:b1:5a:85:0b:a5:40:a6:59:6f:43:c5:d2:
         17:5c:6b:9d:86:ea:b3:4b:ec:f3:cb:07:7e:1a:39:b1:c3:0f:
         dc:dc:2c:f7:76:2d:1b:57:d3:ab:11:47:7a:1b:5d:4c:7e:38:
         08:95:3e:43:b1:3d:58:11:1c:07:31:7d:b8:b9:9c:ae:4c:20:
         eb:4f:be:3e:3e:3f:d0:ca:99:8e:a2:91:a5:43:48:10:c1:fb:
         cc:0d:d4:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2Gf6mAtgD579qO67puA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl
ZmU2MjIwHhcNMjQwNjE1MTcwMTAyWhcNMjQwNjE2MTcwMTAyWjAzMTEwLwYDVQQD
EyhmNjUyZTRiMzFiODY5OTI4ZDhmOWZiMzFlOTliZjBlYTZkMGM5YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcWIlLFDmLolGrfiEj3eNgjPLBmf
+fb5mGOSeaT68dYjnZSRfDtPNN/tZZsXCKsi8yDeXDi14lIbRqMjoElDMXGgsDwh
2R/IbBTYpLfKAiB7dR/7LZQBwf8HzXLbNyfvCGfWMvIaDuetjaS1K9qkWNmEEV0u
ANFJJpdxYg88xxuBu2Jldhlg29tTN0+xHBOdnBDsAP726NtWsaP6w/z1R3fRdwag
TbGT+zDADh7bjlcAQ2Kr1Z+ZusEkN5uMweWqiNxXPCDGNT/pZVrWSrvwQ9Z8GE8P
zQMv9HhVRjgWEtfVQrbthzc6FNDsiRx6+oT+81N5eg/+QEOtgNiw8eV13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZS5LMbhpko2Pn7Memb8OptDJt7MB8GA1UdIwQY
MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt
OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3
LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpcnNlgC
6N6+0Y2yxJ9kYqWe15pRRNLs51ItmoRceP5JYQLO8MpYU8VCSBMdnASMk3gzpUJ3
iFTwy0o0x4JZsqbfnSE5AwukDlLsVU9afQnwm5GaQ3RJLPBCnA33BqWjVyQwDYZn
4zDwBnerl+90kjPW3LqYPQ4oh0YULZnh1O78/uFoL8tU9fVLY1sRqqMChOlx/+9M
f6sw6TPEPilhj0b4j435+6eZsVqFC6VApllvQ8XSF1xrnYbqs0vs88sHfho5scMP
3Nws93YtG1fTqxFHehtdTH44CJU+Q7E9WBEcBzF9uLmcrkwg60++Pj4/0MqZjqKR
pUNIEMH7zA3UUg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:47:47 2024 by rpki-client on console-fra.rpki-client.org