Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File:                     afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier:          oPTiOm9yMcXLT7px8bLFWd0jMomRHfpmoxnFYrd/FK4=
Subject key identifier:   6B:CD:FD:3F:89:DD:3A:61:DA:81:06:18:14:7D:92:B1:5F:41:5C:12
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer:       /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial:       01901EC708D68C4EF3B1AA6549E4B519B17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number:          0B44
Signing time:             Sun 16 Jun 2024 02:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:18 +0000
Files and hashes:         1: WkgBNtXlo1htamIU-2ca0A4EaOU.roa (hash: 2iQ9cP87fbJxF+KDANdGX3PIR7LhqaqFWq4Zu1aWtV0=)
                          2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: UulYtwcv6lAsq25QYa1C0M4hIkb7yIH8J2YeXAiesV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:08:d6:8c:4e:f3:b1:aa:65:49:e4:b5:19:b1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
        Validity
            Not Before: Jun 16 02:01:18 2024 GMT
            Not After : Jun 17 02:01:18 2024 GMT
        Subject: CN=6bcdfd3f89dd3a61da810618147d92b15f415c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:a1:16:9a:db:0d:1c:f0:38:54:43:fb:33:
                    d1:8a:c9:e1:2e:ef:a5:e3:b2:e9:9d:42:37:16:cf:
                    4c:b8:82:0d:80:0d:cc:dc:7a:e8:e0:89:97:a5:60:
                    a2:62:48:05:a6:e2:02:64:e0:39:76:bc:8c:45:0d:
                    57:bc:f8:1f:f8:b4:10:9d:a3:8e:15:97:04:41:ff:
                    cb:8d:f1:9e:e5:b8:6b:6b:b3:98:ea:25:1f:3e:4c:
                    ca:cb:d9:ba:2b:7e:ba:95:59:cd:bb:71:0c:70:eb:
                    b8:f2:4f:84:51:12:7d:e6:08:8e:3d:25:df:23:26:
                    3b:75:5d:7c:1f:c9:19:b4:17:bf:f9:80:e3:62:98:
                    99:22:b6:a9:e8:84:30:63:23:10:fc:14:cf:0e:5e:
                    27:0d:35:f7:3c:47:92:3c:17:e7:77:43:f2:b5:54:
                    2b:77:ee:57:f9:6e:9d:55:09:7f:e8:1d:01:dc:32:
                    79:41:35:77:40:c9:38:9f:be:43:d1:8e:56:4d:90:
                    77:28:90:66:c3:5c:92:c6:d9:cc:55:8b:3e:f6:fb:
                    95:f7:8b:c3:d7:21:5e:74:53:6b:dd:dd:25:e5:bb:
                    e2:4f:7a:3c:a1:aa:5b:6f:32:66:f5:5d:cd:28:97:
                    ad:7c:7d:a4:ca:41:e2:03:21:53:91:65:6f:9a:0f:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CD:FD:3F:89:DD:3A:61:DA:81:06:18:14:7D:92:B1:5F:41:5C:12
            X509v3 Authority Key Identifier:
                keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:11:51:83:ae:91:b8:26:42:3b:30:70:f0:76:85:15:d1:39:
         93:b2:98:52:45:cd:db:bb:b2:7e:b2:e4:a1:8c:f4:73:b3:ee:
         aa:66:d3:13:18:53:a2:d7:00:9c:94:75:ad:89:10:b6:0a:f2:
         d6:4f:e1:21:1c:86:ec:e8:43:98:23:58:d2:34:45:b8:f4:a5:
         c0:46:e4:be:84:3e:7f:ec:73:d7:71:ba:bc:4e:35:5a:a8:3a:
         ae:af:89:74:28:bd:ac:74:94:46:24:69:11:24:95:3d:4c:eb:
         b1:7e:c6:d5:36:84:7d:4a:d8:c5:47:5f:38:9f:3d:85:fa:87:
         4e:dd:8c:bc:3a:23:8b:4e:71:64:55:11:f0:82:45:94:96:43:
         5a:2e:0e:82:56:3a:8b:ad:48:0b:d7:68:66:48:40:d7:4c:04:
         4d:ca:a3:f6:22:29:f6:f3:0b:27:2b:ea:3c:74:22:c8:c9:12:
         1a:dc:12:11:74:db:8b:bf:e0:87:4c:be:ad:bc:de:cb:55:b3:
         1c:64:34:a3:84:66:f7:83:38:13:64:92:60:4e:df:cc:f0:f6:
         54:6d:ca:4c:48:e4:3e:dc:d8:a2:aa:ff:4e:5d:82:ba:7b:bd:
         b5:9a:1f:7b:cf:c8:f8:65:77:3e:35:38:d6:20:91:56:ba:4d:
         c7:1b:ca:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexwjWjE7zsaplSeS1GbF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3
MjJmYzYwHhcNMjQwNjE2MDIwMTE4WhcNMjQwNjE3MDIwMTE4WjAzMTEwLwYDVQQD
Eyg2YmNkZmQzZjg5ZGQzYTYxZGE4MTA2MTgxNDdkOTJiMTVmNDE1YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxChFprbDRzwOFRD+zPRisnhLu+l
47LpnUI3Fs9MuIINgA3M3Hro4ImXpWCiYkgFpuICZOA5dryMRQ1XvPgf+LQQnaOO
FZcEQf/LjfGe5bhra7OY6iUfPkzKy9m6K366lVnNu3EMcOu48k+EURJ95giOPSXf
IyY7dV18H8kZtBe/+YDjYpiZIrap6IQwYyMQ/BTPDl4nDTX3PEeSPBfnd0PytVQr
d+5X+W6dVQl/6B0B3DJ5QTV3QMk4n75D0Y5WTZB3KJBmw1ySxtnMVYs+9vuV94vD
1yFedFNr3d0l5bviT3o8oapbbzJm9V3NKJetfH2kykHiAyFTkWVvmg/LeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvN/T+J3Tph2oEGGBR9krFfQVwSMB8GA1UdIwQY
MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt
MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl
LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6RFRg66R
uCZCOzBw8HaFFdE5k7KYUkXN27uyfrLkoYz0c7PuqmbTExhTotcAnJR1rYkQtgry
1k/hIRyG7OhDmCNY0jRFuPSlwEbkvoQ+f+xz13G6vE41Wqg6rq+JdCi9rHSURiRp
ESSVPUzrsX7G1TaEfUrYxUdfOJ89hfqHTt2MvDoji05xZFUR8IJFlJZDWi4OglY6
i61IC9doZkhA10wETcqj9iIp9vMLJyvqPHQiyMkSGtwSEXTbi7/gh0y+rbzey1Wz
HGQ0o4Rm94M4E2SSYE7fzPD2VG3KTEjkPtzYoqr/Tl2Cunu9tZofe8/I+GV3PjU4
1iCRVrpNxxvKyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:40 2024 by rpki-client on console-fra.rpki-client.org