Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File:                     x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier:          KsR4AwfE6LZbN0Q/IIH0wyh1z7kUCHclL/AcLJnXcdo=
Subject key identifier:   67:33:D3:5A:01:23:58:41:1E:61:44:30:49:39:F1:42:B7:CF:DC:22
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer:       /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial:       0190459D160DFBA7AD63546FF34EEB5AF523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 15:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:40 +0000
Files and hashes:         1: OI49TSZggWvLCzgJgZZ4EU3itP8.roa (hash: Ph+Eq/BHLfN6KACp38LKQjqFlTqybRJUSqvWZXxQFRw=)
                          2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: vtvWA70ZNJFKrM2bLyTHVJq/rGin89rh5LkHIxt2Y7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:16:0d:fb:a7:ad:63:54:6f:f3:4e:eb:5a:f5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
        Validity
            Not Before: Jun 23 15:00:40 2024 GMT
            Not After : Jun 24 15:00:40 2024 GMT
        Subject: CN=6733d35a012358411e6144304939f142b7cfdc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:24:69:08:ee:06:35:cd:c8:8f:18:91:04:1a:
                    fb:af:ba:78:6e:ab:ea:ad:1d:37:cf:ed:0d:69:56:
                    36:e9:1a:5c:27:e4:36:9b:35:69:86:8a:92:59:22:
                    3d:a2:b0:de:0f:0e:b9:e0:2a:31:48:1f:0a:85:5b:
                    cc:b5:81:d2:d6:4e:58:64:bd:53:b6:96:13:e2:92:
                    da:0d:a7:4c:25:e4:7e:09:ce:51:b7:e1:53:13:b2:
                    55:68:f6:34:20:0f:14:6b:7b:81:c8:5a:70:60:06:
                    83:16:f4:16:6e:50:11:5d:64:a5:f5:0c:60:89:09:
                    63:6f:98:f4:15:b9:6d:dc:ea:df:ff:c3:c5:f7:4c:
                    72:48:80:4a:ed:a0:a0:66:14:2d:d8:f9:21:3c:00:
                    27:a3:9a:6d:db:4e:e5:83:03:5c:fa:7a:17:fb:3b:
                    67:1b:10:c0:45:92:6a:55:58:a1:04:c7:47:bf:77:
                    72:33:34:b5:04:19:26:86:47:2d:35:22:58:ef:80:
                    eb:ec:2a:21:85:69:96:bd:11:8b:f0:45:e4:6b:f3:
                    8c:de:17:b2:b4:3f:8e:ed:22:66:4a:1c:22:6f:7e:
                    49:ca:73:81:46:04:5b:c4:d1:9a:54:cd:12:3c:c3:
                    36:08:61:71:6d:6a:1b:17:1a:c1:43:62:36:85:55:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:33:D3:5A:01:23:58:41:1E:61:44:30:49:39:F1:42:B7:CF:DC:22
            X509v3 Authority Key Identifier:
                keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:02:12:39:f9:91:bb:29:6c:90:84:0e:a9:78:fd:e1:49:42:
         30:47:7c:c4:ac:21:40:29:8f:ed:6c:bd:3d:dc:8a:66:58:7a:
         af:19:2d:03:41:92:8f:56:dd:0b:78:65:54:c0:96:a3:38:90:
         ab:b1:15:df:50:15:b6:e9:06:77:89:73:a9:10:c7:84:da:be:
         07:dd:78:83:f5:7a:f4:ad:e8:04:6a:b7:32:06:e9:e0:9d:26:
         33:fd:9f:58:3f:87:63:60:47:79:45:90:db:9c:eb:b4:d5:b9:
         0b:21:33:be:10:95:0e:a5:4a:fd:6a:4e:53:d0:25:ef:4c:eb:
         2f:3c:2a:59:a3:e6:04:61:93:21:bc:2d:1a:4e:35:c4:48:80:
         ac:6a:e3:66:19:b0:77:1d:22:be:77:ba:bc:3e:f2:d5:63:65:
         20:ad:6e:df:0c:20:3b:f1:90:4c:1e:70:49:7a:e5:1b:58:3b:
         76:3c:bb:81:cb:db:20:75:36:99:ab:82:3f:c1:db:a9:d9:1b:
         41:47:2b:76:b8:bc:aa:73:7c:39:9c:29:2d:e2:e7:fa:96:77:
         d1:05:5a:d5:7e:21:74:f9:e8:f9:e7:dd:45:ef:55:a6:2c:29:
         f4:28:c4:c2:19:16:11:f6:41:33:cc:d3:2d:ff:34:23:58:c8:
         d7:3e:53:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFnRYN+6etY1Rv807rWvUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz
MTIyYWEwHhcNMjQwNjIzMTUwMDQwWhcNMjQwNjI0MTUwMDQwWjAzMTEwLwYDVQQD
Eyg2NzMzZDM1YTAxMjM1ODQxMWU2MTQ0MzA0OTM5ZjE0MmI3Y2ZkYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SRpCO4GNc3IjxiRBBr7r7p4bqvq
rR03z+0NaVY26RpcJ+Q2mzVphoqSWSI9orDeDw654CoxSB8KhVvMtYHS1k5YZL1T
tpYT4pLaDadMJeR+Cc5Rt+FTE7JVaPY0IA8Ua3uByFpwYAaDFvQWblARXWSl9Qxg
iQljb5j0Fblt3Orf/8PF90xySIBK7aCgZhQt2PkhPAAno5pt207lgwNc+noX+ztn
GxDARZJqVVihBMdHv3dyMzS1BBkmhkctNSJY74Dr7CohhWmWvRGL8EXka/OM3hey
tD+O7SJmShwib35JynOBRgRbxNGaVM0SPMM2CGFxbWobFxrBQ2I2hVVNCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcz01oBI1hBHmFEMEk58UK3z9wiMB8GA1UdIwQY
MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt
YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3
LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwISOfmR
uylskIQOqXj94UlCMEd8xKwhQCmP7Wy9PdyKZlh6rxktA0GSj1bdC3hlVMCWoziQ
q7EV31AVtukGd4lzqRDHhNq+B914g/V69K3oBGq3Mgbp4J0mM/2fWD+HY2BHeUWQ
25zrtNW5CyEzvhCVDqVK/WpOU9Al70zrLzwqWaPmBGGTIbwtGk41xEiArGrjZhmw
dx0ivne6vD7y1WNlIK1u3wwgO/GQTB5wSXrlG1g7djy7gcvbIHU2mauCP8Hbqdkb
QUcrdri8qnN8OZwpLeLn+pZ30QVa1X4hdPno+efdRe9Vpiwp9CjEwhkWEfZBM8zT
Lf80I1jI1z5T8A==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:14:50 2024 by rpki-client on console-fra.rpki-client.org