Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File:                     Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier:          JbBsCb6eiyqPH3Q7HFI/b8SAYabHo8e5Sw/FmPUmFQ4=
Subject key identifier:   1C:DF:6D:11:51:69:ED:D4:73:5A:B5:34:C0:96:92:BB:5D:A6:D4:AC
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer:       /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial:       019049B0F3E84299F98C6CAE88A3640FF66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number:          11DD
Signing time:             Mon 24 Jun 2024 10:00:51 +0000
Manifest this update:     Mon 24 Jun 2024 10:00:51 +0000
Manifest next update:     Tue 25 Jun 2024 10:00:51 +0000
Files and hashes:         1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: 9GIFYYGJ68uIlA9IXl0V3QTkazCcxRKIUnraHO+BoQ0=)
                          2: abO0AnlXa0JfatT8MLBDygpfHJY.roa (hash: e2ovSDXC/WbbCatunUN2NwyvbYsJQ02CWhLNp1IxiWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b0:f3:e8:42:99:f9:8c:6c:ae:88:a3:64:0f:f6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
        Validity
            Not Before: Jun 24 10:00:51 2024 GMT
            Not After : Jun 25 10:00:51 2024 GMT
        Subject: CN=1cdf6d115169edd4735ab534c09692bb5da6d4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:28:4b:bf:95:93:96:3d:ae:41:3b:f7:f5:
                    34:35:0a:1a:1c:3d:b9:47:8d:90:73:f1:b4:27:c3:
                    24:f3:46:69:97:36:00:8d:f3:df:dd:d3:84:e4:9e:
                    85:33:74:fe:77:2b:e9:b0:e4:31:88:d5:32:71:20:
                    0c:c6:34:88:2d:87:ef:9b:1b:88:c0:e4:26:d9:23:
                    7c:f8:46:43:b8:7c:f0:33:6c:62:e9:4b:a3:ea:22:
                    23:d1:ac:89:fc:20:97:9d:de:ca:f3:e5:54:60:18:
                    71:8b:08:d1:5c:f5:3c:99:cf:5e:f0:e2:b5:0f:06:
                    2a:10:97:1f:6d:9d:08:cf:8f:fb:61:e9:16:d3:30:
                    eb:47:21:e9:47:e0:a8:72:9a:b2:7b:d1:e5:af:32:
                    1a:94:7f:f5:ac:a3:44:e3:64:37:5a:3e:03:e8:97:
                    f0:68:a9:30:c0:ec:74:07:28:bf:d1:db:d3:86:65:
                    cc:4e:59:4b:fa:b0:a2:ed:64:07:58:16:d1:bf:a9:
                    e3:66:f2:7c:66:28:40:38:bf:86:d6:bd:b9:54:ab:
                    2b:f8:52:db:01:95:2d:7a:87:f5:81:f7:d4:35:2d:
                    3e:04:8e:42:5d:52:17:9a:79:b1:9c:1a:eb:aa:9b:
                    56:fc:b0:01:d9:16:bc:ae:68:2e:28:99:d7:c4:50:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DF:6D:11:51:69:ED:D4:73:5A:B5:34:C0:96:92:BB:5D:A6:D4:AC
            X509v3 Authority Key Identifier:
                keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:5f:8e:b6:cd:f9:be:26:68:e1:08:19:c6:96:0f:e0:da:e4:
         8b:92:75:4d:ff:61:eb:de:4f:c2:da:9c:17:65:18:69:ac:57:
         05:74:3b:57:2b:ac:54:0e:f4:a1:40:50:1e:fa:7c:a5:ea:bb:
         60:fa:93:21:c8:e9:b5:5e:3a:e6:e8:fc:f0:3b:89:3b:34:57:
         fb:b8:6c:7b:de:6b:b4:c4:10:76:e3:02:6b:17:ce:49:07:96:
         4f:53:f8:4c:24:8e:97:8c:51:3e:70:7f:e3:76:bd:53:b6:31:
         8a:e5:5b:d5:fc:c0:1c:12:dc:85:3d:57:bd:6f:dd:3a:95:a7:
         76:11:6f:e3:74:9c:24:9c:3f:2e:d9:ac:52:9a:7a:12:59:1a:
         5f:ce:6b:fb:ab:42:86:eb:23:1b:45:2c:1e:84:7f:c9:6e:8e:
         01:a1:ef:33:70:24:ed:bb:93:04:bb:b3:09:c6:21:bc:23:5d:
         38:74:cd:cd:3e:fd:b1:a7:fa:6c:cf:d0:0e:39:eb:1f:b1:39:
         69:2b:96:bc:af:b9:8d:4a:c7:73:14:7f:6a:32:99:80:5a:a9:
         fe:a0:98:07:17:27:66:f9:17:bf:6e:8e:c2:e1:5a:53:f6:25:
         c8:1f:7b:f5:22:67:6f:31:1e:5f:0d:7a:91:6a:b8:38:e1:dd:
         78:30:9d:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJsPPoQpn5jGyuiKNkD/ZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz
ODI3OTMwHhcNMjQwNjI0MTAwMDUxWhcNMjQwNjI1MTAwMDUxWjAzMTEwLwYDVQQD
EygxY2RmNmQxMTUxNjllZGQ0NzM1YWI1MzRjMDk2OTJiYjVkYTZkNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rAoS7+Vk5Y9rkE79/U0NQoaHD25
R42Qc/G0J8Mk80ZplzYAjfPf3dOE5J6FM3T+dyvpsOQxiNUycSAMxjSILYfvmxuI
wOQm2SN8+EZDuHzwM2xi6Uuj6iIj0ayJ/CCXnd7K8+VUYBhxiwjRXPU8mc9e8OK1
DwYqEJcfbZ0Iz4/7YekW0zDrRyHpR+Cocpqye9HlrzIalH/1rKNE42Q3Wj4D6Jfw
aKkwwOx0Byi/0dvThmXMTllL+rCi7WQHWBbRv6njZvJ8ZihAOL+G1r25VKsr+FLb
AZUteof1gffUNS0+BI5CXVIXmnmxnBrrqptW/LAB2Ra8rmguKJnXxFDmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzfbRFRae3Uc1q1NMCWkrtdptSsMB8GA1UdIwQY
MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt
NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3
LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2l+Ots35
viZo4QgZxpYP4Nrki5J1Tf9h695PwtqcF2UYaaxXBXQ7VyusVA70oUBQHvp8peq7
YPqTIcjptV465uj88DuJOzRX+7hse95rtMQQduMCaxfOSQeWT1P4TCSOl4xRPnB/
43a9U7YxiuVb1fzAHBLchT1XvW/dOpWndhFv43ScJJw/LtmsUpp6ElkaX85r+6tC
husjG0UsHoR/yW6OAaHvM3Ak7buTBLuzCcYhvCNdOHTNzT79saf6bM/QDjnrH7E5
aSuWvK+5jUrHcxR/ajKZgFqp/qCYBxcnZvkXv26OwuFaU/YlyB979SJnbzEeXw16
kWq4OOHdeDCdJg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:15:05 2024 by rpki-client on console-ams.rpki-client.org