Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File:                     A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier:          723nb3gn82uaPCSaZy7/Q+BJeBU0CVTdgVASlREj14E=
Subject key identifier:   55:32:36:91:40:29:EE:4D:2C:C0:DC:BE:BD:97:61:27:69:FA:62:B6
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer:       /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial:       01901F349E2CFCBC185F6616DDEC5AA9E43B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number:          06AD
Signing time:             Sun 16 Jun 2024 04:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:00 +0000
Files and hashes:         1: 0UEfQqiT2-lYzoFEjYcwHjTf7Ko.roa (hash: KXghuCfsXANMfy6xAk6+YOob2fuQl69EqMTL4bXPm0Q=)
                          2: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: pjqaVXeznRrAj/az0mwp5TLHxEL2KsyK+DaIrc5Sp2k=)
                          3: MSTk0rZzouSPYGI1gDaMA1y8I3w.roa (hash: Ugr9tV3AUOQ6HNsmvPcAgWZ9bWT2X0968T/RlXcaMaw=)
                          4: uokaX9CP18E0lHXFSG4JnrbIzdY.roa (hash: iTA8i4eFd7SYkSwuhwzxF5kqtjjmdDNRLPZhF7vnrII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:9e:2c:fc:bc:18:5f:66:16:dd:ec:5a:a9:e4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
        Validity
            Not Before: Jun 16 04:01:00 2024 GMT
            Not After : Jun 17 04:01:00 2024 GMT
        Subject: CN=553236914029ee4d2cc0dcbebd97612769fa62b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:b8:19:a5:2d:6f:f9:24:ce:ec:1e:a4:07:
                    f1:09:02:9c:38:7a:f0:30:7b:18:15:e5:4f:58:10:
                    8f:50:78:86:a2:13:87:90:17:4d:96:cc:5e:83:98:
                    fd:2f:c7:00:f0:bd:8d:b7:aa:c9:d6:7b:91:f9:3e:
                    02:aa:11:81:b9:5a:ba:14:d3:d9:fd:43:67:4e:f1:
                    ab:35:b1:50:c2:75:97:3c:32:d4:b5:b6:a4:7d:ba:
                    db:de:f1:fc:27:e8:5f:7b:f0:c3:f3:64:b8:ed:5d:
                    ad:e4:27:3e:6a:d7:5f:98:36:1a:a4:c3:aa:df:c9:
                    38:da:1f:00:19:f5:1c:f5:7f:ba:12:cd:76:70:2f:
                    05:5a:81:57:6b:f2:85:ae:ce:3b:99:75:0c:14:7f:
                    b0:94:f3:91:6b:9b:50:30:3b:d3:c4:e1:a8:e1:19:
                    35:5c:48:1f:0b:94:bd:cb:5e:a7:61:89:67:62:f0:
                    cb:91:33:54:8f:f9:28:95:6f:1f:e6:48:2f:03:1c:
                    74:0f:d0:9f:f7:58:d2:26:89:57:40:74:be:ad:f2:
                    8b:c3:09:39:51:2b:b7:8e:cc:ed:91:88:8e:b9:78:
                    9c:34:88:1f:ce:2c:88:33:8f:45:ef:cc:56:e4:fe:
                    27:81:84:dd:62:03:50:c8:4c:1a:18:ba:e7:42:1f:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:32:36:91:40:29:EE:4D:2C:C0:DC:BE:BD:97:61:27:69:FA:62:B6
            X509v3 Authority Key Identifier:
                keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:79:89:e6:5f:bd:b9:2b:17:a6:37:d3:e8:89:00:05:12:80:
         23:3e:3f:19:78:80:bc:ef:4e:01:4b:f2:4d:fe:74:49:4d:65:
         b5:7e:ee:53:95:9c:52:3b:b6:dc:dd:a0:44:cc:3f:6a:76:a9:
         17:c6:e3:c5:bb:0c:4f:04:c1:53:9f:67:da:93:cd:38:d9:90:
         95:62:44:f8:46:09:bf:72:f0:49:9b:a3:8a:14:f8:f7:51:63:
         1f:5b:3d:36:6f:72:12:73:f7:40:0d:e6:89:32:1d:08:d7:05:
         3d:9c:aa:69:16:1a:56:8d:9a:be:bb:c2:2e:af:24:1f:87:12:
         75:94:04:04:9b:25:95:f9:1c:83:46:e7:fe:50:95:f2:f7:4d:
         0f:1d:51:99:4e:95:bc:5c:f2:55:9f:71:42:7d:47:a1:fe:28:
         c9:5f:37:60:2e:dc:0b:ba:a3:2d:26:c2:cf:2a:df:be:7b:1a:
         5d:79:54:36:d2:7d:a8:3e:12:4c:f8:07:8c:a4:e3:c7:ce:04:
         1a:05:41:47:44:c8:2f:67:96:7b:73:71:b0:67:f0:d7:70:a4:
         4d:c0:e2:ed:b5:10:fc:7d:c5:6a:a3:cf:a9:63:eb:2f:be:b2:
         9f:f1:18:6a:40:62:57:e1:ac:ae:1f:22:b1:57:37:00:aa:76:
         99:dc:ec:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNJ4s/LwYX2YW3exaqeQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjQwNjE2MDQwMTAwWhcNMjQwNjE3MDQwMTAwWjAzMTEwLwYDVQQD
Eyg1NTMyMzY5MTQwMjllZTRkMmNjMGRjYmViZDk3NjEyNzY5ZmE2MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqG4GaUtb/kkzuwepAfxCQKcOHrw
MHsYFeVPWBCPUHiGohOHkBdNlsxeg5j9L8cA8L2Nt6rJ1nuR+T4CqhGBuVq6FNPZ
/UNnTvGrNbFQwnWXPDLUtbakfbrb3vH8J+hfe/DD82S47V2t5Cc+atdfmDYapMOq
38k42h8AGfUc9X+6Es12cC8FWoFXa/KFrs47mXUMFH+wlPORa5tQMDvTxOGo4Rk1
XEgfC5S9y16nYYlnYvDLkTNUj/kolW8f5kgvAxx0D9Cf91jSJolXQHS+rfKLwwk5
USu3jsztkYiOuXicNIgfziyIM49F78xW5P4ngYTdYgNQyEwaGLrnQh+wDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUyNpFAKe5NLMDcvr2XYSdp+mK2MB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3mJ5l+9
uSsXpjfT6IkABRKAIz4/GXiAvO9OAUvyTf50SU1ltX7uU5WcUju23N2gRMw/anap
F8bjxbsMTwTBU59n2pPNONmQlWJE+EYJv3LwSZujihT491FjH1s9Nm9yEnP3QA3m
iTIdCNcFPZyqaRYaVo2avrvCLq8kH4cSdZQEBJsllfkcg0bn/lCV8vdNDx1RmU6V
vFzyVZ9xQn1Hof4oyV83YC7cC7qjLSbCzyrfvnsaXXlUNtJ9qD4STPgHjKTjx84E
GgVBR0TIL2eWe3NxsGfw13CkTcDi7bUQ/H3FaqPPqWPrL76yn/EYakBiV+Gsrh8i
sVc3AKp2mdzsXA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:32:22 2024 by rpki-client on console-ams.rpki-client.org