Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
File:                     362LFgmdbN-MOoEcpYYN8Pa69t4.mft (raw, json)
Hash identifier:          qDBj8cXHXOdbaf7eHNtpxgFVLfWk+2Ay1ud2O5ZE4W8=
Subject key identifier:   C7:C0:BA:B5:8E:66:2A:F3:F1:64:31:9B:CD:4A:FC:13:AD:0E:E5:6E
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       01901DECEC65BD844360ECC2EE134E90A6F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:04 +0000
Files and hashes:         1: 362LFgmdbN-MOoEcpYYN8Pa69t4.crl (hash: adGiTaMTzEvuRB15wD1tdJuk8EaVH8F0B8xhhwEYCD4=)
                          2: UBfnqPy3fHubwVJq9-vKj2MjwyA.roa (hash: wPSk1Ks9XZJkMfR+g81CbxRPijQnxn4q9DWaO6XHD3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:ec:65:bd:84:43:60:ec:c2:ee:13:4e:90:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jun 15 22:03:04 2024 GMT
            Not After : Jun 16 22:03:04 2024 GMT
        Subject: CN=c7c0bab58e662af3f164319bcd4afc13ad0ee56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:0a:4a:93:8d:c0:b1:6f:70:a3:62:7a:ef:
                    55:db:12:02:9f:e7:b0:49:14:41:9a:2c:d8:65:fd:
                    1d:95:73:f6:41:65:5d:d1:4b:17:ce:23:1e:44:af:
                    f6:b9:ce:c0:43:17:f7:e2:80:61:50:6a:b8:49:c6:
                    68:99:99:6a:d0:6d:8c:cc:c4:34:0e:1a:47:ac:dc:
                    95:ca:e7:d2:93:ab:33:5c:f0:d3:e7:31:8f:2e:ec:
                    f9:bc:a9:f6:e3:33:9b:21:26:c3:0a:85:3c:b0:f1:
                    cb:92:b5:60:a9:f4:46:69:74:4a:1a:d4:93:e5:ea:
                    04:f2:c8:59:cf:3f:9f:5b:32:6b:7b:15:5a:b0:53:
                    d8:51:7d:67:06:a9:14:65:f0:d4:b8:00:8d:bc:01:
                    0d:a8:b2:2e:94:e9:3a:e5:bc:58:73:f2:74:9e:23:
                    e8:d2:2d:2c:12:67:32:2b:48:ea:b6:e1:86:45:cd:
                    23:c0:17:23:a9:cb:e8:f9:53:fc:1e:4d:3d:d7:3e:
                    2d:21:de:ef:21:8b:13:99:38:f8:62:3e:86:8f:17:
                    ca:21:1b:aa:ef:61:89:69:a4:85:c9:4a:81:15:3a:
                    d7:57:a0:ab:e8:2f:e9:d3:e8:04:92:67:2f:94:16:
                    e4:f6:29:56:fb:ab:7a:19:4c:fd:0b:3a:a4:dd:5d:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:BA:B5:8E:66:2A:F3:F1:64:31:9B:CD:4A:FC:13:AD:0E:E5:6E
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:90:cf:8f:17:16:ac:fd:90:fd:c1:8e:9e:df:51:4d:cf:a4:
         f6:12:d8:b6:57:6f:98:5f:f1:c2:ea:03:9a:cf:31:df:4a:17:
         17:87:ed:f8:21:d2:6c:a4:2f:48:2b:0a:d7:d4:02:03:9d:3a:
         bc:d8:cd:e3:e1:4a:13:bb:af:cf:7a:78:65:00:b2:7d:89:78:
         49:c9:04:39:ee:4e:d3:d1:0c:87:fd:2c:eb:36:74:83:1d:fb:
         b2:4b:95:99:74:c6:71:d0:19:5b:97:44:2d:d6:d6:a2:b6:45:
         da:44:d8:98:b5:a2:72:32:74:47:80:49:58:6f:37:36:b5:5f:
         cf:77:7e:41:e4:57:28:93:06:03:73:14:1b:5a:39:34:a0:bb:
         76:8d:9c:41:aa:27:28:26:46:0f:9f:a9:9f:46:57:6b:bf:26:
         da:e5:cb:f7:c4:f3:ef:0c:47:73:a8:7d:cb:0a:54:13:65:bf:
         11:8f:1c:dd:d6:ce:33:4a:c5:bc:dd:5b:a2:23:66:77:42:2d:
         c2:af:d8:10:4a:63:b6:f0:d6:d1:08:1c:b7:90:f8:f2:5e:42:
         06:e2:41:b3:60:8b:cf:b5:49:20:74:45:eb:a6:ed:0d:79:ec:
         5e:f8:a5:78:78:8b:ee:d8:9e:14:a5:53:04:eb:74:da:71:5e:
         4f:b4:02:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7OxlvYRDYOzC7hNOkKb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWQ4YjE2MDk5ZDZjZGY4YzNhODExY2E1ODYwZGYwZjZi
YWY2ZGUwHhcNMjQwNjE1MjIwMzA0WhcNMjQwNjE2MjIwMzA0WjAzMTEwLwYDVQQD
EyhjN2MwYmFiNThlNjYyYWYzZjE2NDMxOWJjZDRhZmMxM2FkMGVlNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyoKSpONwLFvcKNieu9V2xICn+ew
SRRBmizYZf0dlXP2QWVd0UsXziMeRK/2uc7AQxf34oBhUGq4ScZomZlq0G2MzMQ0
DhpHrNyVyufSk6szXPDT5zGPLuz5vKn24zObISbDCoU8sPHLkrVgqfRGaXRKGtST
5eoE8shZzz+fWzJrexVasFPYUX1nBqkUZfDUuACNvAENqLIulOk65bxYc/J0niPo
0i0sEmcyK0jqtuGGRc0jwBcjqcvo+VP8Hk091z4tId7vIYsTmTj4Yj6GjxfKIRuq
72GJaaSFyUqBFTrXV6Cr6C/p0+gEkmcvlBbk9ilW+6t6GUz9Czqk3V2WPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfAurWOZirz8WQxm81K/BOtDuVuMB8GA1UdIwQY
MBaAFN+tixYJnWzfjDqBHKWGDfD2uvbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEt
OGJjYTI3Y2IzMGMwLzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEtOGJjYTI3Y2IzMGMw
LzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJDPjxcW
rP2Q/cGOnt9RTc+k9hLYtldvmF/xwuoDms8x30oXF4ft+CHSbKQvSCsK19QCA506
vNjN4+FKE7uvz3p4ZQCyfYl4SckEOe5O09EMh/0s6zZ0gx37skuVmXTGcdAZW5dE
LdbWorZF2kTYmLWicjJ0R4BJWG83NrVfz3d+QeRXKJMGA3MUG1o5NKC7do2cQaon
KCZGD5+pn0ZXa78m2uXL98Tz7wxHc6h9ywpUE2W/EY8c3dbOM0rFvN1boiNmd0It
wq/YEEpjtvDW0Qgct5D48l5CBuJBs2CLz7VJIHRF66btDXnsXvileHiL7tieFKVT
BOt02nFeT7QCcg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:25 2024 by rpki-client on console-fra.rpki-client.org