Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File:                     RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier:          YTwPoDnKx8VK6f/bzqTqG6FbAerxWlAHgS2gby59Eis=
Subject key identifier:   FF:ED:12:95:AF:95:DB:EF:E4:50:B5:A4:E0:EA:4F:B6:0F:16:44:C9
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer:       /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial:       01901E589D581B62E13527FE9EDD2F1EC7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number:          0E5D
Signing time:             Sun 16 Jun 2024 00:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:42 +0000
Files and hashes:         1: Enl1G7ABU13xh4iEM_3NcROgnFs.roa (hash: CCQp4z4WP96RO2It+tpVrWgU3T7Fqizkuu+FPX2YN9o=)
                          2: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: 4JKOf5zaxIT42r1QvJHo2qkam2aIbkuvGdCMJIeOLaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:9d:58:1b:62:e1:35:27:fe:9e:dd:2f:1e:c7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
        Validity
            Not Before: Jun 16 00:00:42 2024 GMT
            Not After : Jun 17 00:00:42 2024 GMT
        Subject: CN=ffed1295af95dbefe450b5a4e0ea4fb60f1644c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:9d:1b:97:a2:89:f3:45:0a:cb:24:f0:d6:
                    f7:b0:56:15:f8:55:38:57:85:91:5c:87:ea:7e:52:
                    9c:ed:68:3a:d1:29:76:35:15:e5:63:23:12:c3:4d:
                    62:ff:8d:0a:f1:4c:c1:8d:a1:75:1b:30:8e:46:b2:
                    61:3d:4f:00:39:05:87:a4:11:2b:00:70:2c:53:c9:
                    0c:5e:34:8d:31:0d:5c:a0:18:ec:11:02:73:08:4d:
                    93:40:51:1d:05:10:96:29:55:24:49:44:85:19:2f:
                    9b:5c:0d:67:72:ea:7f:c2:ff:86:93:d6:13:e3:d3:
                    f3:3e:56:86:f2:64:37:9f:6a:aa:c1:b1:7d:95:07:
                    4e:7c:12:7b:44:d6:1a:67:e1:40:66:6d:67:5d:6e:
                    a1:0f:3a:ac:08:e1:45:dd:56:03:e7:b9:0f:ee:78:
                    16:7d:2a:58:55:db:9e:5c:8d:79:cf:b2:23:c0:2b:
                    aa:61:03:74:0f:5d:a0:1d:20:81:d3:f5:c8:d5:ee:
                    49:42:07:30:e3:c4:5a:ed:e7:a3:c5:b6:1c:38:ff:
                    7f:30:bf:a6:a7:5a:48:54:09:6f:e7:9a:35:5f:3a:
                    b2:09:f2:04:f9:ce:08:3a:55:b2:1d:fc:63:5a:0c:
                    8c:ea:00:b8:14:9d:19:20:8d:ee:01:38:a4:23:84:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:ED:12:95:AF:95:DB:EF:E4:50:B5:A4:E0:EA:4F:B6:0F:16:44:C9
            X509v3 Authority Key Identifier:
                keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:66:90:e4:79:a7:d2:51:72:94:21:24:45:ba:c2:eb:d1:c9:
         bb:1e:5a:99:6d:6a:ae:fe:bf:6a:34:ee:f8:19:9c:3c:a4:e3:
         89:89:53:d5:01:99:c8:58:dc:cb:bb:94:30:e8:3a:ff:e7:37:
         16:b6:da:7e:98:7b:82:55:ec:bb:9e:89:d5:ee:e1:02:d9:2a:
         a4:86:be:ed:a2:0f:9a:e9:08:1a:50:ff:bb:93:7e:a5:9e:98:
         34:61:9d:0c:c1:f5:0e:8e:79:73:bd:89:ac:13:a4:98:40:41:
         48:12:66:2a:ae:71:a3:7c:84:dc:e2:12:38:14:b7:cd:62:c4:
         b8:4a:b6:ae:d7:94:8f:fe:39:da:6a:85:d6:28:49:f5:da:17:
         79:2f:a2:1e:a6:ed:a7:08:47:bc:3e:f4:b4:82:c6:2b:09:ed:
         08:d0:e6:00:77:4f:b4:b3:cb:a6:e5:6e:d1:f4:dc:12:d8:77:
         de:91:ea:cc:6e:5a:3f:8d:df:a5:79:1e:54:ca:96:40:e1:e9:
         3b:79:d0:3b:4e:83:95:53:ba:06:74:16:f1:8e:d4:0c:6c:6c:
         b1:8a:5a:45:6a:83:5b:09:f1:62:99:a1:b0:3e:d5:9d:c2:c5:
         d2:9f:b8:5d:6d:97:bd:97:96:fd:7f:c8:82:ca:6e:10:be:67:
         a2:50:c4:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWJ1YG2LhNSf+nt0vHsfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl
MzU1YzUwHhcNMjQwNjE2MDAwMDQyWhcNMjQwNjE3MDAwMDQyWjAzMTEwLwYDVQQD
EyhmZmVkMTI5NWFmOTVkYmVmZTQ1MGI1YTRlMGVhNGZiNjBmMTY0NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JedG5eiifNFCssk8Nb3sFYV+FU4
V4WRXIfqflKc7Wg60Sl2NRXlYyMSw01i/40K8UzBjaF1GzCORrJhPU8AOQWHpBEr
AHAsU8kMXjSNMQ1coBjsEQJzCE2TQFEdBRCWKVUkSUSFGS+bXA1ncup/wv+Gk9YT
49PzPlaG8mQ3n2qqwbF9lQdOfBJ7RNYaZ+FAZm1nXW6hDzqsCOFF3VYD57kP7ngW
fSpYVdueXI15z7IjwCuqYQN0D12gHSCB0/XI1e5JQgcw48Ra7eejxbYcOP9/ML+m
p1pIVAlv55o1XzqyCfIE+c4IOlWyHfxjWgyM6gC4FJ0ZII3uATikI4TwlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/tEpWvldvv5FC1pODqT7YPFkTJMB8GA1UdIwQY
MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt
MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw
LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGaQ5Hmn
0lFylCEkRbrC69HJux5amW1qrv6/ajTu+BmcPKTjiYlT1QGZyFjcy7uUMOg6/+c3
Frbafph7glXsu56J1e7hAtkqpIa+7aIPmukIGlD/u5N+pZ6YNGGdDMH1Do55c72J
rBOkmEBBSBJmKq5xo3yE3OISOBS3zWLEuEq2rteUj/452mqF1ihJ9doXeS+iHqbt
pwhHvD70tILGKwntCNDmAHdPtLPLpuVu0fTcEth33pHqzG5aP43fpXkeVMqWQOHp
O3nQO06DlVO6BnQW8Y7UDGxssYpaRWqDWwnxYpmhsD7VncLF0p+4XW2XvZeW/X/I
gspuEL5nolDEvA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:42 2024 by rpki-client on console-fra.rpki-client.org