Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File:                     86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier:          fFVODYbAegN6oNF/wODoBydCcHvX2NWUD+dCScFraIo=
Subject key identifier:   45:3A:EE:AF:2A:72:41:70:7E:5F:D6:B7:DE:71:D1:07:1F:40:61:9C
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer:       /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial:       019070198F8DABBEC789500ADA98F798A8FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number:          11F4
Signing time:             Mon 01 Jul 2024 21:00:41 +0000
Manifest this update:     Mon 01 Jul 2024 21:00:41 +0000
Manifest next update:     Tue 02 Jul 2024 21:00:41 +0000
Files and hashes:         1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: TRG2bZHA0x/rtc04cNyjVKVHXjVcNd81ban0LQLu6tM=)
                          2: T_0YKsL2mWzZW5ZRB6cVauboP1w.roa (hash: k2F8D7dqD2h8DS3gqBKZRuIIeIj7o+kuTjjgHy28nek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:70:19:8f:8d:ab:be:c7:89:50:0a:da:98:f7:98:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
        Validity
            Not Before: Jul  1 21:00:41 2024 GMT
            Not After : Jul  2 21:00:41 2024 GMT
        Subject: CN=453aeeaf2a7241707e5fd6b7de71d1071f40619c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:ce:f4:74:ce:77:6a:ea:46:5d:c0:cd:63:
                    4a:4c:24:14:08:1c:3f:53:1b:68:3f:5b:06:8c:8e:
                    fe:d6:4f:38:47:9e:71:69:0c:31:64:b4:f2:5f:71:
                    7a:0d:be:35:52:82:7f:7a:30:b6:5a:39:26:e4:21:
                    4b:71:93:64:72:12:eb:65:00:2e:04:ed:31:95:58:
                    91:59:5a:c9:e7:5a:d3:e4:40:3b:69:26:1a:aa:9d:
                    7b:66:f0:6a:22:16:63:fb:1d:6f:21:c2:6d:61:e1:
                    2a:35:eb:c6:99:fa:8d:30:58:d9:1d:7f:07:70:e0:
                    4b:20:e1:5e:c6:f7:57:51:d9:8a:41:3a:c3:5a:f4:
                    d6:28:a9:fe:c9:30:50:46:85:5d:f6:78:39:9c:87:
                    ec:3d:87:6a:fb:77:3e:64:9f:6d:e4:9f:cd:26:75:
                    3b:8b:d3:2c:77:f7:96:a4:36:83:48:1a:56:7e:ce:
                    9b:65:16:98:3d:f7:3a:02:63:68:d8:09:f6:79:4e:
                    fe:2d:54:71:af:4f:dd:a1:a0:a2:05:0f:38:44:ab:
                    89:6f:46:cd:2b:28:26:65:67:1d:86:98:c0:df:8f:
                    ee:e8:4b:b7:17:21:2a:4c:2e:37:cd:69:51:0a:63:
                    c7:0b:a4:9c:1b:27:f8:b6:00:a4:8a:e2:fc:a0:e7:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3A:EE:AF:2A:72:41:70:7E:5F:D6:B7:DE:71:D1:07:1F:40:61:9C
            X509v3 Authority Key Identifier:
                keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:96:ff:c9:93:36:f0:82:c6:29:74:1b:3c:cf:9e:e1:36:
         6f:f6:c7:88:20:12:45:94:31:01:47:ea:e4:fc:e1:0e:7b:19:
         4c:de:ad:87:39:2f:fd:f8:b1:ac:44:55:5e:7e:6e:94:8f:cb:
         87:ba:58:f2:ff:71:40:50:f5:2f:cb:22:9c:c0:12:98:3f:dd:
         a7:5a:fb:59:7e:58:76:9a:f9:f5:73:02:47:3a:40:b3:84:cc:
         d3:d6:c6:2b:11:11:2e:06:79:14:dc:71:84:67:cf:80:63:e2:
         de:53:20:11:6c:a8:ad:84:84:06:60:6f:c3:e5:c1:55:b2:9e:
         f5:32:a4:f5:f1:37:29:f2:80:e4:1e:6b:8c:3b:27:ff:27:d6:
         4e:74:cc:3e:1e:23:16:bd:9f:d3:95:26:7d:47:1d:ed:d4:d2:
         72:1f:32:c0:d4:3a:78:ed:ee:d7:68:29:a5:d6:70:7d:24:98:
         6e:b4:6f:f4:fb:b0:19:47:e4:f9:6a:3f:80:74:7a:42:19:24:
         76:f1:2b:3f:db:90:26:c9:91:c6:d4:3b:90:fd:93:c6:36:3b:
         88:bd:52:5b:36:5b:bb:17:00:42:0a:21:d2:f3:92:00:c8:65:
         44:87:2b:0d:96:10:58:b8:b8:c3:b8:50:d0:92:7b:08:a3:fc:
         f6:0a:8e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBwGY+Nq77HiVAK2pj3mKj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjQwNzAxMjEwMDQxWhcNMjQwNzAyMjEwMDQxWjAzMTEwLwYDVQQD
Eyg0NTNhZWVhZjJhNzI0MTcwN2U1ZmQ2YjdkZTcxZDEwNzFmNDA2MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWTO9HTOd2rqRl3AzWNKTCQUCBw/
UxtoP1sGjI7+1k84R55xaQwxZLTyX3F6Db41UoJ/ejC2Wjkm5CFLcZNkchLrZQAu
BO0xlViRWVrJ51rT5EA7aSYaqp17ZvBqIhZj+x1vIcJtYeEqNevGmfqNMFjZHX8H
cOBLIOFexvdXUdmKQTrDWvTWKKn+yTBQRoVd9ng5nIfsPYdq+3c+ZJ9t5J/NJnU7
i9Msd/eWpDaDSBpWfs6bZRaYPfc6AmNo2An2eU7+LVRxr0/doaCiBQ84RKuJb0bN
KygmZWcdhpjA34/u6Eu3FyEqTC43zWlRCmPHC6ScGyf4tgCkiuL8oOcS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEU67q8qckFwfl/Wt95x0QcfQGGcMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeiW/8mT
NvCCxil0GzzPnuE2b/bHiCASRZQxAUfq5PzhDnsZTN6thzkv/fixrERVXn5ulI/L
h7pY8v9xQFD1L8sinMASmD/dp1r7WX5Ydpr59XMCRzpAs4TM09bGKxERLgZ5FNxx
hGfPgGPi3lMgEWyorYSEBmBvw+XBVbKe9TKk9fE3KfKA5B5rjDsn/yfWTnTMPh4j
Fr2f05UmfUcd7dTSch8ywNQ6eO3u12gppdZwfSSYbrRv9PuwGUfk+Wo/gHR6Qhkk
dvErP9uQJsmRxtQ7kP2TxjY7iL1SWzZbuxcAQgoh0vOSAMhlRIcrDZYQWLi4w7hQ
0JJ7CKP89gqO0A==
-----END CERTIFICATE-----
Generated at Tue Jul 2 05:54:20 2024 by rpki-client on console-ams.rpki-client.org