Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49b48e-c84b-4f99-923f-4586238305f1/1/sZ4bfoENZJKr24B_yN3oZ1vWvyw.mft
File:                     sZ4bfoENZJKr24B_yN3oZ1vWvyw.mft (raw, json)
Hash identifier:          GOA9scRB4TC6kwjNv+K9DL23QyBuMJy9GQTOAzzwnuQ=
Subject key identifier:   A6:06:DA:BE:CA:55:B3:51:C1:A0:5F:D2:8C:84:A7:44:B4:EF:8E:F5
Authority key identifier: B1:9E:1B:7E:81:0D:64:92:AB:DB:80:7F:C8:DD:E8:67:5B:D6:BF:2C
Certificate issuer:       /CN=b19e1b7e810d6492abdb807fc8dde8675bd6bf2c
Certificate serial:       01901BFDA6C2DE87F48C9B420767EB05C2B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ4bfoENZJKr24B_yN3oZ1vWvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/49b48e-c84b-4f99-923f-4586238305f1/1/sZ4bfoENZJKr24B_yN3oZ1vWvyw.mft
Manifest number:          0C31
Signing time:             Sat 15 Jun 2024 13:02:06 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:06 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:06 +0000
Files and hashes:         1: Tonf_fDBilVE8CvCB3qX9-Fy9uA.roa (hash: /80jc99Ln+EdbXVfLU9xAVQy6JSX7woEZQ9TAfqpJDE=)
                          2: sZ4bfoENZJKr24B_yN3oZ1vWvyw.crl (hash: mFGaWwJ2W3qBN2RYyLe4OJB0kAHhpDqBqktuvM86HQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/49b48e-c84b-4f99-923f-4586238305f1/1/sZ4bfoENZJKr24B_yN3oZ1vWvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/49b48e-c84b-4f99-923f-4586238305f1/1/sZ4bfoENZJKr24B_yN3oZ1vWvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ4bfoENZJKr24B_yN3oZ1vWvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:a6:c2:de:87:f4:8c:9b:42:07:67:eb:05:c2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19e1b7e810d6492abdb807fc8dde8675bd6bf2c
        Validity
            Not Before: Jun 15 13:02:06 2024 GMT
            Not After : Jun 16 13:02:06 2024 GMT
        Subject: CN=a606dabeca55b351c1a05fd28c84a744b4ef8ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:e9:20:41:af:5c:34:e1:ac:c2:3c:ed:4d:
                    99:d9:92:84:50:82:11:6f:39:14:77:a0:da:58:0d:
                    3f:cf:19:55:73:91:f3:48:94:91:57:27:41:d4:08:
                    38:50:5c:b8:90:83:d4:a8:c2:07:57:f3:53:96:09:
                    70:af:85:2f:f3:48:48:d9:85:9e:a0:94:79:fd:6f:
                    ff:77:d6:a0:35:1d:b1:08:78:e8:4f:3a:83:8a:95:
                    7a:5d:84:5f:c6:38:65:0f:14:4e:c3:dd:2e:96:ae:
                    58:e3:86:38:30:73:ac:05:3e:70:d4:6e:82:e2:33:
                    66:28:b3:32:ba:f7:b1:f8:ba:ac:b6:85:29:56:3a:
                    06:1a:51:2b:17:05:5e:27:fc:ab:4e:39:fc:ef:1c:
                    47:7a:8e:36:b7:1b:e0:6e:c7:ed:a0:4d:03:58:07:
                    73:bf:07:89:29:4e:4c:2a:bd:fc:01:41:b9:b7:e6:
                    ed:c0:d3:43:fe:b1:82:f4:b5:9e:3f:e8:22:b2:a1:
                    b7:d9:3d:67:f3:04:9f:28:d2:77:90:c6:04:d4:55:
                    ca:d0:7a:3d:57:1b:e0:44:cf:ce:97:f1:a6:9c:73:
                    25:f7:4e:9f:cf:18:ff:fa:74:e5:8f:bd:0c:20:b4:
                    81:c5:db:9b:6a:59:4c:75:7f:fb:62:c2:4a:f1:f5:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:06:DA:BE:CA:55:B3:51:C1:A0:5F:D2:8C:84:A7:44:B4:EF:8E:F5
            X509v3 Authority Key Identifier:
                keyid:B1:9E:1B:7E:81:0D:64:92:AB:DB:80:7F:C8:DD:E8:67:5B:D6:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ4bfoENZJKr24B_yN3oZ1vWvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49b48e-c84b-4f99-923f-4586238305f1/1/sZ4bfoENZJKr24B_yN3oZ1vWvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49b48e-c84b-4f99-923f-4586238305f1/1/sZ4bfoENZJKr24B_yN3oZ1vWvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:45:e5:89:08:f3:9a:82:ec:7e:84:73:11:3d:dc:c4:8d:
         96:cf:e2:da:cd:7e:5e:c2:9e:29:b0:c0:c4:db:85:b8:75:18:
         46:ac:a3:f9:61:90:3d:f2:28:e3:de:fb:d0:2a:57:db:26:ae:
         10:0e:df:cd:d2:00:21:a8:2b:7a:d7:9a:8e:3f:46:57:b6:72:
         37:e1:e3:42:57:0f:34:6a:86:a6:76:71:9b:32:5a:b6:3f:34:
         cf:b4:99:24:c4:3f:ac:cc:11:6a:c4:af:66:3e:66:dd:da:f3:
         bc:18:15:04:60:b0:91:6f:08:bb:35:a4:c4:7c:a9:cb:14:eb:
         49:e7:97:8d:2c:9c:b8:5e:13:5d:33:44:c7:e8:b7:3a:7d:b6:
         b1:f7:24:84:7b:83:4b:ac:85:06:e1:f8:5a:9b:0c:9e:52:18:
         97:d1:57:9b:83:42:4a:14:14:c4:52:80:c5:9f:27:7d:93:82:
         cf:b4:a6:98:23:35:25:f3:32:18:a8:09:8f:2d:67:65:79:52:
         da:ca:89:00:f6:34:09:54:e6:2e:5d:71:2b:06:b1:38:61:3f:
         b3:d4:e6:4c:8d:18:c5:bf:e0:ac:87:82:31:b0:82:57:c3:d5:
         76:e8:a0:a4:9d:c1:f9:3c:47:af:46:f2:28:e5:39:b4:22:b2:
         60:ea:7d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/abC3of0jJtCB2frBcKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWUxYjdlODEwZDY0OTJhYmRiODA3ZmM4ZGRlODY3NWJk
NmJmMmMwHhcNMjQwNjE1MTMwMjA2WhcNMjQwNjE2MTMwMjA2WjAzMTEwLwYDVQQD
EyhhNjA2ZGFiZWNhNTViMzUxYzFhMDVmZDI4Yzg0YTc0NGI0ZWY4ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/pIEGvXDThrMI87U2Z2ZKEUIIR
bzkUd6DaWA0/zxlVc5HzSJSRVydB1Ag4UFy4kIPUqMIHV/NTlglwr4Uv80hI2YWe
oJR5/W//d9agNR2xCHjoTzqDipV6XYRfxjhlDxROw90ulq5Y44Y4MHOsBT5w1G6C
4jNmKLMyuvex+LqstoUpVjoGGlErFwVeJ/yrTjn87xxHeo42txvgbsftoE0DWAdz
vweJKU5MKr38AUG5t+btwNND/rGC9LWeP+gisqG32T1n8wSfKNJ3kMYE1FXK0Ho9
VxvgRM/Ol/GmnHMl906fzxj/+nTlj70MILSBxduballMdX/7YsJK8fV+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYG2r7KVbNRwaBf0oyEp0S07471MB8GA1UdIwQY
MBaAFLGeG36BDWSSq9uAf8jd6Gdb1r8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1o0YmZvRU5aSktyMjRCX3lOM29aMXZXdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80OWI0OGUtYzg0Yi00Zjk5LTkyM2Yt
NDU4NjIzODMwNWYxLzEvc1o0YmZvRU5aSktyMjRCX3lOM29aMXZXdnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80OWI0OGUtYzg0Yi00Zjk5LTkyM2YtNDU4NjIzODMwNWYx
LzEvc1o0YmZvRU5aSktyMjRCX3lOM29aMXZXdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVVF5YkI
85qC7H6EcxE93MSNls/i2s1+XsKeKbDAxNuFuHUYRqyj+WGQPfIo49770CpX2yau
EA7fzdIAIagreteajj9GV7ZyN+HjQlcPNGqGpnZxmzJatj80z7SZJMQ/rMwRasSv
Zj5m3drzvBgVBGCwkW8IuzWkxHypyxTrSeeXjSycuF4TXTNEx+i3On22sfckhHuD
S6yFBuH4WpsMnlIYl9FXm4NCShQUxFKAxZ8nfZOCz7SmmCM1JfMyGKgJjy1nZXlS
2sqJAPY0CVTmLl1xKwaxOGE/s9TmTI0Yxb/grIeCMbCCV8PVduigpJ3B+TxHr0by
KOU5tCKyYOp96Q==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:33:18 2024 by rpki-client on console-ams.rpki-client.org