Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          r+O9xijvxJENgonxMgKboGXU90ymiT6f+1P8s2zxhuk=
Subject key identifier:   3D:28:2B:4A:94:93:9B:E4:CA:58:C7:46:DA:FA:22:ED:56:B4:65:02
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       01901D0F05ED96C0786CCF3D323187B9371F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 18:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:42 +0000
Files and hashes:         1: 9Eo4-htnPfS7dNVkeOLY-wBoQ_0.roa (hash: eSWxi1EjExFl1QWAN3TP2i6cXhg3A0sxo1DpPcld5Eg=)
                          2: S7FO3CaFUR3PNdsjKrCNA2sVUG4.roa (hash: UMX4S4tJW73j3zD8YwmeK0vseYLUq0Qxcd19t4+mH8U=)
                          3: YFn6-bY3YTivHFDcIacJDFzXuPg.roa (hash: Frlt5pxu26dFEigv4JFrr/tG5WV9JOV0IbcLgt0n7TE=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: GalGOw0DW3NnxcuTZED8OlITIYfGYrla/9E5Ng+TQys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:05:ed:96:c0:78:6c:cf:3d:32:31:87:b9:37:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Jun 15 18:00:42 2024 GMT
            Not After : Jun 16 18:00:42 2024 GMT
        Subject: CN=3d282b4a94939be4ca58c746dafa22ed56b46502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:9a:5a:46:1a:5b:10:36:a2:72:d4:5f:b1:
                    f3:78:5d:eb:5d:d0:27:77:34:d5:78:13:d8:e7:55:
                    43:e2:ca:40:0b:c1:32:47:78:69:54:5a:b3:61:94:
                    a1:5a:d1:2b:cf:71:07:77:51:bf:8a:53:be:e4:a0:
                    65:d6:32:18:6c:1e:69:6e:5f:47:31:3b:d0:51:4b:
                    8f:54:a2:8b:71:45:21:28:f6:f2:7e:f0:3f:6f:9a:
                    40:01:c6:a8:ce:4e:d6:f1:d0:80:9f:4a:db:8e:c9:
                    12:6b:dc:4a:50:b2:44:6c:02:03:6a:07:ce:49:98:
                    3f:be:f4:d5:e9:8a:4e:ed:70:70:06:2d:6a:77:aa:
                    9a:fb:34:5e:97:98:e7:8a:f2:c5:52:d9:e0:a7:67:
                    fb:81:3f:f7:48:00:3d:49:66:96:87:fa:2d:65:81:
                    60:ad:b7:cc:84:29:bc:cf:7c:20:86:47:1d:24:e8:
                    cb:b2:96:cc:18:84:00:79:84:42:e2:d5:06:78:7b:
                    b4:f3:60:b1:00:37:00:be:8d:f5:9a:3a:dd:ca:b8:
                    03:8e:d9:1a:ca:63:00:a8:ed:39:a2:a1:7f:b1:d1:
                    b9:34:14:5e:bb:c8:ab:80:d4:e1:26:94:dc:30:42:
                    e3:1b:97:1f:8b:b0:65:7a:77:16:59:3f:66:12:0f:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:2B:4A:94:93:9B:E4:CA:58:C7:46:DA:FA:22:ED:56:B4:65:02
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:23:02:80:96:4e:be:0c:64:29:84:03:ab:2c:a1:21:87:d5:
         11:40:9a:b6:3a:9c:85:96:06:50:42:f6:3d:2b:cd:4f:a5:29:
         aa:08:03:b7:74:80:2b:89:ba:22:b2:72:50:07:98:22:29:a2:
         b6:79:6a:00:e7:e0:51:61:66:08:ba:d2:ad:36:92:10:e4:5b:
         b2:46:8b:83:8e:9a:a2:59:0d:22:8c:7c:ce:29:7d:0b:bf:7c:
         ae:f7:94:8b:74:26:66:ae:ae:01:a1:38:26:bf:60:e5:d4:29:
         db:79:61:eb:5e:39:e2:8b:9c:9a:84:47:b7:76:b2:bd:03:90:
         d2:4c:bd:ef:23:d6:a6:23:f9:6c:d2:ea:28:d8:03:5d:76:1c:
         54:49:a7:31:e2:51:32:23:88:ee:a6:93:41:59:6b:26:aa:c7:
         8f:83:d5:80:5d:c2:fd:a6:e9:54:45:bb:6a:1f:bc:28:60:93:
         1b:98:96:93:82:20:26:20:5a:39:72:42:c5:23:24:f5:22:4e:
         09:dc:25:ed:7d:c8:d0:09:f3:6b:b9:e2:ac:5b:e1:2b:97:b3:
         90:3e:6a:d9:8b:29:84:c8:67:4e:e4:e4:30:88:11:11:63:19:
         4c:f8:5b:cb:c3:93:0e:ac:39:50:c2:4b:e4:ee:9d:52:bb:f8:
         e4:9f:60:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDwXtlsB4bM89MjGHuTcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy
OGE1YmIwHhcNMjQwNjE1MTgwMDQyWhcNMjQwNjE2MTgwMDQyWjAzMTEwLwYDVQQD
EygzZDI4MmI0YTk0OTM5YmU0Y2E1OGM3NDZkYWZhMjJlZDU2YjQ2NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwiaWkYaWxA2onLUX7HzeF3rXdAn
dzTVeBPY51VD4spAC8EyR3hpVFqzYZShWtErz3EHd1G/ilO+5KBl1jIYbB5pbl9H
MTvQUUuPVKKLcUUhKPbyfvA/b5pAAcaozk7W8dCAn0rbjskSa9xKULJEbAIDagfO
SZg/vvTV6YpO7XBwBi1qd6qa+zRel5jnivLFUtngp2f7gT/3SAA9SWaWh/otZYFg
rbfMhCm8z3wghkcdJOjLspbMGIQAeYRC4tUGeHu082CxADcAvo31mjrdyrgDjtka
ymMAqO05oqF/sdG5NBReu8irgNThJpTcMELjG5cfi7BlencWWT9mEg+mmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0oK0qUk5vkyljHRtr6Iu1WtGUCMB8GA1UdIwQY
MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt
M2U3Y2FkZDg4YzcwLzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw
LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyMCgJZO
vgxkKYQDqyyhIYfVEUCatjqchZYGUEL2PSvNT6UpqggDt3SAK4m6IrJyUAeYIimi
tnlqAOfgUWFmCLrSrTaSEORbskaLg46aolkNIox8zil9C798rveUi3QmZq6uAaE4
Jr9g5dQp23lh61454oucmoRHt3ayvQOQ0ky97yPWpiP5bNLqKNgDXXYcVEmnMeJR
MiOI7qaTQVlrJqrHj4PVgF3C/abpVEW7ah+8KGCTG5iWk4IgJiBaOXJCxSMk9SJO
Cdwl7X3I0Anza7nirFvhK5ezkD5q2YsphMhnTuTkMIgREWMZTPhby8OTDqw5UMJL
5O6dUrv45J9g/w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:25:30 2024 by rpki-client on console-ams.rpki-client.org