Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File:                     I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier:          33evlugUczBeLjjgmIjdBHMuBjwld8HvV+PhmxcKbF4=
Subject key identifier:   7A:BA:B2:0D:CD:78:EC:EF:04:0F:8C:BC:10:89:D3:C5:AC:33:B6:EC
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer:       /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial:       01901E8F9D435381495621233B64A340C370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 01:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:46 +0000
Files and hashes:         1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: EoNO9nt4izqbstKWrD/N12I7U1jnt/1QXSXVLqRb9vA=)
                          2: UdUGDezB3y4MqVuNrCbU4rsVXjA.roa (hash: 609gDvAr69EaKczEZBQ6dxnpMGvevtgMu3dfNPJtg/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9d:43:53:81:49:56:21:23:3b:64:a3:40:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
        Validity
            Not Before: Jun 16 01:00:46 2024 GMT
            Not After : Jun 17 01:00:46 2024 GMT
        Subject: CN=7abab20dcd78ecef040f8cbc1089d3c5ac33b6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:79:1b:82:b3:6c:ce:32:40:12:31:be:05:
                    93:b4:19:a5:a3:71:63:49:e1:36:10:8f:62:9a:8b:
                    d3:47:75:44:a6:bd:4f:1b:fd:16:4e:90:ac:79:b7:
                    79:d4:42:32:f8:39:c3:9b:b8:32:59:df:71:85:27:
                    62:3e:f0:c2:95:aa:eb:ed:97:de:88:e8:bf:9a:c1:
                    c2:22:b9:81:ac:8a:3b:02:88:c0:47:d8:99:38:58:
                    84:7f:23:38:1f:77:a5:02:0a:3e:c5:43:67:b5:9f:
                    c7:95:44:cf:eb:62:3b:df:5b:b8:7f:84:3f:25:9f:
                    09:e1:52:b4:04:7c:ed:cf:bc:04:a2:1f:11:67:ed:
                    7e:2c:61:bc:65:ec:7a:ef:24:c5:4a:49:51:5f:9a:
                    d9:66:8e:13:dd:56:b8:f8:e8:07:3c:1a:56:3f:7e:
                    6a:3b:68:ac:3c:ac:70:e3:ed:c2:94:78:40:cc:77:
                    0d:1c:4a:7a:ce:9e:39:1f:c9:50:23:f9:2e:55:7a:
                    16:0c:be:1b:01:33:16:4a:78:32:5d:70:13:6f:34:
                    62:45:c5:a2:e3:c9:31:6b:a1:9f:02:b0:a5:d6:db:
                    79:c9:f5:71:88:d5:0d:61:7b:5b:02:20:81:62:8a:
                    f4:6a:5d:6a:55:03:ca:6f:7e:66:48:6e:1b:13:6b:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BA:B2:0D:CD:78:EC:EF:04:0F:8C:BC:10:89:D3:C5:AC:33:B6:EC
            X509v3 Authority Key Identifier:
                keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e5:b9:cb:e3:79:9e:cf:2f:bf:5b:25:41:0e:c1:a8:f7:44:
         b6:96:56:83:7d:01:e3:c5:71:1f:0f:27:3b:b8:a9:8c:bf:e0:
         06:c0:a4:ed:96:c1:0b:53:76:8d:dd:a4:64:35:9e:53:d6:08:
         4f:47:78:92:ce:a7:63:24:69:87:0b:69:20:d5:1c:18:b1:bd:
         96:de:d4:81:d9:12:f7:f4:16:61:12:36:9a:71:9d:7e:f8:dc:
         f6:77:68:07:9c:37:70:a7:0d:4e:b9:89:17:aa:7d:b8:65:76:
         37:06:95:5c:b0:25:ef:8e:f1:f1:8d:2f:0e:33:d7:5f:59:f7:
         37:0d:20:c9:8d:6b:88:bf:1c:a8:0a:71:13:de:3b:f7:79:67:
         46:99:f5:73:95:27:2d:77:43:82:4a:f1:21:de:1a:ec:ff:54:
         01:82:43:38:9c:c0:3c:3b:7a:fa:6f:d9:d0:51:6b:68:ef:95:
         03:ed:3e:d6:0f:4b:f7:a4:29:a3:14:9a:44:3d:4b:7c:8c:c0:
         6a:81:a7:85:66:b8:db:09:04:c4:dd:93:5e:34:a3:5a:ee:7f:
         b0:3d:b5:cd:40:47:36:d8:d7:b5:b0:99:c4:8f:dd:f4:87:cb:
         8c:5c:b4:51:cf:6d:ff:f6:e0:aa:e5:b6:55:1a:b5:2b:eb:81:
         ba:81:dd:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej51DU4FJViEjO2SjQMNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGNkMzQ5MTFjZmNlOTQ2YTIyZWE4NDY2MzczOGNkY2Mw
NzZkNDUwHhcNMjQwNjE2MDEwMDQ2WhcNMjQwNjE3MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg3YWJhYjIwZGNkNzhlY2VmMDQwZjhjYmMxMDg5ZDNjNWFjMzNiNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBp5G4KzbM4yQBIxvgWTtBmlo3Fj
SeE2EI9imovTR3VEpr1PG/0WTpCsebd51EIy+DnDm7gyWd9xhSdiPvDClarr7Zfe
iOi/msHCIrmBrIo7AojAR9iZOFiEfyM4H3elAgo+xUNntZ/HlUTP62I731u4f4Q/
JZ8J4VK0BHztz7wEoh8RZ+1+LGG8Zex67yTFSklRX5rZZo4T3Va4+OgHPBpWP35q
O2isPKxw4+3ClHhAzHcNHEp6zp45H8lQI/kuVXoWDL4bATMWSngyXXATbzRiRcWi
48kxa6GfArCl1tt5yfVxiNUNYXtbAiCBYor0al1qVQPKb35mSG4bE2u3hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq6sg3NeOzvBA+MvBCJ08WsM7bsMB8GA1UdIwQY
MBaAFCNM00kRz86UaiLqhGY3OM3MB21FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4Zjkt
MTI1NTAwZDJiZTk0LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4ZjktMTI1NTAwZDJiZTk0
LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeW5y+N5
ns8vv1slQQ7BqPdEtpZWg30B48VxHw8nO7ipjL/gBsCk7ZbBC1N2jd2kZDWeU9YI
T0d4ks6nYyRphwtpINUcGLG9lt7UgdkS9/QWYRI2mnGdfvjc9ndoB5w3cKcNTrmJ
F6p9uGV2NwaVXLAl747x8Y0vDjPXX1n3Nw0gyY1riL8cqApxE94793lnRpn1c5Un
LXdDgkrxId4a7P9UAYJDOJzAPDt6+m/Z0FFraO+VA+0+1g9L96QpoxSaRD1LfIzA
aoGnhWa42wkExN2TXjSjWu5/sD21zUBHNtjXtbCZxI/d9IfLjFy0Uc9t//bgquW2
VRq1K+uBuoHdmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:51 2024 by rpki-client on console-ams.rpki-client.org