Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File:                     DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier:          oo/XrGD/RACORGP7x+omNC1WTn9g7EHxhC1vs2TjLHA=
Subject key identifier:   2E:35:88:37:63:EC:78:DC:EC:B7:4E:B2:20:83:A1:F6:31:B4:8F:B5
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer:       /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial:       01901EC6C7F1A8F455E1BF95575DE43D58CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:02 +0000
Files and hashes:         1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: P9xBZTavNAArtWMayZrmng7PV1Zm/tHVN53efFoO1BM=)
                          2: GAMgQuAtuYAbpdyZekqKPo20Gxk.roa (hash: uVQS5EW//MlePbtymr3zQUwMY2DVdxN0+JJhFZJsiAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c7:f1:a8:f4:55:e1:bf:95:57:5d:e4:3d:58:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
        Validity
            Not Before: Jun 16 02:01:02 2024 GMT
            Not After : Jun 17 02:01:02 2024 GMT
        Subject: CN=2e35883763ec78dcecb74eb22083a1f631b48fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:01:a0:c8:96:22:0e:9b:2e:39:a9:a6:12:
                    de:28:0a:c0:24:1d:7b:54:4a:c3:92:6a:64:2b:7a:
                    09:73:e4:d0:85:b1:13:e9:b0:ee:13:22:6f:53:7a:
                    b9:23:88:88:82:6e:6d:c3:02:a1:fa:fd:64:b9:02:
                    8a:f3:e5:af:df:7a:4d:76:e6:78:33:fd:6a:80:91:
                    e3:12:69:71:8e:ec:ef:cb:cd:f2:45:78:8a:d7:e2:
                    e4:15:e4:8d:3e:2a:fd:0d:80:9a:f8:53:0f:e9:23:
                    45:0b:1f:2b:24:35:96:7d:56:4f:c3:12:de:70:38:
                    8d:94:5d:cd:dd:19:c6:3a:ca:7a:1f:72:f6:f1:e9:
                    35:86:5e:40:91:50:68:62:b4:49:24:78:88:55:65:
                    ce:65:7d:c9:2c:f0:28:ae:f2:70:8a:23:d7:a7:2d:
                    97:66:91:b1:bd:ca:02:4b:5e:87:1b:be:c2:70:b0:
                    33:b0:af:80:ed:78:b1:de:18:c7:6a:a5:c2:a2:66:
                    58:7f:22:48:f9:60:9c:96:04:88:99:8a:89:27:00:
                    33:84:40:6c:71:1f:e0:64:22:d3:8a:fd:12:4e:20:
                    ee:fe:11:2c:cb:71:79:03:18:1f:02:d8:25:82:54:
                    0a:b0:8f:f3:ae:88:05:43:5d:98:55:91:54:e5:90:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:88:37:63:EC:78:DC:EC:B7:4E:B2:20:83:A1:F6:31:B4:8F:B5
            X509v3 Authority Key Identifier:
                keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:a6:41:8c:ab:f1:32:32:34:88:26:c9:4f:86:77:50:c4:
         c5:99:c6:d2:44:9e:b4:eb:89:e1:90:e5:85:bc:02:df:3e:ea:
         ea:3a:94:9e:04:42:7f:67:02:a5:b0:06:10:d6:73:8c:02:95:
         e5:e0:2c:0a:11:e2:60:4d:f3:0f:1b:d9:b0:57:0d:3b:97:e4:
         c7:35:b3:e1:8c:79:bf:68:54:bf:75:3d:9e:39:a4:2d:64:76:
         b7:90:09:db:8f:5e:72:4f:3d:5d:14:c1:23:ef:8a:63:e9:13:
         19:b9:9a:f3:d0:22:d1:c8:0a:03:a0:32:75:b9:5b:f7:9b:b7:
         29:45:c8:1f:80:9d:e1:74:9c:d3:34:aa:b6:5c:91:54:b2:6b:
         d1:b8:89:d9:78:50:f1:26:d5:50:eb:af:63:23:22:b5:9e:4f:
         8d:8e:16:d5:b2:d8:e4:f5:47:81:dc:c4:bd:36:6e:08:33:a8:
         52:5d:37:eb:f9:27:ae:dd:02:0b:9c:ae:06:67:11:95:95:de:
         9d:44:d8:40:23:f6:fa:3a:46:54:a8:3d:3d:45:ea:32:b7:4d:
         3d:ea:39:dd:10:66:d8:c8:ab:c6:9c:ad:d9:16:41:b5:ba:c2:
         b2:e5:52:97:6e:36:5c:c6:0d:ed:00:2b:3b:28:1c:f9:c1:91:
         cd:dd:09:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexsfxqPRV4b+VV13kPVjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjQwNjE2MDIwMTAyWhcNMjQwNjE3MDIwMTAyWjAzMTEwLwYDVQQD
EygyZTM1ODgzNzYzZWM3OGRjZWNiNzRlYjIyMDgzYTFmNjMxYjQ4ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5MBoMiWIg6bLjmpphLeKArAJB17
VErDkmpkK3oJc+TQhbET6bDuEyJvU3q5I4iIgm5twwKh+v1kuQKK8+Wv33pNduZ4
M/1qgJHjEmlxjuzvy83yRXiK1+LkFeSNPir9DYCa+FMP6SNFCx8rJDWWfVZPwxLe
cDiNlF3N3RnGOsp6H3L28ek1hl5AkVBoYrRJJHiIVWXOZX3JLPAorvJwiiPXpy2X
ZpGxvcoCS16HG77CcLAzsK+A7Xix3hjHaqXComZYfyJI+WCclgSImYqJJwAzhEBs
cR/gZCLTiv0STiDu/hEsy3F5AxgfAtglglQKsI/zrogFQ12YVZFU5ZB91QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC41iDdj7Hjc7LdOsiCDofYxtI+1MB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi16mQYyr
8TIyNIgmyU+Gd1DExZnG0kSetOuJ4ZDlhbwC3z7q6jqUngRCf2cCpbAGENZzjAKV
5eAsChHiYE3zDxvZsFcNO5fkxzWz4Yx5v2hUv3U9njmkLWR2t5AJ249eck89XRTB
I++KY+kTGbma89Ai0cgKA6Aydblb95u3KUXIH4Cd4XSc0zSqtlyRVLJr0biJ2XhQ
8SbVUOuvYyMitZ5PjY4W1bLY5PVHgdzEvTZuCDOoUl036/knrt0CC5yuBmcRlZXe
nUTYQCP2+jpGVKg9PUXqMrdNPeo53RBm2Mirxpyt2RZBtbrCsuVSl242XMYN7QAr
Oygc+cGRzd0J0g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:06 2024 by rpki-client on console-fra.rpki-client.org