Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File:                     AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier:          sfqtNBD6rAOsfHGG2WkPTjFnRIthiT1joU+qxOCBjTw=
Subject key identifier:   D4:BE:84:DD:76:29:9D:11:84:A5:A9:B4:26:B1:4B:35:FF:4F:A1:86
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer:       /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial:       01901DECDD8066AABC16660CB2989B207F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number:          1196
Signing time:             Sat 15 Jun 2024 22:03:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:00 +0000
Files and hashes:         1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: uAi65ZkCn2XBMcxdxKKe7/i2WnnTZEqfMHfkkSCEG6Q=)
                          2: dMHpUm8VZEZVdiC1RHvrnwWe1JY.roa (hash: Of0wvORtLarxkVZANVpreqxiAHgzR72qblwvfzcbvnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:dd:80:66:aa:bc:16:66:0c:b2:98:9b:20:7f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
        Validity
            Not Before: Jun 15 22:03:00 2024 GMT
            Not After : Jun 16 22:03:00 2024 GMT
        Subject: CN=d4be84dd76299d1184a5a9b426b14b35ff4fa186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:51:f1:49:8a:3e:1e:a6:1e:21:ad:3e:f5:
                    69:78:d3:7a:63:8f:e3:3f:b1:f8:2d:c7:0d:bc:17:
                    05:a1:8a:52:a8:55:0a:75:45:ab:3b:5b:06:d1:b4:
                    2e:6d:6c:a8:25:ec:72:60:24:d8:36:f0:8a:f2:ff:
                    47:e5:08:9c:dc:b0:0a:bf:b5:ff:2a:0f:c8:b7:b7:
                    72:f1:86:e4:d8:57:c1:a1:f7:7a:df:ab:9a:af:55:
                    70:88:3c:fb:fb:5f:01:b2:cb:df:90:68:d0:d4:19:
                    24:f3:43:61:25:08:ed:6f:84:74:2c:da:fe:33:dc:
                    ff:50:a5:7f:7b:e0:ee:e0:2e:68:4a:af:eb:32:c8:
                    c6:6c:be:ca:f7:16:1b:f0:57:18:0b:71:d9:21:9b:
                    65:1e:18:76:82:d3:c6:90:78:80:41:72:90:39:80:
                    87:c2:75:ca:40:e7:cb:2f:09:c5:9d:64:7d:a1:40:
                    45:a3:39:2c:b9:6f:ed:8f:1f:f2:3e:20:e0:07:ad:
                    63:0d:52:e3:cd:45:ed:e7:46:8c:a5:19:41:c8:83:
                    90:b3:6f:25:f7:88:bd:d8:60:fb:d6:0e:8b:43:f6:
                    b6:0e:51:cc:05:71:a1:11:a6:dc:d9:d1:0b:b1:6b:
                    6e:7f:54:cf:45:e2:97:d7:2c:dd:47:72:fc:9b:b9:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:84:DD:76:29:9D:11:84:A5:A9:B4:26:B1:4B:35:FF:4F:A1:86
            X509v3 Authority Key Identifier:
                keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:16:79:df:eb:86:7c:3a:47:82:8f:27:d7:da:3c:9a:f8:
         2f:07:c2:84:b2:94:34:29:60:23:fb:fe:6a:15:4d:df:32:22:
         b1:9c:d6:8b:41:4f:e7:16:1d:58:27:28:90:4c:c5:b1:cb:77:
         6f:07:85:09:57:af:4d:10:17:e6:91:05:2e:3a:c0:d0:9a:1d:
         6c:2f:46:2c:85:7b:9c:99:a3:4d:e8:85:b1:9d:52:49:c3:75:
         2f:82:09:1c:c4:81:ed:0b:03:c6:c4:56:76:14:ac:f0:15:0d:
         c1:76:7c:83:80:a8:67:e2:da:e2:93:93:ea:55:12:7c:44:3b:
         f6:38:b8:93:fb:8a:9a:3a:ba:21:9d:fa:92:ca:26:fc:51:2b:
         ea:e9:65:f3:a9:54:ec:03:aa:ff:40:e3:55:6f:66:bd:cb:53:
         4c:3f:0f:0f:47:66:7d:f2:87:87:31:63:82:4c:e5:61:55:26:
         a8:c4:89:3d:2b:fb:39:c9:cd:18:91:7d:dd:ce:01:7c:ef:f6:
         5b:eb:80:6b:8d:2a:c5:0f:9a:b6:66:d3:a1:bf:41:71:ed:c4:
         33:f3:7a:65:07:b5:5f:da:e9:7d:da:72:e0:c8:53:48:c0:6a:
         5c:ae:ca:89:3c:82:9d:68:1a:11:90:d5:e6:3d:4a:ff:af:12:
         57:44:d9:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7N2AZqq8FmYMspibIH8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3
OGU0ZDQwHhcNMjQwNjE1MjIwMzAwWhcNMjQwNjE2MjIwMzAwWjAzMTEwLwYDVQQD
EyhkNGJlODRkZDc2Mjk5ZDExODRhNWE5YjQyNmIxNGIzNWZmNGZhMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VZR8UmKPh6mHiGtPvVpeNN6Y4/j
P7H4LccNvBcFoYpSqFUKdUWrO1sG0bQubWyoJexyYCTYNvCK8v9H5Qic3LAKv7X/
Kg/It7dy8Ybk2FfBofd636uar1VwiDz7+18BssvfkGjQ1Bkk80NhJQjtb4R0LNr+
M9z/UKV/e+Du4C5oSq/rMsjGbL7K9xYb8FcYC3HZIZtlHhh2gtPGkHiAQXKQOYCH
wnXKQOfLLwnFnWR9oUBFozksuW/tjx/yPiDgB61jDVLjzUXt50aMpRlByIOQs28l
94i92GD71g6LQ/a2DlHMBXGhEabc2dELsWtuf1TPReKX1yzdR3L8m7l1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS+hN12KZ0RhKWptCaxSzX/T6GGMB8GA1UdIwQY
MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt
ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1
LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMMWed/r
hnw6R4KPJ9faPJr4LwfChLKUNClgI/v+ahVN3zIisZzWi0FP5xYdWCcokEzFsct3
bweFCVevTRAX5pEFLjrA0JodbC9GLIV7nJmjTeiFsZ1SScN1L4IJHMSB7QsDxsRW
dhSs8BUNwXZ8g4CoZ+La4pOT6lUSfEQ79ji4k/uKmjq6IZ36ksom/FEr6ull86lU
7AOq/0DjVW9mvctTTD8PD0dmffKHhzFjgkzlYVUmqMSJPSv7OcnNGJF93c4BfO/2
W+uAa40qxQ+atmbTob9Bce3EM/N6ZQe1X9rpfdpy4MhTSMBqXK7KiTyCnWgaEZDV
5j1K/68SV0TZ4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:14 2024 by rpki-client on console-ams.rpki-client.org