Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File:                     o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier:          6o5yMsT0AJk/ygov6Ek2iEli98X3qJ6kdUccrg+esCw=
Subject key identifier:   27:9C:F3:1D:A8:CA:6C:88:E9:23:5D:6D:67:56:01:90:9C:F1:7F:8C
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer:       /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial:       01923994281B07C980733203DE29F5B0C8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number:          01A0
Signing time:             Sat 28 Sep 2024 17:01:03 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:03 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:03 +0000
Files and hashes:         1: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: 11kqBEeLS8iatj2vE39GWcstcOeeWJmq5xdOSeeIz14=)
                          2: tK-sYkWBMlg04xDtjA4w24NXU2g.roa (hash: yjupCBGvdNJrzR90Ihj3sUnBiBLHwcdWZkDRFQlOXwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:28:1b:07:c9:80:73:32:03:de:29:f5:b0:c8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
        Validity
            Not Before: Sep 28 17:01:03 2024 GMT
            Not After : Sep 29 17:01:03 2024 GMT
        Subject: CN=279cf31da8ca6c88e9235d6d675601909cf17f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:c4:59:e6:92:bb:b2:5e:1a:de:9e:e6:33:
                    5b:00:00:7a:0a:8a:f2:05:99:bc:ca:00:de:0e:c1:
                    97:cd:77:44:1d:7e:5f:d5:9e:6a:68:54:41:b6:97:
                    71:38:49:79:3f:76:f2:a4:63:2e:21:1f:cb:1e:c5:
                    4d:1d:ef:81:eb:80:79:69:02:f5:ba:95:33:df:40:
                    cd:a8:0b:76:eb:3c:cd:bc:58:fd:04:d3:dc:4b:84:
                    26:f5:fa:93:51:03:b4:87:8e:43:1d:3d:24:05:dc:
                    d3:21:ba:5f:ee:2c:ce:cf:56:16:df:f8:69:3f:0a:
                    20:65:99:e8:03:9c:e7:fa:c5:2c:87:96:dc:44:b3:
                    c9:61:56:cf:ce:7d:88:a3:ed:21:71:9b:a3:fb:46:
                    13:ef:e0:56:d6:a7:6f:18:ef:f0:af:81:a0:4a:36:
                    d1:2d:7d:dc:d4:0a:78:2c:ef:4e:8c:a8:a0:29:8a:
                    cc:1b:32:8f:ad:ce:2d:89:d0:68:7b:73:74:14:75:
                    be:92:8f:a0:67:6e:af:44:6c:6c:36:af:6b:75:a3:
                    79:a1:a8:e5:69:6a:52:55:63:7b:29:61:bf:4b:f2:
                    d2:da:02:f8:65:e1:6a:06:6b:56:78:10:d5:95:ce:
                    07:2c:30:fe:5d:05:91:42:95:4e:6a:1f:9e:88:a5:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9C:F3:1D:A8:CA:6C:88:E9:23:5D:6D:67:56:01:90:9C:F1:7F:8C
            X509v3 Authority Key Identifier:
                keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:2e:44:01:39:c1:3a:ec:95:47:f0:94:0e:0b:26:15:50:
         72:f2:dc:b6:8f:dc:1b:3c:cc:80:bc:f1:35:35:42:6d:1f:ce:
         ef:8d:cb:f3:39:d3:26:9e:8f:d9:00:e2:e8:fc:aa:89:ad:2b:
         c3:88:0f:8e:70:1c:f3:37:d5:ed:bf:24:8f:a0:be:97:cb:e5:
         c3:1e:77:fe:f3:3c:aa:35:40:7a:b9:73:6b:5f:3b:d2:ed:b4:
         3b:29:fa:e7:63:94:ac:6f:69:07:de:e0:41:98:70:53:54:85:
         92:01:90:93:ed:a6:02:dc:a0:ef:48:f4:48:2e:10:2c:bd:e5:
         1f:8b:d1:54:05:d1:e8:5c:a9:a9:27:fa:80:4c:c7:67:66:f2:
         88:35:3e:32:41:26:5c:d1:4d:12:7d:9a:6d:6d:1c:c1:e0:87:
         0b:59:44:fd:82:5b:09:5a:f8:5e:f7:c5:8c:f3:b5:88:11:f2:
         45:57:2c:7d:62:47:10:64:8e:51:2b:78:71:8f:d2:88:ba:b1:
         ae:47:b2:ce:bf:b3:7f:8d:79:e4:32:87:bd:d2:20:1a:a7:fb:
         bb:da:3d:5c:86:f5:eb:a7:55:fc:f3:fd:93:2e:64:6c:70:d6:
         b0:bb:e9:d9:7e:52:98:43:62:ce:9c:18:f8:21:57:ea:04:3c:
         b2:c5:00:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5lCgbB8mAczID3in1sMi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz
NzYyN2IwHhcNMjQwOTI4MTcwMTAzWhcNMjQwOTI5MTcwMTAzWjAzMTEwLwYDVQQD
EygyNzljZjMxZGE4Y2E2Yzg4ZTkyMzVkNmQ2NzU2MDE5MDljZjE3ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumLEWeaSu7JeGt6e5jNbAAB6Cory
BZm8ygDeDsGXzXdEHX5f1Z5qaFRBtpdxOEl5P3bypGMuIR/LHsVNHe+B64B5aQL1
upUz30DNqAt26zzNvFj9BNPcS4Qm9fqTUQO0h45DHT0kBdzTIbpf7izOz1YW3/hp
PwogZZnoA5zn+sUsh5bcRLPJYVbPzn2Io+0hcZuj+0YT7+BW1qdvGO/wr4GgSjbR
LX3c1Ap4LO9OjKigKYrMGzKPrc4tidBoe3N0FHW+ko+gZ26vRGxsNq9rdaN5oajl
aWpSVWN7KWG/S/LS2gL4ZeFqBmtWeBDVlc4HLDD+XQWRQpVOah+eiKVmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCec8x2oymyI6SNdbWdWAZCc8X+MMB8GA1UdIwQY
MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt
YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky
LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrYuRAE5
wTrslUfwlA4LJhVQcvLcto/cGzzMgLzxNTVCbR/O743L8znTJp6P2QDi6Pyqia0r
w4gPjnAc8zfV7b8kj6C+l8vlwx53/vM8qjVAerlza1870u20Oyn652OUrG9pB97g
QZhwU1SFkgGQk+2mAtyg70j0SC4QLL3lH4vRVAXR6FypqSf6gEzHZ2byiDU+MkEm
XNFNEn2abW0cweCHC1lE/YJbCVr4XvfFjPO1iBHyRVcsfWJHEGSOUSt4cY/SiLqx
rkeyzr+zf4155DKHvdIgGqf7u9o9XIb166dV/PP9ky5kbHDWsLvp2X5SmENizpwY
+CFX6gQ8ssUA8Q==
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:34 2024 by rpki-client on console-ams.rpki-client.org