Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File:                     9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier:          MuoDldnURsNEnPc21qTihF2v4D/NjWLhmsvOeDD4urk=
Subject key identifier:   F2:ED:FD:B4:F7:35:4A:B5:56:B6:38:A8:87:43:EB:6A:64:12:3A:3A
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer:       /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial:       01901D45FEF8837E44E4DED8A571DAFD2FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number:          0F95
Signing time:             Sat 15 Jun 2024 19:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:44 +0000
Files and hashes:         1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: JK/8oEplRcqsR6sWsVevyDasIzxHgYGC27AeXPmWB/o=)
                          2: UkFDmZlP7sJGCE2UTx4IbrRuT9k.roa (hash: pKnaU4HjoehLZFiOboepsBcbv/6O5j8TGl42vqVYZkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fe:f8:83:7e:44:e4:de:d8:a5:71:da:fd:2f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
        Validity
            Not Before: Jun 15 19:00:44 2024 GMT
            Not After : Jun 16 19:00:44 2024 GMT
        Subject: CN=f2edfdb4f7354ab556b638a88743eb6a64123a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:fc:8e:bb:4a:0d:35:e4:77:c8:32:80:ba:
                    6e:e7:5a:8e:89:60:c0:dd:09:80:7b:46:69:23:fd:
                    7c:9f:4b:ba:69:17:32:04:73:c3:d3:48:a6:0a:42:
                    b5:9b:3f:07:48:e5:c1:a6:30:45:a0:65:35:f7:cc:
                    a2:10:12:63:96:8d:1a:fa:40:ab:59:61:de:ce:1a:
                    b5:ee:28:69:f6:15:5a:4f:f6:cc:5f:f8:c2:6d:03:
                    be:44:92:a1:49:42:ce:3e:ce:41:dd:8d:a2:45:20:
                    33:c3:17:b7:96:ce:d9:e5:8b:6c:bf:6b:ee:ba:73:
                    3d:40:6a:0e:ec:86:b4:ef:2c:4e:16:9b:ab:be:c8:
                    20:ea:c8:c5:ae:03:d5:d7:7f:04:8c:a1:08:65:1f:
                    e6:c3:9a:01:a8:bb:15:2e:c7:ed:24:d9:31:36:84:
                    a5:be:a4:31:af:38:c0:43:b9:f6:37:3f:80:de:1e:
                    fc:a2:58:45:b6:ed:ce:c0:0d:ad:83:e9:94:7b:99:
                    0f:80:0d:0e:f7:44:27:b2:a4:00:50:6a:98:5c:52:
                    b0:1e:34:7d:0c:78:b4:d2:3e:dc:7a:b0:bb:45:1d:
                    c7:0a:21:65:2c:08:3f:82:98:f5:3a:f4:ad:b0:55:
                    69:bb:3a:8c:dc:52:51:54:25:c0:be:fd:c1:b1:45:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:FD:B4:F7:35:4A:B5:56:B6:38:A8:87:43:EB:6A:64:12:3A:3A
            X509v3 Authority Key Identifier:
                keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:be:dc:16:d2:b8:aa:d8:59:1a:bf:fe:6c:84:66:cc:21:
         12:88:6f:8d:87:4b:74:a2:5d:9c:9c:37:60:7d:90:cc:a9:41:
         55:27:bb:9d:64:b6:39:21:1a:ad:8f:a5:56:45:df:1a:f9:c9:
         4b:35:d4:10:5e:bb:1e:70:7c:23:82:84:b6:a5:db:3d:bb:b9:
         e2:6e:96:4b:dd:1b:b1:b8:99:66:c6:a6:7e:a7:b4:6b:b2:2f:
         f3:52:db:13:1b:05:d2:ae:e8:05:02:a7:25:af:92:90:dd:b0:
         f7:7e:a8:f2:85:de:fb:d1:48:b7:95:ff:4c:20:e6:79:32:5a:
         58:44:3f:21:e7:db:1f:50:14:89:3f:c7:d0:f6:ec:3b:b7:73:
         72:6e:bc:d8:b4:31:86:eb:5a:ea:46:23:01:a9:c8:78:af:99:
         e1:7a:92:d9:70:40:e8:a5:84:fd:b1:fc:3e:90:0a:63:73:03:
         03:d4:0d:a0:04:42:0b:27:de:d5:2c:4c:51:2e:f4:c0:c2:d8:
         de:4f:34:8c:c7:fe:f8:99:af:a6:a9:ed:05:db:c1:49:63:9f:
         21:13:ac:ba:82:24:be:21:03:48:f4:81:db:e5:70:68:71:b3:
         53:86:1d:5a:c7:98:2e:ca:63:5c:d8:1a:0c:c5:dd:fa:da:c1:
         17:62:2e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRf74g35E5N7YpXHa/S/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTUwMmM5NzQ4MmIyODUwMjg1MmM5N2VmOWJkM2EwYTJh
NWU5ZjAwHhcNMjQwNjE1MTkwMDQ0WhcNMjQwNjE2MTkwMDQ0WjAzMTEwLwYDVQQD
EyhmMmVkZmRiNGY3MzU0YWI1NTZiNjM4YTg4NzQzZWI2YTY0MTIzYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixn8jrtKDTXkd8gygLpu51qOiWDA
3QmAe0ZpI/18n0u6aRcyBHPD00imCkK1mz8HSOXBpjBFoGU198yiEBJjlo0a+kCr
WWHezhq17ihp9hVaT/bMX/jCbQO+RJKhSULOPs5B3Y2iRSAzwxe3ls7Z5Ytsv2vu
unM9QGoO7Ia07yxOFpurvsgg6sjFrgPV138EjKEIZR/mw5oBqLsVLsftJNkxNoSl
vqQxrzjAQ7n2Nz+A3h78olhFtu3OwA2tg+mUe5kPgA0O90QnsqQAUGqYXFKwHjR9
DHi00j7cerC7RR3HCiFlLAg/gpj1OvStsFVpuzqM3FJRVCXAvv3BsUUlOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLt/bT3NUq1VrY4qIdD62pkEjo6MB8GA1UdIwQY
MBaAFPSVAsl0grKFAoUsl++b06CipenwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTct
NzNiMGM3NGU5YjY0LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTctNzNiMGM3NGU5YjY0
LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrO+3BbS
uKrYWRq//myEZswhEohvjYdLdKJdnJw3YH2QzKlBVSe7nWS2OSEarY+lVkXfGvnJ
SzXUEF67HnB8I4KEtqXbPbu54m6WS90bsbiZZsamfqe0a7Iv81LbExsF0q7oBQKn
Ja+SkN2w936o8oXe+9FIt5X/TCDmeTJaWEQ/IefbH1AUiT/H0PbsO7dzcm682LQx
huta6kYjAanIeK+Z4XqS2XBA6KWE/bH8PpAKY3MDA9QNoARCCyfe1SxMUS70wMLY
3k80jMf++JmvpqntBdvBSWOfIROsuoIkviEDSPSB2+VwaHGzU4YdWseYLspjXNga
DMXd+trBF2IuzA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:58:44 2024 by rpki-client on console-fra.rpki-client.org