Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File:                     TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier:          WmwlxMDF96ZWlgtpA5LsCxse2uupMxqTN/dfourdWoU=
Subject key identifier:   A4:D0:AB:D9:3E:EA:78:1B:02:C9:55:28:01:38:6C:80:14:01:E4:BE
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer:       /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial:       01901D4616223EAD976B9EC791FDEAADE5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number:          10C2
Signing time:             Sat 15 Jun 2024 19:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:50 +0000
Files and hashes:         1: AKERlgInC3XwY2cWyudXMewgdRc.roa (hash: lACuj9VNEgdF9ASFMxXPB3OBBuMlNh0U/k6Ud8+/r3Q=)
                          2: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: mxnNoLrCeHvtvGf25WRuz2gUZp3pRcHsiLcvI1crbb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:16:22:3e:ad:97:6b:9e:c7:91:fd:ea:ad:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
        Validity
            Not Before: Jun 15 19:00:50 2024 GMT
            Not After : Jun 16 19:00:50 2024 GMT
        Subject: CN=a4d0abd93eea781b02c9552801386c801401e4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:78:a3:9b:56:34:94:c9:0e:bf:29:b3:c3:
                    c9:01:7f:5c:0d:a0:e5:a7:14:46:77:96:11:95:6b:
                    f0:3d:17:81:4d:1b:e3:15:d7:c7:ff:a7:1e:af:ec:
                    7c:16:fb:4f:e0:a0:d7:1e:2e:04:c3:10:bb:c3:16:
                    17:bf:c5:7b:21:db:6e:d4:c8:1f:e8:34:06:c9:58:
                    6a:a3:79:d3:64:16:d9:d9:6a:ec:29:88:59:02:e7:
                    af:6d:19:a4:5d:5e:e8:f1:0a:5a:01:99:05:fa:6d:
                    db:bc:0f:d0:59:2e:e6:bc:e9:90:cf:3c:68:40:0f:
                    86:61:c7:0f:65:82:60:a7:dc:57:2c:38:f6:ee:30:
                    3c:1c:91:0a:a1:d0:9f:cb:9c:a0:8d:bf:cc:b1:5f:
                    0c:a2:3d:19:f2:07:49:d0:ac:51:18:9d:5c:78:c4:
                    17:0c:41:e1:78:1c:4c:fd:bd:5c:42:f6:88:09:b7:
                    ac:22:31:6d:0c:4f:77:ad:c9:6e:a8:07:60:19:d6:
                    96:ef:26:d1:c1:ea:4e:1f:69:57:c3:12:d3:13:3d:
                    15:01:64:60:8c:9a:50:62:16:de:4a:7f:79:8f:5d:
                    39:72:cd:72:eb:33:25:d1:78:e5:e8:07:ca:1b:88:
                    68:b1:03:2f:f3:27:3f:7f:ed:be:b1:ee:24:e9:16:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D0:AB:D9:3E:EA:78:1B:02:C9:55:28:01:38:6C:80:14:01:E4:BE
            X509v3 Authority Key Identifier:
                keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:46:6d:06:0e:e8:5d:47:07:44:66:db:8a:f3:eb:0d:37:
         43:aa:b0:53:3e:57:25:9d:5c:0d:39:bc:d0:05:c7:84:8f:7d:
         9e:7a:2c:f9:72:28:8a:c9:c7:08:24:4e:d7:9f:67:0f:32:87:
         23:a0:3d:34:01:be:d1:16:68:c0:ff:58:b8:ec:ce:c2:b8:1d:
         b2:a0:19:17:dd:b1:cf:59:37:6a:62:12:04:99:e1:99:13:9d:
         ff:27:a9:8e:66:ae:52:7e:13:9e:03:0c:ca:19:ae:e3:4a:c4:
         94:4e:05:7b:e5:6c:98:6f:ac:99:8d:2b:79:2d:15:ba:03:e4:
         3d:98:88:3d:2e:08:40:eb:02:d0:35:34:52:7b:5f:98:a8:e4:
         ca:4b:db:e1:a6:c8:2c:c7:a4:32:26:36:11:e2:4b:19:d9:44:
         7c:a1:d8:07:af:63:6c:6d:e3:fe:79:3d:f1:2b:c2:d3:6a:7d:
         94:bc:6f:fe:44:e3:cc:44:fe:0f:b3:b1:24:41:f3:bc:30:d5:
         13:bd:24:a9:c0:2f:90:2c:03:63:88:52:7f:9a:ff:61:34:ae:
         22:ee:e5:21:2c:89:97:1f:ad:10:66:b2:a2:ff:13:42:e9:1e:
         5a:9f:0a:77:1a:1f:f5:5b:1d:76:7d:42:ec:4e:f4:88:99:47:
         6a:c2:85:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRhYiPq2Xa57Hkf3qreXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTRmOTY3NzFkOTFmODdjMjFiZTlmMDBkMTIwMzI3ZjVi
YmYyZWEwHhcNMjQwNjE1MTkwMDUwWhcNMjQwNjE2MTkwMDUwWjAzMTEwLwYDVQQD
EyhhNGQwYWJkOTNlZWE3ODFiMDJjOTU1MjgwMTM4NmM4MDE0MDFlNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbZ4o5tWNJTJDr8ps8PJAX9cDaDl
pxRGd5YRlWvwPReBTRvjFdfH/6cer+x8FvtP4KDXHi4EwxC7wxYXv8V7Idtu1Mgf
6DQGyVhqo3nTZBbZ2WrsKYhZAuevbRmkXV7o8QpaAZkF+m3bvA/QWS7mvOmQzzxo
QA+GYccPZYJgp9xXLDj27jA8HJEKodCfy5ygjb/MsV8Moj0Z8gdJ0KxRGJ1ceMQX
DEHheBxM/b1cQvaICbesIjFtDE93rcluqAdgGdaW7ybRwepOH2lXwxLTEz0VAWRg
jJpQYhbeSn95j105cs1y6zMl0Xjl6AfKG4hosQMv8yc/f+2+se4k6RZSCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTQq9k+6ngbAslVKAE4bIAUAeS+MB8GA1UdIwQY
MBaAFE3k+Wdx2R+Hwhvp8A0SAyf1u/LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgt
NTkxMWZlNjNhZjc5LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wMmY5YmItNmU2YS00NzhhLWJhYzgtNTkxMWZlNjNhZjc5
LzEvVGVUNVozSFpINGZDRy1ud0RSSURKX1c3OHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsJGbQYO
6F1HB0Rm24rz6w03Q6qwUz5XJZ1cDTm80AXHhI99nnos+XIoisnHCCRO159nDzKH
I6A9NAG+0RZowP9YuOzOwrgdsqAZF92xz1k3amISBJnhmROd/yepjmauUn4TngMM
yhmu40rElE4Fe+VsmG+smY0reS0VugPkPZiIPS4IQOsC0DU0UntfmKjkykvb4abI
LMekMiY2EeJLGdlEfKHYB69jbG3j/nk98SvC02p9lLxv/kTjzET+D7OxJEHzvDDV
E70kqcAvkCwDY4hSf5r/YTSuIu7lISyJlx+tEGayov8TQukeWp8Kdxof9Vsddn1C
7E70iJlHasKFSw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:20:00 2024 by rpki-client on console-ams.rpki-client.org