Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File:                     XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier:          Pc5aFXkSjx5IpcU7IrqS2OW0Dqo4XO7SqIOzpuPDMTc=
Subject key identifier:   E4:0D:AD:AD:90:2B:14:D1:AB:FE:B6:11:9E:8F:37:6B:5A:C0:93:3A
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer:       /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial:       01901E58E2797F1DD26382C1DBEEBFC76D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number:          054F
Signing time:             Sun 16 Jun 2024 00:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:59 +0000
Files and hashes:         1: 5Wuv6sT0POMLxjpG-AflWaM59AE.roa (hash: ING/Xgw/0ibHP3zoTorQ4cl5Cvj/STIdV89cKghTXYQ=)
                          2: IrXxOhajWT-NuUW_l48Y-nJW0hg.roa (hash: ua343+djLnkVzfNhOFJz0xZtgdhgqWAHtbgSgYa0eIs=)
                          3: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: 40wlZOxLnRJqJg/GzvJwcg1CIK0D4CMPR5wtZGKNvL0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e2:79:7f:1d:d2:63:82:c1:db:ee:bf:c7:6d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
        Validity
            Not Before: Jun 16 00:00:59 2024 GMT
            Not After : Jun 17 00:00:59 2024 GMT
        Subject: CN=e40dadad902b14d1abfeb6119e8f376b5ac0933a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:a4:ab:7d:92:4b:66:e6:f2:02:4a:11:82:
                    87:4e:93:38:f1:fb:37:e6:59:8b:1d:17:79:90:15:
                    d7:17:7b:17:18:e3:39:80:22:b4:45:1b:67:4e:c7:
                    ab:2e:0a:a4:3a:a7:c6:29:74:53:c0:3b:e7:68:e7:
                    72:1f:1c:f1:1a:f5:48:2a:fe:b0:ba:d7:c4:5f:81:
                    e5:c5:a8:f9:19:37:63:4d:80:c6:48:78:34:a4:28:
                    3e:8a:1f:50:c5:5a:c9:de:1a:f2:c2:83:24:fe:49:
                    da:4c:b3:8a:a9:5a:b8:b4:fa:83:7d:45:28:a5:06:
                    cf:b9:90:bc:82:89:bd:46:da:19:2e:78:1c:f3:46:
                    4d:82:0f:24:ce:dd:9e:cb:43:b6:a5:46:d8:a1:a3:
                    7d:77:40:df:d1:32:f1:8a:8c:62:f6:76:eb:de:99:
                    3b:9f:69:8e:cd:31:2d:86:53:68:ca:95:2b:07:fe:
                    a8:36:cf:e6:fb:61:e3:f4:15:ae:30:45:99:0e:95:
                    69:5f:78:f8:b2:26:8f:d3:36:d0:7c:b4:d8:41:cb:
                    00:bb:2d:2f:9c:a2:63:07:67:71:63:83:33:21:cc:
                    c6:f2:39:e2:cc:c3:0a:a0:9a:ab:2f:51:b6:2f:25:
                    29:f1:a3:35:a5:d6:b7:ac:cf:52:da:82:1d:72:68:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:AD:AD:90:2B:14:D1:AB:FE:B6:11:9E:8F:37:6B:5A:C0:93:3A
            X509v3 Authority Key Identifier:
                keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:61:44:05:82:30:38:1b:24:d3:96:8a:ed:ab:bb:48:d3:34:
         4c:57:8f:69:49:cc:5a:b7:f2:61:4f:98:8c:2c:78:21:f2:36:
         98:a1:e8:a2:eb:ae:5b:05:24:93:6c:6b:71:02:f7:b9:0a:fb:
         22:fd:e1:51:0d:6d:7f:2a:9b:06:c7:f1:46:c2:d2:d3:c9:03:
         87:f0:d6:b7:c5:a1:c1:67:f8:d0:a8:75:56:5e:29:bc:5a:88:
         18:fe:fb:e9:43:33:32:ee:d1:54:93:58:82:12:da:b9:64:05:
         ad:8c:02:d1:e9:99:b3:69:60:88:fa:fb:ae:01:89:9c:02:67:
         c2:2e:d6:c4:4a:fc:c2:38:fc:e7:91:99:fa:eb:15:ae:1d:50:
         0f:d9:ef:42:c3:fc:b2:b3:dc:e1:7c:51:d4:64:7d:72:54:6a:
         f0:e3:7b:13:5d:52:3a:dd:89:37:2c:58:b8:f9:bb:5b:10:e7:
         20:bf:90:1b:33:f9:21:6e:77:f2:af:f7:a0:01:a4:1e:72:93:
         d4:ce:d7:52:be:35:d9:96:14:c7:24:7f:00:2d:4b:bc:35:09:
         d6:02:93:99:3e:9e:8a:90:7f:f9:ef:ca:23:e7:a8:5a:98:0c:
         2f:e8:33:ff:5a:2d:e8:f6:e9:36:bb:2d:93:6f:93:f0:71:43:
         50:7f:86:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWOJ5fx3SY4LB2+6/x22VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTlmNzVkY2EyY2QzYjM5MzUzZTAzMDBiMzBiYTViNjI5
NzZhMmIwHhcNMjQwNjE2MDAwMDU5WhcNMjQwNjE3MDAwMDU5WjAzMTEwLwYDVQQD
EyhlNDBkYWRhZDkwMmIxNGQxYWJmZWI2MTE5ZThmMzc2YjVhYzA5MzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi22kq32SS2bm8gJKEYKHTpM48fs3
5lmLHRd5kBXXF3sXGOM5gCK0RRtnTserLgqkOqfGKXRTwDvnaOdyHxzxGvVIKv6w
utfEX4Hlxaj5GTdjTYDGSHg0pCg+ih9QxVrJ3hrywoMk/knaTLOKqVq4tPqDfUUo
pQbPuZC8gom9RtoZLngc80ZNgg8kzt2ey0O2pUbYoaN9d0Df0TLxioxi9nbr3pk7
n2mOzTEthlNoypUrB/6oNs/m+2Hj9BWuMEWZDpVpX3j4siaP0zbQfLTYQcsAuy0v
nKJjB2dxY4MzIczG8jnizMMKoJqrL1G2LyUp8aM1pda3rM9S2oIdcmhJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQNra2QKxTRq/62EZ6PN2tawJM6MB8GA1UdIwQY
MBaAFFyp913KLNOzk1PgMAswultil2orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDU0MzMtODNkOS00MTJjLTlmYzQt
MWQ1MWM0NjhkNTU2LzEvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMDU0MzMtODNkOS00MTJjLTlmYzQtMWQ1MWM0NjhkNTU2
LzEvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2FEBYIw
OBsk05aK7au7SNM0TFePaUnMWrfyYU+YjCx4IfI2mKHoouuuWwUkk2xrcQL3uQr7
Iv3hUQ1tfyqbBsfxRsLS08kDh/DWt8WhwWf40Kh1Vl4pvFqIGP776UMzMu7RVJNY
ghLauWQFrYwC0emZs2lgiPr7rgGJnAJnwi7WxEr8wjj855GZ+usVrh1QD9nvQsP8
srPc4XxR1GR9clRq8ON7E11SOt2JNyxYuPm7WxDnIL+QGzP5IW538q/3oAGkHnKT
1M7XUr412ZYUxyR/AC1LvDUJ1gKTmT6eipB/+e/KI+eoWpgML+gz/1ot6PbpNrst
k2+T8HFDUH+G/g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:02:01 2024 by rpki-client on console-ams.rpki-client.org