Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File:                     t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier:          SARCEiChySCgPoxmS3y7EHadgeMwSDB5LsysyuWMi2o=
Subject key identifier:   0D:60:39:F7:EE:2D:E7:55:C3:B3:B7:9E:6B:D2:74:8E:2E:46:D7:E8
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer:       /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial:       01903DE3C9ED6B6C5887D5A8B5712EB10097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number:          11A7
Signing time:             Sat 22 Jun 2024 03:00:56 +0000
Manifest this update:     Sat 22 Jun 2024 03:00:56 +0000
Manifest next update:     Sun 23 Jun 2024 03:00:56 +0000
Files and hashes:         1: 5f9GMf4uXiCXWwIClgpXzVQlPB8.roa (hash: UtmpSWy30/xE++xmBMH0H8yrmbj+FNyf297Kbq1AaXQ=)
                          2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: KgY2fAY3iJkwq6KnoIVIFO3HdGBpjrLOzNDbz1UutS0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:e3:c9:ed:6b:6c:58:87:d5:a8:b5:71:2e:b1:00:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
        Validity
            Not Before: Jun 22 03:00:56 2024 GMT
            Not After : Jun 23 03:00:56 2024 GMT
        Subject: CN=0d6039f7ee2de755c3b3b79e6bd2748e2e46d7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:af:11:c1:c4:1c:61:9c:d3:20:75:41:c2:
                    f2:fb:29:ae:c5:cc:59:0e:b0:49:37:ee:fe:bf:a6:
                    7a:68:f7:d2:80:e1:26:b9:54:51:0a:80:02:d5:6b:
                    da:28:0e:c0:7f:d3:50:bc:4f:81:66:56:de:18:13:
                    3e:9e:5b:16:89:7f:ab:3c:c9:6e:71:9b:3a:d0:e9:
                    d0:a4:54:4c:ad:d6:71:31:07:b3:7f:c1:ee:6c:17:
                    b6:2c:81:3f:47:97:6d:d5:e1:b7:c6:0c:3f:9c:8d:
                    69:5e:a6:48:7b:cc:91:c2:0c:88:3d:c4:b9:38:d8:
                    d1:b8:b7:06:ff:e3:61:42:7d:bf:97:b5:e8:82:c6:
                    55:f5:d8:ea:8f:bd:db:1e:2b:7d:db:b6:61:52:20:
                    8a:e0:1d:21:f0:65:18:f8:9e:84:75:98:39:e1:d1:
                    dc:e2:a5:8b:e7:52:13:41:11:0f:5b:64:2a:21:b5:
                    25:a3:4e:a9:42:f4:a8:77:d0:d5:3e:4c:8c:43:30:
                    7f:67:10:f5:fd:75:63:b5:06:82:a6:5d:0b:7b:61:
                    ea:58:0f:ef:45:e6:0f:00:80:0b:49:68:17:70:ae:
                    30:c1:fe:66:ec:a1:5a:6b:fe:8a:1e:a0:06:15:ce:
                    86:51:6e:95:6a:32:c3:a4:47:92:3f:98:2f:d6:26:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:60:39:F7:EE:2D:E7:55:C3:B3:B7:9E:6B:D2:74:8E:2E:46:D7:E8
            X509v3 Authority Key Identifier:
                keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:36:46:2e:c4:e5:42:81:9c:16:31:b5:9f:ee:c8:2c:fb:
         ba:c1:cf:3f:7d:ee:22:2f:fa:63:cb:44:08:55:40:6b:e4:6d:
         67:3f:23:5c:9f:5f:c7:f9:25:73:9a:51:b5:75:83:c8:13:c8:
         f8:fa:91:e1:39:4a:d1:f5:17:b3:b3:03:00:26:67:5a:58:50:
         ae:68:67:e0:ba:04:49:81:f8:86:4b:89:58:ac:82:f8:ad:6e:
         09:a8:74:0a:e2:db:4b:49:f5:88:58:0e:fc:db:9a:f1:96:01:
         10:b4:0b:1e:eb:5c:fe:3d:14:b2:24:23:c7:48:e3:05:1d:cd:
         de:3a:82:01:85:cb:bc:73:34:72:8c:7e:d0:8d:8c:05:0d:a7:
         67:48:b5:48:c9:6c:54:23:f7:21:b2:a9:6a:8c:4a:20:04:29:
         a4:91:a4:be:02:30:a8:be:2c:00:18:25:11:98:52:d9:19:ec:
         f8:87:4f:59:47:8d:63:eb:b1:ad:0f:c5:47:75:4b:e7:33:e9:
         47:42:74:eb:79:03:89:e4:17:e0:ee:c7:be:e1:bc:05:dc:73:
         6f:64:e1:4d:d0:5d:62:97:26:f0:22:da:3c:87:52:2e:5a:cc:
         66:60:2c:d5:d2:58:b0:f3:55:22:88:36:7f:91:f8:20:40:79:
         1e:c2:93:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA948nta2xYh9WotXEusQCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjZjMzNiZmI5ZDk0YmQwZjc0YTczOGU3ZjE2ZDBlOWRh
MGMzYjkwHhcNMjQwNjIyMDMwMDU2WhcNMjQwNjIzMDMwMDU2WjAzMTEwLwYDVQQD
EygwZDYwMzlmN2VlMmRlNzU1YzNiM2I3OWU2YmQyNzQ4ZTJlNDZkN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCGvEcHEHGGc0yB1QcLy+ymuxcxZ
DrBJN+7+v6Z6aPfSgOEmuVRRCoAC1WvaKA7Af9NQvE+BZlbeGBM+nlsWiX+rPMlu
cZs60OnQpFRMrdZxMQezf8HubBe2LIE/R5dt1eG3xgw/nI1pXqZIe8yRwgyIPcS5
ONjRuLcG/+NhQn2/l7XogsZV9djqj73bHit927ZhUiCK4B0h8GUY+J6EdZg54dHc
4qWL51ITQREPW2QqIbUlo06pQvSod9DVPkyMQzB/ZxD1/XVjtQaCpl0Le2HqWA/v
ReYPAIALSWgXcK4wwf5m7KFaa/6KHqAGFc6GUW6VajLDpEeSP5gv1iaECQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1gOffuLedVw7O3nmvSdI4uRtfoMB8GA1UdIwQY
MBaAFLf2wzv7nZS9D3SnOOfxbQ6doMO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNGQ5MDMtNWJhYS00MzQxLTkzOTIt
YTNlNDgxZmI1MWI5LzEvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNGQ5MDMtNWJhYS00MzQxLTkzOTItYTNlNDgxZmI1MWI5
LzEvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6s2Ri7E
5UKBnBYxtZ/uyCz7usHPP33uIi/6Y8tECFVAa+RtZz8jXJ9fx/klc5pRtXWDyBPI
+PqR4TlK0fUXs7MDACZnWlhQrmhn4LoESYH4hkuJWKyC+K1uCah0CuLbS0n1iFgO
/Nua8ZYBELQLHutc/j0UsiQjx0jjBR3N3jqCAYXLvHM0cox+0I2MBQ2nZ0i1SMls
VCP3IbKpaoxKIAQppJGkvgIwqL4sABglEZhS2Rns+IdPWUeNY+uxrQ/FR3VL5zPp
R0J063kDieQX4O7HvuG8Bdxzb2ThTdBdYpcm8CLaPIdSLlrMZmAs1dJYsPNVIog2
f5H4IEB5HsKTVg==
-----END CERTIFICATE-----
Generated at Sat Jun 22 09:02:13 2024 by rpki-client on console-ams.rpki-client.org