Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File:                     1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier:          ybPJDaXfwYCziDtXIti4iCAXvNxVXhKUDGBFFTbQxNc=
Subject key identifier:   5A:A6:6B:3C:D8:E2:C7:81:AA:74:EC:BE:35:93:EC:20:03:D2:60:F7
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer:       /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial:       01901DED09E2A1FCCCB6AFA62AFD62EAAFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number:          02BC
Signing time:             Sat 15 Jun 2024 22:03:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:12 +0000
Files and hashes:         1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: BQXqzsDLfhwIl3dx0Ou/pfvTKegROSkrUt5qBWMjyQg=)
                          2: _El-cY4SzZsVPc54pqFhufhiYlI.roa (hash: R9XADtqJcAu54bW2XBVj19XR/S5xBSuFnA/46Bth9y8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:09:e2:a1:fc:cc:b6:af:a6:2a:fd:62:ea:af:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
        Validity
            Not Before: Jun 15 22:03:12 2024 GMT
            Not After : Jun 16 22:03:12 2024 GMT
        Subject: CN=5aa66b3cd8e2c781aa74ecbe3593ec2003d260f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:1f:fd:33:8e:06:62:9b:aa:36:08:1a:23:
                    9a:55:12:dd:7a:97:1d:25:62:c2:c0:4b:ff:1f:87:
                    2f:81:fb:24:0d:db:87:9c:41:fa:17:a5:08:e4:fb:
                    a8:43:78:db:f8:31:ec:2e:71:2d:94:3f:66:09:f0:
                    9d:87:ac:7d:29:8a:f3:a1:42:26:43:21:f8:8b:6e:
                    56:02:d0:3c:c2:15:cb:bd:f1:84:53:48:f4:d6:e1:
                    5c:a4:28:d3:af:3a:2f:96:15:6d:04:e3:79:b3:df:
                    8e:3a:bb:ab:07:14:58:a9:22:d2:5c:64:16:e2:16:
                    d2:29:38:f3:0b:4e:b1:34:9f:da:63:5c:84:ff:bf:
                    76:d2:8c:3b:3f:3a:0a:5e:40:36:25:52:fd:0f:62:
                    ef:0b:ae:23:33:41:03:70:9d:d2:f3:5c:98:f4:d7:
                    fe:be:d5:fe:5c:88:cd:e2:46:22:1c:44:ef:27:e3:
                    6c:84:6c:66:bc:3d:e7:d4:29:d1:c3:d0:1f:99:7c:
                    0e:a8:de:70:f4:45:40:a1:95:ee:e7:78:a8:64:6d:
                    ff:fa:d4:4e:4a:25:ef:ac:24:e2:87:44:8c:52:b7:
                    e3:14:6b:fd:58:8d:ab:d9:1b:c8:f9:69:5d:d8:ee:
                    33:f4:e8:aa:96:87:77:fe:94:f4:76:bc:90:c7:32:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:6B:3C:D8:E2:C7:81:AA:74:EC:BE:35:93:EC:20:03:D2:60:F7
            X509v3 Authority Key Identifier:
                keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:81:d8:36:28:78:a4:fa:82:3b:a6:ba:40:10:56:58:1e:
         0f:61:69:89:a7:33:62:6b:10:67:ce:68:0d:74:8a:8c:ee:7c:
         e6:ec:b1:e7:12:6f:e9:8b:94:63:9f:f2:1e:9f:62:59:77:4b:
         1e:0e:1b:bf:05:ce:45:f0:f2:ad:3d:73:18:34:26:bb:95:ef:
         c5:c1:94:e8:37:1f:21:24:af:5c:6d:b5:f5:2b:56:21:de:82:
         9f:0e:62:a7:cc:45:fc:dd:78:cc:95:e0:e8:d0:f5:d7:93:a4:
         73:84:d7:52:90:c2:03:03:f7:e9:09:e7:27:03:47:4e:8a:d7:
         f7:79:78:50:9f:08:a2:3b:7c:55:00:fa:ce:73:e6:fa:5c:fa:
         5c:44:45:c5:b5:58:b9:b4:24:f9:4d:2f:18:8c:35:5d:c7:b0:
         af:fd:f3:84:45:aa:d2:9b:74:26:53:74:09:53:90:62:5a:37:
         e4:bc:9d:f8:88:77:f6:7f:4b:a5:f9:7d:78:b7:11:e2:a6:3f:
         34:33:cd:77:d6:b8:ab:8f:1a:d1:22:5c:71:6b:34:be:d0:aa:
         cd:8d:19:91:78:4d:e8:d8:1d:db:a5:23:7f:3c:d4:81:cc:84:
         f7:e1:ce:67:c3:6d:63:3f:c6:1a:c3:11:a1:4b:09:57:ef:b6:
         dc:e7:a0:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZAd7QniofzMtq+mKv1i6q/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2JhZDdkMDY4NTk5NWNlZDM1MTA4YjJlMTE1MjVhN2Fh
YjE0MTgwHhcNMjQwNjE1MjIwMzEyWhcNMjQwNjE2MjIwMzEyWjAzMTEwLwYDVQQD
Eyg1YWE2NmIzY2Q4ZTJjNzgxYWE3NGVjYmUzNTkzZWMyMDAzZDI2MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv0f/TOOBmKbqjYIGiOaVRLdepcd
JWLCwEv/H4cvgfskDduHnEH6F6UI5PuoQ3jb+DHsLnEtlD9mCfCdh6x9KYrzoUIm
QyH4i25WAtA8whXLvfGEU0j01uFcpCjTrzovlhVtBON5s9+OOrurBxRYqSLSXGQW
4hbSKTjzC06xNJ/aY1yE/7920ow7PzoKXkA2JVL9D2LvC64jM0EDcJ3S81yY9Nf+
vtX+XIjN4kYiHETvJ+NshGxmvD3n1CnRw9AfmXwOqN5w9EVAoZXu53ioZG3/+tRO
SiXvrCTih0SMUrfjFGv9WI2r2RvI+Wld2O4z9Oiqlod3/pT0dryQxzIqRQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFqmazzY4seBqnTsvjWT7CAD0mD3MB8GA1UdIwQY
MBaAFPs7rX0GhZlc7TUQiy4RUlp6qxQYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16dXRmUWFGbVZ6dE5SQ0xMaEZTV25xckZCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzlkNzQ2LTAzZjktNGM3MS1hZmM3
LWU1ZDBiNzZkZTViOC8xLzEtenV0ZlFhRm1WenROUkNMTGhGU1ducXJGQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdhLzc5ZDc0Ni0wM2Y5LTRjNzEtYWZjNy1lNWQwYjc2ZGU1
YjgvMS8xLXp1dGZRYUZtVnp0TlJDTExoRlNXbnFyRkJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM+B
2DYoeKT6gjumukAQVlgeD2FpiaczYmsQZ85oDXSKjO585uyx5xJv6YuUY5/yHp9i
WXdLHg4bvwXORfDyrT1zGDQmu5XvxcGU6DcfISSvXG219StWId6Cnw5ip8xF/N14
zJXg6ND115Okc4TXUpDCAwP36QnnJwNHTorX93l4UJ8Iojt8VQD6znPm+lz6XERF
xbVYubQk+U0vGIw1Xcewr/3zhEWq0pt0JlN0CVOQYlo35Lyd+Ih39n9Lpfl9eLcR
4qY/NDPNd9a4q48a0SJccWs0vtCqzY0ZkXhN6Ngd26UjfzzUgcyE9+HOZ8NtYz/G
GsMRoUsJV++23Oegbw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:58 2024 by rpki-client on console-fra.rpki-client.org