Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File:                     7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier:          5rPkVRMR6ZQgk3xcHeZnWqqR37WPufYHcksWEs30Lzw=
Subject key identifier:   FA:29:C0:B9:01:FF:77:74:78:60:A7:42:B8:F1:C3:02:52:20:35:D1
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer:       /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial:       0190448C650CD7F5342F1CCDC613965A423F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number:          0846
Signing time:             Sun 23 Jun 2024 10:02:49 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:49 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:49 +0000
Files and hashes:         1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: u8twfZpoeyCq3UGLkq+c59BvRppkZgaCghMVwsyQ/cQ=)
                          2: YPw1-ebVcxZm9dzraArn2Eeq7ZQ.roa (hash: nVAPtubCFlxJn24d+K75yT36a1qRX+izhXTQQRSNPmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:65:0c:d7:f5:34:2f:1c:cd:c6:13:96:5a:42:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
        Validity
            Not Before: Jun 23 10:02:49 2024 GMT
            Not After : Jun 24 10:02:49 2024 GMT
        Subject: CN=fa29c0b901ff77747860a742b8f1c302522035d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:95:e5:07:43:be:fe:36:ed:97:a1:b5:fa:
                    a6:76:84:30:c5:22:0e:12:28:21:da:2f:b7:f3:6d:
                    cd:d6:13:89:ee:7b:3b:7e:52:a1:54:c4:45:1c:3b:
                    fb:35:30:e2:68:b8:40:ff:a9:60:e7:0d:a5:22:d3:
                    f7:7a:5c:e1:34:52:ab:18:b5:ac:54:c3:1d:5c:f2:
                    8e:5c:b9:3b:31:15:de:1c:cf:a8:b1:01:be:51:ad:
                    6e:6c:3e:bd:4e:84:ee:4f:b3:18:be:66:a2:66:8c:
                    63:80:f2:54:8b:13:74:a7:66:1f:8b:76:66:c4:ce:
                    e2:4f:f1:63:44:42:1f:91:c4:c8:b4:8f:ef:aa:60:
                    fe:d3:89:54:fe:35:69:43:54:2d:e9:0c:31:e1:6d:
                    4e:2f:b8:4e:d0:95:0c:3a:d4:e7:6a:15:25:0f:64:
                    83:30:3f:44:a4:3b:98:6a:a8:a2:29:8f:cf:7a:ef:
                    8f:3b:9e:fd:b3:7a:46:73:25:d3:8c:4f:2a:85:aa:
                    33:e3:ae:c2:3a:51:e5:df:9f:16:98:0b:05:89:d4:
                    25:ec:45:02:50:9a:5d:03:71:40:d6:25:97:16:8d:
                    32:cf:23:3a:eb:e1:a4:5e:8f:b2:c3:5d:83:cb:ff:
                    67:cf:1e:a8:1e:8f:1d:0a:47:72:b4:e1:db:b9:8b:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:C0:B9:01:FF:77:74:78:60:A7:42:B8:F1:C3:02:52:20:35:D1
            X509v3 Authority Key Identifier:
                keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:4d:47:f2:c5:1e:f7:a4:57:99:13:76:90:c1:05:a6:02:
         16:82:0d:f9:b9:58:a9:9b:e2:1d:a7:97:75:16:d6:84:89:87:
         73:5f:ef:d7:76:72:bd:b3:00:65:3e:a3:78:98:bc:77:72:f2:
         56:7b:cf:29:9c:37:1f:9c:75:24:bf:27:92:59:39:5c:c8:61:
         fa:5a:c6:32:d1:54:a3:1c:cd:67:c7:c4:63:0e:6b:35:41:11:
         cb:2e:1d:5f:20:3c:7a:f9:35:70:c3:c2:10:09:94:f0:d6:b5:
         70:b9:a0:7d:6e:2f:89:05:00:4d:1e:72:b7:d3:cb:00:91:a1:
         65:88:6c:e7:21:bd:1b:5f:f1:04:a0:2b:6e:85:c8:1a:18:57:
         87:63:86:da:02:ba:93:7f:18:9b:3a:c8:e3:2c:20:13:07:c0:
         f0:43:2d:84:80:d9:b4:6d:7c:2c:df:00:4a:d3:96:d7:b7:0c:
         45:83:d2:4a:5c:3e:ae:5a:80:3f:b3:e6:cd:39:b4:4b:f4:11:
         d1:d2:f5:7a:f5:79:74:b0:be:b7:71:0f:1d:06:9d:91:23:97:
         e6:28:01:bc:c6:64:89:e6:60:e1:d3:db:f8:35:dd:ca:37:c6:
         2f:d6:fa:8c:28:1b:c7:86:b0:e4:50:bd:7a:98:41:77:cd:0f:
         93:b9:a2:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjGUM1/U0LxzNxhOWWkI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2
NTViZTYwHhcNMjQwNjIzMTAwMjQ5WhcNMjQwNjI0MTAwMjQ5WjAzMTEwLwYDVQQD
EyhmYTI5YzBiOTAxZmY3Nzc0Nzg2MGE3NDJiOGYxYzMwMjUyMjAzNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLGV5QdDvv427ZehtfqmdoQwxSIO
Eigh2i+3823N1hOJ7ns7flKhVMRFHDv7NTDiaLhA/6lg5w2lItP3elzhNFKrGLWs
VMMdXPKOXLk7MRXeHM+osQG+Ua1ubD69ToTuT7MYvmaiZoxjgPJUixN0p2Yfi3Zm
xM7iT/FjREIfkcTItI/vqmD+04lU/jVpQ1Qt6Qwx4W1OL7hO0JUMOtTnahUlD2SD
MD9EpDuYaqiiKY/Peu+PO579s3pGcyXTjE8qhaoz467COlHl358WmAsFidQl7EUC
UJpdA3FA1iWXFo0yzyM66+GkXo+yw12Dy/9nzx6oHo8dCkdytOHbuYvVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPopwLkB/3d0eGCnQrjxwwJSIDXRMB8GA1UdIwQY
MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt
NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3
LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYpNR/LF
HvekV5kTdpDBBaYCFoIN+blYqZviHaeXdRbWhImHc1/v13ZyvbMAZT6jeJi8d3Ly
VnvPKZw3H5x1JL8nklk5XMhh+lrGMtFUoxzNZ8fEYw5rNUERyy4dXyA8evk1cMPC
EAmU8Na1cLmgfW4viQUATR5yt9PLAJGhZYhs5yG9G1/xBKArboXIGhhXh2OG2gK6
k38YmzrI4ywgEwfA8EMthIDZtG18LN8AStOW17cMRYPSSlw+rlqAP7PmzTm0S/QR
0dL1evV5dLC+t3EPHQadkSOX5igBvMZkieZg4dPb+DXdyjfGL9b6jCgbx4aw5FC9
ephBd80Pk7miNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:01:00 2024 by rpki-client on console-ams.rpki-client.org