Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File:                     MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier:          qnP913y0ceRNYRWHnEDfQwfqJy6gHfI+KSE3mEpSDCA=
Subject key identifier:   16:6B:F7:EC:E8:E3:94:41:EA:18:0D:84:EE:95:71:D8:96:93:E4:A1
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer:       /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial:       01901D4621AEFC2C3C7A2EEB21AABA7A9996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number:          0CDA
Signing time:             Sat 15 Jun 2024 19:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:53 +0000
Files and hashes:         1: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: SwkLQq07dJ5hiJ3AEkXa+t/AqTUTVM7G/mywIlHB0zs=)
                          2: fBgtCyA0VduLUzvA2eGKE6vqyw8.roa (hash: x7k+g0cgqmyV+RfWxRL/CvEYXFSjJNg5vGO1C50et5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:21:ae:fc:2c:3c:7a:2e:eb:21:aa:ba:7a:99:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
        Validity
            Not Before: Jun 15 19:00:53 2024 GMT
            Not After : Jun 16 19:00:53 2024 GMT
        Subject: CN=166bf7ece8e39441ea180d84ee9571d89693e4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:d1:85:c6:d4:ed:c5:86:07:bb:fb:ea:c4:
                    3e:25:a0:15:07:63:01:96:57:c5:dd:26:67:c7:bc:
                    c3:c5:e6:e1:c6:e8:cf:ef:07:b6:6b:68:3b:4d:e6:
                    c1:a4:d5:76:06:95:95:bd:69:d9:a2:b1:aa:6c:c2:
                    77:1d:95:6c:ce:13:23:29:e3:99:ad:b4:36:d7:c0:
                    cd:f1:db:6d:00:b0:9a:fc:10:9a:2c:87:d1:49:ab:
                    66:75:a7:bf:d8:e6:f9:b3:3b:a5:dc:c4:47:e6:99:
                    ae:75:4a:e7:47:23:23:47:df:2b:39:57:9e:38:c9:
                    32:0b:68:f5:f8:d9:0e:fe:24:46:7b:e2:c3:da:91:
                    de:0c:00:fb:a1:7d:8f:42:92:d4:df:3b:24:75:bf:
                    c6:a8:58:e9:4b:b3:b3:39:04:c4:67:a8:15:3a:3b:
                    9d:d8:17:38:ec:a3:3d:20:ad:c6:64:80:02:93:78:
                    c1:4c:b8:65:d6:1f:7a:d1:c3:9a:4d:3b:bb:ec:93:
                    cb:8d:73:4c:d2:d5:52:fe:cf:e8:b9:e8:a1:b2:18:
                    02:af:db:48:9b:6c:7a:b8:93:5d:1e:43:9a:a8:43:
                    6d:54:3f:12:b4:46:16:b5:e9:ba:a2:6f:6f:65:0c:
                    d4:79:b2:ae:bd:d4:ca:2f:8d:29:94:84:4f:1c:fb:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:F7:EC:E8:E3:94:41:EA:18:0D:84:EE:95:71:D8:96:93:E4:A1
            X509v3 Authority Key Identifier:
                keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:cb:ec:b3:2f:9a:0d:33:e5:34:9d:65:fb:9a:0a:39:88:
         ec:ab:d0:56:01:e5:93:60:79:2a:6e:98:64:d5:59:a1:6a:d2:
         61:85:2f:8a:e7:40:1f:99:03:da:76:3b:fc:33:ba:30:83:ee:
         a4:2e:bf:69:12:a0:9d:d8:d6:52:a0:7c:33:0e:b3:2c:b0:c8:
         79:64:e6:a8:21:21:a7:ad:92:5b:be:3a:e0:85:16:e0:bb:08:
         0e:e4:3d:70:1b:85:ee:89:72:09:06:04:e5:cb:27:ed:ef:83:
         41:8a:e9:61:b2:a0:2b:6c:fd:f0:21:9b:cd:a0:19:7d:f4:f1:
         16:c3:bb:16:90:16:a4:c7:4e:6a:84:af:2d:a9:25:4c:52:f0:
         19:78:cf:fb:59:62:e2:1d:a9:f3:72:40:2a:c3:2f:b5:b0:08:
         1c:78:5e:a0:28:12:59:f1:fb:6e:6a:f3:ac:34:1b:af:de:42:
         dc:20:eb:76:a3:26:80:76:9a:4f:50:16:23:ba:e9:d5:ca:45:
         c4:8c:7b:f2:b5:c3:64:2d:3a:f9:df:d8:93:65:de:2b:16:88:
         98:cb:30:e0:44:4d:fa:72:07:a7:e8:e1:d7:85:05:a1:59:2d:
         8c:40:9d:6b:e2:32:86:35:c0:11:e9:39:f7:2c:db:e0:0b:a9:
         3d:98:c3:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRiGu/Cw8ei7rIaq6epmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMmQxMWU4NTI2MTU3NDAwNzZiMzI4MWI4YWZmMGZhYzVj
YTJmMzMwHhcNMjQwNjE1MTkwMDUzWhcNMjQwNjE2MTkwMDUzWjAzMTEwLwYDVQQD
EygxNjZiZjdlY2U4ZTM5NDQxZWExODBkODRlZTk1NzFkODk2OTNlNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b7RhcbU7cWGB7v76sQ+JaAVB2MB
llfF3SZnx7zDxebhxujP7we2a2g7TebBpNV2BpWVvWnZorGqbMJ3HZVszhMjKeOZ
rbQ218DN8dttALCa/BCaLIfRSatmdae/2Ob5szul3MRH5pmudUrnRyMjR98rOVee
OMkyC2j1+NkO/iRGe+LD2pHeDAD7oX2PQpLU3zskdb/GqFjpS7OzOQTEZ6gVOjud
2Bc47KM9IK3GZIACk3jBTLhl1h960cOaTTu77JPLjXNM0tVS/s/oueihshgCr9tI
m2x6uJNdHkOaqENtVD8StEYWtem6om9vZQzUebKuvdTKL40plIRPHPulrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZr9+zo45RB6hgNhO6VcdiWk+ShMB8GA1UdIwQY
MBaAFDAtEehSYVdAB2sygbiv8PrFyi8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQt
ZTZkNmU4YWViZWY4LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQtZTZkNmU4YWViZWY4
LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5zL7LMv
mg0z5TSdZfuaCjmI7KvQVgHlk2B5Km6YZNVZoWrSYYUviudAH5kD2nY7/DO6MIPu
pC6/aRKgndjWUqB8Mw6zLLDIeWTmqCEhp62SW7464IUW4LsIDuQ9cBuF7olyCQYE
5csn7e+DQYrpYbKgK2z98CGbzaAZffTxFsO7FpAWpMdOaoSvLaklTFLwGXjP+1li
4h2p83JAKsMvtbAIHHheoCgSWfH7bmrzrDQbr95C3CDrdqMmgHaaT1AWI7rp1cpF
xIx78rXDZC06+d/Yk2XeKxaImMsw4ERN+nIHp+jh14UFoVktjECda+IyhjXAEek5
9yzb4AupPZjDew==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:24:23 2024 by rpki-client on console-ams.rpki-client.org