Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File:                     qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier:          MlX61tpF2fiRHnJuI/+dhuSHG/aKxbXgVpypG5SoRk0=
Subject key identifier:   CC:00:DB:65:E2:2B:88:3F:02:A2:E1:6E:16:6E:70:DB:B7:7C:6F:C3
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer:       /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial:       01904868553C666C57B2D2072F1E879DB1F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number:          116D
Signing time:             Mon 24 Jun 2024 04:01:55 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:55 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:55 +0000
Files and hashes:         1: PjXKe2FdG9-RFDCI3YachS_tX1k.roa (hash: bMsUnyeu+xluIH9n7cJ+K5NOm1MHwtBa5yL3FSQ+JKg=)
                          2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: 5KIQXE5ICwzYeRAfMWIkcOPlOYPbWMgrKxVpm/Tyuz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:55:3c:66:6c:57:b2:d2:07:2f:1e:87:9d:b1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
        Validity
            Not Before: Jun 24 04:01:55 2024 GMT
            Not After : Jun 25 04:01:55 2024 GMT
        Subject: CN=cc00db65e22b883f02a2e16e166e70dbb77c6fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:da:b6:03:5f:a9:20:a7:b7:1d:74:4b:2f:
                    13:9c:3b:99:86:e0:01:7c:07:03:c7:17:a6:49:42:
                    6b:66:fc:72:3c:0d:e6:26:45:d1:df:53:32:28:51:
                    d9:1b:d7:46:79:cc:2e:b2:86:0d:92:58:33:b1:81:
                    0b:4e:1d:d2:46:ca:7d:8a:12:5a:89:b6:18:af:70:
                    d6:1b:0a:66:52:a9:60:49:f7:83:92:32:1d:6e:63:
                    ae:4c:ba:59:b5:85:66:e1:6e:b2:43:67:02:53:00:
                    00:ec:bb:12:72:be:40:90:2f:ef:e6:ba:99:11:fb:
                    9d:3a:65:60:74:bc:38:7b:25:3a:90:1d:71:cd:25:
                    8a:32:55:7b:d7:e5:3d:67:30:85:c7:7a:b6:85:cb:
                    da:9c:6b:b5:5e:d2:36:3f:e7:7c:52:49:d8:24:14:
                    e8:60:b2:65:fd:a3:ba:60:6a:37:a4:75:61:a3:e7:
                    6e:b5:46:ab:c4:71:e1:cf:c8:a1:74:f0:c6:3c:76:
                    31:6e:86:2e:fe:d3:9e:ba:68:8a:3a:6d:08:28:5a:
                    36:6c:06:77:fb:22:94:66:ec:fb:fd:73:1d:80:22:
                    e1:03:9e:5c:66:79:81:83:09:8a:3a:3b:e4:f7:08:
                    99:10:5a:3e:76:21:6e:58:0f:50:e1:10:91:ae:ce:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:DB:65:E2:2B:88:3F:02:A2:E1:6E:16:6E:70:DB:B7:7C:6F:C3
            X509v3 Authority Key Identifier:
                keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:3e:13:aa:fa:e8:4c:32:57:e7:5f:d1:82:e7:b5:6e:36:
         89:f9:c0:4d:25:ed:1f:7d:75:3c:76:3e:80:2a:60:bb:48:ea:
         de:82:62:de:32:b0:0d:c6:65:f6:d8:09:3f:3e:c4:97:22:d0:
         db:8b:28:73:15:dc:4e:ea:44:9f:cb:48:e1:da:69:fd:d3:68:
         97:98:90:dc:f2:76:2a:b1:90:92:9f:80:28:ff:81:14:43:54:
         f9:32:33:c1:e3:17:4c:9d:3f:95:b3:b6:1d:be:dc:88:54:83:
         5f:9d:67:e0:5e:ea:a1:02:7d:be:0a:82:a5:be:2b:48:43:a6:
         e1:92:7f:4f:0f:18:bc:3c:cf:0c:00:33:fd:93:cc:29:db:bd:
         4a:1f:31:1f:50:4f:87:1c:8e:bb:d2:44:3b:be:cd:fa:69:e5:
         81:b2:0e:e3:90:58:0a:08:0a:2e:11:d0:b2:ca:0f:d9:18:e8:
         15:4b:73:48:2e:16:b8:28:91:d6:fc:63:27:93:0b:58:3d:81:
         16:2c:d1:b5:ff:f6:53:1e:14:e7:fb:d4:dd:25:33:19:13:cd:
         e1:9e:ef:5f:89:72:27:eb:88:0b:1b:a9:a7:ca:ff:4c:73:c8:
         1e:c9:ad:3b:1a:87:8c:f8:55:f6:05:60:00:70:0c:a3:ce:78:
         92:6f:a7:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaFU8ZmxXstIHLx6HnbH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVlOWRhMjIyNzM0NWMxOGFiZDdlNzUyNzJmODFjMjli
MzBkMWIwHhcNMjQwNjI0MDQwMTU1WhcNMjQwNjI1MDQwMTU1WjAzMTEwLwYDVQQD
EyhjYzAwZGI2NWUyMmI4ODNmMDJhMmUxNmUxNjZlNzBkYmI3N2M2ZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwbatgNfqSCntx10Sy8TnDuZhuAB
fAcDxxemSUJrZvxyPA3mJkXR31MyKFHZG9dGecwusoYNklgzsYELTh3SRsp9ihJa
ibYYr3DWGwpmUqlgSfeDkjIdbmOuTLpZtYVm4W6yQ2cCUwAA7LsScr5AkC/v5rqZ
EfudOmVgdLw4eyU6kB1xzSWKMlV71+U9ZzCFx3q2hcvanGu1XtI2P+d8UknYJBTo
YLJl/aO6YGo3pHVho+dutUarxHHhz8ihdPDGPHYxboYu/tOeumiKOm0IKFo2bAZ3
+yKUZuz7/XMdgCLhA55cZnmBgwmKOjvk9wiZEFo+diFuWA9Q4RCRrs7vyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwA22XiK4g/AqLhbhZucNu3fG/DMB8GA1UdIwQY
MBaAFKqF6doiJzRcGKvX51Jy+Bwpsw0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMt
NzYyMGRiMjc5OTYyLzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMtNzYyMGRiMjc5OTYy
LzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+I+E6r6
6EwyV+df0YLntW42ifnATSXtH311PHY+gCpgu0jq3oJi3jKwDcZl9tgJPz7ElyLQ
24socxXcTupEn8tI4dpp/dNol5iQ3PJ2KrGQkp+AKP+BFENU+TIzweMXTJ0/lbO2
Hb7ciFSDX51n4F7qoQJ9vgqCpb4rSEOm4ZJ/Tw8YvDzPDAAz/ZPMKdu9Sh8xH1BP
hxyOu9JEO77N+mnlgbIO45BYCggKLhHQssoP2RjoFUtzSC4WuCiR1vxjJ5MLWD2B
FizRtf/2Ux4U5/vU3SUzGRPN4Z7vX4lyJ+uICxupp8r/THPIHsmtOxqHjPhV9gVg
AHAMo854km+nWQ==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:35:00 2024 by rpki-client on console-ams.rpki-client.org