Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File:                     mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier:          xr4NlMNnNiJwekQGg4Pqj1si615IBsJYR3pUELq6+8E=
Subject key identifier:   92:70:9D:25:42:04:70:7F:DE:B0:DD:5B:5E:B7:BD:30:3C:41:68:C1
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer:       /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial:       019049B16BB3DA2C60738F5218C0C7FE0031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number:          116E
Signing time:             Mon 24 Jun 2024 10:01:22 +0000
Manifest this update:     Mon 24 Jun 2024 10:01:22 +0000
Manifest next update:     Tue 25 Jun 2024 10:01:22 +0000
Files and hashes:         1: 5dKajwYG3y0gxix-bvI7sKCuHF4.roa (hash: 8gPdQQ6nUTVc5A1tc9onMdQKfrIxvnQ7vNby3Z8Hgc4=)
                          2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: 5EBVINt2clfyPnFeiIaNcqkwxlA6nsg0/rmuwN2szXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:6b:b3:da:2c:60:73:8f:52:18:c0:c7:fe:00:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
        Validity
            Not Before: Jun 24 10:01:22 2024 GMT
            Not After : Jun 25 10:01:22 2024 GMT
        Subject: CN=92709d254204707fdeb0dd5b5eb7bd303c4168c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:66:d8:2d:a8:82:7b:0a:f8:e4:2d:4e:46:
                    1a:a9:59:8d:50:c5:00:61:84:90:8c:40:6d:80:ac:
                    20:10:a6:dc:90:b9:3b:f5:52:77:b0:a7:e1:bc:a6:
                    17:60:a7:6c:5e:2d:ea:e2:5e:3b:c7:a1:38:b8:0a:
                    79:b6:59:2a:4d:c3:3f:00:8a:17:ed:dc:22:b9:47:
                    13:1d:76:60:32:ed:cd:fd:9b:32:e2:cd:85:70:a6:
                    e8:1c:1c:87:e9:b1:bb:c1:fa:a1:2f:f9:b0:a9:b9:
                    e9:bb:42:9f:1c:19:4d:11:e7:55:32:58:15:8f:a0:
                    6e:b3:d0:9a:13:e2:65:c3:03:a8:7e:7f:83:b6:d0:
                    6b:be:bd:22:ea:c2:7c:c2:fe:75:a6:bc:93:41:8b:
                    22:ac:95:34:57:13:33:33:37:a2:b0:af:98:07:0d:
                    47:0c:45:bc:57:ad:4c:66:ad:7c:77:f9:1f:31:42:
                    2b:bf:77:90:6b:cc:c6:6d:ea:38:fb:b8:ad:3f:1d:
                    fa:cb:8f:cd:2f:a9:95:a4:82:bf:e9:a7:ae:27:03:
                    bf:ef:3f:14:da:d2:1e:e1:ab:3d:47:0e:a4:b6:3a:
                    16:29:ee:c1:7f:3e:2d:9b:2f:78:8e:fa:49:95:1e:
                    9f:93:29:30:ef:8a:6a:96:08:f3:c3:1c:85:ff:e9:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:9D:25:42:04:70:7F:DE:B0:DD:5B:5E:B7:BD:30:3C:41:68:C1
            X509v3 Authority Key Identifier:
                keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2d:33:75:29:d8:01:cf:a1:23:8c:1c:3a:4a:19:4f:f6:b4:
         2b:1f:52:55:fb:76:90:77:67:7c:0a:5b:ea:f5:15:29:07:81:
         94:9b:af:5d:3e:d5:37:7b:19:7c:29:94:1b:61:41:95:2a:18:
         67:97:a8:4c:4e:a8:5a:9e:0c:2a:7e:b7:d2:8f:b3:82:88:fa:
         84:2a:32:ca:dd:4f:b2:58:96:aa:cc:91:16:90:d1:7f:31:b1:
         4d:3d:ce:4c:03:f5:bc:72:42:c3:a9:a1:9e:fc:b7:de:3a:9c:
         d2:61:a7:9f:5d:04:66:a7:23:28:a0:26:42:8f:47:5e:a1:83:
         e1:26:8f:15:fe:3c:f6:a2:46:47:06:08:81:c5:41:76:7d:84:
         c7:5c:a8:20:35:82:45:f8:61:ec:c3:b2:6e:e5:8f:cb:7a:85:
         ed:2e:98:61:87:3a:aa:f9:9b:fa:7b:76:a3:c0:b2:04:33:6d:
         49:c2:01:6f:e6:93:7d:af:fa:d0:1e:e9:0c:13:7f:c4:bd:1a:
         6a:f6:60:fc:18:7c:14:4a:b1:1b:d7:21:06:41:df:1e:5e:2e:
         bd:8b:a3:8f:76:82:11:82:a3:b6:8a:d9:c1:8b:aa:7d:0f:49:
         c8:81:42:0e:03:9f:10:71:58:e4:4e:7a:d1:04:2e:cf:07:8e:
         e1:9b:e9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJsWuz2ixgc49SGMDH/gAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTVmMGQ2YTk2MWFhZWJjNmIwYjUwODlkYTAyOTM5YjMx
MGE1MWMwHhcNMjQwNjI0MTAwMTIyWhcNMjQwNjI1MTAwMTIyWjAzMTEwLwYDVQQD
Eyg5MjcwOWQyNTQyMDQ3MDdmZGViMGRkNWI1ZWI3YmQzMDNjNDE2OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nlm2C2ognsK+OQtTkYaqVmNUMUA
YYSQjEBtgKwgEKbckLk79VJ3sKfhvKYXYKdsXi3q4l47x6E4uAp5tlkqTcM/AIoX
7dwiuUcTHXZgMu3N/Zsy4s2FcKboHByH6bG7wfqhL/mwqbnpu0KfHBlNEedVMlgV
j6Bus9CaE+JlwwOofn+DttBrvr0i6sJ8wv51pryTQYsirJU0VxMzMzeisK+YBw1H
DEW8V61MZq18d/kfMUIrv3eQa8zGbeo4+7itPx36y4/NL6mVpIK/6aeuJwO/7z8U
2tIe4as9Rw6ktjoWKe7Bfz4tmy94jvpJlR6fkykw74pqlgjzwxyF/+khpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJwnSVCBHB/3rDdW163vTA8QWjBMB8GA1UdIwQY
MBaAFJkV8NapYarrxrC1CJ2gKTmzEKUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUt
YmYyNmE3ZmFhNjAzLzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUtYmYyNmE3ZmFhNjAz
LzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPS0zdSnY
Ac+hI4wcOkoZT/a0Kx9SVft2kHdnfApb6vUVKQeBlJuvXT7VN3sZfCmUG2FBlSoY
Z5eoTE6oWp4MKn630o+zgoj6hCoyyt1PsliWqsyRFpDRfzGxTT3OTAP1vHJCw6mh
nvy33jqc0mGnn10EZqcjKKAmQo9HXqGD4SaPFf489qJGRwYIgcVBdn2Ex1yoIDWC
Rfhh7MOybuWPy3qF7S6YYYc6qvmb+nt2o8CyBDNtScIBb+aTfa/60B7pDBN/xL0a
avZg/Bh8FEqxG9chBkHfHl4uvYujj3aCEYKjtorZwYuqfQ9JyIFCDgOfEHFY5E56
0QQuzweO4ZvpxA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:36:21 2024 by rpki-client on console-ams.rpki-client.org