Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File:                     igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier:          h1N0P2LECB2aw8mv9GufXCRLrr0Y3ELFRzcGWJOGRwA=
Subject key identifier:   7F:E5:60:9A:21:94:86:AD:A3:67:06:2D:AB:47:FE:01:91:C7:A5:6D
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer:       /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial:       01901DEB257818A473758BC6871A2F594700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:08 +0000
Files and hashes:         1: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: 5XQ5iyRygIA5V2/mr0V6ht5g/VsewYNjC9EYPAcT284=)
                          2: jik0t1c_-sdaE45PKQ3ds2YCheA.roa (hash: /ga48SoHEdEhXyu02riTSNQ+aD2VmIoj46jPuPzBkJU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:25:78:18:a4:73:75:8b:c6:87:1a:2f:59:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
        Validity
            Not Before: Jun 15 22:01:08 2024 GMT
            Not After : Jun 16 22:01:08 2024 GMT
        Subject: CN=7fe5609a219486ada367062dab47fe0191c7a56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:0e:30:ad:0a:33:83:80:4d:f9:be:13:a8:
                    8e:74:5b:2b:e6:43:12:36:b5:0e:17:1a:40:61:9e:
                    48:2a:50:4c:81:d8:58:eb:ff:5d:06:7a:56:12:aa:
                    ce:af:ed:e6:8b:51:07:40:b5:89:2e:32:d6:5f:ab:
                    59:21:63:1b:cc:73:b2:40:90:85:58:e7:46:5c:87:
                    4b:5f:04:e1:51:d0:8c:76:46:ae:76:47:fb:7d:a5:
                    7c:c1:7a:54:4b:78:2d:94:6d:b5:bf:fc:72:76:31:
                    f6:0d:8f:a9:29:1f:1e:f7:27:e9:57:1d:4f:94:03:
                    72:53:2b:ae:f6:bc:d8:22:bc:88:f3:9a:f9:44:f3:
                    2b:c9:b3:3a:c2:51:5c:b7:9f:6e:94:cb:eb:64:0e:
                    28:25:62:56:71:e6:0a:b9:40:17:48:ce:6b:16:52:
                    91:00:d1:bb:85:f2:88:2a:e6:0b:10:29:d2:b0:f0:
                    39:a1:08:27:ea:53:ac:44:fc:f5:ce:c6:64:f8:74:
                    c5:d5:bc:fb:40:a3:8c:f5:d1:38:74:ba:46:4a:6a:
                    3b:c0:e2:e9:22:00:54:0b:2b:d0:fd:cd:a0:57:3e:
                    c7:06:57:41:b6:47:02:49:09:02:6d:f6:47:96:48:
                    bc:bf:2a:b5:63:41:60:b3:9e:43:ee:4c:22:c1:64:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:60:9A:21:94:86:AD:A3:67:06:2D:AB:47:FE:01:91:C7:A5:6D
            X509v3 Authority Key Identifier:
                keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:29:fc:3a:a1:bd:9f:9b:c5:10:d0:4b:fd:14:eb:af:b9:ad:
         94:f3:33:08:60:54:d0:ed:9e:35:d9:bf:ba:2b:0b:39:22:c5:
         3d:fb:60:70:18:60:e5:57:61:ba:c8:9e:ac:81:0e:ae:c6:ea:
         9c:d5:21:27:6f:9e:e9:79:34:98:cc:c3:a5:6b:7f:1f:57:ad:
         8d:8d:31:7b:1d:a3:62:25:e0:b9:16:99:0e:aa:26:28:03:1b:
         59:80:f4:3b:11:4e:f1:40:39:ad:28:a3:7b:45:56:50:84:77:
         14:cc:e6:6d:91:42:21:88:8c:60:c6:ea:43:b1:65:cc:4b:31:
         dc:95:fb:1a:52:2c:67:b8:18:d0:14:91:e9:fe:d2:58:45:0a:
         b7:c4:8f:52:bf:69:cf:6a:e7:27:2a:16:d0:0e:41:30:fd:ba:
         be:9b:32:04:c6:35:9f:98:c3:d9:73:ad:32:5a:d5:3b:82:1a:
         e2:73:35:da:e0:60:5e:00:c4:4a:eb:15:84:89:62:6e:2d:34:
         30:28:2f:97:dc:1e:6f:2f:b8:bb:42:a6:34:dc:36:5a:98:a1:
         ae:7c:ad:e7:59:0a:0a:d9:bd:76:0b:fe:a2:ce:08:83:ad:92:
         ab:59:60:5c:cd:3d:c1:96:59:dc:5a:eb:2c:ee:80:e7:54:00:
         20:d3:4b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6yV4GKRzdYvGhxovWUcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDI5YjFlYjUxY2Q0ZjRiYzRkZDk4NWEwZWM2NTNhNzVl
Y2E0MGMwHhcNMjQwNjE1MjIwMTA4WhcNMjQwNjE2MjIwMTA4WjAzMTEwLwYDVQQD
Eyg3ZmU1NjA5YTIxOTQ4NmFkYTM2NzA2MmRhYjQ3ZmUwMTkxYzdhNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4EOMK0KM4OATfm+E6iOdFsr5kMS
NrUOFxpAYZ5IKlBMgdhY6/9dBnpWEqrOr+3mi1EHQLWJLjLWX6tZIWMbzHOyQJCF
WOdGXIdLXwThUdCMdkaudkf7faV8wXpUS3gtlG21v/xydjH2DY+pKR8e9yfpVx1P
lANyUyuu9rzYIryI85r5RPMrybM6wlFct59ulMvrZA4oJWJWceYKuUAXSM5rFlKR
ANG7hfKIKuYLECnSsPA5oQgn6lOsRPz1zsZk+HTF1bz7QKOM9dE4dLpGSmo7wOLp
IgBUCyvQ/c2gVz7HBldBtkcCSQkCbfZHlki8vyq1Y0Fgs55D7kwiwWSUWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/lYJohlIato2cGLatH/gGRx6VtMB8GA1UdIwQY
MBaAFIoCmx61HNT0vE3ZhaDsZTp17KQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgt
MzgyNjljZWY1ZTAxLzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgtMzgyNjljZWY1ZTAx
LzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASn8OqG9
n5vFENBL/RTrr7mtlPMzCGBU0O2eNdm/uisLOSLFPftgcBhg5VdhusierIEOrsbq
nNUhJ2+e6Xk0mMzDpWt/H1etjY0xex2jYiXguRaZDqomKAMbWYD0OxFO8UA5rSij
e0VWUIR3FMzmbZFCIYiMYMbqQ7FlzEsx3JX7GlIsZ7gY0BSR6f7SWEUKt8SPUr9p
z2rnJyoW0A5BMP26vpsyBMY1n5jD2XOtMlrVO4Ia4nM12uBgXgDESusVhIlibi00
MCgvl9weby+4u0KmNNw2Wpihrnyt51kKCtm9dgv+os4Ig62Sq1lgXM09wZZZ3Frr
LO6A51QAINNLmw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:15:51 2024 by rpki-client on console-fra.rpki-client.org