Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File:                     w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier:          K/YKcLS3U6ejUUvAq0AkouxJmqFv705jjmjJ478O6LY=
Subject key identifier:   08:16:9E:CA:DF:F1:1C:55:D3:9B:99:8A:C1:7D:32:E0:40:7C:1B:AB
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer:       /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial:       01901E8F793471F4ED247CC4E2B51BDCA6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number:          0E21
Signing time:             Sun 16 Jun 2024 01:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:37 +0000
Files and hashes:         1: lVaaLxbdIGRpaWxeNdPow1RB0aw.roa (hash: XIiPm4Ix7BhVRtX5bVVLrlw25L5CCUxMrJTSQ+9lg/g=)
                          2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: TPWkiVI2lL+pRzMx6NJTltnS6QtZrq5Da3tiBZVEIoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:79:34:71:f4:ed:24:7c:c4:e2:b5:1b:dc:a6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
        Validity
            Not Before: Jun 16 01:00:37 2024 GMT
            Not After : Jun 17 01:00:37 2024 GMT
        Subject: CN=08169ecadff11c55d39b998ac17d32e0407c1bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:1a:e1:78:e1:55:89:bc:a5:a4:d9:e0:a3:
                    3c:e0:90:1d:32:dd:5e:b7:40:f2:04:95:15:08:90:
                    f6:76:90:d6:82:08:02:88:08:59:81:ce:70:14:51:
                    ae:13:dd:f4:c1:03:4c:79:16:ea:2a:6e:06:d3:b7:
                    48:61:fe:5b:a3:9a:61:65:02:c0:c3:50:67:3d:89:
                    ef:57:d1:85:2f:1a:cf:e4:f8:5b:e5:62:d0:c9:5d:
                    46:aa:10:22:3a:2e:32:ae:59:98:49:55:e3:94:0d:
                    8b:70:bb:5e:86:4e:59:3a:c2:8c:26:db:0e:88:a6:
                    c5:61:3a:ef:8e:69:f7:8c:a8:6e:d1:0b:7f:11:fe:
                    ce:ec:d5:ad:a2:4f:27:ab:72:13:dc:a4:11:be:f0:
                    b7:3b:3f:28:0a:0e:e2:91:2a:0f:ba:16:21:4a:c9:
                    31:10:91:89:04:3d:b3:87:a6:4f:5b:0a:64:10:dc:
                    9a:94:0e:97:ca:67:9c:4b:eb:d9:23:51:7f:e2:b7:
                    2f:4b:93:c1:cb:ba:64:ef:2c:2a:d2:3b:bc:6c:3c:
                    5a:87:16:ca:e2:b9:2a:e0:8d:02:68:85:cd:85:72:
                    35:ba:89:15:e5:c7:d6:36:42:57:a4:1a:b6:b7:c9:
                    11:db:53:36:ec:ed:cb:f9:02:60:34:c9:af:28:fb:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:16:9E:CA:DF:F1:1C:55:D3:9B:99:8A:C1:7D:32:E0:40:7C:1B:AB
            X509v3 Authority Key Identifier:
                keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:99:c0:51:38:6f:82:d2:58:52:d2:22:11:92:f4:4d:c7:
         6a:97:2d:36:3c:ae:61:23:3b:d3:db:58:7f:d8:50:cd:8a:f9:
         a7:5f:40:95:81:fc:39:e8:d8:83:1c:d6:53:69:49:9e:03:5c:
         b4:4f:52:18:b8:cf:a2:c2:07:37:72:cb:c1:f4:83:4d:6a:e5:
         04:8e:c3:82:6e:86:ff:cf:0d:35:ed:17:3e:fb:e4:6a:b5:5c:
         99:13:17:61:b3:1f:96:c6:0d:9a:9a:a0:ee:7b:8d:40:18:e4:
         e6:05:ce:4c:91:9e:43:a4:d3:a9:77:6e:77:f8:d0:71:e0:b2:
         ac:df:a1:63:7e:85:f0:fc:28:d8:59:90:fd:c2:4a:6e:48:f5:
         9e:c4:8d:a9:7a:42:d6:4b:68:01:b4:6b:c5:ac:7d:71:99:05:
         e1:13:7b:09:e4:1e:6f:f1:b7:93:ec:96:59:9e:da:45:cb:0c:
         46:59:fb:59:2a:a2:df:9c:4b:0c:23:51:6a:8d:2e:7a:4e:06:
         41:b7:0f:19:9f:5f:6e:46:03:a9:39:f2:c3:7c:bb:b2:d5:e0:
         19:58:bf:fe:5e:d0:2f:94:ff:98:6f:c9:f9:43:93:24:52:77:
         cc:a0:9c:f3:e6:7c:f2:d4:ba:12:59:5a:63:56:eb:15:6a:1d:
         5c:2f:23:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej3k0cfTtJHzE4rUb3Kb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2EyMjFiMjlkZDQ2MzA2OGMzYThkNWNhYzE0NmIwNTdi
NWE5ZWQwHhcNMjQwNjE2MDEwMDM3WhcNMjQwNjE3MDEwMDM3WjAzMTEwLwYDVQQD
EygwODE2OWVjYWRmZjExYzU1ZDM5Yjk5OGFjMTdkMzJlMDQwN2MxYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ga4XjhVYm8paTZ4KM84JAdMt1e
t0DyBJUVCJD2dpDWgggCiAhZgc5wFFGuE930wQNMeRbqKm4G07dIYf5bo5phZQLA
w1BnPYnvV9GFLxrP5Phb5WLQyV1GqhAiOi4yrlmYSVXjlA2LcLtehk5ZOsKMJtsO
iKbFYTrvjmn3jKhu0Qt/Ef7O7NWtok8nq3IT3KQRvvC3Oz8oCg7ikSoPuhYhSskx
EJGJBD2zh6ZPWwpkENyalA6XymecS+vZI1F/4rcvS5PBy7pk7ywq0ju8bDxahxbK
4rkq4I0CaIXNhXI1uokV5cfWNkJXpBq2t8kR21M27O3L+QJgNMmvKPsGwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgWnsrf8RxV05uZisF9MuBAfBurMB8GA1UdIwQY
MBaAFMN6Ihsp3UYwaMOo1crBRrBXtantMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDIt
OGJmY2Y5MDZmNzZhLzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDItOGJmY2Y5MDZmNzZh
LzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPCZwFE4
b4LSWFLSIhGS9E3HapctNjyuYSM709tYf9hQzYr5p19AlYH8OejYgxzWU2lJngNc
tE9SGLjPosIHN3LLwfSDTWrlBI7Dgm6G/88NNe0XPvvkarVcmRMXYbMflsYNmpqg
7nuNQBjk5gXOTJGeQ6TTqXdud/jQceCyrN+hY36F8Pwo2FmQ/cJKbkj1nsSNqXpC
1ktoAbRrxax9cZkF4RN7CeQeb/G3k+yWWZ7aRcsMRln7WSqi35xLDCNRao0uek4G
QbcPGZ9fbkYDqTnyw3y7stXgGVi//l7QL5T/mG/J+UOTJFJ3zKCc8+Z88tS6Ella
Y1brFWodXC8jmg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:19:19 2024 by rpki-client on console-ams.rpki-client.org