Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File:                     pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier:          Aaq9Y8fKBLcUj3JI81PSN+QfH40bnbKIh7VQpbl/l4U=
Subject key identifier:   6D:21:AC:C8:72:BB:82:E7:F7:43:45:AB:B9:88:6D:58:5D:24:A3:F0
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer:       /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial:       01901E589BA024836E35393A16621FC0E0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 00:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:41 +0000
Files and hashes:         1: Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa (hash: N245WG48LKfdaN/l0SqPnZNQq5QFtRkgIFSMCbYF0w8=)
                          2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: KOygR4fTIeRSppFVRVlziIez2meFF47O6QkUM6+Cuzs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:9b:a0:24:83:6e:35:39:3a:16:62:1f:c0:e0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
        Validity
            Not Before: Jun 16 00:00:41 2024 GMT
            Not After : Jun 17 00:00:41 2024 GMT
        Subject: CN=6d21acc872bb82e7f74345abb9886d585d24a3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:1f:90:c2:17:6b:bf:2d:bc:57:c6:4f:d0:
                    89:38:04:cf:f6:f5:57:c8:f3:73:35:e2:6c:84:84:
                    d9:4d:61:f5:83:d7:30:ee:16:6a:fe:36:bf:66:96:
                    a6:5d:58:55:16:96:9f:fb:bc:d1:00:15:4a:d5:d5:
                    d5:45:ae:43:eb:41:db:85:1c:f6:76:e7:f3:d2:59:
                    e2:45:7a:db:e3:77:b5:ae:e4:3a:1e:a6:90:05:01:
                    ab:ff:57:d3:08:02:09:52:9a:de:04:dd:66:b9:ba:
                    df:12:5f:66:a1:13:db:4a:3d:a7:49:34:ba:4b:5e:
                    fb:e4:09:c8:c7:ce:6c:90:c1:af:f2:f9:55:aa:5f:
                    05:9d:2a:8b:b9:23:d0:b5:db:d8:d6:45:cd:38:41:
                    70:b9:6c:79:f0:2e:06:b3:5c:0c:eb:77:78:ed:67:
                    15:23:fb:eb:94:5f:af:7f:6a:c2:52:a3:82:71:fb:
                    b9:7b:8d:a3:99:c6:25:55:1d:30:08:ec:3e:40:fa:
                    f7:26:d3:3c:20:8d:c6:1e:39:38:98:b9:eb:9e:c5:
                    a5:17:a1:ca:db:19:4e:d6:d6:51:7b:c1:5d:a8:50:
                    e7:ec:c1:ec:66:b7:62:49:88:89:c9:03:23:e3:37:
                    1b:ab:2d:ff:48:d0:d0:a5:74:90:cf:b8:1f:0b:fc:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:21:AC:C8:72:BB:82:E7:F7:43:45:AB:B9:88:6D:58:5D:24:A3:F0
            X509v3 Authority Key Identifier:
                keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:ee:3d:bf:0e:e6:fa:4f:37:5c:13:81:3f:e8:05:8b:77:
         39:1a:01:40:e8:98:a9:1d:4f:a7:93:6f:e8:7c:a9:a0:20:55:
         a5:2d:c7:b1:55:fc:3e:0e:97:7a:c4:3c:e4:82:04:93:a0:85:
         30:b4:a8:01:3c:61:78:7a:7a:f7:95:16:96:0a:0d:80:95:c0:
         e5:1c:4b:5d:0a:24:f1:ca:06:1c:e1:58:4d:d9:6c:f3:37:87:
         74:7d:13:0c:4d:6e:e3:76:58:76:00:e5:fc:9c:4a:6d:8d:06:
         75:80:ea:48:1e:1d:6c:4f:74:12:72:2f:6a:44:6c:08:94:f5:
         1c:57:78:67:52:a6:47:00:19:3f:8a:9e:6c:71:20:5b:1a:4b:
         7d:2f:28:f2:b9:5d:39:4a:3d:e5:c8:08:95:d1:57:f4:8f:99:
         56:60:65:4d:85:31:5e:d7:4e:10:76:7d:53:01:75:c2:7d:4e:
         1e:5c:04:8a:10:b3:0b:08:4c:41:ec:33:5a:4a:55:65:a4:db:
         a7:64:48:8a:10:5f:c6:68:69:1a:2e:b4:e0:e5:f1:ae:73:db:
         40:21:a5:0f:5a:ef:89:0f:3a:2b:59:41:7f:f4:b0:47:96:ce:
         69:fd:e7:24:10:f5:ff:e2:57:e1:ff:4f:e7:2b:97:78:8e:3e:
         8d:54:33:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWJugJINuNTk6FmIfwOCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3
YzBiOTgwHhcNMjQwNjE2MDAwMDQxWhcNMjQwNjE3MDAwMDQxWjAzMTEwLwYDVQQD
Eyg2ZDIxYWNjODcyYmI4MmU3Zjc0MzQ1YWJiOTg4NmQ1ODVkMjRhM2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwYfkMIXa78tvFfGT9CJOATP9vVX
yPNzNeJshITZTWH1g9cw7hZq/ja/ZpamXVhVFpaf+7zRABVK1dXVRa5D60HbhRz2
dufz0lniRXrb43e1ruQ6HqaQBQGr/1fTCAIJUpreBN1mubrfEl9moRPbSj2nSTS6
S1775AnIx85skMGv8vlVql8FnSqLuSPQtdvY1kXNOEFwuWx58C4Gs1wM63d47WcV
I/vrlF+vf2rCUqOCcfu5e42jmcYlVR0wCOw+QPr3JtM8II3GHjk4mLnrnsWlF6HK
2xlO1tZRe8FdqFDn7MHsZrdiSYiJyQMj4zcbqy3/SNDQpXSQz7gfC/zO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0hrMhyu4Ln90NFq7mIbVhdJKPwMB8GA1UdIwQY
MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt
YjgxMmJkNTk0NzM5LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5
LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmovuPb8O
5vpPN1wTgT/oBYt3ORoBQOiYqR1Pp5Nv6HypoCBVpS3HsVX8Pg6XesQ85IIEk6CF
MLSoATxheHp695UWlgoNgJXA5RxLXQok8coGHOFYTdls8zeHdH0TDE1u43ZYdgDl
/JxKbY0GdYDqSB4dbE90EnIvakRsCJT1HFd4Z1KmRwAZP4qebHEgWxpLfS8o8rld
OUo95cgIldFX9I+ZVmBlTYUxXtdOEHZ9UwF1wn1OHlwEihCzCwhMQewzWkpVZaTb
p2RIihBfxmhpGi604OXxrnPbQCGlD1rviQ86K1lBf/SwR5bOaf3nJBD1/+JX4f9P
5yuXeI4+jVQznQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:20:14 2024 by rpki-client on console-ams.rpki-client.org