Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File:                     nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier:          3NXHYoFFH5IjGhEYwy6wrRXlCieArpJkHGmFBZ5MmTA=
Subject key identifier:   1A:0B:6E:57:C9:D9:FE:11:A5:B7:08:C5:4F:F2:12:1F:71:37:64:BB
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer:       /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial:       019041C06E05A59BD333C768571996D123C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number:          11D9
Signing time:             Sat 22 Jun 2024 21:00:48 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:48 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:48 +0000
Files and hashes:         1: nFBZNvW7OPh1QK2akKTX0EGehSE.roa (hash: u8Wht/uFNIcHlKZkXB6ULlZmIKRglqOPJMg8pslxRDE=)
                          2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: aEZ+u454WW9+vKGYqT2RvENjFiOAWtl6z7k27IwKlDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:6e:05:a5:9b:d3:33:c7:68:57:19:96:d1:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
        Validity
            Not Before: Jun 22 21:00:48 2024 GMT
            Not After : Jun 23 21:00:48 2024 GMT
        Subject: CN=1a0b6e57c9d9fe11a5b708c54ff2121f713764bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:e2:c9:1e:4b:6d:2b:50:46:20:38:1f:c7:
                    33:f0:13:93:76:6f:d9:ef:75:bf:4b:f0:42:a9:d8:
                    55:4e:31:80:7b:8b:07:8e:e6:56:e6:43:73:b7:90:
                    07:2d:8c:b8:58:81:58:82:74:00:1e:62:5a:52:b7:
                    3a:87:7b:73:e4:77:ce:c5:e9:fa:a1:16:2b:44:62:
                    8d:a4:83:d9:d7:a3:03:3f:f0:9a:f3:00:24:73:a3:
                    48:38:a0:25:d8:41:b9:7a:8e:42:78:16:17:5d:4a:
                    de:2b:5c:b1:e7:1d:fb:4e:69:c0:8c:fd:53:33:74:
                    8a:eb:af:56:1b:43:34:5e:ef:44:9b:1c:b7:f9:d9:
                    22:bf:a3:eb:3f:9f:b6:dd:48:12:31:75:a2:d1:d5:
                    80:74:fd:de:e3:6f:6c:e9:2b:b4:26:02:3e:b0:7a:
                    c0:aa:df:3e:23:14:2e:a6:2b:20:81:f6:81:dd:8c:
                    6c:5c:df:4a:eb:d5:66:80:71:2e:8a:b8:2d:11:0c:
                    87:ea:5c:9f:7b:3c:a9:c2:43:6b:63:ce:d9:3e:bf:
                    73:cb:14:9c:62:2c:62:d8:4d:7e:ad:8c:29:5a:77:
                    44:21:7c:e5:b6:72:2c:96:23:92:58:34:18:b9:7e:
                    6b:1f:d4:2d:8a:d5:78:21:c6:37:06:f6:fc:bb:64:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0B:6E:57:C9:D9:FE:11:A5:B7:08:C5:4F:F2:12:1F:71:37:64:BB
            X509v3 Authority Key Identifier:
                keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:fc:08:74:49:a3:62:d6:41:52:ef:97:4b:a7:21:b8:bc:
         09:8d:60:8c:6c:e8:2c:5b:16:b8:69:32:0b:54:8f:91:75:d0:
         76:27:25:4e:a5:89:1d:73:f0:7c:82:c5:02:33:bb:dc:f5:f6:
         7a:db:6d:cd:42:08:dc:76:78:b1:81:ab:cf:31:e8:34:45:64:
         53:3a:fa:28:45:58:8e:76:14:ea:ff:60:01:ce:a6:00:05:2b:
         d2:45:8d:fe:ab:26:3f:b1:17:fd:11:d9:8e:7e:44:6b:59:27:
         d7:48:ef:9f:0d:9d:5a:f8:93:12:f5:65:8f:25:0b:29:bb:59:
         81:cd:06:3f:94:46:83:94:b9:5c:b0:cc:74:ee:31:ff:81:92:
         70:b2:8a:86:cb:9c:b6:56:78:8c:34:d9:e7:ca:88:b1:e5:33:
         64:c0:bf:ba:9e:e2:f7:dd:ce:09:67:8a:a0:c1:48:3f:5b:2e:
         df:61:31:9c:08:25:97:b7:8b:a8:8f:26:a0:13:f3:bf:9b:5b:
         f8:fd:94:8a:8f:d7:af:c0:49:b5:fd:20:81:3c:8f:36:77:5e:
         ff:ed:71:31:53:6b:f5:4e:ba:b7:aa:f5:2b:45:1d:34:83:7e:
         10:7b:78:98:c3:45:51:bb:33:4c:59:a1:15:ce:38:db:9d:32:
         9d:75:f2:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBwG4FpZvTM8doVxmW0SPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj
YThjNDcwHhcNMjQwNjIyMjEwMDQ4WhcNMjQwNjIzMjEwMDQ4WjAzMTEwLwYDVQQD
EygxYTBiNmU1N2M5ZDlmZTExYTViNzA4YzU0ZmYyMTIxZjcxMzc2NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEbiyR5LbStQRiA4H8cz8BOTdm/Z
73W/S/BCqdhVTjGAe4sHjuZW5kNzt5AHLYy4WIFYgnQAHmJaUrc6h3tz5HfOxen6
oRYrRGKNpIPZ16MDP/Ca8wAkc6NIOKAl2EG5eo5CeBYXXUreK1yx5x37TmnAjP1T
M3SK669WG0M0Xu9Emxy3+dkiv6PrP5+23UgSMXWi0dWAdP3e429s6Su0JgI+sHrA
qt8+IxQupisggfaB3YxsXN9K69VmgHEuirgtEQyH6lyfezypwkNrY87ZPr9zyxSc
Yixi2E1+rYwpWndEIXzltnIsliOSWDQYuX5rH9QtitV4IcY3Bvb8u2RAnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoLblfJ2f4RpbcIxU/yEh9xN2S7MB8GA1UdIwQY
MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt
NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy
LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpv8CHRJ
o2LWQVLvl0unIbi8CY1gjGzoLFsWuGkyC1SPkXXQdiclTqWJHXPwfILFAjO73PX2
etttzUII3HZ4sYGrzzHoNEVkUzr6KEVYjnYU6v9gAc6mAAUr0kWN/qsmP7EX/RHZ
jn5Ea1kn10jvnw2dWviTEvVljyULKbtZgc0GP5RGg5S5XLDMdO4x/4GScLKKhsuc
tlZ4jDTZ58qIseUzZMC/up7i993OCWeKoMFIP1su32ExnAgll7eLqI8moBPzv5tb
+P2Uio/Xr8BJtf0ggTyPNnde/+1xMVNr9U66t6r1K0UdNIN+EHt4mMNFUbszTFmh
Fc44250ynXXyrw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:42 2024 by rpki-client on console-fra.rpki-client.org