Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File:                     dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier:          z67JrHdJlRvauELOfjn5HGYAqLjGKHT8nesI8PV/j7Q=
Subject key identifier:   22:F3:A9:98:40:62:D3:44:27:4E:CA:1F:6B:09:C2:EB:85:B8:C2:0A
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer:       /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial:       019072E4A7EF5665D876AF9FFE1ACA608C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number:          11F0
Signing time:             Tue 02 Jul 2024 10:01:46 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:46 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:46 +0000
Files and hashes:         1: O1xTiJXJ9RaPXcM3TxZg263QSpk.roa (hash: CDxqgS9xIrcHYQQmsrHXKviaOf7QW0SeBJFT0aZjltg=)
                          2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: EtJKsIlROIWtWXdww2N8p4nzgSvjMiwRljWZA5g/LTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:a7:ef:56:65:d8:76:af:9f:fe:1a:ca:60:8c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
        Validity
            Not Before: Jul  2 10:01:46 2024 GMT
            Not After : Jul  3 10:01:46 2024 GMT
        Subject: CN=22f3a9984062d344274eca1f6b09c2eb85b8c20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:70:80:f3:41:4a:f0:20:79:a2:f0:f3:38:
                    09:ca:2b:da:cd:cc:05:f4:d1:bd:57:fc:7c:39:07:
                    2d:d4:33:70:b8:f5:b3:f4:ec:b3:9a:a8:4d:0d:19:
                    71:5f:e0:f1:f1:15:56:c3:20:2a:81:b9:34:6d:c0:
                    35:22:84:a1:0e:75:5a:e0:06:8c:55:44:0d:17:e4:
                    65:fb:c7:02:71:d7:95:6d:f3:ca:5d:b8:93:0e:62:
                    07:df:9e:b3:98:d4:b7:b4:6a:0b:2c:6e:91:d1:2a:
                    a2:5e:16:ec:49:fa:13:5b:c4:36:fa:8a:85:0d:2c:
                    ae:b5:50:67:8e:83:92:63:54:3d:39:27:24:1f:e9:
                    cf:a3:4e:f0:92:aa:57:bf:fc:d8:42:85:d0:05:75:
                    cd:7b:7e:f1:f7:df:62:ac:83:25:bf:12:3f:b1:07:
                    4b:92:01:44:0f:9a:21:77:12:23:1c:c7:56:8b:43:
                    c5:60:51:18:db:af:8c:24:ac:bd:8b:2b:57:0a:96:
                    29:4c:a6:a0:bf:c9:35:0d:b3:ef:38:55:d2:63:2d:
                    9e:c6:47:0c:d5:f6:6d:b5:e2:7c:2f:38:e8:30:0d:
                    6c:e3:02:c9:37:79:14:84:b6:06:8d:b4:c3:25:d5:
                    5b:ab:c5:0d:c3:fa:25:34:2c:36:81:05:ff:ed:50:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:A9:98:40:62:D3:44:27:4E:CA:1F:6B:09:C2:EB:85:B8:C2:0A
            X509v3 Authority Key Identifier:
                keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:7f:7e:84:5a:81:9f:64:fc:5a:12:8f:54:0b:56:60:a2:
         ee:ad:e2:29:b3:69:fb:8d:37:68:40:66:bc:d3:df:d1:82:b7:
         ec:7b:4d:b9:36:81:71:df:1a:24:a5:6e:e6:8c:3e:ec:03:a8:
         e0:ce:df:3e:c2:c5:e8:99:00:c9:42:96:ef:d6:5d:49:a3:22:
         9b:38:2a:5a:f9:07:ab:0b:bf:46:64:d1:fc:b4:48:0c:e8:d7:
         77:0d:19:f2:73:1f:99:b4:e9:54:88:ca:b8:1a:b1:87:d2:86:
         13:05:69:81:7c:54:78:9e:38:c6:0f:b6:82:1c:10:68:e8:cd:
         96:cb:0c:5d:55:67:1e:7d:51:a6:9b:c4:9a:88:a4:fe:c8:e0:
         ea:ee:35:8b:45:4f:35:df:b0:bc:99:4b:29:30:36:eb:48:22:
         01:96:a2:aa:2b:d9:d6:4e:d9:24:be:76:86:e1:4b:5a:db:6d:
         02:a2:cc:d8:e5:a6:7c:f5:39:7c:fa:45:18:1b:52:a8:66:90:
         94:4e:af:ab:60:f9:54:bb:af:b3:61:d1:14:b1:64:17:3e:48:
         c5:54:23:37:a8:01:4d:2b:64:a6:4b:65:df:1b:4a:85:45:00:
         db:4e:a9:7c:0b:3b:e6:e7:b6:7a:b2:64:79:5d:80:74:d2:67:
         a3:d4:2f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBy5KfvVmXYdq+f/hrKYIwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2
Y2U0MTIwHhcNMjQwNzAyMTAwMTQ2WhcNMjQwNzAzMTAwMTQ2WjAzMTEwLwYDVQQD
EygyMmYzYTk5ODQwNjJkMzQ0Mjc0ZWNhMWY2YjA5YzJlYjg1YjhjMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnNwgPNBSvAgeaLw8zgJyivazcwF
9NG9V/x8OQct1DNwuPWz9OyzmqhNDRlxX+Dx8RVWwyAqgbk0bcA1IoShDnVa4AaM
VUQNF+Rl+8cCcdeVbfPKXbiTDmIH356zmNS3tGoLLG6R0SqiXhbsSfoTW8Q2+oqF
DSyutVBnjoOSY1Q9OSckH+nPo07wkqpXv/zYQoXQBXXNe37x999irIMlvxI/sQdL
kgFED5ohdxIjHMdWi0PFYFEY26+MJKy9iytXCpYpTKagv8k1DbPvOFXSYy2exkcM
1fZtteJ8LzjoMA1s4wLJN3kUhLYGjbTDJdVbq8UNw/olNCw2gQX/7VAuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLzqZhAYtNEJ07KH2sJwuuFuMIKMB8GA1UdIwQY
MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt
ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl
LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1F/foRa
gZ9k/FoSj1QLVmCi7q3iKbNp+403aEBmvNPf0YK37HtNuTaBcd8aJKVu5ow+7AOo
4M7fPsLF6JkAyUKW79ZdSaMimzgqWvkHqwu/RmTR/LRIDOjXdw0Z8nMfmbTpVIjK
uBqxh9KGEwVpgXxUeJ44xg+2ghwQaOjNlssMXVVnHn1RppvEmoik/sjg6u41i0VP
Nd+wvJlLKTA260giAZaiqivZ1k7ZJL52huFLWtttAqLM2OWmfPU5fPpFGBtSqGaQ
lE6vq2D5VLuvs2HRFLFkFz5IxVQjN6gBTStkpktl3xtKhUUA206pfAs75ue2erJk
eV2AdNJno9Qv6Q==
-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:27 2024 by rpki-client on console-ams.rpki-client.org