Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File:                     C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier:          dWjGjZwKJBkv8HkU/2mJN4siKeS4IEchzEMxBhsOKbE=
Subject key identifier:   3E:EF:9F:CB:4E:30:AD:A4:51:99:74:A9:92:BF:69:20:FF:0D:9A:CC
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer:       /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial:       01901DEDC0F9126FCCF1A0585B96BBB14480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number:          0EA2
Signing time:             Sat 15 Jun 2024 22:03:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:58 +0000
Files and hashes:         1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: 2mVk47ueY7DFW1VdlOXr2HqBB+YQvRGRNM6aEHnpXPA=)
                          2: yH9vyg4xtGqTxp9p-vGiYSiSBEY.roa (hash: /ckunZohpD2LwFf44t8473mmV9TLI/iiOdzuYcE3gY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:c0:f9:12:6f:cc:f1:a0:58:5b:96:bb:b1:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
        Validity
            Not Before: Jun 15 22:03:58 2024 GMT
            Not After : Jun 16 22:03:58 2024 GMT
        Subject: CN=3eef9fcb4e30ada4519974a992bf6920ff0d9acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:8d:86:c7:3f:02:bc:1f:ef:4d:dc:fe:ee:
                    c1:4c:ac:d1:08:ba:ca:84:ff:51:73:54:3b:b3:8f:
                    af:ae:72:c6:a2:0a:84:34:83:55:68:0b:5d:a3:9d:
                    c9:60:49:e3:f5:7d:79:43:77:e3:4e:7b:ef:7b:64:
                    e3:20:6c:8f:59:b0:d8:78:ad:db:da:f8:f1:54:a4:
                    a8:21:5d:bc:23:20:ff:ed:8f:dd:d2:bf:b6:86:b6:
                    56:c7:8e:e5:06:5e:20:10:c9:3d:11:72:fc:ec:2b:
                    49:ec:fe:05:4c:7a:9c:8b:3e:4f:a7:93:f0:e8:b0:
                    bf:53:5a:24:8e:74:e5:fb:df:ee:bb:c7:14:ed:c4:
                    1e:a0:d5:69:33:65:7d:bf:96:41:2b:34:07:c8:0f:
                    f9:a1:a5:ef:2a:cb:6f:7f:23:fb:89:09:fd:fe:8b:
                    1a:c5:90:83:22:36:93:f4:ee:3a:11:61:c8:a6:54:
                    66:35:0e:33:ea:62:59:ca:42:40:2b:b3:45:1a:5a:
                    df:7b:3c:58:6e:c9:e3:fc:ab:40:b2:1a:6f:5e:92:
                    83:fa:9d:11:d5:c3:6c:e5:c1:fe:89:a1:1d:59:c8:
                    ff:5b:28:0c:07:45:2e:cb:91:62:4b:1f:63:0a:4a:
                    b6:d9:8b:20:07:17:01:58:80:96:fe:77:15:83:db:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EF:9F:CB:4E:30:AD:A4:51:99:74:A9:92:BF:69:20:FF:0D:9A:CC
            X509v3 Authority Key Identifier:
                keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:77:75:b9:a7:e3:db:34:a6:62:94:16:33:ca:ba:ef:82:
         7e:ce:5f:a0:d7:95:ca:f6:c1:26:d0:53:49:53:3f:b0:71:58:
         41:41:c2:87:e5:cb:1b:68:91:af:c5:99:16:38:b0:c5:0f:a9:
         f6:55:77:2e:cb:dd:24:1c:2e:b5:d4:c3:da:fa:0f:6f:fe:29:
         61:0e:e7:5e:b5:ab:af:51:7a:29:e5:3f:8e:8e:0e:cb:e1:a3:
         ac:ee:07:e7:ab:98:14:73:45:e1:42:89:70:81:55:6b:e1:70:
         c2:98:e8:2c:fa:71:12:dd:75:49:aa:d3:26:5d:b2:3e:53:db:
         f6:81:b0:be:5d:1c:64:9b:0e:b3:9c:21:44:4b:db:83:de:10:
         cd:2e:62:ef:5e:c3:e8:fb:a3:ee:3d:0d:7a:a2:fa:81:5d:e2:
         33:95:7d:d8:c7:0a:40:38:4c:29:d3:37:76:d6:8a:85:e5:97:
         2d:66:92:b3:46:4d:0f:f8:cc:02:6c:16:00:66:48:cc:55:69:
         79:8a:30:a2:dc:5b:3a:ab:3e:c5:ba:d1:93:b4:8f:74:fb:71:
         cc:ca:0f:a6:36:27:13:f0:a5:66:f4:39:a2:de:07:5c:be:09:
         83:04:ee:1d:a3:b3:98:94:e3:d5:c6:6f:0f:d3:f0:e0:b8:35:
         9a:01:7a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7cD5Em/M8aBYW5a7sUSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2JmNzQ4ZTlmNDk5ODY4NWQwYzk2NWQyZGZkZjBmMzYy
YTUwNTIwHhcNMjQwNjE1MjIwMzU4WhcNMjQwNjE2MjIwMzU4WjAzMTEwLwYDVQQD
EygzZWVmOWZjYjRlMzBhZGE0NTE5OTc0YTk5MmJmNjkyMGZmMGQ5YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoaNhsc/Arwf703c/u7BTKzRCLrK
hP9Rc1Q7s4+vrnLGogqENINVaAtdo53JYEnj9X15Q3fjTnvve2TjIGyPWbDYeK3b
2vjxVKSoIV28IyD/7Y/d0r+2hrZWx47lBl4gEMk9EXL87CtJ7P4FTHqciz5Pp5Pw
6LC/U1okjnTl+9/uu8cU7cQeoNVpM2V9v5ZBKzQHyA/5oaXvKstvfyP7iQn9/osa
xZCDIjaT9O46EWHIplRmNQ4z6mJZykJAK7NFGlrfezxYbsnj/KtAshpvXpKD+p0R
1cNs5cH+iaEdWcj/WygMB0Uuy5FiSx9jCkq22YsgBxcBWICW/ncVg9sV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7vn8tOMK2kUZl0qZK/aSD/DZrMMB8GA1UdIwQY
MBaAFAvL90jp9JmGhdDJZdLf3w82KlBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt
N2Y5NmM5ZjA1ZjU0LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0
LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ13dbmn
49s0pmKUFjPKuu+Cfs5foNeVyvbBJtBTSVM/sHFYQUHCh+XLG2iRr8WZFjiwxQ+p
9lV3LsvdJBwutdTD2voPb/4pYQ7nXrWrr1F6KeU/jo4Oy+GjrO4H56uYFHNF4UKJ
cIFVa+FwwpjoLPpxEt11SarTJl2yPlPb9oGwvl0cZJsOs5whREvbg94QzS5i717D
6Puj7j0NeqL6gV3iM5V92McKQDhMKdM3dtaKheWXLWaSs0ZND/jMAmwWAGZIzFVp
eYowotxbOqs+xbrRk7SPdPtxzMoPpjYnE/ClZvQ5ot4HXL4JgwTuHaOzmJTj1cZv
D9Pw4Lg1mgF6sQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:45 2024 by rpki-client on console-fra.rpki-client.org