Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File:                     9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier:          GuYvQM0OKvyeHf0qBxMZ1vRS29oFSkRSDVe1pRVAvjs=
Subject key identifier:   9F:68:E8:3F:11:94:72:0B:88:3B:C7:98:28:97:BA:97:96:6F:79:65
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer:       /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial:       01901D4654A0AF04D4E71B951426DED667C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number:          0EC5
Signing time:             Sat 15 Jun 2024 19:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:06 +0000
Files and hashes:         1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: cSe6gpLsU8Qkx9xqDSZ7C4i4x/4MG+1FKeP9fBdaAZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:54:a0:af:04:d4:e7:1b:95:14:26:de:d6:67:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
        Validity
            Not Before: Jun 15 19:01:06 2024 GMT
            Not After : Jun 16 19:01:06 2024 GMT
        Subject: CN=9f68e83f1194720b883bc7982897ba97966f7965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:33:3f:6a:fa:06:47:0a:85:b3:f0:e9:c4:
                    e4:1c:9b:ca:8a:32:22:e1:cc:33:fc:08:37:32:bb:
                    ef:77:df:72:4b:cd:b9:38:11:87:c2:a4:9a:13:3a:
                    33:d0:64:87:b0:50:1f:cb:36:98:5e:f5:60:0a:1c:
                    d9:90:c0:0d:b9:30:e9:28:07:46:d3:81:4e:ff:22:
                    7b:4a:03:23:0e:64:4b:ea:dc:56:df:1a:b1:3f:81:
                    cb:4b:3c:2b:8b:b8:59:f4:c5:05:fe:0f:4b:8e:ed:
                    00:73:52:3d:76:49:88:1b:72:c2:9b:08:15:46:9a:
                    d7:15:96:9f:3b:23:69:45:2d:40:fb:e9:ea:d6:07:
                    ef:22:8c:ed:7e:9a:ce:d6:55:6c:a4:e2:5d:b9:7a:
                    f6:7c:22:ff:5f:b2:c0:fb:b1:e1:14:9f:94:1e:01:
                    17:07:10:01:a4:67:6a:59:fc:a5:8f:e1:f8:1a:ec:
                    b1:91:2d:3b:f9:20:dd:ee:e8:b0:2e:42:be:da:c0:
                    4a:a3:78:b6:aa:0c:6b:00:d9:da:fe:bc:f9:c1:e0:
                    c0:e1:cf:33:2f:0c:a8:b5:d3:98:ad:77:36:87:99:
                    00:ce:1b:39:a5:9f:59:04:f2:97:c8:3d:4e:7a:0d:
                    6d:a1:42:f3:13:5e:98:b6:c3:21:db:d3:7b:c6:0f:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:E8:3F:11:94:72:0B:88:3B:C7:98:28:97:BA:97:96:6F:79:65
            X509v3 Authority Key Identifier:
                keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b3:56:8d:17:8a:5b:35:24:43:10:8a:90:3c:e5:39:af:89:
         a3:ee:20:be:dd:02:d9:0a:41:2a:e8:19:e1:77:5f:25:5a:4c:
         50:d0:13:6f:d0:f0:4e:09:f3:32:66:c9:42:6e:19:6e:ed:04:
         fe:35:43:a5:4b:41:71:49:d0:f6:10:07:49:8b:8b:69:44:e0:
         30:d2:28:73:c5:88:08:3f:d1:cd:af:da:66:66:71:12:eb:e2:
         ce:ca:a4:2e:f1:57:3e:4b:b3:7d:09:14:09:70:21:22:b1:b1:
         49:8c:89:0b:57:b1:9f:53:fe:6a:d3:0f:6d:a6:58:2e:07:7f:
         59:2a:09:7e:33:aa:0b:50:99:83:45:ce:e5:0d:ca:8d:29:80:
         77:5e:7e:cc:75:dc:ea:65:4b:67:cf:e5:c3:66:9d:7c:72:61:
         a2:0c:3f:68:d9:94:44:c3:10:3c:bf:15:ca:48:40:98:20:9a:
         66:43:16:a1:03:57:f7:af:01:83:ad:7c:97:7e:c8:33:f5:40:
         1d:9f:b8:2a:a9:12:8b:ce:cb:c0:3b:47:9e:46:34:cf:5a:7c:
         68:23:b0:98:9a:31:92:1a:bd:9a:d5:97:60:8b:48:f0:ec:a7:
         3f:6e:df:e9:12:da:c2:87:bf:fa:7a:23:6f:fc:2b:a0:1c:7b:
         af:95:d9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRlSgrwTU5xuVFCbe1mfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw
MjJlOGYwHhcNMjQwNjE1MTkwMTA2WhcNMjQwNjE2MTkwMTA2WjAzMTEwLwYDVQQD
Eyg5ZjY4ZTgzZjExOTQ3MjBiODgzYmM3OTgyODk3YmE5Nzk2NmY3OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FQzP2r6BkcKhbPw6cTkHJvKijIi
4cwz/Ag3Mrvvd99yS825OBGHwqSaEzoz0GSHsFAfyzaYXvVgChzZkMANuTDpKAdG
04FO/yJ7SgMjDmRL6txW3xqxP4HLSzwri7hZ9MUF/g9Lju0Ac1I9dkmIG3LCmwgV
RprXFZafOyNpRS1A++nq1gfvIoztfprO1lVspOJduXr2fCL/X7LA+7HhFJ+UHgEX
BxABpGdqWfylj+H4GuyxkS07+SDd7uiwLkK+2sBKo3i2qgxrANna/rz5weDA4c8z
LwyotdOYrXc2h5kAzhs5pZ9ZBPKXyD1Oeg1toULzE16YtsMh29N7xg+RLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9o6D8RlHILiDvHmCiXupeWb3llMB8GA1UdIwQY
MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt
ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2
LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrNWjReK
WzUkQxCKkDzlOa+Jo+4gvt0C2QpBKugZ4XdfJVpMUNATb9DwTgnzMmbJQm4Zbu0E
/jVDpUtBcUnQ9hAHSYuLaUTgMNIoc8WICD/Rza/aZmZxEuvizsqkLvFXPkuzfQkU
CXAhIrGxSYyJC1exn1P+atMPbaZYLgd/WSoJfjOqC1CZg0XO5Q3KjSmAd15+zHXc
6mVLZ8/lw2adfHJhogw/aNmURMMQPL8VykhAmCCaZkMWoQNX968Bg618l37IM/VA
HZ+4KqkSi87LwDtHnkY0z1p8aCOwmJoxkhq9mtWXYItI8OynP27f6RLawoe/+noj
b/wroBx7r5XZaw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:49 2024 by rpki-client on console-fra.rpki-client.org