Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          HTnHUyPIuv5grZ1pck0czGR7jiWEtIUBrl3OXvWZeh0=
Subject key identifier:   C6:2E:3B:EF:1D:24:E8:DA:5B:46:FF:AD:9B:7E:3C:78:57:87:CF:07
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       01901EC660954B9185B45C016EE5138B77E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:35 +0000
Files and hashes:         1: XqQz5sRVgt-R1mDDMdLho3p9CtU.roa (hash: fInfotx9ZGqRIkHkyre92Bdb8oMV3y8A3RTFHzeQmd0=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: ELg0glUpWUYz5rRFRoXzZC+VpG68Deau0331YmC27ag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:60:95:4b:91:85:b4:5c:01:6e:e5:13:8b:77:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Jun 16 02:00:35 2024 GMT
            Not After : Jun 17 02:00:35 2024 GMT
        Subject: CN=c62e3bef1d24e8da5b46ffad9b7e3c785787cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:ad:22:42:f8:da:bf:40:75:d3:8c:4a:22:
                    31:10:0e:f9:2d:cc:98:3e:e6:0f:46:71:b0:8e:55:
                    c2:48:2a:9d:2e:91:73:00:3e:5e:33:56:d1:6e:aa:
                    0b:43:04:67:27:ff:48:5a:7e:f8:3d:c9:10:cd:71:
                    ef:3f:66:13:ac:32:16:f5:ba:0a:41:9f:e5:ff:ae:
                    43:56:64:bf:e0:11:05:c1:38:b1:2c:b8:b8:ab:44:
                    06:b7:32:1d:51:2a:55:a5:c9:e9:77:30:10:b4:e9:
                    a8:a8:02:8a:7c:fc:93:8f:a0:c5:38:4a:d4:81:71:
                    7e:bf:2a:da:ff:cd:a7:42:61:4b:57:4b:71:9f:5c:
                    83:b5:1e:b1:19:a3:6f:75:14:1b:6e:aa:f9:38:c2:
                    12:86:7c:aa:4e:8d:d7:45:08:ad:75:f0:9a:3c:c4:
                    64:e8:87:0d:b5:eb:e9:ee:4a:3d:1c:26:f6:a1:44:
                    4e:5e:99:c8:b5:10:61:d6:3f:c4:74:ab:24:32:bd:
                    d2:29:b6:2b:88:cd:f3:5b:0c:30:53:aa:c7:28:f2:
                    5e:e6:59:2d:ca:af:db:39:6c:95:f2:c2:c5:06:8a:
                    64:30:5a:74:2b:ef:a2:7d:f9:0d:87:d0:22:b0:38:
                    1b:63:6a:2a:f7:b7:2c:5c:cc:40:94:2c:10:f4:df:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:3B:EF:1D:24:E8:DA:5B:46:FF:AD:9B:7E:3C:78:57:87:CF:07
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:06:1d:5c:c9:14:ff:0e:3c:1b:9a:e6:0b:f7:a2:8d:e8:
         3d:6d:43:cd:e8:c0:97:2b:53:52:b3:05:2f:f5:2c:b4:a0:f6:
         ce:fe:3a:2f:97:37:36:cc:10:35:3a:b9:10:4f:38:f2:88:10:
         86:09:91:34:23:e4:20:56:5c:0a:f6:be:60:5c:6d:a7:27:38:
         9b:f5:0d:b2:3e:50:cc:55:25:9a:92:21:f2:75:64:7d:59:a9:
         db:9c:a2:9f:21:0a:96:83:c3:ab:43:5c:6c:93:ba:7c:45:d9:
         75:6e:30:61:ae:ac:d6:56:7b:0b:75:52:32:3e:23:09:b2:e3:
         b5:1b:ef:12:c6:fb:90:8f:8f:4b:15:a1:08:77:7e:f4:46:e8:
         e7:3d:e5:bb:40:18:dd:75:c5:07:73:e8:07:0a:88:d9:99:7c:
         46:42:2a:07:b5:e6:cb:e8:44:53:2a:24:fa:63:26:48:98:ea:
         dc:5b:8f:f4:39:2c:e3:54:32:01:c8:38:f3:de:e9:94:f7:db:
         d5:6b:e9:ec:a3:42:ad:68:c6:b3:5f:8c:77:f5:89:f1:1d:79:
         35:05:cd:75:0a:43:0d:be:c9:c0:5d:fc:24:20:68:43:d7:ce:
         aa:09:42:82:a2:1e:21:e7:50:6e:25:71:15:74:11:2a:dc:8e:
         78:a8:b7:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexmCVS5GFtFwBbuUTi3fiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjQwNjE2MDIwMDM1WhcNMjQwNjE3MDIwMDM1WjAzMTEwLwYDVQQD
EyhjNjJlM2JlZjFkMjRlOGRhNWI0NmZmYWQ5YjdlM2M3ODU3ODdjZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIytIkL42r9AddOMSiIxEA75LcyY
PuYPRnGwjlXCSCqdLpFzAD5eM1bRbqoLQwRnJ/9IWn74PckQzXHvP2YTrDIW9boK
QZ/l/65DVmS/4BEFwTixLLi4q0QGtzIdUSpVpcnpdzAQtOmoqAKKfPyTj6DFOErU
gXF+vyra/82nQmFLV0txn1yDtR6xGaNvdRQbbqr5OMIShnyqTo3XRQitdfCaPMRk
6IcNtevp7ko9HCb2oUROXpnItRBh1j/EdKskMr3SKbYriM3zWwwwU6rHKPJe5lkt
yq/bOWyV8sLFBopkMFp0K++iffkNh9AisDgbY2oq97csXMxAlCwQ9N/ouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYuO+8dJOjaW0b/rZt+PHhXh88HMB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpUGHVzJ
FP8OPBua5gv3oo3oPW1DzejAlytTUrMFL/UstKD2zv46L5c3NswQNTq5EE848ogQ
hgmRNCPkIFZcCva+YFxtpyc4m/UNsj5QzFUlmpIh8nVkfVmp25yinyEKloPDq0Nc
bJO6fEXZdW4wYa6s1lZ7C3VSMj4jCbLjtRvvEsb7kI+PSxWhCHd+9Ebo5z3lu0AY
3XXFB3PoBwqI2Zl8RkIqB7Xmy+hEUyok+mMmSJjq3FuP9Dks41QyAcg4897plPfb
1Wvp7KNCrWjGs1+Md/WJ8R15NQXNdQpDDb7JwF38JCBoQ9fOqglCgqIeIedQbiVx
FXQRKtyOeKi3Ug==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:08 2024 by rpki-client on console-ams.rpki-client.org