Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          2OFy+tvTdsnI47kHhzq7BeVQ6Zkrdsb8Cwq09eUI3Mo=
Subject key identifier:   BD:4E:AF:89:8D:0C:DE:EE:33:A7:17:BD:9A:72:35:F7:4E:9F:E0:C3
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019076C222C30DE87F0E173D3FCC748DDBCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          0F1F
Signing time:             Wed 03 Jul 2024 04:02:32 +0000
Manifest this update:     Wed 03 Jul 2024 04:02:32 +0000
Manifest next update:     Thu 04 Jul 2024 04:02:32 +0000
Files and hashes:         1: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: OkXTqDSYB0MAZqYLGz7T8fYciQeyMi3Tg/8KyPFzLIE=)
                          2: P_PmSlBtNo5ZanXVT2tKMsn9yZw.roa (hash: lML3C47qW5MY/iVLGx5cFreTXaKHjUvJpO7UFox5iMw=)
                          3: WZ5wK7brNJJaMjMlX9X96iN9yGo.roa (hash: LloY2mWha6RZIiKSSm/PV8AcrfTy62LlZiTvKR7HVxw=)
                          4: j3m1Ic79b_Z5sqKCzQpl5hQERYA.roa (hash: mw2jE4e1NTmSp1A+mBQ/gKtR/Gmp+fmeLUiesM/JXAs=)
                          5: pjG67mzLUoh9tvF4CfxfO8AfFHQ.roa (hash: geC5r58YylwaCRtGoWeOTvFsdzYUmynEN8mpGmAzbI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:76:c2:22:c3:0d:e8:7f:0e:17:3d:3f:cc:74:8d:db:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jul  3 04:02:32 2024 GMT
            Not After : Jul  4 04:02:32 2024 GMT
        Subject: CN=bd4eaf898d0cdeee33a717bd9a7235f74e9fe0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:11:07:01:e9:a7:2b:0d:66:05:e3:72:87:
                    63:b4:38:f9:03:ee:9a:32:05:c2:3f:49:6a:1e:f6:
                    15:c9:43:4f:6c:b7:6a:cd:b4:9b:dd:9c:ed:b6:6a:
                    02:30:fd:17:05:d7:c2:c7:00:2e:4a:31:2e:72:4f:
                    ca:f0:02:e0:ed:64:fa:a4:7e:ca:a7:82:25:4b:67:
                    94:a9:1e:21:0f:7e:67:ba:d6:19:83:8e:60:fa:90:
                    6e:4d:06:f7:62:1b:d3:1f:3a:c1:9a:53:61:94:47:
                    91:5d:26:5b:15:ad:0d:c4:53:43:17:c0:6c:97:e7:
                    ee:63:b7:ee:e4:26:9d:4c:c0:cb:e6:86:ec:5f:62:
                    be:dc:cb:50:0a:90:c5:e8:fc:1a:ce:5d:c3:93:13:
                    a1:55:0a:0f:84:6a:52:ff:99:ba:89:53:06:12:d1:
                    e9:01:1e:8d:d9:52:d7:64:b1:fe:64:6b:6a:2f:bb:
                    3c:df:dc:7a:ff:a7:29:a8:ab:e8:c9:d2:70:4f:87:
                    f3:d4:19:15:95:4c:d5:73:7b:bf:8c:eb:e7:e2:30:
                    ff:30:25:d6:34:99:64:fa:af:df:1b:28:50:26:76:
                    f5:53:04:d5:3f:b2:26:1b:6c:f4:d3:3c:a3:50:1f:
                    3a:4c:8d:bf:9c:aa:3e:28:be:68:2d:ed:de:69:da:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:AF:89:8D:0C:DE:EE:33:A7:17:BD:9A:72:35:F7:4E:9F:E0:C3
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:29:71:44:d6:a9:29:66:6b:ff:68:2e:0b:16:bb:35:84:
         6d:65:15:9f:46:a9:3b:4f:ce:34:1f:05:6e:3c:ba:17:e3:b0:
         35:10:1e:7e:bc:4b:79:ab:3d:24:5d:bb:2e:35:50:d3:b8:b4:
         bc:50:8f:15:a6:f8:44:bf:1a:3e:b9:ed:db:d2:ac:03:6c:ef:
         5e:bf:77:60:09:32:d7:b6:ac:e1:ee:29:a2:0c:7d:ba:9c:30:
         2e:ba:45:0e:78:e5:a0:fd:9f:4d:25:9e:4d:fe:52:fc:71:35:
         ba:08:04:59:e4:ac:2a:6c:1e:0a:8d:b7:60:7b:59:b9:4f:87:
         db:db:b2:ce:ad:02:1b:d6:ad:d6:81:30:b2:b3:cc:e9:0a:ff:
         ff:de:4f:35:76:5f:d9:f7:12:d0:82:b2:a3:e9:78:be:fe:5d:
         fa:a3:c0:cf:d1:cf:95:77:be:7e:1c:be:df:4e:f9:a8:83:cf:
         3b:76:c3:37:6a:ac:ff:78:e8:22:27:fc:fa:90:07:78:66:dd:
         9b:31:db:18:21:e5:83:cb:03:4c:18:0d:8b:62:56:1f:78:e0:
         e5:b0:9e:55:51:c0:9c:1f:73:c3:9c:45:db:3f:b0:d2:c4:f9:
         b6:f8:29:36:0b:e9:07:1e:06:98:d6:a0:d9:56:e5:c7:38:20:
         e6:8e:69:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZB2wiLDDeh/Dhc9P8x0jdvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx
ZGQ0MTMwHhcNMjQwNzAzMDQwMjMyWhcNMjQwNzA0MDQwMjMyWjAzMTEwLwYDVQQD
EyhiZDRlYWY4OThkMGNkZWVlMzNhNzE3YmQ5YTcyMzVmNzRlOWZlMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZgRBwHppysNZgXjcodjtDj5A+6a
MgXCP0lqHvYVyUNPbLdqzbSb3ZzttmoCMP0XBdfCxwAuSjEuck/K8ALg7WT6pH7K
p4IlS2eUqR4hD35nutYZg45g+pBuTQb3YhvTHzrBmlNhlEeRXSZbFa0NxFNDF8Bs
l+fuY7fu5CadTMDL5obsX2K+3MtQCpDF6Pwazl3DkxOhVQoPhGpS/5m6iVMGEtHp
AR6N2VLXZLH+ZGtqL7s839x6/6cpqKvoydJwT4fz1BkVlUzVc3u/jOvn4jD/MCXW
NJlk+q/fGyhQJnb1UwTVP7ImG2z00zyjUB86TI2/nKo+KL5oLe3eadqsdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1Or4mNDN7uM6cXvZpyNfdOn+DDMB8GA1UdIwQY
MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct
OTU4MTEyYTQ4OWE0LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0
LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvspcUTW
qSlma/9oLgsWuzWEbWUVn0apO0/ONB8Fbjy6F+OwNRAefrxLeas9JF27LjVQ07i0
vFCPFab4RL8aPrnt29KsA2zvXr93YAky17as4e4pogx9upwwLrpFDnjloP2fTSWe
Tf5S/HE1uggEWeSsKmweCo23YHtZuU+H29uyzq0CG9at1oEwsrPM6Qr//95PNXZf
2fcS0IKyo+l4vv5d+qPAz9HPlXe+fhy+3075qIPPO3bDN2qs/3joIif8+pAHeGbd
mzHbGCHlg8sDTBgNi2JWH3jg5bCeVVHAnB9zw5xF2z+w0sT5tvgpNgvpBx4GmNag
2Vblxzgg5o5pyA==
-----END CERTIFICATE-----
Generated at Wed Jul 3 07:10:57 2024 by rpki-client on console-fra.rpki-client.org