Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File:                     criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier:          itQQfpYtGDfwmpPdQoKFeiPwHiIGkrFzqnqHQ11bqBk=
Subject key identifier:   76:69:54:10:AE:4A:F7:FF:19:4B:08:85:6F:D0:93:67:13:94:FB:45
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer:       /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial:       01901CA1CA84CAEA60463F8E3E51D9FCC921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number:          B5
Signing time:             Sat 15 Jun 2024 16:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:23 +0000
Files and hashes:         1: 70DTM8lDpKWx_VihNVznZWWznnY.roa (hash: idqsiJDCij6sY86t77Xdh9KMsQD6SLoC0jjPANhltro=)
                          2: FwbubeZ2dFkOFpxJJZ5tjoMhw2k.roa (hash: QHVS/RZRBKIwMPs+NmlmGUk1Vt9H3Zv4SxmdWISFX5Y=)
                          3: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: jQwLixKzSJj8W4iumTsCWJs0xO9Sjn6zmm3C0KJUJZQ=)
                          4: nxsdrB80Gh5yjfM0pW0x24np1RQ.roa (hash: C9aKIzqDTYjDuXzHQUAtGH8WExx5PY4j40BrkIc9IbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:ca:84:ca:ea:60:46:3f:8e:3e:51:d9:fc:c9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
        Validity
            Not Before: Jun 15 16:01:23 2024 GMT
            Not After : Jun 16 16:01:23 2024 GMT
        Subject: CN=76695410ae4af7ff194b08856fd093671394fb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:99:09:49:ab:35:30:51:e6:a3:1e:52:2a:
                    b4:7e:bd:07:d1:1c:6c:8a:d5:f2:2d:17:a9:8c:3d:
                    c4:d2:bc:53:91:7d:fa:cf:b2:53:b6:64:f3:b9:ab:
                    e3:a2:80:b7:73:b3:a5:1b:5a:99:57:fa:ef:d3:e3:
                    91:f9:ce:90:25:1c:27:55:8e:a7:5e:6a:47:51:56:
                    67:30:52:db:0e:83:51:be:2d:26:f5:6d:39:8e:1d:
                    76:d1:35:6f:da:9a:7c:ef:09:7e:f4:02:01:75:fd:
                    0a:8e:e4:4e:03:2c:8c:1f:55:9e:3e:65:0e:be:12:
                    7b:3a:3b:a5:63:c9:13:a3:87:f2:51:75:f7:88:d7:
                    f8:af:98:3d:4e:0a:88:c6:dd:94:f3:82:a0:3b:11:
                    a9:fa:1a:8e:5c:92:f9:c0:ae:be:d6:3c:46:08:b0:
                    84:d4:dc:e2:9f:d0:b4:6d:23:53:b4:e4:65:80:a6:
                    65:c7:5f:02:cc:6d:04:dc:c7:5c:fd:52:4f:66:81:
                    e7:4f:ef:ef:a4:da:c2:55:e1:7c:0a:88:71:7d:30:
                    20:18:93:77:c8:44:60:b0:a3:b0:d3:3a:6b:51:4c:
                    c7:19:4f:2f:77:db:aa:76:ab:09:60:96:c1:88:8d:
                    71:ea:cb:47:83:83:5f:ce:9f:2c:91:73:08:bb:b3:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:54:10:AE:4A:F7:FF:19:4B:08:85:6F:D0:93:67:13:94:FB:45
            X509v3 Authority Key Identifier:
                keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:44:7b:e7:e1:35:50:ed:95:6c:84:11:35:02:ce:4c:8a:
         a5:f0:a5:da:a5:62:92:21:69:43:b4:f1:25:1e:a3:91:c3:0d:
         70:4b:34:07:ac:28:7b:01:8f:37:a3:e0:08:52:d1:5a:78:52:
         6f:d6:39:03:16:65:6d:98:f1:d3:f4:88:fa:a6:7b:c9:0f:08:
         b9:68:d6:6b:40:98:48:a0:72:fc:da:93:e7:2b:dd:09:46:31:
         2f:13:2c:65:3b:5a:bc:76:77:42:23:3b:d4:0e:2d:e9:41:63:
         1e:8b:fa:58:46:69:8c:13:75:2e:a9:cc:1e:fd:e4:0a:b3:b2:
         8b:77:f1:0b:d0:5b:bd:26:9e:61:c4:00:ae:c0:51:ad:80:72:
         8c:6c:0e:bf:7e:e1:f9:6b:7a:a4:43:d6:6b:b5:36:40:b3:37:
         79:02:98:88:9e:31:17:17:38:7a:ab:55:c7:ac:8e:55:99:78:
         0a:f1:19:3c:fb:d5:97:05:b0:b8:33:e3:cc:b1:e4:e5:59:ea:
         4c:78:c6:60:52:95:5b:8b:a3:87:6d:23:80:1d:74:1a:0c:02:
         5e:1d:85:a3:55:b8:d5:ef:3c:3c:eb:a9:21:f5:58:ff:86:25:
         da:d9:23:c0:83:22:f5:6c:d4:e5:48:79:df:3e:cc:2f:6c:03:
         39:31:34:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcocqEyupgRj+OPlHZ/MkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjQwNjE1MTYwMTIzWhcNMjQwNjE2MTYwMTIzWjAzMTEwLwYDVQQD
Eyg3NjY5NTQxMGFlNGFmN2ZmMTk0YjA4ODU2ZmQwOTM2NzEzOTRmYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulOZCUmrNTBR5qMeUiq0fr0H0Rxs
itXyLRepjD3E0rxTkX36z7JTtmTzuavjooC3c7OlG1qZV/rv0+OR+c6QJRwnVY6n
XmpHUVZnMFLbDoNRvi0m9W05jh120TVv2pp87wl+9AIBdf0KjuROAyyMH1WePmUO
vhJ7OjulY8kTo4fyUXX3iNf4r5g9TgqIxt2U84KgOxGp+hqOXJL5wK6+1jxGCLCE
1Nzin9C0bSNTtORlgKZlx18CzG0E3Mdc/VJPZoHnT+/vpNrCVeF8CohxfTAgGJN3
yERgsKOw0zprUUzHGU8vd9uqdqsJYJbBiI1x6stHg4Nfzp8skXMIu7PWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZpVBCuSvf/GUsIhW/Qk2cTlPtFMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWxEe+fh
NVDtlWyEETUCzkyKpfCl2qVikiFpQ7TxJR6jkcMNcEs0B6woewGPN6PgCFLRWnhS
b9Y5AxZlbZjx0/SI+qZ7yQ8IuWjWa0CYSKBy/NqT5yvdCUYxLxMsZTtavHZ3QiM7
1A4t6UFjHov6WEZpjBN1LqnMHv3kCrOyi3fxC9BbvSaeYcQArsBRrYByjGwOv37h
+Wt6pEPWa7U2QLM3eQKYiJ4xFxc4eqtVx6yOVZl4CvEZPPvVlwWwuDPjzLHk5Vnq
THjGYFKVW4ujh20jgB10GgwCXh2Fo1W41e88POupIfVY/4Yl2tkjwIMi9WzU5Uh5
3z7ML2wDOTE0Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:35 2024 by rpki-client on console-ams.rpki-client.org