Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8a00c2-bb87-40a7-b1e9-5c4b76f48d50/1/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.mft
File:                     DCzmTD5lqCAqfBsbIMoR5Frm1Yw.mft (raw, json)
Hash identifier:          pfLQAeChJFVz3Ja4MYGxn6rmLG2ATwuDaVrbAlPimLs=
Subject key identifier:   BE:EA:B2:68:12:83:49:4D:4E:70:3D:E3:C5:84:E7:AD:45:5B:FF:5F
Authority key identifier: 0C:2C:E6:4C:3E:65:A8:20:2A:7C:1B:1B:20:CA:11:E4:5A:E6:D5:8C
Certificate issuer:       /CN=0c2ce64c3e65a8202a7c1b1b20ca11e45ae6d58c
Certificate serial:       0190448AEF7A8E57A51353E5CCF68B931D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8a00c2-bb87-40a7-b1e9-5c4b76f48d50/1/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.mft
Manifest number:          0863
Signing time:             Sun 23 Jun 2024 10:01:14 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:14 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:14 +0000
Files and hashes:         1: 3JcnwMUt_z8hfyh3FAl5KenEjjQ.roa (hash: buQsxzfWk6p3a4b2RgiIJW3DRvcYl/DQOCF6xW9RrN0=)
                          2: 78TYyYGPlX1iawxhwCakWqghX3g.roa (hash: Ffd7BQoSb+x8EXsu1HXGI2UsMpsWvy1WADmZqdqbu8A=)
                          3: DCzmTD5lqCAqfBsbIMoR5Frm1Yw.crl (hash: uIxZcfPHMtdLyhY1epbfhRr0idA7eOqClSYmarlADJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/8a00c2-bb87-40a7-b1e9-5c4b76f48d50/1/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/8a00c2-bb87-40a7-b1e9-5c4b76f48d50/1/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:ef:7a:8e:57:a5:13:53:e5:cc:f6:8b:93:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2ce64c3e65a8202a7c1b1b20ca11e45ae6d58c
        Validity
            Not Before: Jun 23 10:01:14 2024 GMT
            Not After : Jun 24 10:01:14 2024 GMT
        Subject: CN=beeab2681283494d4e703de3c584e7ad455bff5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:b4:1d:ee:27:25:cb:2c:bd:c6:8e:e1:76:
                    cb:f2:30:d0:c8:47:30:6f:0f:c0:2b:b2:ea:42:af:
                    72:29:ee:c9:f4:a8:7c:68:b9:91:7d:8d:64:85:54:
                    4a:4b:5d:45:1e:a6:cd:21:a2:30:33:f0:2a:36:7a:
                    3e:b6:2e:b4:dd:aa:52:c1:b4:41:3a:6f:c6:b7:e7:
                    d6:d2:59:cb:d0:0f:3a:6b:4e:a5:a3:cc:2d:9c:9a:
                    5a:85:85:d7:aa:02:4a:18:ca:96:cb:2a:4b:17:f2:
                    79:25:b3:d1:48:65:6b:13:80:aa:72:90:02:04:f2:
                    f7:dc:13:d8:d7:24:da:cf:1b:34:0f:90:f2:d2:a3:
                    b1:b9:3e:90:76:69:9c:87:96:18:26:ff:fd:72:4e:
                    d2:27:ee:95:4c:05:b2:26:82:cf:8b:bf:07:56:16:
                    ea:a0:1a:82:84:0a:32:2d:f1:8b:ae:53:9f:4e:97:
                    0a:18:e5:92:b4:53:7f:47:eb:7d:ef:f5:db:61:da:
                    a1:dd:ce:77:cb:2d:99:fb:07:6d:1a:4b:50:16:04:
                    09:5c:b0:2c:53:2d:fc:c2:8a:20:c0:79:c7:9c:db:
                    96:8f:33:20:10:84:bf:4d:9e:f5:33:96:6c:e0:38:
                    45:99:8a:b4:9e:41:b0:11:f4:54:38:c2:d3:39:66:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:B2:68:12:83:49:4D:4E:70:3D:E3:C5:84:E7:AD:45:5B:FF:5F
            X509v3 Authority Key Identifier:
                keyid:0C:2C:E6:4C:3E:65:A8:20:2A:7C:1B:1B:20:CA:11:E4:5A:E6:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8a00c2-bb87-40a7-b1e9-5c4b76f48d50/1/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8a00c2-bb87-40a7-b1e9-5c4b76f48d50/1/DCzmTD5lqCAqfBsbIMoR5Frm1Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:e9:cc:79:2e:18:b6:d2:f7:96:4a:cd:e9:7c:95:bf:88:
         08:70:6f:06:a5:eb:5b:44:17:55:80:63:23:5d:21:17:77:ca:
         5d:07:d2:df:bd:9b:72:f5:7e:49:40:a6:28:5b:1d:53:af:5f:
         e2:96:48:8e:5e:53:2f:c3:5c:f5:13:36:75:4e:5d:51:9e:fb:
         a9:ed:6f:b9:30:f5:23:73:f7:03:c5:66:80:6b:2e:c0:86:10:
         9c:11:d7:6f:db:29:e6:5e:60:fd:16:53:ff:79:77:8b:87:57:
         54:66:de:65:a7:0f:67:55:b6:6e:ee:3b:5a:2c:72:1d:42:8b:
         82:60:6a:21:0f:19:19:61:58:45:e5:f7:88:ac:0d:fa:ff:e1:
         78:7f:74:b9:e4:84:6f:fe:33:f4:a0:46:fc:98:3f:8e:8a:49:
         06:bc:8f:ac:d5:40:18:6c:01:cb:c0:a9:65:fb:df:06:ea:92:
         56:73:5e:33:3c:2d:4d:b0:1d:b6:03:8b:86:85:90:42:58:b7:
         19:54:2e:e6:4a:35:18:48:5c:81:08:f2:95:62:cc:a4:b1:08:
         f1:39:59:81:d7:03:48:cc:88:03:1e:78:0b:e7:c4:f1:8f:4c:
         56:95:c0:da:71:1d:4e:1d:09:ec:a9:26:00:7f:66:31:2a:52:
         f0:17:cd:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiu96jlelE1PlzPaLkx1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMmNlNjRjM2U2NWE4MjAyYTdjMWIxYjIwY2ExMWU0NWFl
NmQ1OGMwHhcNMjQwNjIzMTAwMTE0WhcNMjQwNjI0MTAwMTE0WjAzMTEwLwYDVQQD
EyhiZWVhYjI2ODEyODM0OTRkNGU3MDNkZTNjNTg0ZTdhZDQ1NWJmZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAO0He4nJcssvcaO4XbL8jDQyEcw
bw/AK7LqQq9yKe7J9Kh8aLmRfY1khVRKS11FHqbNIaIwM/AqNno+ti603apSwbRB
Om/Gt+fW0lnL0A86a06lo8wtnJpahYXXqgJKGMqWyypLF/J5JbPRSGVrE4CqcpAC
BPL33BPY1yTazxs0D5Dy0qOxuT6Qdmmch5YYJv/9ck7SJ+6VTAWyJoLPi78HVhbq
oBqChAoyLfGLrlOfTpcKGOWStFN/R+t97/XbYdqh3c53yy2Z+wdtGktQFgQJXLAs
Uy38woogwHnHnNuWjzMgEIS/TZ71M5Zs4DhFmYq0nkGwEfRUOMLTOWaI0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7qsmgSg0lNTnA948WE561FW/9fMB8GA1UdIwQY
MBaAFAws5kw+ZaggKnwbGyDKEeRa5tWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREN6bVRENWxxQ0FxZkJzYklNb1I1RnJtMVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YTAwYzItYmI4Ny00MGE3LWIxZTkt
NWM0Yjc2ZjQ4ZDUwLzEvREN6bVRENWxxQ0FxZkJzYklNb1I1RnJtMVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84YTAwYzItYmI4Ny00MGE3LWIxZTktNWM0Yjc2ZjQ4ZDUw
LzEvREN6bVRENWxxQ0FxZkJzYklNb1I1RnJtMVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozLpzHku
GLbS95ZKzel8lb+ICHBvBqXrW0QXVYBjI10hF3fKXQfS372bcvV+SUCmKFsdU69f
4pZIjl5TL8Nc9RM2dU5dUZ77qe1vuTD1I3P3A8VmgGsuwIYQnBHXb9sp5l5g/RZT
/3l3i4dXVGbeZacPZ1W2bu47WixyHUKLgmBqIQ8ZGWFYReX3iKwN+v/heH90ueSE
b/4z9KBG/Jg/jopJBryPrNVAGGwBy8CpZfvfBuqSVnNeMzwtTbAdtgOLhoWQQli3
GVQu5ko1GEhcgQjylWLMpLEI8TlZgdcDSMyIAx54C+fE8Y9MVpXA2nEdTh0J7Kkm
AH9mMSpS8BfN7g==
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:00:30 2024 by rpki-client on console-fra.rpki-client.org