Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          iNVJ/It4LX10VvA+C8e7e8GluD8Jig+pGetPSr9Erns=
Subject key identifier:   6A:9C:17:F7:A4:C4:80:8B:1F:2A:29:07:BA:7D:9B:D9:21:BE:18:71
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       019049433A89590FD217C501D64734C3E2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          108F
Signing time:             Mon 24 Jun 2024 08:01:00 +0000
Manifest this update:     Mon 24 Jun 2024 08:01:00 +0000
Manifest next update:     Tue 25 Jun 2024 08:01:00 +0000
Files and hashes:         1: 5Ce1LLmrppScdBgUzXOYPfMJVoI.roa (hash: 0ICYer0le2kY8XUPXoznDwLQzpgIThBqsxz/9edLPyk=)
                          2: Pr5icgp5i9wgKJ820epmj3xE3T4.roa (hash: /ZeiV3/i3wuSWX6eWaTx8vsS1pf5LBeexOpmnSn6WCM=)
                          3: _9wL0fuljVPtrADYR_sMmNzojrM.roa (hash: 387UkCF/ry9sdDxx906h4I2x6H15jWAEKkBa2NTkbh8=)
                          4: g9CPxbprGsI6kpi0B1EkUhba9Xo.roa (hash: RsS2uE+Pn46uhT7E+ZN0Ig21/HZvM8nCfD2n8Kncm2k=)
                          5: gVQc1Aj9LbsbNV6kZmGRvWvuuz0.roa (hash: eKb98j9pgCwGo0Tp6dReZcwQ4agigc1VvCGjdqpWy6I=)
                          6: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: A52xIk7zhZGwQt60i7iMPsV13M3KEWGHUK1dtgNwoAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:3a:89:59:0f:d2:17:c5:01:d6:47:34:c3:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Jun 24 08:01:00 2024 GMT
            Not After : Jun 25 08:01:00 2024 GMT
        Subject: CN=6a9c17f7a4c4808b1f2a2907ba7d9bd921be1871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c0:de:e9:06:28:83:34:81:f0:fd:57:ee:59:
                    95:6c:07:41:f0:7c:dc:e1:26:f5:a9:e7:8c:32:39:
                    d6:8e:70:96:7a:84:1c:96:50:ff:50:53:fc:39:02:
                    61:a1:7a:9c:ec:18:f4:46:7f:f3:be:1e:4a:fa:b3:
                    1a:44:28:6f:c9:31:6e:4b:4a:cb:5f:7d:93:34:62:
                    c5:54:c5:c4:ee:1c:02:e1:1c:a0:97:72:84:4b:25:
                    5c:c0:48:5d:f8:3f:ac:e1:b4:0f:e8:13:15:12:9e:
                    e5:f6:91:42:af:bd:2b:95:8c:81:77:e5:81:42:7b:
                    74:7d:21:5f:dd:11:ea:10:81:f7:ba:71:ff:96:df:
                    e6:ff:07:05:42:e7:d0:6e:d6:48:41:f3:08:03:8b:
                    98:10:a2:e7:28:07:b0:d9:7e:6f:82:d1:ac:25:fd:
                    dc:06:ec:fc:7d:62:a6:b6:d8:6b:a9:91:53:a3:61:
                    c8:dc:7a:ae:75:f3:88:92:76:b3:cb:7b:e1:01:66:
                    11:22:04:56:b5:af:34:1e:8d:02:4c:26:36:30:71:
                    d3:53:e8:ff:c3:d9:f0:d5:2f:6e:69:00:a8:e5:96:
                    83:83:92:e1:47:cc:a7:31:3c:3d:e7:34:7f:c2:b5:
                    ba:0c:7a:c5:98:a7:b2:50:b2:d5:8c:bd:9d:44:87:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:17:F7:A4:C4:80:8B:1F:2A:29:07:BA:7D:9B:D9:21:BE:18:71
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:db:7a:41:d1:34:35:b8:1d:ca:fe:0a:d0:c2:d2:a0:fe:
         6a:a0:ed:ad:a4:a8:7b:a5:f4:23:37:d0:49:72:9d:cc:74:f9:
         22:ae:3c:53:5f:a1:50:27:56:d8:dd:c8:21:07:62:0a:69:4e:
         e8:6f:a3:77:76:13:17:e8:c0:51:b5:87:98:78:03:5c:1e:31:
         22:c1:c5:c2:e6:c9:2d:0d:eb:36:8c:cb:f3:9b:7f:24:c4:6c:
         78:c1:32:55:62:91:5c:18:85:ee:83:fa:d9:0e:7b:fe:77:25:
         46:a0:b9:99:8a:e9:93:c8:33:f1:5b:0f:24:16:8b:66:35:b9:
         1c:8d:07:5d:bb:a5:cd:6e:c1:a1:fc:07:25:2f:7b:41:da:1f:
         47:47:25:b5:69:3d:4f:34:3a:40:08:46:54:03:d9:57:6c:39:
         6f:28:c8:77:a3:98:35:34:a8:b7:2e:80:95:0b:6b:ed:32:ab:
         ec:59:2c:55:8b:16:66:c5:f9:69:9c:36:be:80:0b:88:f2:f7:
         be:67:4a:45:32:67:20:1c:56:d9:aa:35:28:cf:c2:58:36:5c:
         5c:af:5e:5b:a8:3a:4a:c4:06:3c:a0:90:d1:cb:c3:5e:95:fc:
         7d:19:16:e0:a8:54:97:c4:50:6f:15:e5:8c:92:fb:fa:4e:a5:
         fa:a5:98:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJQzqJWQ/SF8UB1kc0w+LgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1
MTBhYTkwHhcNMjQwNjI0MDgwMTAwWhcNMjQwNjI1MDgwMTAwWjAzMTEwLwYDVQQD
Eyg2YTljMTdmN2E0YzQ4MDhiMWYyYTI5MDdiYTdkOWJkOTIxYmUxODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88De6QYogzSB8P1X7lmVbAdB8Hzc
4Sb1qeeMMjnWjnCWeoQcllD/UFP8OQJhoXqc7Bj0Rn/zvh5K+rMaRChvyTFuS0rL
X32TNGLFVMXE7hwC4Rygl3KESyVcwEhd+D+s4bQP6BMVEp7l9pFCr70rlYyBd+WB
Qnt0fSFf3RHqEIH3unH/lt/m/wcFQufQbtZIQfMIA4uYEKLnKAew2X5vgtGsJf3c
Buz8fWKmtthrqZFTo2HI3HqudfOIknazy3vhAWYRIgRWta80Ho0CTCY2MHHTU+j/
w9nw1S9uaQCo5ZaDg5LhR8ynMTw95zR/wrW6DHrFmKeyULLVjL2dRIcjHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqcF/ekxICLHyopB7p9m9khvhhxMB8GA1UdIwQY
MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt
M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3
LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASibbekHR
NDW4Hcr+CtDC0qD+aqDtraSoe6X0IzfQSXKdzHT5Iq48U1+hUCdW2N3IIQdiCmlO
6G+jd3YTF+jAUbWHmHgDXB4xIsHFwubJLQ3rNozL85t/JMRseMEyVWKRXBiF7oP6
2Q57/nclRqC5mYrpk8gz8VsPJBaLZjW5HI0HXbulzW7BofwHJS97QdofR0cltWk9
TzQ6QAhGVAPZV2w5byjId6OYNTSoty6AlQtr7TKr7FksVYsWZsX5aZw2voALiPL3
vmdKRTJnIBxW2ao1KM/CWDZcXK9eW6g6SsQGPKCQ0cvDXpX8fRkW4KhUl8RQbxXl
jJL7+k6l+qWY8A==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:21:52 2024 by rpki-client on console-fra.rpki-client.org