Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
File:                     0phnd6RO0JQPKaeVx19Fpi9EuzM.mft (raw, json)
Hash identifier:          jqtYt7xD0VFq3GIC+rXlTdodSfuv83jYxyReYtAHBl0=
Subject key identifier:   FC:DC:7A:D1:37:93:5D:F5:A8:84:2B:11:7E:34:34:6C:0B:42:CB:0F
Authority key identifier: D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
Certificate issuer:       /CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Certificate serial:       01901DED24090EE674DBCA1F3F29BA1DE695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
Manifest number:          01B0
Signing time:             Sat 15 Jun 2024 22:03:18 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:18 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:18 +0000
Files and hashes:         1: 0phnd6RO0JQPKaeVx19Fpi9EuzM.crl (hash: WV0by8N6OcJ2godtMkBAqCk06XlinDx7EvmWzFFWa0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:24:09:0e:e6:74:db:ca:1f:3f:29:ba:1d:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2986777a44ed0940f29a795c75f45a62f44bb33
        Validity
            Not Before: Jun 15 22:03:18 2024 GMT
            Not After : Jun 16 22:03:18 2024 GMT
        Subject: CN=fcdc7ad137935df5a8842b117e34346c0b42cb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:b8:b7:41:2d:bc:09:33:3e:31:88:81:2e:
                    45:e7:52:a8:af:bb:a3:1b:62:cb:b3:5f:c1:72:d3:
                    d2:ae:cf:88:9d:b4:16:80:ed:6c:a1:40:26:b5:20:
                    d3:02:6f:17:e1:6d:4f:36:71:fc:ce:1c:79:4a:17:
                    29:52:91:ae:80:06:a1:6a:aa:cc:2d:36:7d:ca:76:
                    ad:b8:e2:5b:64:b3:f7:b6:6f:e4:75:06:8c:97:3f:
                    05:ac:2d:00:c2:cb:62:ec:da:54:cd:a8:92:6c:f5:
                    95:fd:ce:da:aa:70:92:ad:6c:bb:d5:9e:59:72:55:
                    85:2d:a8:53:63:e7:a5:5c:8f:68:76:c5:42:9c:ef:
                    1c:ab:6e:0d:1d:eb:7c:39:d8:76:23:09:df:ae:5d:
                    25:cd:02:80:78:70:e4:ca:ec:68:36:26:de:15:83:
                    25:9e:df:8d:a9:68:f2:d1:26:f6:0a:8c:69:67:8c:
                    6f:99:a0:f4:64:45:63:68:ac:14:08:ec:25:64:36:
                    02:ba:da:e4:75:88:5e:c5:b3:7a:03:1a:50:81:ce:
                    48:0f:4a:89:21:7a:49:55:5e:bd:6e:fc:a7:34:49:
                    92:ed:9d:25:a7:0e:1c:5b:c8:9d:3d:e5:69:ff:53:
                    5f:a2:a1:2c:2d:52:dc:ef:88:7c:e5:5d:7e:1a:c2:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:7A:D1:37:93:5D:F5:A8:84:2B:11:7E:34:34:6C:0B:42:CB:0F
            X509v3 Authority Key Identifier:
                keyid:D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:7c:d6:35:70:f9:20:9f:ad:03:2a:71:2f:3c:69:5f:e9:
         f5:08:0d:4b:f4:5d:b8:e7:22:c7:01:d4:4b:b0:e1:29:41:ad:
         b5:8e:15:25:0b:9c:33:45:9c:a3:3c:93:43:ba:16:32:f1:b2:
         9d:44:4b:64:72:5b:03:33:6f:0c:7c:ca:a7:80:26:52:ac:64:
         0c:38:df:1f:9a:04:ed:48:b4:31:f6:ca:98:66:b4:1e:23:12:
         af:97:de:61:81:00:81:03:11:33:ab:09:3d:cc:f0:65:1a:e4:
         2d:cf:ab:61:87:7f:b1:a1:08:95:30:5a:17:22:5a:25:15:46:
         84:b3:6a:d5:aa:f8:30:c4:72:7a:02:86:51:35:7d:36:50:74:
         ed:2b:33:18:3a:9d:99:47:1f:b3:d3:df:45:0f:32:d9:b3:2b:
         6d:dd:aa:ec:d2:74:d3:56:63:4f:69:ed:fb:b5:83:32:73:13:
         76:ff:6f:a7:1a:83:be:c5:86:de:2d:fd:a9:43:b2:1a:e2:8a:
         03:07:03:50:63:32:3f:99:c0:d5:ca:ca:50:7e:02:9a:05:11:
         5a:3b:9b:8f:d0:ca:c3:11:be:b5:cb:76:4a:a9:7d:fb:75:c2:
         c6:a3:00:b2:e6:2c:89:5a:7e:2d:cb:7e:5c:32:b3:3b:3a:6a:
         03:f5:b9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7SQJDuZ028ofPym6HeaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOTg2Nzc3YTQ0ZWQwOTQwZjI5YTc5NWM3NWY0NWE2MmY0
NGJiMzMwHhcNMjQwNjE1MjIwMzE4WhcNMjQwNjE2MjIwMzE4WjAzMTEwLwYDVQQD
EyhmY2RjN2FkMTM3OTM1ZGY1YTg4NDJiMTE3ZTM0MzQ2YzBiNDJjYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKy4t0EtvAkzPjGIgS5F51Kor7uj
G2LLs1/BctPSrs+InbQWgO1soUAmtSDTAm8X4W1PNnH8zhx5ShcpUpGugAahaqrM
LTZ9ynatuOJbZLP3tm/kdQaMlz8FrC0Awsti7NpUzaiSbPWV/c7aqnCSrWy71Z5Z
clWFLahTY+elXI9odsVCnO8cq24NHet8Odh2Iwnfrl0lzQKAeHDkyuxoNibeFYMl
nt+NqWjy0Sb2CoxpZ4xvmaD0ZEVjaKwUCOwlZDYCutrkdYhexbN6AxpQgc5ID0qJ
IXpJVV69bvynNEmS7Z0lpw4cW8idPeVp/1NfoqEsLVLc74h85V1+GsKzFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzcetE3k131qIQrEX40NGwLQssPMB8GA1UdIwQY
MBaAFNKYZ3ekTtCUDymnlcdfRaYvRLszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHBobmQ2Uk8wSlFQS2FlVngxOUZwaTlFdXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85NzczZGMtZDhlOC00ODBkLTk4ZjIt
YzAwY2JjMTQ5MmJmLzEvMHBobmQ2Uk8wSlFQS2FlVngxOUZwaTlFdXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85NzczZGMtZDhlOC00ODBkLTk4ZjItYzAwY2JjMTQ5MmJm
LzEvMHBobmQ2Uk8wSlFQS2FlVngxOUZwaTlFdXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOl81jVw
+SCfrQMqcS88aV/p9QgNS/RduOcixwHUS7DhKUGttY4VJQucM0WcozyTQ7oWMvGy
nURLZHJbAzNvDHzKp4AmUqxkDDjfH5oE7Ui0MfbKmGa0HiMSr5feYYEAgQMRM6sJ
PczwZRrkLc+rYYd/saEIlTBaFyJaJRVGhLNq1ar4MMRyegKGUTV9NlB07SszGDqd
mUcfs9PfRQ8y2bMrbd2q7NJ001ZjT2nt+7WDMnMTdv9vpxqDvsWG3i39qUOyGuKK
AwcDUGMyP5nA1crKUH4CmgURWjubj9DKwxG+tct2Sql9+3XCxqMAsuYsiVp+Lct+
XDKzOzpqA/W5+A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:02:18 2024 by rpki-client on console-ams.rpki-client.org