Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File:                     _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier:          Z9+YTlcisBbLvgWtttsJ3/CDGLzgkbJ6LYF7JANLAxs=
Subject key identifier:   BE:10:64:F9:57:19:9C:F5:F8:34:1A:8B:54:1D:96:4B:95:20:53:CE
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer:       /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial:       01901E90133FA58B7AF8553CC793C45DE0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number:          0E47
Signing time:             Sun 16 Jun 2024 01:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:16 +0000
Files and hashes:         1: QoQI1pFS1VMnrjK34JQFtBdQXOg.roa (hash: bDQVJMJITgg1CpPAc51tdKeFsiJe2EqgtEIeXqCStog=)
                          2: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: mrY7TV5N2B2w9jm2+i5MhGn8tm/g0wVijpw5NGIhsQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:13:3f:a5:8b:7a:f8:55:3c:c7:93:c4:5d:e0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
        Validity
            Not Before: Jun 16 01:01:16 2024 GMT
            Not After : Jun 17 01:01:16 2024 GMT
        Subject: CN=be1064f957199cf5f8341a8b541d964b952053ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:9a:97:a9:d5:18:39:01:7a:d3:ee:b2:e5:
                    60:80:b8:ea:79:c7:4d:56:39:43:ed:a4:34:ef:34:
                    8e:97:06:1f:cf:41:be:d7:27:fe:09:d0:f8:63:32:
                    ae:33:46:4c:ad:7a:ca:fc:c2:31:cf:07:d8:bc:fd:
                    5d:b5:97:85:d9:8e:b7:95:66:6a:34:84:c0:c4:6d:
                    c4:a5:6a:ed:4a:55:fa:96:c7:ec:8b:63:c4:e0:f1:
                    5b:35:c4:e4:85:1c:17:dc:a3:4e:b3:36:b2:09:43:
                    04:b5:73:a7:c9:f6:32:f5:2a:54:5e:53:88:a6:27:
                    ee:45:31:01:8a:e5:1c:e8:da:8a:10:54:e9:75:18:
                    b1:ab:ce:2b:16:e7:36:f1:77:b7:82:78:71:af:00:
                    40:50:e8:7d:83:d6:c8:ea:46:09:1d:48:5c:e2:58:
                    29:0f:73:75:cf:01:8e:f4:ac:f8:d3:7d:47:f5:df:
                    cf:e8:5d:e6:d4:a0:4a:54:87:51:e3:13:8d:c2:da:
                    ec:f6:1f:e5:07:bc:4a:61:06:64:9d:7e:a3:a1:ed:
                    35:8f:4c:31:1c:97:68:ff:5d:44:25:98:2d:08:36:
                    3b:7d:00:98:d0:7e:0c:f5:40:a2:6e:0f:ad:d3:9c:
                    44:e5:d3:25:8b:33:ae:3f:b5:a5:ce:d0:1f:7a:e4:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:10:64:F9:57:19:9C:F5:F8:34:1A:8B:54:1D:96:4B:95:20:53:CE
            X509v3 Authority Key Identifier:
                keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:42:5f:38:16:40:79:05:d2:c2:f4:18:65:c7:cf:59:b4:
         03:0d:ba:24:fc:46:ca:f5:f9:7d:e4:8e:83:ff:fe:f2:c8:22:
         f9:0e:0d:2b:bc:f3:fc:6f:0c:51:33:14:b5:54:38:e0:32:f7:
         4c:2f:33:f2:fa:f7:dc:df:88:a0:60:c7:57:57:1b:62:59:e8:
         48:a4:77:fe:a5:33:c2:c8:e9:40:52:6e:1e:59:6a:1f:2c:7f:
         b0:d4:3c:29:09:54:33:7d:fe:f4:5c:69:96:59:a8:44:26:df:
         c6:e7:f1:2c:40:cf:08:dd:3e:e4:1c:bd:44:4b:bc:98:9e:c9:
         b0:60:c7:0f:ea:de:58:09:c7:93:f9:3c:12:0d:78:05:5e:b8:
         ce:68:b1:ff:df:03:f0:9c:7d:59:9a:2b:2b:46:e0:6a:98:37:
         6d:b5:d0:34:67:d1:c2:41:7d:2c:a5:bf:e7:6c:cf:fb:22:08:
         5b:8a:4e:87:75:13:3b:f4:5d:32:09:a7:9c:53:a8:72:68:5c:
         c6:ea:1f:a9:95:a6:25:7c:6d:9e:d1:2a:ad:be:48:d4:c5:8d:
         40:e2:e7:d6:c5:e8:c9:3e:f9:65:d3:b9:1d:28:de:dc:ef:e9:
         9c:67:c6:fd:69:b6:29:50:c2:08:6f:72:67:fa:31:33:5f:63:
         a6:68:d8:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekBM/pYt6+FU8x5PEXeDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk
NmIzOTAwHhcNMjQwNjE2MDEwMTE2WhcNMjQwNjE3MDEwMTE2WjAzMTEwLwYDVQQD
EyhiZTEwNjRmOTU3MTk5Y2Y1ZjgzNDFhOGI1NDFkOTY0Yjk1MjA1M2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxueal6nVGDkBetPusuVggLjqecdN
VjlD7aQ07zSOlwYfz0G+1yf+CdD4YzKuM0ZMrXrK/MIxzwfYvP1dtZeF2Y63lWZq
NITAxG3EpWrtSlX6lsfsi2PE4PFbNcTkhRwX3KNOszayCUMEtXOnyfYy9SpUXlOI
pifuRTEBiuUc6NqKEFTpdRixq84rFuc28Xe3gnhxrwBAUOh9g9bI6kYJHUhc4lgp
D3N1zwGO9Kz4031H9d/P6F3m1KBKVIdR4xONwtrs9h/lB7xKYQZknX6joe01j0wx
HJdo/11EJZgtCDY7fQCY0H4M9UCibg+t05xE5dMlizOuP7WlztAfeuTXcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4QZPlXGZz1+DQai1QdlkuVIFPOMB8GA1UdIwQY
MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt
Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4
LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb59CXzgW
QHkF0sL0GGXHz1m0Aw26JPxGyvX5feSOg//+8sgi+Q4NK7zz/G8MUTMUtVQ44DL3
TC8z8vr33N+IoGDHV1cbYlnoSKR3/qUzwsjpQFJuHllqHyx/sNQ8KQlUM33+9Fxp
llmoRCbfxufxLEDPCN0+5By9REu8mJ7JsGDHD+reWAnHk/k8Eg14BV64zmix/98D
8Jx9WZorK0bgapg3bbXQNGfRwkF9LKW/52zP+yIIW4pOh3UTO/RdMgmnnFOocmhc
xuofqZWmJXxtntEqrb5I1MWNQOLn1sXoyT75ZdO5HSje3O/pnGfG/Wm2KVDCCG9y
Z/oxM19jpmjYmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:04 2024 by rpki-client on console-fra.rpki-client.org