Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File:                     dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier:          S4EZ5U73KcYml8Taji2Bkat/4deO9kIOvECGnFCrRfU=
Subject key identifier:   0C:B3:58:07:29:18:B9:F2:99:75:61:0D:F2:FA:C0:7D:E4:F2:09:5C
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer:       /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial:       01901CA14915DEFA05E4CA26D22E92D22CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number:          0198
Signing time:             Sat 15 Jun 2024 16:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:50 +0000
Files and hashes:         1: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: 6ZT2zd3cvyh9G7EcufWMCd3C9QNNjebEXB2laVssQS8=)
                          2: wP0GIImcmmFio1P8kXWsboJ4Vjk.roa (hash: QVNKs1kVYe8dlARsVk3fqVJh0p/IiDoBNwUfFMRZkWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:49:15:de:fa:05:e4:ca:26:d2:2e:92:d2:2c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
        Validity
            Not Before: Jun 15 16:00:50 2024 GMT
            Not After : Jun 16 16:00:50 2024 GMT
        Subject: CN=0cb358072918b9f29975610df2fac07de4f2095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:e3:6c:69:01:d9:98:62:b4:7e:57:3f:76:
                    3d:17:09:ca:31:24:35:e5:33:b7:b6:9f:1b:ed:46:
                    7f:82:0f:90:f0:84:73:67:2e:c8:16:7b:4a:e4:53:
                    3e:bc:76:12:aa:7e:30:7a:c3:eb:b5:ed:4d:af:c9:
                    ca:19:b7:eb:07:4d:77:f2:77:aa:63:ec:3b:2d:20:
                    ff:29:77:e1:0c:a3:28:78:1e:c1:99:80:81:39:8d:
                    be:f6:11:3c:7a:29:5d:b1:3e:85:43:f7:b0:f0:44:
                    c0:70:3c:00:a3:57:7c:46:35:ad:49:a5:e1:6d:24:
                    f6:14:77:55:5d:5e:fb:bf:57:c6:01:a4:ac:22:f9:
                    2a:f6:df:21:23:a8:0e:33:bc:42:f0:d4:5f:34:b5:
                    9d:f9:e8:33:66:5a:46:d4:5c:20:40:f4:d8:1b:40:
                    94:9b:0a:32:6f:53:b3:c5:1d:bb:b7:1b:ed:1d:35:
                    37:d0:f3:4d:ba:3d:fa:9b:b9:3e:4d:12:56:96:15:
                    f9:1f:99:60:1b:fc:24:f9:32:9b:c3:9b:e9:bf:fe:
                    95:61:be:f2:45:fd:36:62:06:69:77:aa:8c:04:9b:
                    eb:89:76:d3:d3:11:96:42:a9:95:f0:39:43:9f:03:
                    1a:28:3d:f6:f7:25:61:36:ea:dd:10:e9:8e:10:82:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B3:58:07:29:18:B9:F2:99:75:61:0D:F2:FA:C0:7D:E4:F2:09:5C
            X509v3 Authority Key Identifier:
                keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:6d:01:2c:8a:25:fe:19:be:da:7a:22:2e:02:e0:f5:cb:
         2f:f0:f5:ac:7f:24:86:c3:16:73:23:09:48:6d:da:97:29:07:
         07:aa:af:78:4f:97:2e:21:a1:17:05:e0:c2:4e:33:74:84:64:
         32:cb:b3:88:b1:8f:c0:60:33:73:8d:70:bd:c4:fd:a4:25:de:
         3a:5e:d5:14:78:ac:68:1f:46:5f:30:96:89:43:de:9b:6c:37:
         8a:e5:1f:f5:bf:fd:93:98:02:2e:fa:ef:97:c0:51:c9:b1:ec:
         18:ea:60:0c:47:bf:df:62:56:d1:9c:e2:a1:27:93:7c:4b:39:
         c4:d4:b7:4c:7a:68:33:b1:4b:06:4c:f4:f0:72:70:10:47:dc:
         fc:e8:28:f2:91:2f:47:1f:22:df:b2:b2:6f:b5:ce:e1:39:23:
         5e:d4:a9:a3:da:06:e6:f4:d4:a2:91:5c:9c:3d:9d:c3:cd:a8:
         3f:5d:77:56:1d:ae:af:0e:ea:73:df:5d:a5:a3:75:a1:74:5e:
         6c:3d:6b:26:2b:6d:00:c1:c1:c8:7a:a5:e3:a1:22:48:92:f3:
         40:6c:42:80:15:22:ea:72:d0:93:f1:86:1d:d6:b9:f8:63:18:
         b1:69:fa:a0:87:1b:47:b3:14:ae:79:16:92:74:83:da:f5:36:
         d9:9d:14:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoUkV3voF5Mom0i6S0iytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjQwNjE1MTYwMDUwWhcNMjQwNjE2MTYwMDUwWjAzMTEwLwYDVQQD
EygwY2IzNTgwNzI5MThiOWYyOTk3NTYxMGRmMmZhYzA3ZGU0ZjIwOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdfjbGkB2ZhitH5XP3Y9FwnKMSQ1
5TO3tp8b7UZ/gg+Q8IRzZy7IFntK5FM+vHYSqn4wesPrte1Nr8nKGbfrB0138neq
Y+w7LSD/KXfhDKMoeB7BmYCBOY2+9hE8eildsT6FQ/ew8ETAcDwAo1d8RjWtSaXh
bST2FHdVXV77v1fGAaSsIvkq9t8hI6gOM7xC8NRfNLWd+egzZlpG1FwgQPTYG0CU
mwoyb1OzxR27txvtHTU30PNNuj36m7k+TRJWlhX5H5lgG/wk+TKbw5vpv/6VYb7y
Rf02YgZpd6qMBJvriXbT0xGWQqmV8DlDnwMaKD329yVhNurdEOmOEIJpqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyzWAcpGLnymXVhDfL6wH3k8glcMB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWttASyK
Jf4Zvtp6Ii4C4PXLL/D1rH8khsMWcyMJSG3alykHB6qveE+XLiGhFwXgwk4zdIRk
MsuziLGPwGAzc41wvcT9pCXeOl7VFHisaB9GXzCWiUPem2w3iuUf9b/9k5gCLvrv
l8BRybHsGOpgDEe/32JW0ZzioSeTfEs5xNS3THpoM7FLBkz08HJwEEfc/Ogo8pEv
Rx8i37Kyb7XO4TkjXtSpo9oG5vTUopFcnD2dw82oP113Vh2urw7qc99dpaN1oXRe
bD1rJittAMHByHql46EiSJLzQGxCgBUi6nLQk/GGHda5+GMYsWn6oIcbR7MUrnkW
knSD2vU22Z0UTg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:11:40 2024 by rpki-client on console-ams.rpki-client.org