Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
File:                     SkB8o6avRpoxu1IDD82RHJHmbBs.mft (raw, json)
Hash identifier:          UPXLuqEELbWxmwcO45F/ZQt7/4Q4Zxz4E8C7hEX5WrY=
Subject key identifier:   DC:A3:83:A4:1D:8B:4F:E7:2D:04:68:75:0E:8A:0B:EA:DD:A7:F3:75
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Certificate issuer:       /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial:       01901BFD84F14020D71143EC2D5AD20853A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
Manifest number:          0DB9
Signing time:             Sat 15 Jun 2024 13:01:57 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:57 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:57 +0000
Files and hashes:         1: GbHIz2VdkoUXht0aGwbl1MnQh8g.roa (hash: BIQHwKOnt3zKyZLMxgIsXPPleZ3KXbpBFVYTHJyHZMI=)
                          2: SkB8o6avRpoxu1IDD82RHJHmbBs.crl (hash: NIaYbikMB0sDXpiVQxZHXBZkPl1OoePsqR/zzYa6wnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:84:f1:40:20:d7:11:43:ec:2d:5a:d2:08:53:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
        Validity
            Not Before: Jun 15 13:01:57 2024 GMT
            Not After : Jun 16 13:01:57 2024 GMT
        Subject: CN=dca383a41d8b4fe72d0468750e8a0beadda7f375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:e4:3a:7d:bb:40:0f:33:29:9a:ef:a5:d5:
                    d4:28:77:68:ee:8b:25:3d:47:ad:94:1d:35:9a:c0:
                    1d:20:0d:2a:94:45:a3:95:af:c0:b7:b0:23:4f:d7:
                    07:c9:49:fd:aa:0b:47:04:71:37:0e:d5:52:d1:a1:
                    aa:87:82:31:fe:01:51:37:4c:00:49:84:12:2e:5c:
                    2d:9f:01:c5:07:49:28:ce:3c:37:ed:ad:c3:2b:8f:
                    86:a1:4d:f5:e8:c7:bd:7e:ca:c9:1e:03:73:08:c5:
                    3e:b0:ae:92:3d:6c:fa:de:09:e5:b9:5b:5c:24:e5:
                    25:5b:2e:8e:06:fb:e2:3e:9e:1b:91:d1:b8:1c:c4:
                    43:36:4a:07:be:3e:55:35:16:bf:b9:ed:c7:26:48:
                    e9:e4:35:98:52:bc:21:84:27:d8:a9:73:f7:4a:7f:
                    f8:09:fb:95:b2:ea:ad:73:4e:c7:04:05:f6:49:a5:
                    6f:2f:d0:b1:c5:da:95:16:65:25:35:83:13:f6:ec:
                    ad:cd:06:2b:43:e4:68:d8:b8:05:33:d2:32:47:e4:
                    39:db:fd:ac:10:00:d5:d8:a6:58:13:e4:6b:b3:66:
                    63:af:9d:0b:7f:ab:f7:50:dd:c9:da:c0:30:11:f5:
                    0b:17:92:20:3d:77:6d:54:b1:c8:9d:ce:42:c5:d7:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A3:83:A4:1D:8B:4F:E7:2D:04:68:75:0E:8A:0B:EA:DD:A7:F3:75
            X509v3 Authority Key Identifier:
                keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:ba:22:cf:6b:d0:d5:71:63:df:73:72:7c:f8:32:82:31:
         d4:ff:c0:1f:91:ef:60:c4:e3:32:9f:1d:1c:b4:92:1b:f6:b8:
         3b:5e:b8:49:b0:c7:54:0b:0c:8c:87:91:10:1c:02:57:38:9b:
         e1:a6:d4:f0:29:65:ee:c8:7a:a3:f4:e2:a8:80:eb:59:15:ed:
         60:05:ff:df:3e:d2:a8:ca:0d:03:12:ce:d7:cd:9f:b1:70:0d:
         04:30:8b:b5:f9:5a:62:69:3e:a6:a9:41:67:e0:77:08:ec:4b:
         c8:fb:ce:45:0c:85:63:6d:6c:56:8f:1f:70:af:fe:ff:76:c8:
         b1:16:a5:66:a7:27:39:b0:6f:81:bf:0a:75:89:d6:2e:2c:ca:
         48:89:af:72:b8:7a:64:6d:7a:60:a7:28:74:7a:10:54:cf:f8:
         41:1e:81:56:8b:5e:4c:02:54:cf:22:d5:e7:a6:21:1c:d6:01:
         5e:63:8e:e5:8e:29:c5:10:be:a6:02:9e:d1:f8:02:e4:e2:ca:
         65:46:0f:bc:fc:41:d0:79:2b:10:61:53:95:a5:4a:07:67:f8:
         42:40:25:81:fe:ea:58:7a:25:a1:ea:b2:96:3c:ee:e7:51:52:
         76:68:9a:f9:9c:d8:53:ed:c4:29:7f:ea:f3:e6:da:25:c7:67:
         f8:7e:b7:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/YTxQCDXEUPsLVrSCFOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDA3Y2EzYTZhZjQ2OWEzMWJiNTIwMzBmY2Q5MTFjOTFl
NjZjMWIwHhcNMjQwNjE1MTMwMTU3WhcNMjQwNjE2MTMwMTU3WjAzMTEwLwYDVQQD
EyhkY2EzODNhNDFkOGI0ZmU3MmQwNDY4NzUwZThhMGJlYWRkYTdmMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbkOn27QA8zKZrvpdXUKHdo7osl
PUetlB01msAdIA0qlEWjla/At7AjT9cHyUn9qgtHBHE3DtVS0aGqh4Ix/gFRN0wA
SYQSLlwtnwHFB0kozjw37a3DK4+GoU316Me9fsrJHgNzCMU+sK6SPWz63gnluVtc
JOUlWy6OBvviPp4bkdG4HMRDNkoHvj5VNRa/ue3HJkjp5DWYUrwhhCfYqXP3Sn/4
CfuVsuqtc07HBAX2SaVvL9CxxdqVFmUlNYMT9uytzQYrQ+Ro2LgFM9IyR+Q52/2s
EADV2KZYE+Rrs2Zjr50Lf6v3UN3J2sAwEfULF5IgPXdtVLHInc5CxdfS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyjg6Qdi0/nLQRodQ6KC+rdp/N1MB8GA1UdIwQY
MBaAFEpAfKOmr0aaMbtSAw/NkRyR5mwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tCOG82YXZScG94dTFJREQ4MlJISkhtYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kMjgzNDEtMTFmYS00M2Y3LTg3Mjkt
NGNkODFlOWY4Y2JhLzEvU2tCOG82YXZScG94dTFJREQ4MlJISkhtYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kMjgzNDEtMTFmYS00M2Y3LTg3MjktNGNkODFlOWY4Y2Jh
LzEvU2tCOG82YXZScG94dTFJREQ4MlJISkhtYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEe6Is9r
0NVxY99zcnz4MoIx1P/AH5HvYMTjMp8dHLSSG/a4O164SbDHVAsMjIeREBwCVzib
4abU8Cll7sh6o/TiqIDrWRXtYAX/3z7SqMoNAxLO182fsXANBDCLtflaYmk+pqlB
Z+B3COxLyPvORQyFY21sVo8fcK/+/3bIsRalZqcnObBvgb8KdYnWLizKSImvcrh6
ZG16YKcodHoQVM/4QR6BVoteTAJUzyLV56YhHNYBXmOO5Y4pxRC+pgKe0fgC5OLK
ZUYPvPxB0HkrEGFTlaVKB2f4QkAlgf7qWHoloeqyljzu51FSdmia+ZzYU+3EKX/q
8+baJcdn+H63kg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:32 2024 by rpki-client on console-fra.rpki-client.org