Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File:                     Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier:          M6rGmvUVSPfbsHL6Jk+PRcpShoUF594OPUlW2+4kzow=
Subject key identifier:   5B:EF:59:AD:E5:AA:AD:51:A0:4B:55:57:55:90:E8:CB:F7:E5:37:AA
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer:       /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial:       019041C0921ED4C9E114E496A9CA02A456A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number:          0558
Signing time:             Sat 22 Jun 2024 21:00:57 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:57 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:57 +0000
Files and hashes:         1: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: 8h0Wkgg083AIcJE86kl0klAxQgDAEyS5whW6NN997v8=)
                          2: WK5yiD2YlAAjSJJ6wlptVmV6bHQ.roa (hash: jrzCgAmbVklL+jStYD3i1DE2ygFik+CsgeEHH5EzsI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:92:1e:d4:c9:e1:14:e4:96:a9:ca:02:a4:56:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Validity
            Not Before: Jun 22 21:00:57 2024 GMT
            Not After : Jun 23 21:00:57 2024 GMT
        Subject: CN=5bef59ade5aaad51a04b55575590e8cbf7e537aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:df:ca:91:7d:52:3a:22:d3:21:a3:cb:95:
                    ab:01:72:fb:86:4f:bb:97:2c:a1:36:cc:67:06:a0:
                    c6:6a:1a:06:16:1f:b6:ba:db:74:83:2d:05:e6:9f:
                    54:7b:d1:44:c2:d9:44:66:c5:73:36:5e:07:8d:17:
                    40:24:0b:7f:04:9b:7e:f0:23:69:b4:6a:ee:a5:c8:
                    ae:79:98:5a:d5:fb:c7:df:c4:29:69:ef:98:00:b1:
                    a7:af:9a:7c:0e:34:cc:40:d5:69:e7:69:84:fe:89:
                    9e:8e:b4:7d:4b:6a:6c:23:22:dc:3f:dd:ac:0f:f6:
                    ed:9d:bc:4e:39:5d:41:a2:5c:1c:71:0c:f3:36:04:
                    b7:c4:08:71:b5:69:5c:42:0e:a1:c5:a8:bb:92:29:
                    4c:64:b9:55:a4:55:ed:7e:a6:3f:31:fd:d0:dd:7f:
                    2b:9b:60:58:53:5c:87:3f:c3:dc:31:a8:46:59:b1:
                    4a:57:4f:eb:85:ce:75:0a:65:6c:16:5c:7d:b1:1f:
                    ad:9e:89:f1:3f:2d:a6:3b:64:01:cd:da:d3:62:8d:
                    fa:65:71:6d:e4:9d:e9:96:fd:39:c2:3b:e0:7c:14:
                    ca:67:fb:75:6b:be:1f:41:ee:51:41:4e:10:65:dd:
                    cc:ed:12:ab:e0:11:27:e8:81:9a:73:e1:6f:52:03:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EF:59:AD:E5:AA:AD:51:A0:4B:55:57:55:90:E8:CB:F7:E5:37:AA
            X509v3 Authority Key Identifier:
                keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:90:ac:80:af:78:75:2a:d1:08:b6:35:7f:35:9a:19:a2:24:
         b6:9b:1b:c7:29:b9:74:c6:08:81:2a:31:fb:b4:ab:20:46:02:
         e7:dd:76:5c:75:1a:4d:cf:9c:81:85:19:7a:4d:16:bc:a0:e5:
         8c:86:a0:49:1e:00:97:d9:e4:b6:1d:47:17:6f:90:af:d8:14:
         d8:66:b4:93:cf:a4:eb:da:eb:2a:a3:5b:05:ee:6c:48:bd:99:
         21:6b:7e:55:5b:33:27:57:34:b0:61:6f:40:6d:82:d4:bb:ed:
         1e:fc:89:59:49:60:59:23:f2:b8:76:f1:ab:31:fe:b9:8d:10:
         74:03:31:a2:7e:89:7d:5a:c2:03:db:94:8a:15:06:7b:47:b0:
         fc:51:b1:32:45:dc:e8:78:3b:d1:32:41:80:67:ed:bd:53:2e:
         cd:23:9d:ca:3e:78:a1:60:13:e9:fb:06:a5:d6:1e:13:d7:e3:
         13:54:49:66:ae:c0:5e:f2:a6:db:85:3b:23:5c:46:32:22:e1:
         58:02:a4:6f:7e:13:df:71:29:72:67:0d:31:a7:9d:d0:4e:cf:
         3f:b7:33:0e:cd:89:ab:8e:d4:72:f5:36:00:f7:35:77:a4:4f:
         93:22:4c:21:db:65:1b:0b:4d:89:d2:3b:a8:2b:e8:f3:8f:76:
         a5:1a:a3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBwJIe1MnhFOSWqcoCpFapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOGQ0ZDc0ZjI0MTVhMzU3ZmU3NGRiZTA0MGYwMTU0ZjFk
YWNmN2MwHhcNMjQwNjIyMjEwMDU3WhcNMjQwNjIzMjEwMDU3WjAzMTEwLwYDVQQD
Eyg1YmVmNTlhZGU1YWFhZDUxYTA0YjU1NTc1NTkwZThjYmY3ZTUzN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k/fypF9Ujoi0yGjy5WrAXL7hk+7
lyyhNsxnBqDGahoGFh+2utt0gy0F5p9Ue9FEwtlEZsVzNl4HjRdAJAt/BJt+8CNp
tGrupciueZha1fvH38Qpae+YALGnr5p8DjTMQNVp52mE/omejrR9S2psIyLcP92s
D/btnbxOOV1BolwccQzzNgS3xAhxtWlcQg6hxai7kilMZLlVpFXtfqY/Mf3Q3X8r
m2BYU1yHP8PcMahGWbFKV0/rhc51CmVsFlx9sR+tnonxPy2mO2QBzdrTYo36ZXFt
5J3plv05wjvgfBTKZ/t1a74fQe5RQU4QZd3M7RKr4BEn6IGac+FvUgNyGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvvWa3lqq1RoEtVV1WQ6Mv35TeqMB8GA1UdIwQY
MBaAFDKNTXTyQVo1f+dNvgQPAVTx2s98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUt
OGE4NGJmZDhmMDk5LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lNzM4YzktYzgyMS00MzRlLWEyNmUtOGE4NGJmZDhmMDk5
LzEvTW8xTmRQSkJXalZfNTAyLUJBOEJWUEhhejN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZCsgK94
dSrRCLY1fzWaGaIktpsbxym5dMYIgSox+7SrIEYC5912XHUaTc+cgYUZek0WvKDl
jIagSR4Al9nkth1HF2+Qr9gU2Ga0k8+k69rrKqNbBe5sSL2ZIWt+VVszJ1c0sGFv
QG2C1LvtHvyJWUlgWSPyuHbxqzH+uY0QdAMxon6JfVrCA9uUihUGe0ew/FGxMkXc
6Hg70TJBgGftvVMuzSOdyj54oWAT6fsGpdYeE9fjE1RJZq7AXvKm24U7I1xGMiLh
WAKkb34T33EpcmcNMaed0E7PP7czDs2Jq47UcvU2APc1d6RPkyJMIdtlGwtNidI7
qCvo8492pRqjEg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:36:29 2024 by rpki-client on console-ams.rpki-client.org