Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File:                     0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier:          FWcfzwOtN8lZwZKMT8ZaLh6JlgdNu4JIF9mVTV/AwrY=
Subject key identifier:   BA:97:03:98:03:88:60:C9:30:F3:1D:FC:1E:34:39:4F:E4:96:79:9F
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer:       /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial:       01901EFD7F9A448DD873557F7613BE4C926D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:48 +0000
Files and hashes:         1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: J3K9SI+2tBQvXTppZYUBJKGIAN0bBiyUnNTFJ+oMwLs=)
                          2: oBZScnPzPyn4mq6IFcKdClgYz38.roa (hash: pVwvDQEVsu4WgLnpJCQiI52hMHSu6bFXi55IoI/iN8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:7f:9a:44:8d:d8:73:55:7f:76:13:be:4c:92:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
        Validity
            Not Before: Jun 16 03:00:48 2024 GMT
            Not After : Jun 17 03:00:48 2024 GMT
        Subject: CN=ba970398038860c930f31dfc1e34394fe496799f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:97:fc:dc:f5:b4:bf:2e:04:82:4e:86:11:
                    48:de:a4:86:a0:34:f6:03:de:3f:9a:5a:75:0f:c9:
                    9f:56:9a:97:7d:67:64:74:9c:42:94:ea:a9:59:fb:
                    c9:f7:ce:b5:86:17:7c:ef:8e:50:66:c0:35:a3:05:
                    e7:0a:50:9d:cd:54:13:d3:41:72:8c:54:b0:83:fe:
                    90:8c:0a:5f:55:da:44:42:6a:64:e8:6d:02:7a:ee:
                    e9:f0:a1:ce:a9:30:2b:69:0a:c7:93:de:b8:d0:ee:
                    ec:45:11:25:8e:bc:5b:8a:79:e6:ce:9b:14:93:69:
                    0f:d2:17:87:f4:c6:2e:43:d0:6d:47:56:ca:d0:da:
                    a4:36:48:bb:71:66:05:f3:c6:2b:42:39:7a:82:6c:
                    37:05:26:e1:50:3a:0b:f0:35:f4:56:fc:93:61:93:
                    e2:52:ff:b9:28:4a:d3:8f:c8:93:86:a5:f6:ec:53:
                    3c:eb:ed:61:e1:1b:0a:e5:08:ff:27:76:ec:67:7d:
                    fd:01:81:21:0b:80:70:fe:53:72:97:90:45:00:61:
                    0e:47:60:3e:a4:35:18:c8:ec:16:84:6a:99:ab:49:
                    0b:f8:f1:1f:91:c4:4c:bc:f3:a8:43:d7:a2:50:42:
                    da:7b:1f:89:db:bd:ac:a7:cb:f8:19:cb:b6:c0:d2:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:97:03:98:03:88:60:C9:30:F3:1D:FC:1E:34:39:4F:E4:96:79:9F
            X509v3 Authority Key Identifier:
                keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:3c:07:85:46:9b:5a:a0:75:a3:8e:9d:ae:40:ef:09:7a:
         f7:31:b5:6d:46:83:75:9c:2c:29:5f:2a:55:8d:85:cc:6a:5b:
         3a:9c:e5:86:44:dc:c7:22:71:24:10:01:42:ec:ff:15:31:a7:
         20:ac:2e:b3:b3:d7:53:d3:32:ce:43:e1:1f:92:b5:2f:3e:ae:
         33:05:fc:6e:bd:16:0e:c9:e0:56:aa:65:2c:2c:10:ae:93:06:
         fc:8a:5e:41:e2:ed:fd:ef:94:c9:59:9c:44:d5:91:5a:fc:09:
         b1:e4:05:95:3e:41:ba:61:9a:27:6f:57:ca:62:e7:25:70:b4:
         fe:94:34:f4:d0:75:0f:18:9f:c2:9d:e3:29:7b:fa:7e:dc:2b:
         da:47:a6:52:f9:52:da:df:34:7c:e6:61:44:07:36:27:13:1a:
         6e:1e:1c:d4:ed:5a:30:13:59:4f:23:15:fc:47:f7:2e:a0:84:
         b5:4d:b8:41:05:3f:0b:54:fd:13:16:1b:c0:92:3b:bd:b8:d4:
         cd:75:54:09:ee:0a:66:96:bb:63:60:2f:4c:b2:82:1e:17:bf:
         44:97:91:46:d9:eb:ff:de:56:a8:78:17:b1:a4:2a:16:3a:26:
         2f:be:ac:07:6a:c1:1e:6d:d5:c9:d7:df:6a:2e:9a:39:1a:4a:
         31:b7:94:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/X+aRI3Yc1V/dhO+TJJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj
ZTRjYTUwHhcNMjQwNjE2MDMwMDQ4WhcNMjQwNjE3MDMwMDQ4WjAzMTEwLwYDVQQD
EyhiYTk3MDM5ODAzODg2MGM5MzBmMzFkZmMxZTM0Mzk0ZmU0OTY3OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyKX/Nz1tL8uBIJOhhFI3qSGoDT2
A94/mlp1D8mfVpqXfWdkdJxClOqpWfvJ9861hhd8745QZsA1owXnClCdzVQT00Fy
jFSwg/6QjApfVdpEQmpk6G0Ceu7p8KHOqTAraQrHk9640O7sRREljrxbinnmzpsU
k2kP0heH9MYuQ9BtR1bK0NqkNki7cWYF88YrQjl6gmw3BSbhUDoL8DX0VvyTYZPi
Uv+5KErTj8iThqX27FM86+1h4RsK5Qj/J3bsZ339AYEhC4Bw/lNyl5BFAGEOR2A+
pDUYyOwWhGqZq0kL+PEfkcRMvPOoQ9eiUELaex+J272sp8v4Gcu2wNI+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqXA5gDiGDJMPMd/B40OU/klnmfMB8GA1UdIwQY
MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt
ZmMzZDVjMjIzMGIyLzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy
LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWY8B4VG
m1qgdaOOna5A7wl69zG1bUaDdZwsKV8qVY2FzGpbOpzlhkTcxyJxJBABQuz/FTGn
IKwus7PXU9MyzkPhH5K1Lz6uMwX8br0WDsngVqplLCwQrpMG/IpeQeLt/e+UyVmc
RNWRWvwJseQFlT5BumGaJ29XymLnJXC0/pQ09NB1Dxifwp3jKXv6ftwr2kemUvlS
2t80fOZhRAc2JxMabh4c1O1aMBNZTyMV/Ef3LqCEtU24QQU/C1T9ExYbwJI7vbjU
zXVUCe4KZpa7Y2AvTLKCHhe/RJeRRtnr/95WqHgXsaQqFjomL76sB2rBHm3Vydff
ai6aORpKMbeUsw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:18 2024 by rpki-client on console-fra.rpki-client.org