Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File:                     unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier:          wRh0rg2tgAlhK/c4HRkK6e+VjIavWm99+0ugF/MHs4Q=
Subject key identifier:   0D:B1:63:D8:E8:C4:96:EC:DA:81:7B:95:35:87:50:B9:63:96:1C:AB
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer:       /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial:       01901AEA87A1A5A190868D7A5043FD0A8034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 08:01:35 +0000
Manifest this update:     Sat 15 Jun 2024 08:01:35 +0000
Manifest next update:     Sun 16 Jun 2024 08:01:35 +0000
Files and hashes:         1: HkVVDBgWDr67Ybb9SULldptbZ-8.roa (hash: 8/I7pJirwilS11WDjzmjdG5p77jIs4Vrp68wu9Ha3UI=)
                          2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: osILlmXMeAk4/Bc9KWhgFP1bbNXWS3r/zglegX5pF3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:ea:87:a1:a5:a1:90:86:8d:7a:50:43:fd:0a:80:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
        Validity
            Not Before: Jun 15 08:01:35 2024 GMT
            Not After : Jun 16 08:01:35 2024 GMT
        Subject: CN=0db163d8e8c496ecda817b95358750b963961cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:30:3e:c0:71:95:a6:bb:19:64:23:91:e0:
                    be:df:76:f5:54:13:dd:1f:47:96:f5:30:88:e5:ef:
                    2b:b3:88:2c:c1:de:8d:53:c7:a4:73:d3:0b:a3:8b:
                    04:9b:ef:6b:e0:40:db:aa:35:d7:ac:6d:7b:c3:be:
                    3a:4c:ba:8d:85:f6:fb:97:67:d0:d3:74:79:28:ca:
                    ec:bc:fc:64:a1:09:f1:1c:71:cb:57:28:4f:d9:0d:
                    0a:99:ec:4c:bb:41:37:66:56:a4:b3:05:e1:5a:e3:
                    12:6b:de:61:d3:d3:1a:18:b7:c7:2c:9b:d5:09:d1:
                    fb:24:20:8f:86:51:57:bf:ce:90:93:88:a8:a4:c3:
                    17:24:df:1a:66:da:85:d1:bd:61:bb:f6:57:47:30:
                    cd:8e:8c:2f:fa:7a:79:58:3b:3c:27:ab:b8:be:8f:
                    65:c3:74:a5:ea:39:c0:04:d7:63:16:f4:ad:10:d2:
                    7d:be:69:2d:92:04:1a:8d:b2:03:0f:39:d2:55:db:
                    e5:e3:84:d0:3c:43:88:65:9f:3a:84:b1:a2:22:19:
                    3b:0b:da:11:65:c7:77:6a:60:a9:24:b0:f1:b6:01:
                    a1:59:23:a2:60:02:c0:6e:e7:fa:42:77:ea:5d:89:
                    e3:15:b1:1d:45:94:af:47:b8:8d:fa:1b:05:9e:61:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:63:D8:E8:C4:96:EC:DA:81:7B:95:35:87:50:B9:63:96:1C:AB
            X509v3 Authority Key Identifier:
                keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:77:ca:42:66:5f:25:55:26:56:b6:ac:24:ac:46:45:12:b5:
         23:38:87:16:87:fc:5c:9b:47:82:ac:8d:24:28:87:22:9b:85:
         1a:7f:3c:37:32:74:7a:10:66:15:10:d6:a2:3a:39:3a:24:a3:
         f6:4d:ff:8a:59:43:7a:c7:31:67:5b:4e:b2:36:44:12:c6:bb:
         a4:80:56:3c:4f:ef:d1:b8:b0:b0:af:6f:69:50:8c:bd:10:9e:
         86:ec:78:61:90:fc:eb:a3:48:1e:62:73:ea:53:da:e5:77:67:
         a1:ff:5d:d6:3d:22:01:a0:85:2d:18:4a:e4:b8:d0:2c:05:e1:
         4b:c3:7f:fa:61:39:41:0b:4e:3e:8a:d3:83:c0:83:eb:dd:1b:
         32:52:24:e0:c2:f4:c2:2f:1f:fb:b2:6b:1b:5e:18:4c:3a:7d:
         67:e0:47:4e:f1:a8:fc:b3:4a:2b:c9:b0:63:a6:a5:9d:d6:28:
         66:a9:fc:fc:01:69:74:54:98:d6:71:3f:03:1e:4f:5c:55:06:
         61:7d:79:d6:3d:3e:90:4c:01:86:63:e6:7f:5c:98:06:be:b8:
         cc:b5:74:22:12:78:58:68:92:e2:c5:ce:aa:1a:4c:11:f9:b4:
         c8:b2:53:e8:47:6f:f2:90:1c:f3:a4:35:29:11:07:a9:07:b4:
         71:46:3d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAa6oehpaGQho16UEP9CoA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjQwNjE1MDgwMTM1WhcNMjQwNjE2MDgwMTM1WjAzMTEwLwYDVQQD
EygwZGIxNjNkOGU4YzQ5NmVjZGE4MTdiOTUzNTg3NTBiOTYzOTYxY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhowPsBxlaa7GWQjkeC+33b1VBPd
H0eW9TCI5e8rs4gswd6NU8ekc9MLo4sEm+9r4EDbqjXXrG17w746TLqNhfb7l2fQ
03R5KMrsvPxkoQnxHHHLVyhP2Q0KmexMu0E3ZlakswXhWuMSa95h09MaGLfHLJvV
CdH7JCCPhlFXv86Qk4iopMMXJN8aZtqF0b1hu/ZXRzDNjowv+np5WDs8J6u4vo9l
w3Sl6jnABNdjFvStENJ9vmktkgQajbIDDznSVdvl44TQPEOIZZ86hLGiIhk7C9oR
Zcd3amCpJLDxtgGhWSOiYALAbuf6QnfqXYnjFbEdRZSvR7iN+hsFnmFoPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2xY9joxJbs2oF7lTWHULljlhyrMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3fKQmZf
JVUmVrasJKxGRRK1IziHFof8XJtHgqyNJCiHIpuFGn88NzJ0ehBmFRDWojo5OiSj
9k3/illDescxZ1tOsjZEEsa7pIBWPE/v0biwsK9vaVCMvRCehux4YZD866NIHmJz
6lPa5Xdnof9d1j0iAaCFLRhK5LjQLAXhS8N/+mE5QQtOPorTg8CD690bMlIk4ML0
wi8f+7JrG14YTDp9Z+BHTvGo/LNKK8mwY6alndYoZqn8/AFpdFSY1nE/Ax5PXFUG
YX151j0+kEwBhmPmf1yYBr64zLV0IhJ4WGiS4sXOqhpMEfm0yLJT6Edv8pAc86Q1
KREHqQe0cUY9OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:19:20 2024 by rpki-client on console-ams.rpki-client.org