Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File:                     o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier:          LMp4AhUrnXEDwonvnikfHwvdFbzT2N4T8TM/c7oagcw=
Subject key identifier:   C1:E3:35:0D:8C:37:3D:F5:FD:13:63:2A:93:AF:02:44:ED:AE:43:10
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer:       /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial:       01904152B03E7458B8675AC64037DA94306E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number:          0D43
Signing time:             Sat 22 Jun 2024 19:00:56 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:56 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:56 +0000
Files and hashes:         1: MwZjzrtsAG-MRtw9Awj96SS43O4.roa (hash: 8vkFAO+/G+9ekN/DUotGILVPGRXajsc/sv2URl9GxAA=)
                          2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: yUTGpmv2sSUiCmt9J39NzEqyx4N+qoYLfFM6fZ8CZbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:b0:3e:74:58:b8:67:5a:c6:40:37:da:94:30:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
        Validity
            Not Before: Jun 22 19:00:56 2024 GMT
            Not After : Jun 23 19:00:56 2024 GMT
        Subject: CN=c1e3350d8c373df5fd13632a93af0244edae4310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:be:cd:04:8e:70:ec:76:f8:41:c6:c9:e3:
                    67:4f:8d:00:a1:37:03:db:89:11:91:5c:32:9d:6a:
                    0a:57:0f:f4:d2:72:a8:7e:61:66:0d:b4:1d:5b:a6:
                    9c:75:1f:b7:f6:01:94:44:af:6e:73:41:d2:3c:af:
                    36:bb:87:0b:4b:f4:79:a2:3a:a2:f3:60:23:a5:ff:
                    75:f4:31:43:15:7c:b0:ba:b8:ab:32:92:d6:2a:6e:
                    6b:4d:22:4a:22:62:19:89:d5:71:81:4d:23:80:61:
                    ce:20:e7:6c:7a:4d:40:9d:40:02:8b:ef:2e:a3:55:
                    03:a8:f3:99:cb:ba:86:43:81:9a:2a:a2:7c:7e:62:
                    1c:7a:c5:e4:eb:3b:f1:7c:1f:94:2c:80:0f:e4:ef:
                    5b:ff:ba:18:fc:48:11:b9:6f:74:32:e6:37:3f:56:
                    9e:2e:99:74:76:17:49:be:72:b4:2c:a2:16:f2:a1:
                    bd:5b:da:06:93:2f:7b:00:44:9f:d5:34:d9:85:3e:
                    94:41:24:5e:d8:f8:94:30:00:13:a7:4f:08:db:4a:
                    5c:c3:29:4e:88:bb:7b:95:a0:57:23:63:98:e5:f5:
                    94:78:bf:f6:56:1e:f0:39:66:7d:7c:1b:9a:65:a2:
                    67:85:7b:14:4e:74:fe:44:22:a0:fa:9e:52:6c:f0:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E3:35:0D:8C:37:3D:F5:FD:13:63:2A:93:AF:02:44:ED:AE:43:10
            X509v3 Authority Key Identifier:
                keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d7:f9:26:c3:18:4e:cf:78:71:c2:52:a3:53:1c:3c:7c:c9:
         da:6f:76:5f:83:cf:2e:35:f6:19:d9:65:14:45:58:4c:26:31:
         10:b0:33:8b:84:e4:5a:96:b7:59:9c:45:95:a8:43:8b:e9:40:
         15:5b:7d:6d:dc:d4:58:99:84:6f:19:6c:c2:b5:d7:0a:d5:86:
         ac:c0:12:d4:1d:6b:ba:ad:c6:f1:cd:0e:24:b7:4f:4e:2c:01:
         e3:3c:2d:0e:e9:49:29:9a:2d:0e:58:31:34:38:14:ec:d0:5f:
         5b:e3:38:20:3c:5e:71:af:d5:43:2e:68:ec:58:9f:0b:17:d8:
         b4:ea:30:90:d6:1c:45:d8:cd:81:dd:ab:f6:c6:87:38:ab:d5:
         7f:8a:bc:f9:b8:ff:0c:e6:6b:83:70:e7:40:db:f0:a3:1b:f3:
         d5:52:4e:9e:3b:7e:b5:15:92:5e:d6:57:60:ae:04:81:b1:e6:
         d3:dd:9f:67:59:02:17:ea:87:e3:91:4a:1a:d9:7a:74:7e:93:
         b4:af:29:ab:c8:47:2d:55:fa:bd:74:39:b9:76:97:70:f3:23:
         dc:8d:4c:2e:3e:c9:42:33:81:3e:ca:35:86:db:fa:8c:2c:db:
         ad:3f:4a:11:af:5f:2f:23:fe:34:16:d7:d2:a9:0f:15:0e:01:
         a7:42:dc:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBUrA+dFi4Z1rGQDfalDBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTk4NWMzOWUzZTkxMWI5ODBlOTNhMDY2NDAxNTdlOWUw
NTJkMjMwHhcNMjQwNjIyMTkwMDU2WhcNMjQwNjIzMTkwMDU2WjAzMTEwLwYDVQQD
EyhjMWUzMzUwZDhjMzczZGY1ZmQxMzYzMmE5M2FmMDI0NGVkYWU0MzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0le+zQSOcOx2+EHGyeNnT40AoTcD
24kRkVwynWoKVw/00nKofmFmDbQdW6acdR+39gGURK9uc0HSPK82u4cLS/R5ojqi
82Ajpf919DFDFXywurirMpLWKm5rTSJKImIZidVxgU0jgGHOIOdsek1AnUACi+8u
o1UDqPOZy7qGQ4GaKqJ8fmIcesXk6zvxfB+ULIAP5O9b/7oY/EgRuW90MuY3P1ae
Lpl0dhdJvnK0LKIW8qG9W9oGky97AESf1TTZhT6UQSRe2PiUMAATp08I20pcwylO
iLt7laBXI2OY5fWUeL/2Vh7wOWZ9fBuaZaJnhXsUTnT+RCKg+p5SbPBZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHjNQ2MNz31/RNjKpOvAkTtrkMQMB8GA1UdIwQY
MBaAFKOphcOePpEbmA6ToGZAFX6eBS0jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZtRnc1NC1rUnVZRHBPZ1prQVZmcDRGTFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wZmRmOWUtZjUzZi00NjdkLWJjOGMt
M2E1NjNjMjEwYTU1LzEvbzZtRnc1NC1rUnVZRHBPZ1prQVZmcDRGTFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wZmRmOWUtZjUzZi00NjdkLWJjOGMtM2E1NjNjMjEwYTU1
LzEvbzZtRnc1NC1rUnVZRHBPZ1prQVZmcDRGTFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptf5JsMY
Ts94ccJSo1McPHzJ2m92X4PPLjX2GdllFEVYTCYxELAzi4TkWpa3WZxFlahDi+lA
FVt9bdzUWJmEbxlswrXXCtWGrMAS1B1ruq3G8c0OJLdPTiwB4zwtDulJKZotDlgx
NDgU7NBfW+M4IDxeca/VQy5o7FifCxfYtOowkNYcRdjNgd2r9saHOKvVf4q8+bj/
DOZrg3DnQNvwoxvz1VJOnjt+tRWSXtZXYK4EgbHm092fZ1kCF+qH45FKGtl6dH6T
tK8pq8hHLVX6vXQ5uXaXcPMj3I1MLj7JQjOBPso1htv6jCzbrT9KEa9fLyP+NBbX
0qkPFQ4Bp0Lc0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:52 2024 by rpki-client on console-fra.rpki-client.org