Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File:                     RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier:          V3l1gd2Ex18DLx8JJsKxgafjEfa6r5p1BJC8AQS40Ks=
Subject key identifier:   13:5D:08:5E:D0:0E:3D:98:7A:2E:B0:EB:67:7B:9D:D3:9C:B2:2F:62
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer:       /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial:       01901CA1BFD424E9C06B54300F389BE5F3B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 16:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:20 +0000
Files and hashes:         1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: uafMaXGo2FDhtllLDIl8qhrnOd1MBbxKEd5xG2taujY=)
                          2: eU_MccWDoudyM8LaGT7rROZ0wnY.roa (hash: ugu5xQ+pYyuzCQqBcDPCB8/QECzvI7IF39TYwWwrt2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:bf:d4:24:e9:c0:6b:54:30:0f:38:9b:e5:f3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47119a205683167925b9f04174312637b1600c07
        Validity
            Not Before: Jun 15 16:01:20 2024 GMT
            Not After : Jun 16 16:01:20 2024 GMT
        Subject: CN=135d085ed00e3d987a2eb0eb677b9dd39cb22f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:94:76:7d:30:0a:f0:83:1e:e8:57:82:3c:
                    f1:38:d4:27:a7:b7:53:c0:6f:97:fe:7a:39:b6:a5:
                    2b:39:c4:43:93:42:5b:bb:45:e3:b5:fa:62:c2:30:
                    a0:35:63:28:50:cf:65:23:ec:45:13:32:60:49:6a:
                    0c:9a:91:1b:9c:ce:20:4a:33:c9:c2:67:d6:28:2a:
                    35:d4:f7:0a:e3:98:32:9f:5e:ef:62:2a:bd:ed:04:
                    ab:0c:56:b1:7c:7b:7c:fa:95:30:2d:1d:57:a6:2e:
                    6f:d1:eb:68:cb:16:61:ca:72:fd:28:03:16:d8:39:
                    4b:95:b1:d0:fb:88:b3:fc:5f:48:5a:3e:44:d2:c0:
                    fa:c2:fc:97:69:ad:ab:de:38:34:1b:6c:ab:89:86:
                    c0:9f:a2:c8:a8:3f:23:92:ea:a3:46:c2:43:3b:59:
                    88:03:21:0b:bc:1f:f0:66:c0:89:e2:c8:03:9a:d9:
                    b3:17:35:52:ef:50:43:73:62:a2:8d:35:57:a4:e0:
                    f3:a5:20:f1:80:e4:ab:c9:96:ec:65:e0:36:91:84:
                    eb:4d:55:52:1d:74:62:62:33:e6:b6:28:e7:90:bb:
                    1d:e6:51:b7:dc:bf:9f:fe:e1:f4:f5:65:af:22:f1:
                    05:ef:71:4f:43:ca:e4:c6:eb:90:0b:9c:37:58:72:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5D:08:5E:D0:0E:3D:98:7A:2E:B0:EB:67:7B:9D:D3:9C:B2:2F:62
            X509v3 Authority Key Identifier:
                keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:be:5a:c6:3e:55:01:0c:c2:54:f6:70:b5:51:ea:d9:f4:6d:
         ee:e6:81:85:01:b7:35:cd:56:b3:ad:47:a7:3b:18:ab:a7:de:
         86:03:71:70:58:41:d8:b1:14:40:c9:ed:ef:45:96:f4:3a:17:
         ff:ec:10:10:48:04:ab:e1:82:e7:7b:eb:49:c9:ed:82:06:42:
         10:bd:64:45:44:df:bb:9b:bd:33:df:14:23:55:21:c4:8a:e9:
         70:6a:92:d0:c9:7e:58:b2:cc:cd:86:f6:3b:6f:1a:00:eb:d9:
         8e:e1:0b:98:b7:01:0d:cb:2a:f8:a1:14:75:46:6e:d7:f8:61:
         e2:7c:e5:6d:47:48:6b:d0:e6:72:71:82:3b:d2:d6:5f:4a:cc:
         5f:40:ad:8f:c9:be:8d:31:43:01:7f:27:a9:62:d2:58:a2:bf:
         7a:7c:27:80:cd:6b:8e:00:41:52:51:b9:b3:42:df:7d:ee:5b:
         b9:bb:7d:a3:d1:25:34:cd:13:64:79:5f:87:6b:5b:af:6c:76:
         5f:88:68:c3:ee:f4:47:39:c0:3d:09:5d:4c:65:8d:00:0b:33:
         0a:33:67:e5:62:8c:17:b6:38:94:a7:f1:c5:79:70:2d:fb:48:
         59:c9:32:b1:a1:17:8b:93:e0:16:ab:4b:1f:40:a9:be:3f:f8:
         32:e2:3e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcob/UJOnAa1QwDzib5fO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2
MDBjMDcwHhcNMjQwNjE1MTYwMTIwWhcNMjQwNjE2MTYwMTIwWjAzMTEwLwYDVQQD
EygxMzVkMDg1ZWQwMGUzZDk4N2EyZWIwZWI2NzdiOWRkMzljYjIyZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZaUdn0wCvCDHuhXgjzxONQnp7dT
wG+X/no5tqUrOcRDk0Jbu0XjtfpiwjCgNWMoUM9lI+xFEzJgSWoMmpEbnM4gSjPJ
wmfWKCo11PcK45gyn17vYiq97QSrDFaxfHt8+pUwLR1Xpi5v0etoyxZhynL9KAMW
2DlLlbHQ+4iz/F9IWj5E0sD6wvyXaa2r3jg0G2yriYbAn6LIqD8jkuqjRsJDO1mI
AyELvB/wZsCJ4sgDmtmzFzVS71BDc2KijTVXpODzpSDxgOSryZbsZeA2kYTrTVVS
HXRiYjPmtijnkLsd5lG33L+f/uH09WWvIvEF73FPQ8rkxuuQC5w3WHItiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNdCF7QDj2Yei6w62d7ndOcsi9iMB8GA1UdIwQY
MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt
MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz
LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr5axj5V
AQzCVPZwtVHq2fRt7uaBhQG3Nc1Ws61HpzsYq6fehgNxcFhB2LEUQMnt70WW9DoX
/+wQEEgEq+GC53vrScntggZCEL1kRUTfu5u9M98UI1UhxIrpcGqS0Ml+WLLMzYb2
O28aAOvZjuELmLcBDcsq+KEUdUZu1/hh4nzlbUdIa9DmcnGCO9LWX0rMX0Ctj8m+
jTFDAX8nqWLSWKK/enwngM1rjgBBUlG5s0Lffe5bubt9o9ElNM0TZHlfh2tbr2x2
X4how+70RznAPQldTGWNAAszCjNn5WKMF7Y4lKfxxXlwLftIWckysaEXi5PgFqtL
H0Cpvj/4MuI+uA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:57:46 2024 by rpki-client on console-ams.rpki-client.org