Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File:                     phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier:          UQndMpxCxnRTnP2++zAm+6XwPeI16NQsS5MrNRVhTqY=
Subject key identifier:   F8:A7:77:FE:BD:55:E0:79:07:D3:8F:A2:D5:BB:8D:82:39:55:B9:56
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer:       /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial:       01901D0F663756D979E587EE6055F64FAFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 18:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:06 +0000
Files and hashes:         1: 8JSYopOYK_F2EAwbEHTTIfb3X7g.roa (hash: uVls0pAbUFiyWMJ6/xGNC+Trm3GQdicPBlcLZAV9j0I=)
                          2: UUoR4oI8yhilOFDxCAujdDfpLaU.roa (hash: VqYU8iYPXRsvJ7LHDU2PmmyIExxHtTepG/BADouokTE=)
                          3: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: nFrpXQss6/3OnHEPyWL/z7cKy2eCNBmmBUlYwa7HdT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:66:37:56:d9:79:e5:87:ee:60:55:f6:4f:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
        Validity
            Not Before: Jun 15 18:01:06 2024 GMT
            Not After : Jun 16 18:01:06 2024 GMT
        Subject: CN=f8a777febd55e07907d38fa2d5bb8d823955b956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:25:a7:94:8b:1a:b8:a5:a2:0e:93:eb:1b:
                    e9:12:46:da:f6:27:5b:40:0d:00:54:49:1d:14:09:
                    1f:bd:e1:fd:97:03:c8:40:dd:83:04:b9:23:b2:34:
                    37:e0:ad:d7:85:ee:7e:bb:17:0a:37:7a:38:c2:56:
                    a2:8b:fd:ca:8a:37:83:a6:84:08:f1:c9:fe:e7:65:
                    ca:de:88:9d:54:ce:e9:9c:5a:0b:81:a6:07:c6:7a:
                    20:25:da:59:5c:9c:91:bf:4c:3c:d7:fd:b3:cc:00:
                    5f:1f:19:60:9e:0c:e8:da:a2:0c:2b:5b:be:96:8d:
                    09:e3:db:7f:8e:a7:92:1e:8e:6e:9a:8f:fa:6a:b9:
                    eb:ba:e5:73:ef:b8:0c:7e:fe:ed:eb:a7:e1:c9:d1:
                    8d:16:2a:45:34:b3:50:f2:92:cf:47:48:24:43:7e:
                    2c:b7:6a:c0:e7:0c:eb:3d:ff:0a:4f:01:d5:d6:95:
                    16:26:f9:91:80:a2:21:37:1c:07:94:a4:52:b4:b7:
                    78:bb:ac:46:49:c9:0f:0f:b1:50:4e:12:f7:70:17:
                    15:2d:51:5c:26:d0:b6:d1:dc:4a:7b:0e:0b:e5:fa:
                    9b:8e:b3:22:31:2c:1d:d6:3b:c1:ed:29:7e:a2:9b:
                    3a:46:cf:a4:6c:94:de:22:c7:8a:be:34:70:e2:0f:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:77:FE:BD:55:E0:79:07:D3:8F:A2:D5:BB:8D:82:39:55:B9:56
            X509v3 Authority Key Identifier:
                keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:4e:6a:7c:c4:d0:8c:c7:72:2f:00:81:cd:f3:7f:31:0d:
         23:99:48:fe:db:bc:2c:df:6f:ac:23:7b:00:ae:2f:73:83:d0:
         dc:ae:85:d8:a4:04:22:88:4f:51:7c:e4:4e:c8:65:6c:84:a2:
         5a:87:7a:09:e5:0d:d2:ce:d4:e6:77:31:ec:74:a6:5f:c3:b9:
         77:07:2c:b6:bc:39:3d:67:8c:1b:3d:88:64:fa:3f:a0:d6:e6:
         0b:bb:b1:9f:9c:b5:7a:1e:11:d9:e3:3c:73:bc:74:d3:a4:f6:
         2a:f2:48:fa:ce:23:af:d7:b7:bc:80:db:8d:1d:2e:44:9e:f6:
         3d:53:b5:3c:06:10:33:9a:63:91:60:93:57:95:92:cd:90:b6:
         1b:f2:c4:84:b9:ef:d7:3f:be:17:25:ac:21:bb:69:4b:89:73:
         7a:5b:8c:ba:86:ea:dc:c1:c4:1d:04:d5:ff:75:11:ae:f3:eb:
         0b:80:9d:95:38:89:c4:42:dc:71:d9:56:28:71:59:45:49:1c:
         78:1b:e4:75:f1:42:b1:7e:d1:b1:79:b8:20:8b:a1:70:55:fd:
         9e:73:b0:27:f7:fd:2a:55:cf:1e:87:ea:9a:4f:27:cc:c4:2c:
         16:77:d7:21:85:08:00:da:f1:43:59:90:f5:09:7f:dc:b0:83:
         99:c1:c4:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD2Y3Vtl55YfuYFX2T6+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl
OWYwNjMwHhcNMjQwNjE1MTgwMTA2WhcNMjQwNjE2MTgwMTA2WjAzMTEwLwYDVQQD
EyhmOGE3NzdmZWJkNTVlMDc5MDdkMzhmYTJkNWJiOGQ4MjM5NTViOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCklp5SLGrilog6T6xvpEkba9idb
QA0AVEkdFAkfveH9lwPIQN2DBLkjsjQ34K3Xhe5+uxcKN3o4wlaii/3KijeDpoQI
8cn+52XK3oidVM7pnFoLgaYHxnogJdpZXJyRv0w81/2zzABfHxlgngzo2qIMK1u+
lo0J49t/jqeSHo5umo/6arnruuVz77gMfv7t66fhydGNFipFNLNQ8pLPR0gkQ34s
t2rA5wzrPf8KTwHV1pUWJvmRgKIhNxwHlKRStLd4u6xGSckPD7FQThL3cBcVLVFc
JtC20dxKew4L5fqbjrMiMSwd1jvB7Sl+ops6Rs+kbJTeIseKvjRw4g//1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPind/69VeB5B9OPotW7jYI5VblWMB8GA1UdIwQY
MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt
YjU2YmIwNjQ3ODY4LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4
LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8ZOanzE
0IzHci8Agc3zfzENI5lI/tu8LN9vrCN7AK4vc4PQ3K6F2KQEIohPUXzkTshlbISi
Wod6CeUN0s7U5ncx7HSmX8O5dwcstrw5PWeMGz2IZPo/oNbmC7uxn5y1eh4R2eM8
c7x006T2KvJI+s4jr9e3vIDbjR0uRJ72PVO1PAYQM5pjkWCTV5WSzZC2G/LEhLnv
1z++FyWsIbtpS4lzeluMuobq3MHEHQTV/3URrvPrC4CdlTiJxELccdlWKHFZRUkc
eBvkdfFCsX7RsXm4IIuhcFX9nnOwJ/f9KlXPHofqmk8nzMQsFnfXIYUIANrxQ1mQ
9Ql/3LCDmcHEMA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:20:19 2024 by rpki-client on console-ams.rpki-client.org