Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File:                     Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier:          srVxiyGnfSwsdnuNIFDnMgRQxMmPhMc1veIb9Mtd4Fw=
Subject key identifier:   80:AE:2D:D4:72:E5:06:FE:5E:29:7E:A6:CC:18:F9:D1:5F:D3:73:8E
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       018F351A53904E60396C7D10BA487DE043FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 17:01:08 +0000
Manifest this update:     Wed 01 May 2024 17:01:08 +0000
Manifest next update:     Thu 02 May 2024 17:01:08 +0000
Files and hashes:         1: AEpNUccEtRvQ7wSxtvslcs0ZKgI.roa (hash: 4wXUMuZTHClRzuoVhZsmGkK3zvbMe2Nz5vwKRMhSOFM=)
                          2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: WJKpcDylz0VstlNOlet3OtyeEiVnvQyKq/C6v7AT1ZE=)
                          3: xib2yhyyB3MPGMUAJcLW-vKOnsQ.roa (hash: lmN3BAlxss6W1MM0RxXvN+h8zYK/CJ8o3YhVRp940G0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:1a:53:90:4e:60:39:6c:7d:10:ba:48:7d:e0:43:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: May  1 17:01:08 2024 GMT
            Not After : May  2 17:01:08 2024 GMT
        Subject: CN=80ae2dd472e506fe5e297ea6cc18f9d15fd3738e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:13:f6:90:14:85:0f:7b:14:c3:d8:4d:3f:
                    65:7d:8a:80:60:36:9f:f8:01:55:b4:5c:df:12:e0:
                    cb:bb:61:6d:dc:6c:fd:ba:a2:25:59:64:36:41:2c:
                    98:6a:22:f0:12:1e:ab:22:d6:ed:32:51:03:59:8a:
                    53:23:10:71:18:48:86:02:ec:af:6e:4b:36:8a:18:
                    9f:e3:04:83:98:0a:3b:bb:1c:e6:89:53:56:08:9c:
                    b6:c3:39:2b:0e:ed:51:d4:d1:fc:f3:32:be:b3:88:
                    4d:63:6c:b4:96:67:72:fa:5f:fa:47:9a:49:d5:2f:
                    2e:16:e4:58:79:e0:aa:cc:97:5c:c9:6b:e1:8d:79:
                    cc:a9:ca:1b:f3:0c:f1:9c:44:e8:d1:90:75:0d:32:
                    85:34:f2:8b:ce:09:d4:20:ce:51:37:6a:bf:3d:12:
                    21:71:57:e6:a9:bc:e1:de:dd:df:d7:72:99:77:d1:
                    de:1e:97:24:59:aa:71:c5:f5:6a:d1:a2:cb:7c:8d:
                    ed:8f:05:c1:2e:38:44:50:f4:84:55:a1:84:d9:7b:
                    dd:1f:1a:80:ea:8c:08:42:27:0e:96:b7:a5:d0:6f:
                    d7:b9:d7:4c:02:22:c7:90:93:82:b1:63:77:13:81:
                    f5:a1:c3:5c:d8:03:1d:76:02:ab:37:ae:94:7a:77:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AE:2D:D4:72:E5:06:FE:5E:29:7E:A6:CC:18:F9:D1:5F:D3:73:8E
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:b0:71:a8:36:24:db:bd:20:44:44:44:22:82:83:5b:ce:
         0c:27:e3:c1:6f:61:41:5a:61:72:26:5f:ea:6c:58:01:8a:bc:
         7f:52:bd:f6:8f:58:fa:c8:b4:09:cb:5f:54:ea:65:60:a9:b2:
         c0:35:70:de:95:a4:48:d2:79:b0:8a:24:20:f1:de:55:6f:18:
         91:f8:c6:3b:a4:d1:ed:7e:f1:c5:95:c7:86:ae:c2:44:d3:4b:
         df:89:84:6a:e0:de:8b:1a:c0:74:64:94:d4:d6:38:b0:89:fa:
         fb:9d:1d:ed:e5:51:b9:d9:77:04:5b:da:14:ae:b4:d0:69:eb:
         8c:f5:8c:cc:8f:f5:62:7b:24:73:3a:69:2c:aa:02:4d:9e:4d:
         75:73:37:43:ef:dc:50:2f:14:e0:3f:7b:4e:f5:05:f0:0b:c2:
         8a:30:05:33:8a:1c:42:fc:d8:b8:35:4d:1d:bd:8d:06:1f:85:
         a1:d1:e5:63:d2:4f:3f:10:00:a4:c0:28:97:f6:8e:f6:44:d0:
         d0:3d:2f:db:fc:ac:c6:be:f4:69:1b:69:3e:87:2a:e6:18:04:
         9d:a2:3e:7a:00:4d:4a:d6:1b:2d:bd:69:ac:f3:44:cd:3e:41:
         07:ee:f2:80:50:04:59:0c:b7:fd:f0:7a:cb:5d:85:d5:36:87:
         04:8f:c9:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY81GlOQTmA5bH0Qukh94EP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjQwNTAxMTcwMTA4WhcNMjQwNTAyMTcwMTA4WjAzMTEwLwYDVQQD
Eyg4MGFlMmRkNDcyZTUwNmZlNWUyOTdlYTZjYzE4ZjlkMTVmZDM3MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMT9pAUhQ97FMPYTT9lfYqAYDaf
+AFVtFzfEuDLu2Ft3Gz9uqIlWWQ2QSyYaiLwEh6rItbtMlEDWYpTIxBxGEiGAuyv
bks2ihif4wSDmAo7uxzmiVNWCJy2wzkrDu1R1NH88zK+s4hNY2y0lmdy+l/6R5pJ
1S8uFuRYeeCqzJdcyWvhjXnMqcob8wzxnETo0ZB1DTKFNPKLzgnUIM5RN2q/PRIh
cVfmqbzh3t3f13KZd9HeHpckWapxxfVq0aLLfI3tjwXBLjhEUPSEVaGE2XvdHxqA
6owIQicOlrel0G/XuddMAiLHkJOCsWN3E4H1ocNc2AMddgKrN66UencpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICuLdRy5Qb+Xil+pswY+dFf03OOMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFuwcag2
JNu9IERERCKCg1vODCfjwW9hQVphciZf6mxYAYq8f1K99o9Y+si0CctfVOplYKmy
wDVw3pWkSNJ5sIokIPHeVW8YkfjGO6TR7X7xxZXHhq7CRNNL34mEauDeixrAdGSU
1NY4sIn6+50d7eVRudl3BFvaFK600GnrjPWMzI/1YnskczppLKoCTZ5NdXM3Q+/c
UC8U4D97TvUF8AvCijAFM4ocQvzYuDVNHb2NBh+FodHlY9JPPxAApMAol/aO9kTQ
0D0v2/ysxr70aRtpPocq5hgEnaI+egBNStYbLb1prPNEzT5BB+7ygFAEWQy3/fB6
y12F1TaHBI/JvQ==
-----END CERTIFICATE-----
Generated at Wed May 1 22:29:21 2024 by rpki-client on console-fra.rpki-client.org