Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          6dAsmDCLKMk+eHx0kohIbWDcvDtk22UW1vfa2KAKudU=
Subject key identifier:   DC:39:D3:4F:63:BD:B3:AA:59:F2:C0:7B:81:B3:1D:E1:36:11:ED:2C
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       018FDC440DE1354E4A2AA7394EA4D10A3DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          11A2
Signing time:             Mon 03 Jun 2024 04:03:18 +0000
Manifest this update:     Mon 03 Jun 2024 04:03:18 +0000
Manifest next update:     Tue 04 Jun 2024 04:03:18 +0000
Files and hashes:         1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: hFVeHEKknlSr6IFuWgVS9xwNak82z4qlV8aRydXaNj4=)
                          2: LRfPva0k2oMOx3GCnDbTeeGyq8I.roa (hash: KFzGMEjtjzgaz/CTbnF+zbi2TPwMg49Y0OnpeoXgiLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 04:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:dc:44:0d:e1:35:4e:4a:2a:a7:39:4e:a4:d1:0a:3d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Jun  3 04:03:18 2024 GMT
            Not After : Jun  4 04:03:18 2024 GMT
        Subject: CN=dc39d34f63bdb3aa59f2c07b81b31de13611ed2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:44:3b:59:ae:e4:2c:2a:2c:13:41:5b:d4:
                    d0:fd:1d:10:16:97:91:56:e4:a9:ac:3a:2a:e2:6b:
                    4b:0a:13:2a:15:57:c2:9f:fe:0f:79:aa:ce:27:07:
                    c4:ce:47:84:5a:14:cd:49:02:ff:13:28:39:18:73:
                    e7:2a:c3:e6:18:e1:39:c0:f5:f1:ad:d7:3d:59:b4:
                    6a:86:d2:6a:5f:3e:76:f1:ca:14:3f:dd:b6:08:bc:
                    9b:02:12:8d:e4:36:f0:7a:4b:d5:d4:9e:8c:42:61:
                    f1:52:01:7b:76:e5:07:fd:5b:37:ea:6c:01:7b:a0:
                    53:f2:80:af:03:d1:8e:ab:d8:aa:ab:ef:21:18:96:
                    34:ac:33:e7:93:09:e3:22:48:0e:3b:58:93:12:a9:
                    29:c9:6b:c4:b9:78:e8:cd:e2:03:07:90:f2:1d:81:
                    ed:9f:c3:3c:87:fc:88:30:d5:4c:60:0b:70:c4:95:
                    cf:9c:fc:28:ce:dd:a2:8e:6e:65:d5:b8:28:31:a0:
                    bb:d1:8e:bd:ca:2c:da:79:d2:8b:9f:3d:ec:f0:7f:
                    f6:4d:73:84:17:11:b4:57:a4:13:aa:80:4d:5e:83:
                    0b:b1:c9:ab:30:3d:8d:42:51:37:49:77:4f:3e:9e:
                    bf:73:bf:1c:87:34:d7:9d:59:b5:6d:26:92:10:b4:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:D3:4F:63:BD:B3:AA:59:F2:C0:7B:81:B3:1D:E1:36:11:ED:2C
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:72:1f:e1:07:80:75:a3:09:27:86:62:2a:61:22:f8:f4:
         c7:0a:8f:13:2d:05:41:63:ba:f6:0f:01:0c:7b:2d:68:ca:84:
         c0:f0:b3:5e:b0:9c:61:c1:63:a0:3b:fd:58:8c:da:f0:e2:0d:
         a5:20:47:30:6d:ab:49:cc:bc:79:38:45:bb:10:e8:62:c3:1d:
         50:21:3e:8b:50:54:a3:97:0b:68:0a:16:19:a2:b4:e5:de:23:
         7b:b1:14:64:b9:78:6a:c2:12:ba:7a:24:9e:7d:5f:79:16:c0:
         03:67:9a:de:5a:81:81:ef:e1:ac:59:2f:d0:1b:73:a7:0d:a5:
         5f:3c:d5:c8:bb:26:41:b5:3f:a7:a8:60:8b:f7:b0:b8:fd:b4:
         b2:ee:04:53:7a:08:8a:dd:bb:61:b4:b1:24:d5:3b:44:3e:93:
         a4:1b:ea:2e:3d:44:5b:a6:52:6d:b4:89:2c:e0:8b:6c:55:28:
         bd:b3:78:76:3e:75:72:dc:a0:91:a8:3f:22:1e:18:7f:d5:19:
         3c:bc:8c:60:66:60:93:5d:1a:20:80:fb:10:18:3e:1f:f2:37:
         16:ee:b9:b2:fa:45:5b:64:5f:9c:40:12:7c:d2:79:90:6e:fb:
         64:cc:94:e3:96:7d:cd:9e:d5:8a:91:4d:28:25:5c:8c:92:42:
         2a:86:84:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/cRA3hNU5KKqc5TqTRCj2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNmMwZjM5NTQxMGYyODZjODU3NjU3NmQ3ZDJmNzgzMDRi
NWU4M2EwHhcNMjQwNjAzMDQwMzE4WhcNMjQwNjA0MDQwMzE4WjAzMTEwLwYDVQQD
EyhkYzM5ZDM0ZjYzYmRiM2FhNTlmMmMwN2I4MWIzMWRlMTM2MTFlZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp9EO1mu5CwqLBNBW9TQ/R0QFpeR
VuSprDoq4mtLChMqFVfCn/4PearOJwfEzkeEWhTNSQL/Eyg5GHPnKsPmGOE5wPXx
rdc9WbRqhtJqXz528coUP922CLybAhKN5DbwekvV1J6MQmHxUgF7duUH/Vs36mwB
e6BT8oCvA9GOq9iqq+8hGJY0rDPnkwnjIkgOO1iTEqkpyWvEuXjozeIDB5DyHYHt
n8M8h/yIMNVMYAtwxJXPnPwozt2ijm5l1bgoMaC70Y69yizaedKLnz3s8H/2TXOE
FxG0V6QTqoBNXoMLscmrMD2NQlE3SXdPPp6/c78chzTXnVm1bSaSELRvyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw5009jvbOqWfLAe4GzHeE2Ee0sMB8GA1UdIwQY
MBaAFBBsDzlUEPKGyFdldtfS94MEteg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQt
MzQwZjQzMzU4NGQyLzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQtMzQwZjQzMzU4NGQy
LzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLJyH+EH
gHWjCSeGYiphIvj0xwqPEy0FQWO69g8BDHstaMqEwPCzXrCcYcFjoDv9WIza8OIN
pSBHMG2rScy8eThFuxDoYsMdUCE+i1BUo5cLaAoWGaK05d4je7EUZLl4asISunok
nn1feRbAA2ea3lqBge/hrFkv0Btzpw2lXzzVyLsmQbU/p6hgi/ewuP20su4EU3oI
it27YbSxJNU7RD6TpBvqLj1EW6ZSbbSJLOCLbFUovbN4dj51ctygkag/Ih4Yf9UZ
PLyMYGZgk10aIID7EBg+H/I3Fu65svpFW2RfnEASfNJ5kG77ZMyU45Z9zZ7VipFN
KCVcjJJCKoaE+w==
-----END CERTIFICATE-----
Generated at Mon Jun 3 13:29:15 2024 by rpki-client on console-fra.rpki-client.org