Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File:                     AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier:          J/HEYcmZqDCZB8v6Unq8ExY2zT1UNW2am/OaA9LHX3o=
Subject key identifier:   E2:2B:89:BC:E3:6E:28:47:66:B5:CB:15:42:E9:D0:3A:1D:33:13:9E
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer:       /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial:       018F4B6C2213B699E1E59AC1A87AB7E7EACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 01:02:08 +0000
Manifest this update:     Mon 06 May 2024 01:02:08 +0000
Manifest next update:     Tue 07 May 2024 01:02:08 +0000
Files and hashes:         1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: Gk6a8RcqSFga6k+qlHlEzTautt+cneQmjN8i6Is3V1A=)
                          2: fJbG7QR21YdDe54KMbchHHvZV_4.roa (hash: 6fco0OlUFjFH7GxjKa5+cYbPJzwO8G9Ki1Z24e3dcV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:22:13:b6:99:e1:e5:9a:c1:a8:7a:b7:e7:ea:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
        Validity
            Not Before: May  6 01:02:08 2024 GMT
            Not After : May  7 01:02:08 2024 GMT
        Subject: CN=e22b89bce36e284766b5cb1542e9d03a1d33139e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:58:71:96:f0:c4:ff:78:39:35:37:56:b5:
                    a0:5f:cd:76:6d:fc:65:6f:76:8c:10:17:aa:d0:74:
                    b9:81:dc:2f:3a:ee:f6:b4:28:91:42:07:5c:38:28:
                    ae:53:ef:37:38:b1:69:33:67:c4:9e:09:40:45:40:
                    1b:12:d6:4a:c0:d4:c1:1c:5a:3a:e9:49:6f:40:43:
                    13:75:7b:88:a5:cb:9e:8b:79:b3:64:5c:ef:8c:e8:
                    55:ab:c2:34:e3:cb:be:76:08:a3:85:a3:f6:e6:42:
                    d3:31:ef:db:0d:a9:14:40:11:a5:b1:e9:dc:8f:48:
                    e1:d9:ea:86:3a:03:f5:a8:61:97:d0:b8:4a:79:f0:
                    19:dd:03:2e:ae:b2:bb:77:50:74:03:f2:f9:65:6f:
                    c3:03:0b:57:76:ca:31:f0:d8:9b:3f:0e:f5:e9:9c:
                    74:7d:ca:4d:a7:3f:43:f2:60:96:9a:95:a2:de:cb:
                    6b:fe:d2:bf:30:1e:97:24:d4:6b:88:0b:b0:47:4f:
                    35:ca:b5:d9:fc:d3:5c:40:45:56:25:aa:ac:12:32:
                    c9:82:f8:6a:eb:57:5d:b1:86:90:96:06:e3:ee:4c:
                    b8:34:b4:1b:36:07:bb:b7:c4:9b:7b:da:da:8c:c5:
                    72:c1:52:e1:c6:19:7a:be:40:63:e5:2f:6c:a2:a8:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2B:89:BC:E3:6E:28:47:66:B5:CB:15:42:E9:D0:3A:1D:33:13:9E
            X509v3 Authority Key Identifier:
                keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:2f:b7:b9:6e:de:78:ca:4e:db:da:f8:a1:a6:f6:12:9a:
         ed:38:20:fe:a6:6f:60:cf:ac:52:38:1f:ba:13:1f:68:a6:79:
         da:c4:29:24:e3:97:eb:df:fc:37:d2:01:0a:f4:4f:d8:12:9c:
         d6:00:ff:5c:c8:f5:5e:53:75:63:c0:48:cb:4b:aa:62:76:2a:
         8a:d8:40:a1:0d:2a:3e:e3:28:18:96:16:3f:f5:6a:11:fc:0f:
         da:df:d3:78:33:2e:c5:ba:c4:03:6d:25:33:33:47:a1:27:6d:
         29:8b:e5:b0:92:67:5c:1b:2f:35:a1:c4:a7:e7:95:e7:ca:d6:
         ec:4f:3b:ad:48:3c:78:c5:43:b3:a2:e1:58:a9:c3:b9:60:e5:
         34:60:fa:b6:c9:95:81:a3:e8:b3:a0:c1:92:cb:b1:9e:41:b5:
         3d:96:85:51:11:b2:e3:9b:b2:c8:b0:a1:15:ab:d3:0b:b9:43:
         f7:1e:4a:3e:63:27:a8:31:c4:b3:da:1c:dd:f6:be:64:b9:a7:
         08:7f:96:5c:65:45:b8:9e:a4:fe:bc:d4:9e:ec:18:47:6c:0b:
         9b:2e:65:71:a6:a9:73:da:cd:65:ce:f6:27:12:d8:6c:c0:f9:
         0f:90:34:1c:2f:e6:d7:2f:e6:97:9b:62:87:95:50:30:89:3b:
         fe:da:df:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9LbCITtpnh5ZrBqHq35+rOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmFjY2NiNzRjNzdiZDVmZDJhYmVhM2U2MTJkODgxZWFi
NzMzNTYwHhcNMjQwNTA2MDEwMjA4WhcNMjQwNTA3MDEwMjA4WjAzMTEwLwYDVQQD
EyhlMjJiODliY2UzNmUyODQ3NjZiNWNiMTU0MmU5ZDAzYTFkMzMxMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2FYcZbwxP94OTU3VrWgX812bfxl
b3aMEBeq0HS5gdwvOu72tCiRQgdcOCiuU+83OLFpM2fEnglARUAbEtZKwNTBHFo6
6UlvQEMTdXuIpcuei3mzZFzvjOhVq8I048u+dgijhaP25kLTMe/bDakUQBGlsenc
j0jh2eqGOgP1qGGX0LhKefAZ3QMurrK7d1B0A/L5ZW/DAwtXdsox8NibPw716Zx0
fcpNpz9D8mCWmpWi3str/tK/MB6XJNRriAuwR081yrXZ/NNcQEVWJaqsEjLJgvhq
61ddsYaQlgbj7ky4NLQbNge7t8Sbe9rajMVywVLhxhl6vkBj5S9soqjY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIribzjbihHZrXLFULp0DodMxOeMB8GA1UdIwQY
MBaAFAG6zMt0x3vV/Sq+o+YS2IHqtzNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEt
ODM3NDEwNDFiOGM3LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEtODM3NDEwNDFiOGM3
LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA50vt7lu
3njKTtva+KGm9hKa7Tgg/qZvYM+sUjgfuhMfaKZ52sQpJOOX69/8N9IBCvRP2BKc
1gD/XMj1XlN1Y8BIy0uqYnYqithAoQ0qPuMoGJYWP/VqEfwP2t/TeDMuxbrEA20l
MzNHoSdtKYvlsJJnXBsvNaHEp+eV58rW7E87rUg8eMVDs6LhWKnDuWDlNGD6tsmV
gaPos6DBksuxnkG1PZaFURGy45uyyLChFavTC7lD9x5KPmMnqDHEs9oc3fa+ZLmn
CH+WXGVFuJ6k/rzUnuwYR2wLmy5lcaapc9rNZc72JxLYbMD5D5A0HC/m1y/ml5ti
h5VQMIk7/trfAg==
-----END CERTIFICATE-----
Generated at Mon May 6 10:28:02 2024 by rpki-client on console-ams.rpki-client.org