Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File:                     2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier:          3/mAuphTx7qg2XyOq0ZB+BedLCVQ6FnoKRcAg/csj2Y=
Subject key identifier:   0B:FA:FB:39:15:C5:A7:FE:9C:C1:4F:FA:A1:78:BB:96:F7:BD:CF:76
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       018F32BE30D0DB551F61147ECCEC8E4BAF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number:          114E
Signing time:             Wed 01 May 2024 06:01:16 +0000
Manifest this update:     Wed 01 May 2024 06:01:16 +0000
Manifest next update:     Thu 02 May 2024 06:01:16 +0000
Files and hashes:         1: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: 0xXKYBE0WfiIMjG2yy3vqL7gxwk5LsXzJQY+LO/32gw=)
                          2: KPjKDyehv8RXqm4yfklp_DtrNQo.roa (hash: FVUQQG4RY+Baeg7lO7qa6BhauAr2vKHqbyJi7qMH2Co=)
                          3: Mks1HSSYuUHksWDWps2yS9v07KM.roa (hash: /KqNmLAoSleGTavSFMerfwHWAW0Gz3tg/8hMccDIMC4=)
                          4: P4emc_XwnRT7F5sXtkD9LH3poNQ.roa (hash: uCau8Yw+RZgHfp4IjXKQOeGNnd3wHLwel3cztqmGHR8=)
                          5: ohrUpMZ6Mkuwqnn-WZrVPff--ps.roa (hash: dvXTZncTMXjFFHeDJynEM0qDUK97YoKKQZR2vjH+itw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:be:30:d0:db:55:1f:61:14:7e:cc:ec:8e:4b:af:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: May  1 06:01:16 2024 GMT
            Not After : May  2 06:01:16 2024 GMT
        Subject: CN=0bfafb3915c5a7fe9cc14ffaa178bb96f7bdcf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:7a:35:27:ae:26:97:77:ad:8b:74:73:60:
                    c0:e7:40:20:4b:80:f7:93:69:b6:d6:49:3d:31:b5:
                    5c:0b:e4:fa:88:f0:f1:ae:ca:67:9b:cf:c0:4a:b2:
                    9c:48:ac:b6:4a:2c:1f:c4:eb:80:c7:df:d5:61:96:
                    c7:2f:46:6d:1c:3f:f5:ee:1f:65:3c:1c:7c:d5:3f:
                    24:d7:e2:76:78:f5:02:1a:d2:59:6c:45:a0:5a:ba:
                    17:29:c6:b6:d8:10:f1:31:be:e4:98:bc:86:24:d5:
                    39:96:b6:70:2d:fb:ab:32:4d:e3:6f:b9:f6:fe:58:
                    bf:56:ca:44:89:0e:42:44:69:4e:23:23:a6:3d:5b:
                    3e:17:66:a2:28:0d:35:34:c2:03:6c:80:ae:0b:1f:
                    f1:35:12:cb:3d:86:0a:e4:86:4b:0f:ac:18:b9:5f:
                    f8:12:b9:f1:a3:04:4c:59:5d:18:73:43:41:a3:8e:
                    a7:40:ad:bc:99:84:ab:97:07:68:0e:ee:8b:97:16:
                    c5:16:c7:9c:b3:0a:a6:d2:d9:2c:3a:37:76:30:53:
                    25:9d:35:a6:94:89:e2:b7:fb:8c:af:65:b2:7a:69:
                    7e:41:69:15:93:0c:17:87:ac:3e:21:9c:0c:8c:ff:
                    0e:cd:a0:48:37:b3:c3:4e:15:d5:0d:c2:c3:ad:dd:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FA:FB:39:15:C5:A7:FE:9C:C1:4F:FA:A1:78:BB:96:F7:BD:CF:76
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:34:b8:48:ec:e6:28:45:c9:16:bf:e0:e2:35:16:d2:06:73:
         66:1a:7f:19:89:46:78:80:15:80:ac:d3:1e:48:2c:6f:4b:8b:
         07:c8:4f:8b:1b:c3:f8:dd:20:d1:d7:bd:7c:c3:b3:86:83:ef:
         e9:3f:8f:5d:70:1c:fc:1e:3e:cc:21:e3:c0:0d:45:81:62:cb:
         72:97:27:ca:97:d7:43:e1:ef:9d:bb:ee:9f:50:3c:16:1e:ad:
         bc:2b:5b:cd:1f:1c:ca:80:89:06:15:1d:e5:04:5c:0a:ae:25:
         4d:86:10:0c:b6:20:9e:12:50:28:c2:cb:01:c0:45:88:c3:db:
         2b:a4:3f:f3:42:d4:1a:c9:a6:43:63:26:63:5c:be:d7:57:2b:
         e1:7f:cb:9d:86:9f:b0:0e:d9:13:2e:df:85:81:ea:c4:74:54:
         36:5b:b7:82:e3:d1:17:f3:01:a1:3d:71:04:71:5b:e3:5f:53:
         6f:a5:b0:62:5c:65:f7:aa:a2:0e:39:23:2c:73:87:f1:85:c7:
         03:61:b8:4e:f1:e9:90:d1:5b:04:87:03:e0:e1:06:4c:15:b9:
         b3:6a:45:d6:cc:3c:1d:c8:33:b5:d5:90:3e:cf:84:9f:b5:74:
         d4:66:06:01:be:96:a5:2e:89:c1:bd:90:55:88:1d:dc:27:9a:
         eb:cc:1c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8yvjDQ21UfYRR+zOyOS68xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5
NWE0ZWQwHhcNMjQwNTAxMDYwMTE2WhcNMjQwNTAyMDYwMTE2WjAzMTEwLwYDVQQD
EygwYmZhZmIzOTE1YzVhN2ZlOWNjMTRmZmFhMTc4YmI5NmY3YmRjZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsop6NSeuJpd3rYt0c2DA50AgS4D3
k2m21kk9MbVcC+T6iPDxrspnm8/ASrKcSKy2SiwfxOuAx9/VYZbHL0ZtHD/17h9l
PBx81T8k1+J2ePUCGtJZbEWgWroXKca22BDxMb7kmLyGJNU5lrZwLfurMk3jb7n2
/li/VspEiQ5CRGlOIyOmPVs+F2aiKA01NMIDbICuCx/xNRLLPYYK5IZLD6wYuV/4
ErnxowRMWV0Yc0NBo46nQK28mYSrlwdoDu6LlxbFFsecswqm0tksOjd2MFMlnTWm
lInit/uMr2Wyeml+QWkVkwwXh6w+IZwMjP8OzaBIN7PDThXVDcLDrd0FKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv6+zkVxaf+nMFP+qF4u5b3vc92MB8GA1UdIwQY
MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjS4SOzm
KEXJFr/g4jUW0gZzZhp/GYlGeIAVgKzTHkgsb0uLB8hPixvD+N0g0de9fMOzhoPv
6T+PXXAc/B4+zCHjwA1FgWLLcpcnypfXQ+Hvnbvun1A8Fh6tvCtbzR8cyoCJBhUd
5QRcCq4lTYYQDLYgnhJQKMLLAcBFiMPbK6Q/80LUGsmmQ2MmY1y+11cr4X/LnYaf
sA7ZEy7fhYHqxHRUNlu3guPRF/MBoT1xBHFb419Tb6WwYlxl96qiDjkjLHOH8YXH
A2G4TvHpkNFbBIcD4OEGTBW5s2pF1sw8HcgztdWQPs+En7V01GYGAb6WpS6Jwb2Q
VYgd3Cea68wc6A==
-----END CERTIFICATE-----
Generated at Wed May 1 13:36:34 2024 by rpki-client on console-fra.rpki-client.org