Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File:                     88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier:          GHDfst4eneVd4S/fbReFyEYh2Cbo/avv0415Vn3SKys=
Subject key identifier:   D9:00:60:76:24:04:C9:96:04:9A:3C:26:9C:40:C3:E8:8F:74:F4:4E
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       018F4B6BBAE42133159B42F0377C61E9F1EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 01:01:42 +0000
Manifest this update:     Mon 06 May 2024 01:01:42 +0000
Manifest next update:     Tue 07 May 2024 01:01:42 +0000
Files and hashes:         1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: kiCrm60MpGt33SitMtkMK7Ov/zAYIUYsSUwdCeMz/Sk=)
                          2: zikW0Lemf_XSV0Qm5fooGyzzfls.roa (hash: vCN1lWjOIGrip2fHnrz1HpklhEMCBo8doyd59FYuKdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:ba:e4:21:33:15:9b:42:f0:37:7c:61:e9:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: May  6 01:01:42 2024 GMT
            Not After : May  7 01:01:42 2024 GMT
        Subject: CN=d90060762404c996049a3c269c40c3e88f74f44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:bf:b1:de:d8:93:8a:06:9d:fd:a5:63:ca:
                    6a:75:12:31:19:b4:d3:ab:fd:87:78:fb:a0:0f:09:
                    ec:03:4f:5e:71:23:84:9a:75:d4:53:87:37:3f:57:
                    5f:17:22:73:99:0e:29:96:f3:9f:6c:dd:bd:ab:f3:
                    eb:d5:54:82:ce:e4:4b:12:fa:a3:f3:59:5f:37:fe:
                    b1:6c:c4:8c:53:da:1f:25:2a:35:e5:88:5b:0e:59:
                    29:3d:e3:1c:37:3c:49:10:7d:b6:23:60:c1:ab:2b:
                    17:18:30:82:c1:8c:d5:4a:18:3e:ef:57:0e:92:11:
                    5d:df:65:83:3b:37:78:ba:aa:96:b2:ae:4b:9b:42:
                    3a:fd:e5:75:a2:fa:cc:85:66:c3:94:6f:b0:b7:6a:
                    ba:8d:38:e8:23:6e:8b:8a:bd:1a:05:d4:f6:ef:18:
                    b1:51:49:53:dd:6f:e2:20:16:8c:47:25:5d:8d:c7:
                    12:69:c4:de:e5:62:2c:9b:60:97:b4:88:11:86:8b:
                    87:b5:4e:dc:1f:c2:c8:d9:ca:b7:ba:81:d2:9f:38:
                    6b:89:05:9b:c3:e1:d1:3b:ce:20:d3:42:c0:13:a6:
                    09:55:0e:56:2c:a6:17:24:4c:08:88:cb:83:51:04:
                    2d:4d:96:73:8d:8b:81:fc:5c:de:41:70:c5:0d:c0:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:60:76:24:04:C9:96:04:9A:3C:26:9C:40:C3:E8:8F:74:F4:4E
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:13:41:6d:f0:a0:c5:d1:1a:95:d3:90:d3:b0:7a:ba:e5:0c:
         66:b2:56:92:e1:80:ca:c0:69:71:1b:8a:c0:75:98:da:f0:fb:
         f2:38:73:9d:f8:ee:57:f7:21:57:f1:3f:7d:05:84:6f:57:f4:
         b4:3d:b8:5c:fa:f4:14:4b:c2:97:b8:ea:b5:6b:42:be:8c:e6:
         23:54:35:05:0b:44:af:4e:70:7f:79:ed:f9:5c:f6:5c:b5:9f:
         92:a4:c4:a1:fa:15:a9:71:1e:62:29:82:ab:fe:d5:71:49:73:
         bf:60:be:9b:af:e4:67:a8:33:3c:ec:6c:75:33:5c:f6:ca:ee:
         cb:73:b8:01:f2:3b:e8:1e:e4:87:83:8c:ea:a8:b0:c4:33:83:
         24:96:f8:58:45:05:13:66:b3:cf:87:f4:64:1e:db:9d:c0:94:
         28:e7:6c:68:0f:d8:49:05:74:bc:19:4d:5b:e9:df:7f:14:a9:
         0e:73:e4:8e:8b:98:b1:f2:a9:c4:6a:a2:94:de:02:a1:8e:7e:
         07:c2:6b:1a:3b:3f:3e:46:a8:cf:61:c0:c9:7a:fb:de:f5:aa:
         99:b4:92:88:50:44:94:a9:1a:8f:6c:47:c9:98:72:95:78:e5:
         6b:94:73:96:a2:98:06:1f:f8:36:a7:8d:3e:59:b6:27:f7:ff:
         10:26:1e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9La7rkITMVm0LwN3xh6fHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzY2I3N2E3MDc1ZjkyN2NjNDAxOGQ1NmU2Y2Q3NWM1OThk
YzNhNTEwHhcNMjQwNTA2MDEwMTQyWhcNMjQwNTA3MDEwMTQyWjAzMTEwLwYDVQQD
EyhkOTAwNjA3NjI0MDRjOTk2MDQ5YTNjMjY5YzQwYzNlODhmNzRmNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzG/sd7Yk4oGnf2lY8pqdRIxGbTT
q/2HePugDwnsA09ecSOEmnXUU4c3P1dfFyJzmQ4plvOfbN29q/Pr1VSCzuRLEvqj
81lfN/6xbMSMU9ofJSo15YhbDlkpPeMcNzxJEH22I2DBqysXGDCCwYzVShg+71cO
khFd32WDOzd4uqqWsq5Lm0I6/eV1ovrMhWbDlG+wt2q6jTjoI26Lir0aBdT27xix
UUlT3W/iIBaMRyVdjccSacTe5WIsm2CXtIgRhouHtU7cH8LI2cq3uoHSnzhriQWb
w+HRO84g00LAE6YJVQ5WLKYXJEwIiMuDUQQtTZZzjYuB/FzeQXDFDcD3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkAYHYkBMmWBJo8JpxAw+iPdPROMB8GA1UdIwQY
MBaAFPPLd6cHX5J8xAGNVubNdcWY3DpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQt
NzA3NzExYjgxZWY3LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQtNzA3NzExYjgxZWY3
LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBNBbfCg
xdEaldOQ07B6uuUMZrJWkuGAysBpcRuKwHWY2vD78jhznfjuV/chV/E/fQWEb1f0
tD24XPr0FEvCl7jqtWtCvozmI1Q1BQtEr05wf3nt+Vz2XLWfkqTEofoVqXEeYimC
q/7VcUlzv2C+m6/kZ6gzPOxsdTNc9sruy3O4AfI76B7kh4OM6qiwxDODJJb4WEUF
E2azz4f0ZB7bncCUKOdsaA/YSQV0vBlNW+nffxSpDnPkjouYsfKpxGqilN4CoY5+
B8JrGjs/Pkaoz2HAyXr73vWqmbSSiFBElKkaj2xHyZhylXjla5RzlqKYBh/4NqeN
Plm2J/f/ECYekw==
-----END CERTIFICATE-----
Generated at Mon May 6 03:53:02 2024 by rpki-client on console-fra.rpki-client.org