Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          l2SNHwsYEXP6T/6nJiPQsZ03OAM1qhY6X7B12oKtPMs=
Subject key identifier:   C5:A8:05:93:44:99:B8:C4:BE:BB:FC:9D:28:AB:EB:D9:9C:98:2B:2A
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       019022DA6B4E1FBFDA6235AC68BD38800272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 21:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 21:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 21:00:57 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: pO2cj5jeQNNlb4bXh24Nx4Mtrf4q423KnKy9zU9R2To=)
                          2: KGwDjtI9HAMS8ZZvKIkx7gaDOXk.roa (hash: mtH6mT3OvtmR4ML/LV6hr5TUhQwtnZXyO9yQvHsBGEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:22:da:6b:4e:1f:bf:da:62:35:ac:68:bd:38:80:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Jun 16 21:00:57 2024 GMT
            Not After : Jun 17 21:00:57 2024 GMT
        Subject: CN=c5a805934499b8c4bebbfc9d28abebd99c982b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2f:ee:cd:16:91:db:0f:32:fe:88:30:2b:ff:
                    a0:3e:8c:3f:a7:b3:0f:2b:f7:b6:a9:63:f2:e1:f3:
                    ae:04:e9:7f:74:d2:cc:76:f4:d6:8d:04:38:94:84:
                    56:48:8e:ce:37:1b:45:a0:ee:39:5c:4a:ec:6a:3a:
                    5b:48:5f:6f:69:03:62:e2:a3:9b:4b:5f:af:52:14:
                    5c:11:7c:7f:2b:8a:b5:63:37:dc:8b:77:2f:c4:9f:
                    15:f9:cf:ba:81:6d:67:10:f3:cd:35:f0:1c:0c:18:
                    65:db:d6:04:26:4d:b8:1a:ae:a6:a6:82:d7:03:dd:
                    9f:46:de:aa:7a:d1:ea:cb:4b:83:9c:e5:e4:da:5a:
                    cd:e8:e5:33:6f:6f:f6:35:37:ee:7e:74:d6:95:39:
                    de:9e:c7:21:63:27:41:42:df:92:91:82:3f:fd:49:
                    b4:bc:d3:97:b0:82:7e:e4:14:99:56:5c:f6:d3:d6:
                    ce:a4:db:21:21:16:13:35:74:21:fd:ed:98:35:85:
                    f5:11:0d:7a:00:7c:c7:b1:bc:5a:45:3b:88:1b:91:
                    2f:a2:58:76:72:80:45:6d:1a:27:64:1c:68:a1:87:
                    2a:84:0a:dc:67:41:c7:6d:63:93:d9:5d:34:ed:ca:
                    29:3c:51:0a:65:75:0b:c9:e9:ef:3f:ea:99:43:c4:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:05:93:44:99:B8:C4:BE:BB:FC:9D:28:AB:EB:D9:9C:98:2B:2A
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8e:58:70:ff:93:78:26:75:14:2e:28:7a:c1:64:4f:69:1e:
         6b:db:4c:39:4a:62:46:c2:e0:44:46:3e:13:c6:f5:64:9d:63:
         fc:f5:95:0e:4a:98:ab:94:cb:22:03:e7:36:e0:0f:4d:fc:7c:
         64:60:72:ae:da:1f:ee:d9:70:7c:02:0e:99:3a:26:0b:8a:ef:
         f9:f5:31:0c:39:7d:11:ba:8e:e7:5e:42:04:a0:81:52:7d:d1:
         e2:45:b4:0d:5c:3d:7e:45:c5:71:d2:48:54:35:22:7e:b4:d9:
         e8:b1:bd:ac:90:a5:d4:e9:e1:7f:13:68:98:4a:4e:f2:b4:75:
         03:32:47:2a:c8:20:e5:ad:6f:8c:fb:3d:a1:fa:0d:26:a6:09:
         b8:7e:e2:95:f0:c8:b8:cb:51:40:5b:d4:2e:f8:5d:5a:10:d8:
         94:23:f8:08:c8:e4:74:31:b9:b0:a2:56:59:93:c9:fd:1d:e6:
         37:f8:9b:b7:ab:6c:c6:27:5f:c6:57:bd:cc:0c:cc:3e:68:bd:
         a0:ca:d1:b7:06:dd:a5:67:90:45:54:08:f2:1f:65:b1:d1:c0:
         a1:2e:ff:54:e7:fe:6a:6d:dd:8b:4e:01:3f:14:8f:f6:91:a5:
         1b:4b:8d:c7:90:90:80:db:55:fc:e7:36:48:29:d3:03:b4:fc:
         ae:59:a5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAi2mtOH7/aYjWsaL04gAJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjQwNjE2MjEwMDU3WhcNMjQwNjE3MjEwMDU3WjAzMTEwLwYDVQQD
EyhjNWE4MDU5MzQ0OTliOGM0YmViYmZjOWQyOGFiZWJkOTljOTgyYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i/uzRaR2w8y/ogwK/+gPow/p7MP
K/e2qWPy4fOuBOl/dNLMdvTWjQQ4lIRWSI7ONxtFoO45XErsajpbSF9vaQNi4qOb
S1+vUhRcEXx/K4q1Yzfci3cvxJ8V+c+6gW1nEPPNNfAcDBhl29YEJk24Gq6mpoLX
A92fRt6qetHqy0uDnOXk2lrN6OUzb2/2NTfufnTWlTnenschYydBQt+SkYI//Um0
vNOXsIJ+5BSZVlz209bOpNshIRYTNXQh/e2YNYX1EQ16AHzHsbxaRTuIG5Evolh2
coBFbRonZBxooYcqhArcZ0HHbWOT2V007copPFEKZXULyenvP+qZQ8RifwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWoBZNEmbjEvrv8nSir69mcmCsqMB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtI5YcP+T
eCZ1FC4oesFkT2kea9tMOUpiRsLgREY+E8b1ZJ1j/PWVDkqYq5TLIgPnNuAPTfx8
ZGByrtof7tlwfAIOmTomC4rv+fUxDDl9EbqO515CBKCBUn3R4kW0DVw9fkXFcdJI
VDUifrTZ6LG9rJCl1OnhfxNomEpO8rR1AzJHKsgg5a1vjPs9ofoNJqYJuH7ilfDI
uMtRQFvULvhdWhDYlCP4CMjkdDG5sKJWWZPJ/R3mN/ibt6tsxidfxle9zAzMPmi9
oMrRtwbdpWeQRVQI8h9lsdHAoS7/VOf+am3di04BPxSP9pGlG0uNx5CQgNtV/Oc2
SCnTA7T8rlmlLQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:24:50 2024 by rpki-client on console-ams.rpki-client.org