Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File:                     S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier:          bSYAOxYKuR5F/AVfKW2bf8kotZbqFMHIFaDhRzHRQYg=
Subject key identifier:   99:66:3E:99:78:AE:28:48:A5:C2:65:2A:47:BC:AC:82:71:18:AD:82
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer:       /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial:       0191F9D96A7EDC43915E450B51D8FCA4015E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number:          0122
Signing time:             Mon 16 Sep 2024 08:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:00 +0000
Files and hashes:         1: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: 7ct1Vrwp+SJ3D+a7GX/8xr9daBgiI9x0xUMGCz6A1+Y=)
                          2: _OcpgAvfQkcc36FaJ701pafbFEI.roa (hash: AzTnpTr86XyTd+u6GWo4CpdimH+vtoyNd1ah7cVY/ws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:6a:7e:dc:43:91:5e:45:0b:51:d8:fc:a4:01:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
        Validity
            Not Before: Sep 16 08:01:00 2024 GMT
            Not After : Sep 17 08:01:00 2024 GMT
        Subject: CN=99663e9978ae2848a5c2652a47bcac827118ad82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:f1:a8:5d:12:ea:c6:90:fa:18:c1:1a:04:
                    39:c4:a2:15:b3:d9:4b:22:3b:f7:b0:c8:ab:9c:a2:
                    f1:8d:e2:20:bd:de:51:88:84:8e:a7:ce:05:a8:94:
                    2f:80:8a:66:4d:fa:23:d7:84:d4:d0:d3:ac:99:de:
                    b0:8b:08:b3:fe:d1:e5:18:3a:cd:a0:d0:8c:e6:e3:
                    b2:63:3d:65:14:6e:20:a4:2f:80:1f:84:6b:90:37:
                    2f:61:19:0f:6d:e0:28:8f:0d:02:71:7c:d7:d2:23:
                    0a:66:4e:1e:32:bd:e6:cd:cc:ef:d5:de:9a:db:01:
                    ce:02:79:10:77:43:b7:0f:7a:7c:fb:09:38:8d:99:
                    da:64:06:dc:a9:c8:d7:39:da:c4:d2:13:45:6c:d0:
                    ff:8f:3e:d1:5c:79:e1:f1:db:05:43:da:a4:85:1f:
                    88:5a:28:6d:23:11:ad:06:5f:a3:91:9c:0a:b8:42:
                    3d:f0:6d:27:f1:1d:a3:ff:8f:19:13:0a:9e:d6:82:
                    28:df:27:87:59:34:11:2f:bf:47:92:0d:d0:92:41:
                    30:9d:25:43:ba:fb:85:65:8c:7b:e8:3e:23:3e:8f:
                    6f:58:02:44:df:35:23:92:df:fb:55:41:9c:90:ab:
                    d9:e4:5e:b5:86:5b:07:0d:d5:a2:80:d1:5b:82:99:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:3E:99:78:AE:28:48:A5:C2:65:2A:47:BC:AC:82:71:18:AD:82
            X509v3 Authority Key Identifier:
                keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:95:d8:1b:1d:47:47:2c:3b:ba:83:4d:93:3c:46:16:f6:b2:
         69:e4:23:4a:35:97:ab:8c:2e:ca:fb:9f:29:78:46:a7:30:84:
         7b:4c:2a:dd:e4:bd:38:90:21:59:d3:b5:09:fe:91:ad:3a:a9:
         23:fc:a5:06:00:c2:53:07:77:27:ab:b3:d0:8d:2b:d9:a7:2f:
         ed:50:8a:21:18:ea:ff:96:d5:aa:ad:c0:21:34:e4:5b:3b:f4:
         55:b0:09:24:c7:a5:79:65:fb:a7:ca:11:61:0c:da:0d:93:c1:
         31:bf:26:97:e1:18:5b:86:56:b4:33:f6:fa:83:c4:d1:71:20:
         55:a3:18:eb:da:32:29:2e:da:82:ff:2e:97:c4:2a:bc:74:bc:
         9c:4a:5e:27:9c:53:88:45:c7:13:ae:cd:83:5c:d9:1f:60:03:
         1e:4a:51:2f:25:8d:fa:95:ad:3a:da:59:a2:b6:73:51:46:ad:
         60:ee:5d:d3:cd:99:cb:73:31:db:c1:6d:24:db:17:34:7f:3d:
         8f:ec:69:84:8a:c2:98:ed:03:26:bb:ea:bc:6d:e3:f6:7f:fc:
         43:ab:44:68:4f:06:79:34:02:c0:7b:27:05:52:03:ed:d4:8a:
         c5:5f:83:7d:54:6f:c1:25:5d:42:57:54:9f:f7:71:ef:94:9d:
         77:fa:0c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH52Wp+3EORXkULUdj8pAFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj
ZjZjZWQwHhcNMjQwOTE2MDgwMTAwWhcNMjQwOTE3MDgwMTAwWjAzMTEwLwYDVQQD
Eyg5OTY2M2U5OTc4YWUyODQ4YTVjMjY1MmE0N2JjYWM4MjcxMThhZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFbxqF0S6saQ+hjBGgQ5xKIVs9lL
Ijv3sMirnKLxjeIgvd5RiISOp84FqJQvgIpmTfoj14TU0NOsmd6wiwiz/tHlGDrN
oNCM5uOyYz1lFG4gpC+AH4RrkDcvYRkPbeAojw0CcXzX0iMKZk4eMr3mzczv1d6a
2wHOAnkQd0O3D3p8+wk4jZnaZAbcqcjXOdrE0hNFbND/jz7RXHnh8dsFQ9qkhR+I
WihtIxGtBl+jkZwKuEI98G0n8R2j/48ZEwqe1oIo3yeHWTQRL79Hkg3QkkEwnSVD
uvuFZYx76D4jPo9vWAJE3zUjkt/7VUGckKvZ5F61hlsHDdWigNFbgpmX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlmPpl4rihIpcJlKke8rIJxGK2CMB8GA1UdIwQY
MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt
MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh
LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJXYGx1H
Ryw7uoNNkzxGFvayaeQjSjWXq4wuyvufKXhGpzCEe0wq3eS9OJAhWdO1Cf6RrTqp
I/ylBgDCUwd3J6uz0I0r2acv7VCKIRjq/5bVqq3AITTkWzv0VbAJJMeleWX7p8oR
YQzaDZPBMb8ml+EYW4ZWtDP2+oPE0XEgVaMY69oyKS7agv8ul8QqvHS8nEpeJ5xT
iEXHE67Ng1zZH2ADHkpRLyWN+pWtOtpZorZzUUatYO5d082Zy3Mx28FtJNsXNH89
j+xphIrCmO0DJrvqvG3j9n/8Q6tEaE8GeTQCwHsnBVID7dSKxV+DfVRvwSVdQldU
n/dx75Sdd/oM6A==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:10:42 2024 by rpki-client on console-ams.rpki-client.org