Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
File:                     zf9bPNry6tG8MwlBG_lJLNmHr7o.mft (raw, json)
Hash identifier:          Y5FS7btMxGDt6gsA1o/SIGrfytZwu7VlN7D/JnYu95w=
Subject key identifier:   C0:B8:C2:7C:DE:F7:26:1F:11:41:1E:DD:63:46:F0:A1:DC:6E:44:3B
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Certificate issuer:       /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial:       0191F9A2C31E8F00030C5CDDE115027D34D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
Manifest number:          0114
Signing time:             Mon 16 Sep 2024 07:01:19 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:19 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:19 +0000
Files and hashes:         1: chQ-4lXNB4HUYUWLy_idJsBFix8.roa (hash: I9A1XVjZQ7s03BQrEOe5x3+LBw6AmSPx5rNhDSYxfBM=)
                          2: zf9bPNry6tG8MwlBG_lJLNmHr7o.crl (hash: QuJNZwhdxwdcBaPpNgeE50uId7wiNQ4qNMcgaCsokjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:c3:1e:8f:00:03:0c:5c:dd:e1:15:02:7d:34:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
        Validity
            Not Before: Sep 16 07:01:19 2024 GMT
            Not After : Sep 17 07:01:19 2024 GMT
        Subject: CN=c0b8c27cdef7261f11411edd6346f0a1dc6e443b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:60:63:48:02:8e:c7:aa:7d:f6:5b:1f:21:
                    58:be:af:12:b1:b7:63:93:72:c1:20:3c:03:35:53:
                    ca:dc:28:ee:cd:31:2b:66:19:43:1d:d0:7f:ec:68:
                    8d:53:5c:37:34:6d:25:4b:fb:58:82:4e:d3:7d:f8:
                    12:11:2f:9b:99:96:55:aa:b0:46:dd:a6:3a:9f:55:
                    45:23:73:8c:a8:c7:f5:83:ed:86:e1:18:21:0b:a4:
                    e8:0a:57:a6:d4:5d:04:ff:74:3c:7b:f1:dc:8b:80:
                    41:11:93:0c:db:e3:2b:a7:eb:71:d8:06:5a:dd:4e:
                    6b:69:73:8d:51:e6:29:36:d5:3c:80:a7:20:81:ea:
                    fb:fb:2a:9d:71:a6:a8:f3:19:22:95:94:83:c9:13:
                    9e:4b:2e:bc:b8:cb:af:6c:7a:0d:87:82:c5:fd:ef:
                    24:92:5b:00:85:cd:53:96:1d:96:1d:b1:8c:70:6d:
                    71:c0:69:33:2c:49:82:b9:6d:15:ad:26:16:c6:20:
                    2a:bf:92:c1:b0:3b:9d:38:54:41:82:9f:11:39:cd:
                    0c:c0:b7:67:d4:bd:ee:5e:dd:a4:1c:88:d6:4d:1a:
                    e4:a3:31:86:4d:1e:32:dc:af:98:60:7e:7e:3a:bb:
                    fa:ac:8c:9f:84:b8:77:73:cc:17:2a:e5:9d:85:6a:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B8:C2:7C:DE:F7:26:1F:11:41:1E:DD:63:46:F0:A1:DC:6E:44:3B
            X509v3 Authority Key Identifier:
                keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1d:7b:16:c1:78:c4:2c:7b:a3:d2:3c:85:45:60:e8:8a:53:
         e9:e9:91:ba:9c:a4:74:92:dc:57:dd:e4:65:d0:2b:7a:35:cb:
         a3:c3:59:30:6f:cf:d2:e0:3e:f5:f1:7d:a8:f8:6d:d0:ff:7c:
         ca:71:af:f0:67:ce:23:6e:0a:47:2f:3d:f7:a0:d8:a6:17:0f:
         7f:19:22:f7:00:11:61:a5:45:86:c6:22:0b:cf:72:30:6f:47:
         c3:88:b4:56:b2:62:2a:35:db:31:3e:37:bf:8b:e2:7d:06:d5:
         ef:9e:c8:e6:48:5d:9f:d4:98:df:63:ba:1a:96:10:fb:20:bf:
         6a:6a:0e:86:ef:94:ef:d5:62:1c:42:1a:69:9a:f2:aa:ad:80:
         a1:f3:02:4f:94:f5:04:bd:8e:17:e2:ce:e1:bb:3f:1c:4b:ad:
         76:a7:90:15:47:35:5c:a4:04:6e:11:d2:aa:40:a5:f3:fc:3a:
         2c:20:cc:46:62:7a:07:b7:68:a2:33:26:90:76:f4:49:76:af:
         0b:97:f2:fd:fe:34:07:3e:ed:ad:f1:ea:a9:14:91:4a:9b:10:
         2e:12:fe:92:25:89:9b:d2:2b:db:5c:23:d5:9e:10:63:35:6a:
         39:3b:a0:18:ac:95:9a:86:44:b1:80:5f:aa:a3:a3:45:ca:8a:
         34:1f:a2:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5osMejwADDFzd4RUCfTTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZmY1YjNjZGFmMmVhZDFiYzMzMDk0MTFiZjk0OTJjZDk4
N2FmYmEwHhcNMjQwOTE2MDcwMTE5WhcNMjQwOTE3MDcwMTE5WjAzMTEwLwYDVQQD
EyhjMGI4YzI3Y2RlZjcyNjFmMTE0MTFlZGQ2MzQ2ZjBhMWRjNmU0NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJxgY0gCjseqffZbHyFYvq8Ssbdj
k3LBIDwDNVPK3CjuzTErZhlDHdB/7GiNU1w3NG0lS/tYgk7TffgSES+bmZZVqrBG
3aY6n1VFI3OMqMf1g+2G4RghC6ToClem1F0E/3Q8e/Hci4BBEZMM2+Mrp+tx2AZa
3U5raXONUeYpNtU8gKcgger7+yqdcaao8xkilZSDyROeSy68uMuvbHoNh4LF/e8k
klsAhc1Tlh2WHbGMcG1xwGkzLEmCuW0VrSYWxiAqv5LBsDudOFRBgp8ROc0MwLdn
1L3uXt2kHIjWTRrkozGGTR4y3K+YYH5+Orv6rIyfhLh3c8wXKuWdhWoo5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC4wnze9yYfEUEe3WNG8KHcbkQ7MB8GA1UdIwQY
MBaAFM3/Wzza8urRvDMJQRv5SSzZh6+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEt
YTg3ODFhZGQyNDIzLzEvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEtYTg3ODFhZGQyNDIz
LzEvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh17FsF4
xCx7o9I8hUVg6IpT6emRupykdJLcV93kZdArejXLo8NZMG/P0uA+9fF9qPht0P98
ynGv8GfOI24KRy8996DYphcPfxki9wARYaVFhsYiC89yMG9Hw4i0VrJiKjXbMT43
v4vifQbV757I5khdn9SY32O6GpYQ+yC/amoOhu+U79ViHEIaaZryqq2AofMCT5T1
BL2OF+LO4bs/HEutdqeQFUc1XKQEbhHSqkCl8/w6LCDMRmJ6B7doojMmkHb0SXav
C5fy/f40Bz7trfHqqRSRSpsQLhL+kiWJm9Ir21wj1Z4QYzVqOTugGKyVmoZEsYBf
qqOjRcqKNB+iLg==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:12:05 2024 by rpki-client on console-fra.rpki-client.org