Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File:                     SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier:          40/2Y80FYkiPLRMEEy3gp9fT5FaHgJwLclteXm0p30Y=
Subject key identifier:   83:C8:55:7A:2D:5E:37:D0:B6:0C:7A:FA:26:FD:08:19:43:A0:6F:2F
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer:       /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial:       019053FF647F10D149B0D71E581743BD630B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number:          0F1E
Signing time:             Wed 26 Jun 2024 10:02:44 +0000
Manifest this update:     Wed 26 Jun 2024 10:02:44 +0000
Manifest next update:     Thu 27 Jun 2024 10:02:44 +0000
Files and hashes:         1: PXGDVXyRlT7l36fjLiyn17Khtsg.roa (hash: mq8PAAKTQMmy2z+rGeaKGRYbBapajgATd/d7voEwptI=)
                          2: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: 9ccS6tu7Ul78p8+l1AfyuDgPbNbfL4wovE0elJZkB5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:ff:64:7f:10:d1:49:b0:d7:1e:58:17:43:bd:63:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
        Validity
            Not Before: Jun 26 10:02:44 2024 GMT
            Not After : Jun 27 10:02:44 2024 GMT
        Subject: CN=83c8557a2d5e37d0b60c7afa26fd081943a06f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:7e:83:e0:39:5d:2c:5b:6e:e2:3e:ff:7c:
                    d1:5a:53:6f:aa:e2:39:01:d8:f5:55:4b:c2:b7:b1:
                    7d:3e:cd:2a:33:0c:b1:4f:cb:79:f5:4e:de:82:a2:
                    86:da:82:bf:9d:a4:fe:0a:1d:cc:db:88:e0:71:5a:
                    c7:52:fd:a6:2e:e4:b8:6b:f7:ed:20:d4:db:d4:c9:
                    13:a4:41:8c:03:dd:7c:d3:14:83:60:98:f2:6b:a1:
                    60:c4:44:4d:00:7b:27:7a:a9:48:59:ca:38:f1:c1:
                    9e:58:c6:d6:c4:4c:49:6e:78:3f:fe:78:e9:77:1a:
                    73:d8:66:48:42:99:9b:ba:3c:4c:7b:1b:fb:5d:21:
                    d9:6d:4a:64:47:73:6c:fa:d2:0a:85:93:07:d1:d9:
                    82:2b:7e:4e:0c:d2:3a:0c:a6:c2:d1:7c:65:62:84:
                    ef:6e:b2:f2:ff:ef:8c:7c:41:0a:60:da:e4:31:26:
                    11:75:10:81:64:e1:08:91:69:2c:11:07:75:d8:64:
                    3b:66:15:85:45:58:4b:be:f0:2e:7d:79:23:89:18:
                    dc:1b:fa:96:ee:96:d9:71:44:d9:b9:d3:0d:77:34:
                    8f:bb:0a:43:da:62:f4:16:a9:47:25:2f:39:80:43:
                    7d:81:a3:6a:56:a0:c8:8f:96:c3:8c:7d:b5:76:4f:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C8:55:7A:2D:5E:37:D0:B6:0C:7A:FA:26:FD:08:19:43:A0:6F:2F
            X509v3 Authority Key Identifier:
                keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:67:e4:b5:85:89:fc:ab:07:29:3a:af:fc:08:ab:fe:4d:ce:
         7c:23:e9:a8:52:f8:33:04:56:f6:a8:26:b5:b1:a1:96:dd:11:
         13:5e:59:24:42:72:db:04:5d:e6:07:87:04:d2:8c:8e:a9:17:
         30:3e:ba:4a:9b:72:e5:16:f9:df:e5:b5:ae:40:d7:fe:1f:fa:
         38:4e:3d:2a:71:b5:87:51:e5:fa:75:43:96:80:88:ec:f5:be:
         0b:7b:2f:7a:51:11:b6:a7:e4:fe:39:f4:2b:55:24:86:0f:86:
         e4:de:7f:c4:6a:f7:a9:d8:0e:6d:2b:83:95:16:16:63:ec:8b:
         08:63:95:e7:a1:9f:87:a7:fa:84:1b:35:49:77:d5:d2:30:dc:
         e3:4c:7b:06:bb:fb:77:68:28:ef:54:65:6b:5c:52:80:f7:c3:
         54:9b:6e:b3:c1:c0:7b:1b:31:96:12:bf:4f:5c:8b:a6:53:30:
         e3:d0:1a:5d:d9:16:c8:b2:57:66:fe:65:42:10:c0:6e:0d:5b:
         29:b0:59:20:56:15:92:f3:fa:cd:b2:b4:51:75:54:36:f7:6e:
         64:08:66:9e:38:83:fe:d0:b4:93:a4:97:3d:8d:88:c9:41:21:
         6a:fb:12:72:d2:f3:ec:92:84:26:82:db:7f:74:d6:8b:d4:fe:
         5c:e9:28:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBT/2R/ENFJsNceWBdDvWMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5
MjYyZjgwHhcNMjQwNjI2MTAwMjQ0WhcNMjQwNjI3MTAwMjQ0WjAzMTEwLwYDVQQD
Eyg4M2M4NTU3YTJkNWUzN2QwYjYwYzdhZmEyNmZkMDgxOTQzYTA2ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzd+g+A5XSxbbuI+/3zRWlNvquI5
Adj1VUvCt7F9Ps0qMwyxT8t59U7egqKG2oK/naT+Ch3M24jgcVrHUv2mLuS4a/ft
INTb1MkTpEGMA9180xSDYJjya6FgxERNAHsneqlIWco48cGeWMbWxExJbng//njp
dxpz2GZIQpmbujxMexv7XSHZbUpkR3Ns+tIKhZMH0dmCK35ODNI6DKbC0XxlYoTv
brLy/++MfEEKYNrkMSYRdRCBZOEIkWksEQd12GQ7ZhWFRVhLvvAufXkjiRjcG/qW
7pbZcUTZudMNdzSPuwpD2mL0FqlHJS85gEN9gaNqVqDIj5bDjH21dk+hcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPIVXotXjfQtgx6+ib9CBlDoG8vMB8GA1UdIwQY
MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt
YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx
LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWfktYWJ
/KsHKTqv/Air/k3OfCPpqFL4MwRW9qgmtbGhlt0RE15ZJEJy2wRd5geHBNKMjqkX
MD66Spty5Rb53+W1rkDX/h/6OE49KnG1h1Hl+nVDloCI7PW+C3svelERtqfk/jn0
K1Ukhg+G5N5/xGr3qdgObSuDlRYWY+yLCGOV56Gfh6f6hBs1SXfV0jDc40x7Brv7
d2go71Rla1xSgPfDVJtus8HAexsxlhK/T1yLplMw49AaXdkWyLJXZv5lQhDAbg1b
KbBZIFYVkvP6zbK0UXVUNvduZAhmnjiD/tC0k6SXPY2IyUEhavsSctLz7JKEJoLb
f3TWi9T+XOko5w==
-----END CERTIFICATE-----
Generated at Wed Jun 26 12:15:05 2024 by rpki-client on console-ams.rpki-client.org