Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File:                     dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier:          MieAT4tgGqf92T4QccNcxVITGgDWdofy6dmabiqzMOE=
Subject key identifier:   6F:95:9D:5D:A9:16:8E:70:53:02:0F:FB:D2:E5:60:E4:56:70:4E:67
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer:       /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial:       018F8748CA7B1592F44645F9AF3ECFEADC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number:          0694
Signing time:             Fri 17 May 2024 16:00:45 +0000
Manifest this update:     Fri 17 May 2024 16:00:45 +0000
Manifest next update:     Sat 18 May 2024 16:00:45 +0000
Files and hashes:         1: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: Zsty6LeYS7CevQ/xdOT4Wrb+RLITvNEq8IZwGauY0zA=)
                          2: tyjCGtdeuARVfSDcwQ2-laHmt2o.roa (hash: lOxze9lUnYKVzVdC+YePSefvYgQ8qYzWuNvFuMVfBLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ca:7b:15:92:f4:46:45:f9:af:3e:cf:ea:dc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
        Validity
            Not Before: May 17 16:00:45 2024 GMT
            Not After : May 18 16:00:45 2024 GMT
        Subject: CN=6f959d5da9168e7053020ffbd2e560e456704e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:2e:ac:ad:37:ad:f8:7a:7c:5c:8a:a2:64:
                    fb:39:86:34:07:d2:a7:78:47:22:1e:0b:14:bc:7b:
                    4d:72:51:94:df:ef:dd:ce:02:dc:30:a8:d3:50:55:
                    87:d6:91:dc:83:95:09:04:69:da:17:f3:ab:22:5f:
                    37:e3:1d:81:d2:15:9b:86:e1:13:c7:cf:d6:9a:30:
                    5a:2d:5d:ac:6c:45:92:0e:65:fd:5e:7d:b9:a8:21:
                    27:ef:82:01:93:10:5e:7c:92:19:eb:e1:30:e9:89:
                    4a:eb:6e:3f:c9:ec:25:5a:8c:f5:0c:92:8e:f1:26:
                    61:64:94:f4:5f:a5:e8:40:07:12:29:08:37:52:d4:
                    b1:c0:6a:4c:9d:20:12:84:10:ec:ec:4b:84:6b:9d:
                    70:84:ff:ab:ba:3c:44:e0:03:b3:80:82:87:0d:fc:
                    a9:5a:8e:2d:07:87:bf:8c:1a:1b:82:3d:de:c6:6b:
                    c8:cb:87:49:5d:4e:e7:af:8c:d4:30:7e:1d:82:8d:
                    74:a6:99:8c:95:f3:94:b9:e5:7c:cd:c9:fa:72:91:
                    91:df:f5:b9:80:46:37:22:e4:e6:19:42:f1:37:7f:
                    d0:70:95:ce:12:1a:30:55:8c:24:a5:a1:38:60:a6:
                    69:1b:59:85:28:2f:f2:e3:8a:1b:b0:e1:f9:ef:59:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:9D:5D:A9:16:8E:70:53:02:0F:FB:D2:E5:60:E4:56:70:4E:67
            X509v3 Authority Key Identifier:
                keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:bb:3e:85:da:a2:11:2f:69:0a:4f:de:ae:69:37:dc:fa:
         2d:b0:ee:ac:22:29:c2:74:f5:a9:11:e5:12:c5:42:ef:71:fe:
         67:e6:b0:6b:1b:97:1e:63:ac:27:42:73:5d:f8:6d:35:ae:92:
         0b:d8:4d:43:ae:ac:97:0e:56:6f:ad:59:2d:07:57:97:a2:0f:
         35:d2:c2:88:55:b7:53:de:c5:ea:dd:4f:e5:af:80:63:c8:cf:
         ea:59:4d:78:5f:39:d3:6c:20:a6:14:59:f9:ad:8d:a4:27:05:
         3d:be:49:d5:35:ca:2e:7e:62:8d:b3:c3:05:31:cf:16:51:7c:
         63:1e:01:16:47:63:9f:79:21:50:dc:e6:d7:64:63:d7:a9:3f:
         7a:ed:42:01:99:98:56:64:a0:0f:a1:db:25:e7:ea:83:df:8a:
         2e:29:85:bf:e3:ee:7e:0c:46:87:8e:9d:b3:89:e9:6a:74:9b:
         51:19:14:36:7c:9f:10:9f:05:50:c3:1d:ef:b1:ce:5b:d4:c5:
         b7:92:09:d1:9b:30:a7:c1:34:fc:a9:ae:ef:24:fe:90:25:c9:
         b6:22:02:87:7c:fa:17:2f:7f:84:1d:76:39:a6:68:70:19:1e:
         11:93:50:fa:e0:10:07:be:20:7d:3e:e2:2d:b7:a4:7b:a6:ff:
         78:1c:3e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSMp7FZL0RkX5rz7P6tyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODhhYzNjZTdlOTFlMjQwY2FmZjIxOWNiZTM4ZmNmMDIz
YmYyYjYwHhcNMjQwNTE3MTYwMDQ1WhcNMjQwNTE4MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg2Zjk1OWQ1ZGE5MTY4ZTcwNTMwMjBmZmJkMmU1NjBlNDU2NzA0ZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ8urK03rfh6fFyKomT7OYY0B9Kn
eEciHgsUvHtNclGU3+/dzgLcMKjTUFWH1pHcg5UJBGnaF/OrIl834x2B0hWbhuET
x8/WmjBaLV2sbEWSDmX9Xn25qCEn74IBkxBefJIZ6+Ew6YlK624/yewlWoz1DJKO
8SZhZJT0X6XoQAcSKQg3UtSxwGpMnSAShBDs7EuEa51whP+rujxE4AOzgIKHDfyp
Wo4tB4e/jBobgj3exmvIy4dJXU7nr4zUMH4dgo10ppmMlfOUueV8zcn6cpGR3/W5
gEY3IuTmGULxN3/QcJXOEhowVYwkpaE4YKZpG1mFKC/y44obsOH571lAMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+VnV2pFo5wUwIP+9LlYORWcE5nMB8GA1UdIwQY
MBaAFHSIrDzn6R4kDK/yGcvjj88CO/K2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQt
ZDU3NjNmZWNkNjA1LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQtZDU3NjNmZWNkNjA1
LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPS7PoXa
ohEvaQpP3q5pN9z6LbDurCIpwnT1qRHlEsVC73H+Z+awaxuXHmOsJ0JzXfhtNa6S
C9hNQ66slw5Wb61ZLQdXl6IPNdLCiFW3U97F6t1P5a+AY8jP6llNeF8502wgphRZ
+a2NpCcFPb5J1TXKLn5ijbPDBTHPFlF8Yx4BFkdjn3khUNzm12Rj16k/eu1CAZmY
VmSgD6HbJefqg9+KLimFv+PufgxGh46ds4npanSbURkUNnyfEJ8FUMMd77HOW9TF
t5IJ0Zswp8E0/Kmu7yT+kCXJtiICh3z6Fy9/hB12OaZocBkeEZNQ+uAQB74gfT7i
Lbeke6b/eBw+4A==
-----END CERTIFICATE-----
Generated at Fri May 17 17:59:25 2024 by rpki-client on console-ams.rpki-client.org