Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File:                     j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier:          CLMX3AN2az0l/AmAL4b6pHWouBA9LuqP7zKxmuPBZL4=
Subject key identifier:   C3:70:E6:72:C0:53:8B:22:D4:7F:B4:93:CF:B8:39:C0:68:44:42:2E
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer:       /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial:       018F874AF12F535DA1E88C3C72248CFFB205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number:          062F
Signing time:             Fri 17 May 2024 16:03:06 +0000
Manifest this update:     Fri 17 May 2024 16:03:06 +0000
Manifest next update:     Sat 18 May 2024 16:03:06 +0000
Files and hashes:         1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: eXr9K/7vCMFnVC+7ixXiUtrYFTsc+xMOuG6nlcXm744=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f1:2f:53:5d:a1:e8:8c:3c:72:24:8c:ff:b2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
        Validity
            Not Before: May 17 16:03:06 2024 GMT
            Not After : May 18 16:03:06 2024 GMT
        Subject: CN=c370e672c0538b22d47fb493cfb839c06844422e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:63:b1:e5:fb:fc:74:14:e8:0e:cd:f0:ef:27:
                    a7:56:75:93:3a:d1:64:3a:f4:8c:56:3d:c1:e3:df:
                    21:be:09:99:85:44:e1:ea:db:5b:1b:ee:20:9a:48:
                    75:6e:d5:ea:18:54:50:69:75:f7:84:34:21:49:df:
                    f4:4e:ff:12:cf:30:e6:b8:8d:6a:a4:d1:5d:47:f8:
                    1e:c2:66:a8:dd:2e:35:18:af:18:cd:2e:df:2b:b6:
                    89:71:d4:b9:e1:c7:e0:7c:68:32:24:0e:b8:ee:d5:
                    26:a7:fe:e1:93:c9:e3:33:b4:14:38:1f:1c:1e:4e:
                    17:e6:6f:46:37:22:96:81:1a:06:c7:d7:72:a9:db:
                    a9:37:f7:a8:7b:85:0b:62:4c:cd:a5:9a:ee:58:56:
                    e7:62:12:b0:ab:cb:89:b0:7c:e6:1a:6f:52:83:1d:
                    58:fe:da:92:86:97:db:d0:e9:c2:a9:92:af:93:a9:
                    30:4e:95:ce:5f:40:37:e3:d0:49:65:74:fe:4b:b0:
                    88:b3:34:84:d0:06:91:2d:16:1e:67:c2:45:0e:fe:
                    56:9c:03:4c:a6:3d:77:81:14:dc:1e:a1:77:5c:d5:
                    ca:14:b4:7d:d9:30:28:12:ef:56:e8:57:5e:d7:c8:
                    2f:57:d2:7e:07:ee:78:e1:54:78:12:cd:c4:d6:23:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:E6:72:C0:53:8B:22:D4:7F:B4:93:CF:B8:39:C0:68:44:42:2E
            X509v3 Authority Key Identifier:
                keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:91:e9:64:4b:ac:8a:09:91:d2:c5:4f:ad:4e:6b:05:fa:
         9b:61:c6:f3:34:3f:d2:3e:98:9d:41:24:a1:ef:93:c0:bd:7d:
         3d:27:fa:ad:5f:6d:dd:4a:5b:aa:0a:35:9b:27:8a:4c:18:6b:
         de:57:a3:bf:d7:b2:94:4e:02:62:0f:21:e7:af:5d:a9:a7:af:
         b5:3a:13:b8:dc:42:df:fe:4e:f7:52:01:7f:a6:a6:47:f9:29:
         b9:d3:1a:54:a9:c3:a7:71:05:bd:08:36:3b:67:68:6e:cf:e9:
         9c:5a:34:99:ea:bc:0a:d7:01:5a:44:2f:f5:48:2c:8f:f7:d3:
         ab:33:31:6a:76:4a:d9:48:fa:19:9a:94:bf:77:9d:4a:30:d5:
         36:a8:43:8a:12:ad:de:fc:0e:6b:09:99:23:2b:ea:27:2f:f8:
         fc:48:9f:bd:28:22:b3:7b:24:24:2c:34:47:43:a4:01:b6:d2:
         7d:ba:2f:d1:44:4c:d0:6b:5a:5f:44:05:a7:f3:33:d8:88:6e:
         ca:f0:72:6e:4b:47:4b:78:49:b9:2d:04:2b:31:e6:b2:2b:e6:
         9d:0f:e1:d5:0e:13:27:12:df:6c:7e:4b:b9:59:fa:75:96:89:
         18:b8:43:a3:5c:b2:8d:29:73:87:ff:86:86:48:6b:be:1c:95:
         72:b8:a2:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSvEvU12h6Iw8ciSM/7IFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNGVlYTcyZTQ1MzFjOTJhNmUwMGVmNGYxOTFhNjEyN2U5
NTZkMmQwHhcNMjQwNTE3MTYwMzA2WhcNMjQwNTE4MTYwMzA2WjAzMTEwLwYDVQQD
EyhjMzcwZTY3MmMwNTM4YjIyZDQ3ZmI0OTNjZmI4MzljMDY4NDQ0MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mOx5fv8dBToDs3w7yenVnWTOtFk
OvSMVj3B498hvgmZhUTh6ttbG+4gmkh1btXqGFRQaXX3hDQhSd/0Tv8SzzDmuI1q
pNFdR/gewmao3S41GK8YzS7fK7aJcdS54cfgfGgyJA647tUmp/7hk8njM7QUOB8c
Hk4X5m9GNyKWgRoGx9dyqdupN/eoe4ULYkzNpZruWFbnYhKwq8uJsHzmGm9Sgx1Y
/tqShpfb0OnCqZKvk6kwTpXOX0A349BJZXT+S7CIszSE0AaRLRYeZ8JFDv5WnANM
pj13gRTcHqF3XNXKFLR92TAoEu9W6Fde18gvV9J+B+544VR4Es3E1iNVcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNw5nLAU4si1H+0k8+4OcBoREIuMB8GA1UdIwQY
MBaAFI9O6nLkUxySpuAO9PGRphJ+lW0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzIt
NDYxOGZiZmE0Yzg5LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzItNDYxOGZiZmE0Yzg5
LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6aR6WRL
rIoJkdLFT61OawX6m2HG8zQ/0j6YnUEkoe+TwL19PSf6rV9t3Upbqgo1myeKTBhr
3lejv9eylE4CYg8h569dqaevtToTuNxC3/5O91IBf6amR/kpudMaVKnDp3EFvQg2
O2dobs/pnFo0meq8CtcBWkQv9Ugsj/fTqzMxanZK2Uj6GZqUv3edSjDVNqhDihKt
3vwOawmZIyvqJy/4/EifvSgis3skJCw0R0OkAbbSfbov0URM0GtaX0QFp/Mz2Ihu
yvBybktHS3hJuS0EKzHmsivmnQ/h1Q4TJxLfbH5LuVn6dZaJGLhDo1yyjSlzh/+G
hkhrvhyVcrii+w==
-----END CERTIFICATE-----
Generated at Fri May 17 18:26:46 2024 by rpki-client on console-fra.rpki-client.org