Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          5bpjoCP2x7Sjdi4T/i96RyRNkPQSuERHCJPrNTXCpKQ=
Subject key identifier:   A6:C1:74:5F:13:D7:EA:05:A6:1E:3E:4E:EF:C6:A9:D0:FE:3B:86:2C
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       019238EF32212624ECBA705ABE60020935C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          03F0
Signing time:             Sat 28 Sep 2024 14:00:52 +0000
Manifest this update:     Sat 28 Sep 2024 14:00:52 +0000
Manifest next update:     Sun 29 Sep 2024 14:00:52 +0000
Files and hashes:         1: 1gn667nldQEo8gQGprtF_jWzcgg.roa (hash: rTy2KcA8BVfueNz7nk+QQ/bY60OaTSR/RvwqIyBsme0=)
                          2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: emERcXXDjhOoUllCZkm/719Pe7ebOsakXeYariYOsb4=)
                          3: WOk7zPgPYADufPZ38odTc-IfDG4.roa (hash: edPtQ4lqbYhhMC83EKTlSlqOwUhsKEBe1bLyR3N9xKU=)
                          4: kt2Wji-WWSJzx0ATfAmLWsX4NS8.roa (hash: IQD8WG5CvA/2t7eOBol1JasBCnoWOLf3psqm0eHdcxE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ef:32:21:26:24:ec:ba:70:5a:be:60:02:09:35:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: Sep 28 14:00:52 2024 GMT
            Not After : Sep 29 14:00:52 2024 GMT
        Subject: CN=a6c1745f13d7ea05a61e3e4eefc6a9d0fe3b862c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:21:f8:d7:51:4d:e0:e9:e9:5c:94:57:c9:
                    3d:d3:ee:a8:1d:ef:99:ca:2c:5d:07:fc:5c:37:04:
                    79:e3:aa:cc:89:eb:04:71:a9:bb:47:cf:d1:fe:2d:
                    99:29:52:d5:41:20:3d:71:b7:a6:7f:93:a9:8b:03:
                    cd:6f:ca:c4:e4:8c:87:53:f4:d8:67:7e:dc:c3:00:
                    93:7d:df:19:e3:cc:e2:c0:e6:3b:50:95:f5:0e:41:
                    cc:0a:37:5f:36:e1:70:f9:6d:69:18:2d:1f:92:b4:
                    bf:32:74:35:c1:76:ee:ac:92:af:6e:68:6b:94:b9:
                    69:c1:26:54:84:e5:64:ed:4e:77:1d:14:d4:16:d8:
                    6f:ab:a3:62:0b:91:6f:e7:1a:ee:01:14:46:6c:7f:
                    41:13:49:36:1c:54:16:b2:06:22:18:cc:79:1c:af:
                    6d:b2:0c:d3:c7:c9:ae:87:20:06:8f:64:20:cb:05:
                    19:f0:f6:8b:6e:a2:54:87:a8:25:78:a4:e2:40:b0:
                    04:5a:bc:26:ea:a7:95:0c:01:07:a7:51:7a:83:a1:
                    b8:69:1b:28:5a:01:ee:92:a1:94:7b:2e:16:9b:60:
                    f4:f0:be:f5:36:62:06:13:a9:a5:80:80:e8:1e:2a:
                    c6:26:70:3e:81:69:ee:a5:2e:30:67:38:48:83:91:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:74:5F:13:D7:EA:05:A6:1E:3E:4E:EF:C6:A9:D0:FE:3B:86:2C
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:d6:4b:ea:08:24:d0:4f:80:2e:49:8f:26:f5:88:76:02:
         89:dc:61:aa:df:d9:85:f3:57:a9:ba:55:9d:83:c8:17:68:46:
         55:51:e1:86:00:9d:c9:7e:de:f8:41:63:12:ab:e7:2c:f0:ff:
         c5:45:f1:a8:ca:51:ec:e5:84:15:41:2d:06:a4:a4:f9:2d:cb:
         ee:13:78:79:49:4e:d6:84:ad:50:29:66:b7:86:5a:4b:d4:4f:
         30:c7:ee:1e:ef:4d:87:47:bd:b6:72:06:18:70:f9:3d:c6:e1:
         a5:a0:27:7e:19:f2:ea:dd:eb:6c:97:71:e7:92:4f:7e:db:7c:
         16:84:31:b6:76:01:28:66:42:04:fc:8e:f4:c0:f2:de:32:23:
         b7:98:4c:89:6c:be:a7:13:6a:f3:5a:5c:4c:c0:12:2e:87:ae:
         cd:d5:ef:f6:fb:d7:93:01:ef:a6:4d:ec:55:2f:38:61:bf:7a:
         11:1a:55:2c:b5:d6:11:49:7e:45:c9:5a:99:f5:71:bb:1f:e7:
         d5:9b:cf:0b:14:39:11:e0:81:ea:f8:33:ea:a7:e7:33:fa:8d:
         78:53:84:12:e8:72:81:05:bd:6a:46:61:ae:60:5c:69:c1:42:
         bb:bf:22:05:58:2f:bd:c1:31:b4:4d:79:05:09:96:7d:63:db:
         e5:90:3a:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI47zIhJiTsunBavmACCTXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjQwOTI4MTQwMDUyWhcNMjQwOTI5MTQwMDUyWjAzMTEwLwYDVQQD
EyhhNmMxNzQ1ZjEzZDdlYTA1YTYxZTNlNGVlZmM2YTlkMGZlM2I4NjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneAh+NdRTeDp6VyUV8k90+6oHe+Z
yixdB/xcNwR546rMiesEcam7R8/R/i2ZKVLVQSA9cbemf5OpiwPNb8rE5IyHU/TY
Z37cwwCTfd8Z48ziwOY7UJX1DkHMCjdfNuFw+W1pGC0fkrS/MnQ1wXburJKvbmhr
lLlpwSZUhOVk7U53HRTUFthvq6NiC5Fv5xruARRGbH9BE0k2HFQWsgYiGMx5HK9t
sgzTx8muhyAGj2QgywUZ8PaLbqJUh6gleKTiQLAEWrwm6qeVDAEHp1F6g6G4aRso
WgHukqGUey4Wm2D08L71NmIGE6mlgIDoHirGJnA+gWnupS4wZzhIg5HaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbBdF8T1+oFph4+Tu/GqdD+O4YsMB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfTWS+oI
JNBPgC5Jjyb1iHYCidxhqt/ZhfNXqbpVnYPIF2hGVVHhhgCdyX7e+EFjEqvnLPD/
xUXxqMpR7OWEFUEtBqSk+S3L7hN4eUlO1oStUClmt4ZaS9RPMMfuHu9Nh0e9tnIG
GHD5PcbhpaAnfhny6t3rbJdx55JPftt8FoQxtnYBKGZCBPyO9MDy3jIjt5hMiWy+
pxNq81pcTMASLoeuzdXv9vvXkwHvpk3sVS84Yb96ERpVLLXWEUl+RclamfVxux/n
1ZvPCxQ5EeCB6vgz6qfnM/qNeFOEEuhygQW9akZhrmBcacFCu78iBVgvvcExtE15
BQmWfWPb5ZA6yg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:14:49 2024 by rpki-client on console-ams.rpki-client.org