Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File:                     a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier:          3+vYcHvZHTWYePHHAwYFhnQif5CUJnRuz21ZQlUej6E=
Subject key identifier:   51:7F:73:70:6F:40:82:F8:91:65:31:80:F8:04:A8:B3:BB:C1:CD:12
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer:       /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial:       018F86DA5B01DF4252415CD74315E0C3C979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number:          029C
Signing time:             Fri 17 May 2024 14:00:08 +0000
Manifest this update:     Fri 17 May 2024 14:00:08 +0000
Manifest next update:     Sat 18 May 2024 14:00:08 +0000
Files and hashes:         1: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: Mz3HJFkAYfwzmxeEkTu6V47Fp90o10HeEenPxo+dUJU=)
                          2: ipkOJOhXFi1vYtU7WNqBXrTcmEg.roa (hash: xtB7GCrCvFUGUdSGsi9cY8DvaPuhM3wJzfVrK8kKUo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:5b:01:df:42:52:41:5c:d7:43:15:e0:c3:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
        Validity
            Not Before: May 17 14:00:08 2024 GMT
            Not After : May 18 14:00:08 2024 GMT
        Subject: CN=517f73706f4082f891653180f804a8b3bbc1cd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:ca:d5:8f:ee:1e:b2:8c:3f:8a:ba:54:f6:
                    f2:06:7c:b2:e8:9a:b4:3a:13:2d:d0:0f:9f:f0:84:
                    20:62:a3:5c:61:f6:5f:9d:a6:b7:7f:8f:42:ce:a7:
                    03:cc:e2:45:e3:a6:de:c0:cf:70:5e:65:cb:59:61:
                    1b:70:8f:2f:3e:fe:09:3a:1f:c0:ae:f0:a9:01:aa:
                    aa:b7:97:ca:5c:48:bd:2e:65:8c:36:12:cf:a2:42:
                    75:88:6a:26:d4:67:8a:62:1f:86:55:75:84:95:76:
                    87:9e:d1:4a:a3:8e:df:48:79:ea:71:43:83:06:08:
                    5b:5d:d8:74:9f:22:b7:3a:1c:fb:ad:e2:9f:4a:0b:
                    3e:4c:61:fb:54:46:26:97:a7:c3:f6:0c:d3:9f:c4:
                    d7:82:eb:96:17:27:ea:4e:7e:d1:de:3e:fe:d8:0d:
                    68:10:65:e4:45:82:f9:1d:26:59:fe:df:7a:5b:b8:
                    c5:79:0c:c8:ed:b3:85:67:97:04:dd:e9:ad:c2:87:
                    80:56:22:22:00:fa:a5:ea:c0:b6:1e:23:b6:37:0d:
                    99:ea:3c:c2:f0:53:d1:4d:72:71:91:51:b0:ee:b1:
                    3a:8c:9f:31:45:ed:89:21:74:27:dd:ed:98:a7:e9:
                    3e:fc:0f:44:66:9b:3d:61:8a:91:f4:d2:48:4f:49:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7F:73:70:6F:40:82:F8:91:65:31:80:F8:04:A8:B3:BB:C1:CD:12
            X509v3 Authority Key Identifier:
                keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:55:7f:b7:e7:9c:3d:5e:b3:ee:b7:34:94:55:cd:d5:1c:
         77:d9:3f:53:18:3a:a4:f1:9d:dc:84:36:72:34:83:05:a0:0d:
         d5:ef:af:03:3e:80:6b:fa:9a:75:28:e2:8a:2f:fc:c9:f7:4e:
         ec:e3:3f:d3:94:31:a9:15:b8:76:4f:97:cf:2e:6b:10:ef:94:
         e2:36:f2:f4:3d:23:09:a5:76:bd:87:52:37:79:42:9b:7c:f0:
         5c:1d:9d:fd:87:ae:51:39:4e:60:c1:8b:6f:fe:22:32:19:c1:
         0c:f9:46:2c:12:e5:f7:40:b5:52:ba:c8:14:3c:d3:06:31:f0:
         0e:79:8b:a6:b3:d7:8f:c8:b3:04:60:0d:9c:46:81:09:3b:34:
         e4:b8:b4:ab:6e:79:8f:a0:63:a1:70:e7:a5:ec:3a:94:09:c4:
         e8:9f:66:16:77:26:53:c4:61:2b:7c:0b:27:3e:cf:be:4a:09:
         c0:36:c4:22:ea:40:e9:5d:44:bc:72:c7:e3:f2:6b:af:02:10:
         6c:74:4a:36:1f:a0:93:c9:17:d3:33:31:52:4f:f4:8d:4d:e1:
         2b:38:a3:1a:24:c1:b5:fa:f8:c8:9a:a0:f1:ea:62:18:1c:6f:
         35:bd:b7:7d:81:89:03:c7:98:fa:4c:95:9c:da:96:fe:ea:fb:
         9b:5f:c7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2lsB30JSQVzXQxXgw8l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1
OTEzNGEwHhcNMjQwNTE3MTQwMDA4WhcNMjQwNTE4MTQwMDA4WjAzMTEwLwYDVQQD
Eyg1MTdmNzM3MDZmNDA4MmY4OTE2NTMxODBmODA0YThiM2JiYzFjZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6HK1Y/uHrKMP4q6VPbyBnyy6Jq0
OhMt0A+f8IQgYqNcYfZfnaa3f49CzqcDzOJF46bewM9wXmXLWWEbcI8vPv4JOh/A
rvCpAaqqt5fKXEi9LmWMNhLPokJ1iGom1GeKYh+GVXWElXaHntFKo47fSHnqcUOD
BghbXdh0nyK3Ohz7reKfSgs+TGH7VEYml6fD9gzTn8TXguuWFyfqTn7R3j7+2A1o
EGXkRYL5HSZZ/t96W7jFeQzI7bOFZ5cE3emtwoeAViIiAPql6sC2HiO2Nw2Z6jzC
8FPRTXJxkVGw7rE6jJ8xRe2JIXQn3e2Yp+k+/A9EZps9YYqR9NJIT0njzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF/c3BvQIL4kWUxgPgEqLO7wc0SMB8GA1UdIwQY
MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct
NThhOGEzM2Q1NGE2LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2
LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACM9Vf7fn
nD1es+63NJRVzdUcd9k/Uxg6pPGd3IQ2cjSDBaAN1e+vAz6Aa/qadSjiii/8yfdO
7OM/05QxqRW4dk+Xzy5rEO+U4jby9D0jCaV2vYdSN3lCm3zwXB2d/YeuUTlOYMGL
b/4iMhnBDPlGLBLl90C1UrrIFDzTBjHwDnmLprPXj8izBGANnEaBCTs05Li0q255
j6BjoXDnpew6lAnE6J9mFncmU8RhK3wLJz7PvkoJwDbEIupA6V1EvHLH4/JrrwIQ
bHRKNh+gk8kX0zMxUk/0jU3hKzijGiTBtfr4yJqg8epiGBxvNb23fYGJA8eY+kyV
nNqW/ur7m1/H1Q==
-----END CERTIFICATE-----
Generated at Fri May 17 18:28:31 2024 by rpki-client on console-fra.rpki-client.org