Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
File:                     Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json)
Hash identifier:          AHZ5KSYOjp1ZUhr+E5M6iXr+cEAwZcMV64w+tlMuMxA=
Subject key identifier:   08:C9:66:56:DC:03:8E:5C:38:30:4E:A0:94:CC:31:00:1D:45:7F:AA
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Certificate issuer:       /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial:       019044F8C49E8F6C487F12DAB229CC3B1F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
Manifest number:          0FC6
Signing time:             Sun 23 Jun 2024 12:01:12 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:12 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:12 +0000
Files and hashes:         1: 3ip74V50qs0h4ZWMyydEYUb3bSU.roa (hash: VaRHvi6F7wj7omvIXL/64w09nFe4kau8+GxnnxHfyXI=)
                          2: I2nYoh_KGgvxNmetD4Hh8lLdD3U.roa (hash: ZrNfG1W+euXDlf2L48H4cIH9IUvUOG3qPbFSL84l1+8=)
                          3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: fZLbo1Kf+hNfJhXLpJWycw/HrH02+ebts4kZk8v/13o=)
                          4: P3DuhbyOPP78zrkmkvoHgJsl7kc.roa (hash: ZH/Saq3r+Y72asvM2dDqYfga4I99MqtVq9FtzVpbzy4=)
                          5: P54kU8VzssC-47HhzMryKOq9v14.roa (hash: b2CKq42C05Pp3TTpI9SGSG5X6GUrSV4k1QuE6SXYAKY=)
                          6: PiducLYIJyv114fmypHbXEqWWws.roa (hash: ZMGV5dWo9BJskdx8DAF28xcYNdONRWVn5FpM/dzwbcw=)
                          7: TViWfJZ7iER3BOws9j8Q-2-GymY.roa (hash: U39dzfJ1nZ7B1kOA0sB1EnmkieBA0hDoNlF/9B27hTM=)
                          8: aiF5v3FbhmqIhVosGDWCO5vfhMU.roa (hash: 9EsD1TJx82veDOVViyPy7pYkmF9t1efG6ZBjqPIvujU=)
                          9: dl4qd2NxLv2pdTNq0OS-OOlqIBQ.roa (hash: R4VZvRsgmGwvVdNYC34Oay7cu6wYCD63hbEHa/PcSQI=)
                          10: sfW21Q_CSu_cgk1RkWzddCDs04I.roa (hash: 0ZE7kA1N/3TGuygZs2hZ7Zgf/11AiblJZqdFriJkFUY=)
                          11: tObryqj4_uQtGJ6A9dznl4mcXvY.roa (hash: ZmeGI9tWlMBj6YU965jCFTtroOtiN7c3aKRYzf+l5Nc=)
                          12: yHL1vruYGpi0nOpfa3cqAl23ZwQ.roa (hash: bI1A73y3UrONtbp/MPi6tsZYuB6OtnkkdXqsSBzC7zA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:c4:9e:8f:6c:48:7f:12:da:b2:29:cc:3b:1f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
        Validity
            Not Before: Jun 23 12:01:12 2024 GMT
            Not After : Jun 24 12:01:12 2024 GMT
        Subject: CN=08c96656dc038e5c38304ea094cc31001d457faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:95:37:f6:89:2b:d9:fc:29:6a:a6:10:e1:
                    72:53:37:81:48:d3:6f:32:7f:bb:3a:00:34:ef:9a:
                    86:d1:95:89:a2:57:b5:ac:9a:4b:82:a7:73:5e:06:
                    9d:3c:1a:5d:a7:9c:a0:61:30:b0:91:f2:fd:d7:44:
                    b8:07:20:c3:58:d1:4a:96:17:e0:08:b4:6d:6a:d3:
                    4c:f5:a6:97:2b:82:b2:ed:16:d6:47:79:13:68:a6:
                    3e:1a:c9:34:88:ab:73:5b:cd:87:19:cc:4c:cb:6f:
                    50:76:bb:af:cc:0e:ef:62:0b:de:b7:2a:35:a4:1b:
                    55:29:7e:97:30:1b:25:c3:55:b3:e4:e3:f7:1f:df:
                    b0:87:a1:14:5f:60:1c:69:60:bf:95:f4:53:2f:74:
                    b8:49:e0:14:b4:47:52:38:9d:7b:12:b5:83:e1:37:
                    07:da:e6:96:67:3d:41:6b:98:12:ca:70:35:30:09:
                    93:42:8c:a6:5a:fd:ac:48:e6:a6:bd:63:01:84:c6:
                    73:0c:2d:98:08:a8:ca:e9:55:7d:51:50:99:c8:cc:
                    98:ab:f1:c8:ad:8a:e0:bd:73:21:e3:3e:46:96:fb:
                    da:19:ec:79:dc:49:b1:0a:07:e6:1e:64:c6:22:ac:
                    47:7f:8c:71:f2:d2:11:65:a3:cc:d7:84:91:ac:a0:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C9:66:56:DC:03:8E:5C:38:30:4E:A0:94:CC:31:00:1D:45:7F:AA
            X509v3 Authority Key Identifier:
                keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:2f:1f:39:67:d2:af:84:85:63:7d:11:a7:10:87:13:ec:
         d8:85:6d:52:91:7c:6d:34:33:81:a4:a3:da:49:d3:56:b4:da:
         48:23:d0:40:cf:a3:71:91:99:ab:cd:2a:56:33:fa:4f:d0:1a:
         58:3f:8e:3d:dc:e7:5e:a2:69:d9:58:a9:2a:f7:5b:ed:5c:7c:
         75:6e:52:8c:b9:59:cc:2b:91:87:d4:85:b1:c1:d0:37:6c:b4:
         85:87:7b:0b:60:35:12:c5:9f:58:68:d6:dc:9a:8e:91:c4:5a:
         77:a0:76:b3:0e:81:b2:a3:2f:5b:2e:c6:cf:59:d2:7c:23:76:
         2f:68:fe:f8:13:06:59:84:c2:a9:55:58:2e:a9:6b:76:a2:31:
         6c:04:e7:1a:50:dc:40:c3:2b:b2:0d:e1:49:5e:85:f1:b7:ba:
         86:da:78:04:37:72:50:31:a4:24:c8:67:14:42:e6:8c:21:21:
         a2:a9:bc:2e:e8:37:d3:ec:4e:40:63:1d:16:9f:3d:fd:52:cb:
         98:1f:ae:6a:c1:9e:33:80:65:36:8c:e8:c2:3a:22:e0:31:bd:
         05:c1:9d:f7:cd:3d:2c:e6:c2:3e:1c:8f:dd:3b:2e:a8:e0:e8:
         9c:71:60:06:cf:d1:6b:8a:da:0c:83:58:d4:62:6e:a8:3e:67:
         0d:c1:3b:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+MSej2xIfxLasinMOx86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3
Y2M2NzIwHhcNMjQwNjIzMTIwMTEyWhcNMjQwNjI0MTIwMTEyWjAzMTEwLwYDVQQD
EygwOGM5NjY1NmRjMDM4ZTVjMzgzMDRlYTA5NGNjMzEwMDFkNDU3ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MWVN/aJK9n8KWqmEOFyUzeBSNNv
Mn+7OgA075qG0ZWJole1rJpLgqdzXgadPBpdp5ygYTCwkfL910S4ByDDWNFKlhfg
CLRtatNM9aaXK4Ky7RbWR3kTaKY+Gsk0iKtzW82HGcxMy29QdruvzA7vYgvetyo1
pBtVKX6XMBslw1Wz5OP3H9+wh6EUX2AcaWC/lfRTL3S4SeAUtEdSOJ17ErWD4TcH
2uaWZz1Ba5gSynA1MAmTQoymWv2sSOamvWMBhMZzDC2YCKjK6VV9UVCZyMyYq/HI
rYrgvXMh4z5GlvvaGex53EmxCgfmHmTGIqxHf4xx8tIRZaPM14SRrKAUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjJZlbcA45cODBOoJTMMQAdRX+qMB8GA1UdIwQY
MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt
MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm
LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW0vHzln
0q+EhWN9EacQhxPs2IVtUpF8bTQzgaSj2knTVrTaSCPQQM+jcZGZq80qVjP6T9Aa
WD+OPdznXqJp2VipKvdb7Vx8dW5SjLlZzCuRh9SFscHQN2y0hYd7C2A1EsWfWGjW
3JqOkcRad6B2sw6BsqMvWy7Gz1nSfCN2L2j++BMGWYTCqVVYLqlrdqIxbATnGlDc
QMMrsg3hSV6F8be6htp4BDdyUDGkJMhnFELmjCEhoqm8Lug30+xOQGMdFp89/VLL
mB+uasGeM4BlNozowjoi4DG9BcGd9809LObCPhyP3TsuqODonHFgBs/Ra4raDINY
1GJuqD5nDcE78A==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:15 2024 by rpki-client on console-ams.rpki-client.org