Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          57csqrxWtqKFjPJqGGLEM+tp03xb2bLOZXW5J+4lncg=
Subject key identifier:   5B:32:40:C0:2F:37:CB:A2:42:FC:25:97:CC:2B:15:25:33:CD:2A:F1
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       0190250003C726C8C76852B093AB690B3D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          11C9
Signing time:             Mon 17 Jun 2024 07:01:16 +0000
Manifest this update:     Mon 17 Jun 2024 07:01:16 +0000
Manifest next update:     Tue 18 Jun 2024 07:01:16 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: /2Lv3Mnm3hKy3yIZLvUazZKQQssiNyldMGkxTeUJIbI=)
                          2: 6G-7DNn5r1X--f0ZG0pvtCZBEnQ.roa (hash: 4yNbO4qdE37IgG1Z3g2kHP7ACidSlQaVnCOZpBIS4sM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:25:00:03:c7:26:c8:c7:68:52:b0:93:ab:69:0b:3d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Jun 17 07:01:16 2024 GMT
            Not After : Jun 18 07:01:16 2024 GMT
        Subject: CN=5b3240c02f37cba242fc2597cc2b152533cd2af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:90:61:e3:25:29:e8:0c:6e:23:d3:16:a8:
                    05:a7:65:d0:92:bd:b5:4b:c0:46:6f:1d:78:5d:22:
                    80:08:43:7e:01:78:c0:94:55:81:f3:df:5f:ee:52:
                    21:f4:8d:4c:4d:d0:d6:7b:c5:fb:e7:33:a8:92:33:
                    c4:10:1d:09:f7:c1:32:3c:45:87:75:9b:39:58:ca:
                    1e:fb:9b:eb:00:98:83:6e:d1:a7:cc:76:90:bf:b3:
                    65:f0:e5:4d:59:5a:fa:42:5e:42:26:79:ee:3d:ff:
                    2c:55:d3:4e:a2:4a:ce:2a:3f:0a:2c:b2:fa:26:c6:
                    85:95:b8:0a:78:18:2f:31:4f:91:4e:86:1a:e0:df:
                    1b:11:90:a9:a3:64:25:d6:43:c2:11:8e:90:55:e2:
                    63:b2:c7:f3:94:05:0f:20:73:45:2a:99:9b:8b:33:
                    bf:67:50:77:c8:62:aa:07:81:de:4f:79:62:45:42:
                    dd:df:0b:80:e7:bd:c6:02:35:23:12:09:1a:44:74:
                    af:82:2c:7e:b6:3a:4c:7b:26:6d:73:1e:89:2c:08:
                    fe:fa:82:e3:47:a6:70:06:f2:3e:f8:78:91:ae:2f:
                    35:92:5e:98:b1:ee:7c:b2:d8:ae:33:4b:1a:96:86:
                    e2:1d:68:20:66:b8:38:36:72:71:83:bf:22:08:48:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:32:40:C0:2F:37:CB:A2:42:FC:25:97:CC:2B:15:25:33:CD:2A:F1
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:db:70:29:e0:d8:77:53:cf:0d:1c:7b:1e:0f:80:9c:06:
         09:0b:a3:79:a4:92:17:13:86:0d:dd:b5:ae:6f:b8:3a:6a:34:
         66:f4:ad:08:96:ce:37:74:e8:c9:bd:31:bd:56:3e:37:f5:ee:
         9f:14:ee:a7:6a:dc:b6:21:81:af:1a:11:08:9b:a9:0a:13:f0:
         9b:93:74:75:08:fb:33:e6:15:8b:58:31:6f:df:59:fe:62:a6:
         a4:db:8f:af:ef:cb:3b:07:c7:7f:97:09:d4:44:c5:3e:5f:4b:
         34:77:09:cb:6d:8f:16:f5:56:5c:64:5d:10:ff:7c:0e:eb:92:
         39:bd:0c:d4:8f:4c:d7:08:2a:8f:5f:db:bb:ae:46:3b:43:d9:
         e7:66:7d:1f:c8:31:8a:41:b7:72:48:fa:51:ce:d2:83:56:1c:
         87:a7:0a:98:66:88:9e:e6:31:f6:7a:5b:0b:3b:7f:10:2f:26:
         10:73:e3:46:75:4d:f4:15:8d:c4:a3:c7:9d:4b:1a:a2:4c:44:
         ae:9e:cf:b0:c4:dc:5b:e8:47:0d:99:53:a8:ef:c2:52:3d:02:
         7f:7d:4f:2c:fd:8e:be:4d:07:fc:76:a0:4b:62:84:ee:12:02:
         f1:7e:26:6a:72:a8:c7:df:80:ad:d8:77:1d:7c:fa:0c:7e:05:
         18:43:1d:5e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZAlAAPHJsjHaFKwk6tpCz1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5
M2U2YTIwHhcNMjQwNjE3MDcwMTE2WhcNMjQwNjE4MDcwMTE2WjAzMTEwLwYDVQQD
Eyg1YjMyNDBjMDJmMzdjYmEyNDJmYzI1OTdjYzJiMTUyNTMzY2QyYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0mQYeMlKegMbiPTFqgFp2XQkr21
S8BGbx14XSKACEN+AXjAlFWB899f7lIh9I1MTdDWe8X75zOokjPEEB0J98EyPEWH
dZs5WMoe+5vrAJiDbtGnzHaQv7Nl8OVNWVr6Ql5CJnnuPf8sVdNOokrOKj8KLLL6
JsaFlbgKeBgvMU+RToYa4N8bEZCpo2Ql1kPCEY6QVeJjssfzlAUPIHNFKpmbizO/
Z1B3yGKqB4HeT3liRULd3wuA573GAjUjEgkaRHSvgix+tjpMeyZtcx6JLAj++oLj
R6ZwBvI++HiRri81kl6Yse58stiuM0salobiHWggZrg4NnJxg78iCEg6nQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFsyQMAvN8uiQvwll8wrFSUzzSrxMB8GA1UdIwQY
MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0
LWY5NTg1NWYxMDc2My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU0LzliM2Y2Zi05NzU0LTQ1OGYtYjViNC1mOTU4NTVmMTA3
NjMvMS8xLV9RQTVqeXlZc0lBRGdjYzZRcW5MdmFUNXFJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK7b
cCng2HdTzw0cex4PgJwGCQujeaSSFxOGDd21rm+4Omo0ZvStCJbON3Toyb0xvVY+
N/XunxTup2rctiGBrxoRCJupChPwm5N0dQj7M+YVi1gxb99Z/mKmpNuPr+/LOwfH
f5cJ1ETFPl9LNHcJy22PFvVWXGRdEP98DuuSOb0M1I9M1wgqj1/bu65GO0PZ52Z9
H8gxikG3ckj6Uc7Sg1Ych6cKmGaInuYx9npbCzt/EC8mEHPjRnVN9BWNxKPHnUsa
okxErp7PsMTcW+hHDZlTqO/CUj0Cf31PLP2Ovk0H/HagS2KE7hIC8X4manKox9+A
rdh3HXz6DH4FGEMdXg==
-----END CERTIFICATE-----
Generated at Mon Jun 17 09:14:50 2024 by rpki-client on console-ams.rpki-client.org