Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File:                     ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier:          qs/RLXBbvNb6rrIA13fezIH5G4cMZKfW+xNpOd+GvtM=
Subject key identifier:   86:5F:23:90:81:A1:68:C9:AF:53:6E:3A:87:92:94:E3:75:44:83:EE
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer:       /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial:       019029836EEFF8F98066DFA32F5BCB9FBD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number:          0F44
Signing time:             Tue 18 Jun 2024 04:03:17 +0000
Manifest this update:     Tue 18 Jun 2024 04:03:17 +0000
Manifest next update:     Wed 19 Jun 2024 04:03:17 +0000
Files and hashes:         1: JGxpy3xH6RY2gE363ZnPW64FRkU.roa (hash: +63UymOm/KKepZNom2Rkn6RejMtgbkO/zZ4gPtzhOVk=)
                          2: LXdfMVxo3GHYQHAZfOxWVJ4huok.roa (hash: oh30D+YcpzJXvucD0cqj+NTZTB+bkciOva5pUuvF1EE=)
                          3: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: HOxyJX15cmOzmYHFBrPQ4E23ouY/8QxktvFFCEn0IkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:83:6e:ef:f8:f9:80:66:df:a3:2f:5b:cb:9f:bd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
        Validity
            Not Before: Jun 18 04:03:17 2024 GMT
            Not After : Jun 19 04:03:17 2024 GMT
        Subject: CN=865f239081a168c9af536e3a879294e3754483ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:c7:84:79:c7:52:01:40:9c:8b:70:0b:22:
                    08:c5:66:24:14:e3:e7:09:fd:e1:a5:95:c4:1e:f3:
                    53:1d:30:39:bc:69:87:3b:27:e2:55:90:eb:e0:a2:
                    ed:e2:ff:db:42:f9:17:b4:39:ec:08:49:a2:b7:97:
                    4d:57:71:b5:a3:48:2d:2e:7e:be:48:26:4e:df:68:
                    ed:c2:5f:60:30:64:84:93:54:fc:bd:18:95:8a:33:
                    82:4e:68:b1:f4:4b:e2:d7:59:82:ca:86:5e:ed:b5:
                    1c:49:c3:fa:97:94:5e:21:df:9b:cd:3f:47:b6:87:
                    15:7e:d2:f3:8c:f7:b3:d5:cd:91:ca:0b:9b:f9:c1:
                    90:94:87:a7:ed:a6:40:8c:5c:f0:33:5a:f5:1f:d0:
                    3b:05:01:cc:eb:22:ba:b1:18:dc:ad:7a:ad:17:1f:
                    1f:a7:65:8b:ec:f9:7d:3e:8f:e8:33:1b:72:28:a4:
                    8f:54:db:17:88:89:39:1f:4a:40:ed:22:0b:2a:65:
                    c3:0e:3d:c3:16:c5:b7:f6:48:85:92:03:12:bd:1c:
                    07:84:b9:f8:44:d9:7d:6e:b7:38:e1:b2:a7:54:4d:
                    fc:b4:38:78:25:4e:95:58:da:0b:57:6c:25:56:fd:
                    36:81:34:e2:b2:53:6b:15:c4:85:55:9a:a8:0a:53:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:23:90:81:A1:68:C9:AF:53:6E:3A:87:92:94:E3:75:44:83:EE
            X509v3 Authority Key Identifier:
                keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:69:15:a0:e6:83:91:2c:ca:a4:10:4b:77:b9:ee:15:e3:92:
         60:2a:a6:3c:d1:5e:6c:6e:b9:db:70:67:86:33:8f:f8:44:46:
         db:cc:80:16:64:cd:97:af:40:19:ae:b2:25:df:6a:6e:ce:47:
         93:70:68:9d:ef:4d:50:8d:47:8d:53:7b:fa:e3:1b:fb:e3:05:
         dd:56:47:c2:d8:30:7b:4e:5f:5d:dc:af:f7:45:02:a5:36:49:
         86:4b:d6:37:99:46:de:41:b7:cc:7f:91:1c:e9:dc:16:af:be:
         63:5b:59:77:72:e9:4b:4d:f7:dc:d7:43:66:b9:b4:99:c4:70:
         9f:c0:58:49:52:60:31:88:30:bb:82:4e:3e:c2:1c:44:7a:5e:
         b5:df:2c:a2:da:5c:8f:69:87:2a:21:6d:5e:1f:8b:3e:91:fb:
         82:94:9b:b5:64:86:1e:38:c8:90:29:a0:af:18:2b:17:ec:02:
         1d:52:d1:4b:ae:b6:0f:0d:22:14:63:75:b2:01:67:f9:28:f2:
         ea:09:1e:52:04:8c:73:1d:a4:5d:4b:9d:8c:8a:3c:c4:5a:0e:
         d4:ef:13:04:2c:36:64:1f:ca:da:91:4a:6b:e7:14:07:cb:a0:
         10:73:23:46:85:b5:60:3d:59:ef:8f:0b:23:64:8d:5b:5a:8d:
         3e:8e:55:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZApg27v+PmAZt+jL1vLn71RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5
MTFmYzkwHhcNMjQwNjE4MDQwMzE3WhcNMjQwNjE5MDQwMzE3WjAzMTEwLwYDVQQD
Eyg4NjVmMjM5MDgxYTE2OGM5YWY1MzZlM2E4NzkyOTRlMzc1NDQ4M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EnHhHnHUgFAnItwCyIIxWYkFOPn
Cf3hpZXEHvNTHTA5vGmHOyfiVZDr4KLt4v/bQvkXtDnsCEmit5dNV3G1o0gtLn6+
SCZO32jtwl9gMGSEk1T8vRiVijOCTmix9Evi11mCyoZe7bUcScP6l5ReId+bzT9H
tocVftLzjPez1c2Rygub+cGQlIen7aZAjFzwM1r1H9A7BQHM6yK6sRjcrXqtFx8f
p2WL7Pl9Po/oMxtyKKSPVNsXiIk5H0pA7SILKmXDDj3DFsW39kiFkgMSvRwHhLn4
RNl9brc44bKnVE38tDh4JU6VWNoLV2wlVv02gTTislNrFcSFVZqoClN97QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZfI5CBoWjJr1NuOoeSlON1RIPuMB8GA1UdIwQY
MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt
Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky
LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmkVoOaD
kSzKpBBLd7nuFeOSYCqmPNFebG6523BnhjOP+ERG28yAFmTNl69AGa6yJd9qbs5H
k3Bone9NUI1HjVN7+uMb++MF3VZHwtgwe05fXdyv90UCpTZJhkvWN5lG3kG3zH+R
HOncFq++Y1tZd3LpS0333NdDZrm0mcRwn8BYSVJgMYgwu4JOPsIcRHpetd8sotpc
j2mHKiFtXh+LPpH7gpSbtWSGHjjIkCmgrxgrF+wCHVLRS662Dw0iFGN1sgFn+Sjy
6gkeUgSMcx2kXUudjIo8xFoO1O8TBCw2ZB/K2pFKa+cUB8ugEHMjRoW1YD1Z748L
I2SNW1qNPo5Vwg==
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:25:31 2024 by rpki-client on console-ams.rpki-client.org