Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File:                     1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier:          uQ5SiStFauZoJ8BlhtJhk9dh+L5FZE7CBVTyrqp/Fz8=
Subject key identifier:   64:8C:22:C8:99:51:12:52:DD:3C:12:F1:0B:AC:63:AD:81:50:81:15
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer:       /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial:       0191FB5A64E38B363BB2924038856CBF9482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number:          A8
Signing time:             Mon 16 Sep 2024 15:01:30 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:30 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:30 +0000
Files and hashes:         1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: i8xJQ/pBlNEW7cSnV7WNb9T1lGb4DfvDsQjFDTmoVxs=)
                          2: J1iWfv360SGoY9J-l0fEYaZ-_HE.roa (hash: Gp+LpEV899MUL1NGStScrezXLNw+lJijC6guORNvKTk=)
                          3: q_pSH87LvDyJ6u_JFrO5-2PLc84.roa (hash: Q/OwZJeLv0SFq6NShBOyoMcyCdHvavfp08J1Wp5Xb/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:64:e3:8b:36:3b:b2:92:40:38:85:6c:bf:94:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
        Validity
            Not Before: Sep 16 15:01:30 2024 GMT
            Not After : Sep 17 15:01:30 2024 GMT
        Subject: CN=648c22c899511252dd3c12f10bac63ad81508115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:82:c8:1e:23:14:b8:e7:f0:ea:8e:87:6e:
                    b7:57:16:1a:eb:98:7d:93:e1:cb:07:a7:b9:a9:da:
                    42:0e:0b:58:cb:76:7a:b3:91:4a:a5:11:a2:a7:8b:
                    6a:ce:6e:6e:cb:26:89:c8:66:30:59:a2:c7:6f:ef:
                    76:40:89:21:8f:45:df:12:05:2a:0f:e5:d4:e1:20:
                    75:0c:ff:48:d6:b3:58:65:ee:be:bf:df:4f:a6:d1:
                    3f:a2:c4:ef:97:eb:17:d0:96:f3:8b:d6:31:0c:08:
                    bd:b8:b0:05:5e:a0:c1:98:b4:9a:73:80:89:fa:fa:
                    60:17:3e:ad:f1:a0:cd:ec:c2:6e:df:15:80:4c:f8:
                    35:d4:8c:4e:db:11:a8:d8:00:75:9e:15:09:c6:3d:
                    7b:f4:07:b1:4f:ef:d8:bf:c7:f6:25:b1:0d:4b:a3:
                    1b:28:9c:4c:ae:fb:5c:f6:ef:54:53:88:32:c0:5a:
                    56:d7:f4:44:8b:5f:ff:9b:90:49:19:79:8c:8e:cf:
                    22:99:73:92:c9:19:1b:6c:60:4e:77:49:b4:5e:ff:
                    f8:1f:77:fc:be:91:d6:5c:0a:a3:01:46:4c:a4:20:
                    36:3a:b0:dc:c9:38:2b:93:df:b5:f6:7a:c7:78:c0:
                    a5:74:53:74:4a:fe:f2:66:1f:aa:b8:e7:ab:7c:cd:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8C:22:C8:99:51:12:52:DD:3C:12:F1:0B:AC:63:AD:81:50:81:15
            X509v3 Authority Key Identifier:
                keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:09:a5:88:7e:f1:37:af:42:e0:1d:88:d8:36:e8:2d:3e:0f:
         2a:4c:b2:d7:e3:93:a8:42:04:40:e1:90:f9:1f:2b:ac:05:f2:
         1a:35:5a:8c:64:f8:ef:ce:44:7b:e2:da:f9:ad:10:bc:3c:52:
         4c:5b:36:d3:6f:5e:74:fe:9b:5a:0b:f4:63:e2:4f:03:6d:2a:
         62:b3:98:75:4f:d2:bc:bf:f8:25:6b:49:85:40:41:b3:f0:cb:
         20:59:d8:79:85:fd:b9:8c:e3:d2:83:f3:c4:2f:d3:93:7e:33:
         ec:40:80:d1:11:81:bd:96:f9:e2:34:1c:e7:f6:96:d7:69:10:
         ae:7c:61:fc:de:25:f1:e4:0a:ae:c3:e3:f9:ce:47:bf:4c:54:
         5c:97:36:99:c1:58:14:b0:6d:02:40:3b:0d:d4:26:df:2c:20:
         cf:a5:50:84:6e:d7:36:48:71:e9:b6:18:1f:83:1d:34:5d:9a:
         ac:2b:06:9b:82:e3:be:fd:63:f9:44:49:26:58:14:1b:a3:10:
         90:6d:65:18:73:8a:99:74:78:5f:71:5f:17:ae:76:ba:91:b7:
         66:bb:22:f9:03:ec:a8:f5:9d:12:6d:69:33:6c:a1:87:21:a1:
         01:bf:f7:cf:b5:92:8f:ca:8f:77:de:0f:31:2b:47:74:eb:24:
         a7:ec:a5:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7WmTjizY7spJAOIVsv5SCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk
YTI1NmUwHhcNMjQwOTE2MTUwMTMwWhcNMjQwOTE3MTUwMTMwWjAzMTEwLwYDVQQD
Eyg2NDhjMjJjODk5NTExMjUyZGQzYzEyZjEwYmFjNjNhZDgxNTA4MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytuCyB4jFLjn8OqOh263VxYa65h9
k+HLB6e5qdpCDgtYy3Z6s5FKpRGip4tqzm5uyyaJyGYwWaLHb+92QIkhj0XfEgUq
D+XU4SB1DP9I1rNYZe6+v99PptE/osTvl+sX0Jbzi9YxDAi9uLAFXqDBmLSac4CJ
+vpgFz6t8aDN7MJu3xWATPg11IxO2xGo2AB1nhUJxj179AexT+/Yv8f2JbENS6Mb
KJxMrvtc9u9UU4gywFpW1/REi1//m5BJGXmMjs8imXOSyRkbbGBOd0m0Xv/4H3f8
vpHWXAqjAUZMpCA2OrDcyTgrk9+19nrHeMCldFN0Sv7yZh+quOerfM1RXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSMIsiZURJS3TwS8QusY62BUIEVMB8GA1UdIwQY
MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt
ODUxZDljMDQ0ZTcwLzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw
LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQmliH7x
N69C4B2I2DboLT4PKkyy1+OTqEIEQOGQ+R8rrAXyGjVajGT4785Ee+La+a0QvDxS
TFs2029edP6bWgv0Y+JPA20qYrOYdU/SvL/4JWtJhUBBs/DLIFnYeYX9uYzj0oPz
xC/Tk34z7ECA0RGBvZb54jQc5/aW12kQrnxh/N4l8eQKrsPj+c5Hv0xUXJc2mcFY
FLBtAkA7DdQm3ywgz6VQhG7XNkhx6bYYH4MdNF2arCsGm4Ljvv1j+URJJlgUG6MQ
kG1lGHOKmXR4X3FfF652upG3Zrsi+QPsqPWdEm1pM2yhhyGhAb/3z7WSj8qPd94P
MStHdOskp+ylJQ==
-----END CERTIFICATE-----