Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File:                     KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier:          63smU9Yi7XOc+mDAqsR8gBWBosqjyNT2KKCmjUmzKoI=
Subject key identifier:   A1:4E:01:3B:40:AB:6D:24:C6:03:43:97:0E:BE:23:EB:55:5E:55:A5
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer:       /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial:       018F8749C98EDD3353420E6C21B929A24D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:01:50 +0000
Manifest this update:     Fri 17 May 2024 16:01:50 +0000
Manifest next update:     Sat 18 May 2024 16:01:50 +0000
Files and hashes:         1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: jQmoYdQhZkfIfsV4QC9KAb8ZWL2s3a57IPTLjcmhd1M=)
                          2: uCCaFHxiaYAPdpxF3XiKidziS-Y.roa (hash: xDrUSOdNU+tf8e8SuF7F/94Am6WCBJ7jwkA+uBIrW1A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c9:8e:dd:33:53:42:0e:6c:21:b9:29:a2:4d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
        Validity
            Not Before: May 17 16:01:50 2024 GMT
            Not After : May 18 16:01:50 2024 GMT
        Subject: CN=a14e013b40ab6d24c60343970ebe23eb555e55a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:63:b1:ca:15:f2:b6:8f:39:43:43:20:f3:b7:
                    09:a0:34:1e:51:99:7c:0d:e3:58:82:d1:5b:21:f7:
                    89:f5:5f:5a:6e:d3:97:02:97:96:9d:7a:ce:8f:30:
                    e5:87:25:ea:be:bc:0f:e8:68:b9:86:2e:d2:2f:ea:
                    52:63:ed:32:5c:77:b4:35:52:8c:67:8a:5b:b1:2a:
                    e7:5a:08:0b:5e:f3:6c:f7:77:95:29:ad:04:91:bc:
                    af:91:b1:36:32:c7:f1:c5:bd:06:a0:45:02:72:bc:
                    bc:8a:a9:4f:6d:67:92:7a:e4:e1:a6:b3:f3:d1:af:
                    d0:a4:b1:35:64:5b:8a:c8:2b:d4:e6:e9:fc:78:ea:
                    d5:72:aa:e9:d5:97:4f:d3:cc:fe:a9:3b:cb:d8:fa:
                    a6:d1:cd:a3:04:3b:b5:ac:ea:f4:84:78:a9:e2:74:
                    dd:72:7c:b5:06:d9:21:c3:df:36:a8:91:94:3c:60:
                    ef:8a:1b:12:4d:f5:4f:88:38:3f:02:0f:09:2c:a8:
                    37:f2:7d:e0:26:98:6e:fb:19:a8:10:31:26:da:7b:
                    e3:40:34:b4:a9:84:eb:ba:35:4d:4d:ea:1c:8b:39:
                    f0:17:09:78:98:6d:8b:bb:4f:8a:37:f3:d3:fe:9e:
                    8e:3c:3f:b9:38:4b:05:97:dd:2f:28:42:71:c6:3f:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:01:3B:40:AB:6D:24:C6:03:43:97:0E:BE:23:EB:55:5E:55:A5
            X509v3 Authority Key Identifier:
                keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:94:89:5d:45:40:ff:14:cc:06:cf:66:4a:ee:6b:a4:05:
         6b:58:78:e9:04:ca:41:61:74:f1:52:a0:e0:fb:f2:2f:9e:56:
         6b:30:f4:53:e9:e2:dd:86:61:9d:49:d8:af:d8:2a:3e:55:5f:
         a7:4c:11:7c:ac:9b:76:e7:78:90:5b:76:d6:3c:4c:e2:38:4a:
         6b:58:41:b6:d2:d5:83:b2:97:d5:73:89:44:cc:cd:a1:8a:99:
         c9:c9:fe:b0:40:f1:06:bc:33:87:2f:7c:87:5b:14:e6:a8:fc:
         62:21:bb:fd:52:fd:0b:8c:4a:6c:81:ce:c3:37:60:32:e9:1c:
         2e:43:ba:38:b7:01:07:d3:4b:54:32:c7:bc:ee:e9:f6:3d:74:
         1b:ac:dd:22:d3:e1:31:36:d6:42:ec:27:1b:09:18:5c:4b:77:
         d3:af:a1:fe:9e:6c:87:69:67:6e:52:db:bb:56:cc:08:0e:3d:
         d9:e3:91:75:c8:61:c7:82:7d:d9:6e:41:9b:8b:76:5e:c2:59:
         6d:29:26:b8:a9:39:5a:ee:1d:2d:5a:1e:91:00:54:f8:fc:78:
         67:ef:0e:db:07:d6:05:8e:8a:4e:0d:3e:95:6f:00:a2:c2:82:
         0c:9b:64:19:40:79:2f:eb:ab:1b:1d:b9:1a:4f:cf:14:21:d3:
         c4:78:5f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HScmO3TNTQg5sIbkpok0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTM4MGUyMzBjYjMzNDM2MWI0ODYxZTJmNjk0MTI0Mzg3
Zjg1MjkwHhcNMjQwNTE3MTYwMTUwWhcNMjQwNTE4MTYwMTUwWjAzMTEwLwYDVQQD
EyhhMTRlMDEzYjQwYWI2ZDI0YzYwMzQzOTcwZWJlMjNlYjU1NWU1NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mOxyhXyto85Q0Mg87cJoDQeUZl8
DeNYgtFbIfeJ9V9abtOXApeWnXrOjzDlhyXqvrwP6Gi5hi7SL+pSY+0yXHe0NVKM
Z4pbsSrnWggLXvNs93eVKa0EkbyvkbE2Msfxxb0GoEUCcry8iqlPbWeSeuThprPz
0a/QpLE1ZFuKyCvU5un8eOrVcqrp1ZdP08z+qTvL2Pqm0c2jBDu1rOr0hHip4nTd
cny1Btkhw982qJGUPGDvihsSTfVPiDg/Ag8JLKg38n3gJphu+xmoEDEm2nvjQDS0
qYTrujVNTeociznwFwl4mG2Lu0+KN/PT/p6OPD+5OEsFl90vKEJxxj8hVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFOATtAq20kxgNDlw6+I+tVXlWlMB8GA1UdIwQY
MBaAFCqjgOIwyzNDYbSGHi9pQSQ4f4UpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FPQTRqRExNME5odElZZUwybEJKRGhfaFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMmM4MDMtNDNjOC00NGJiLTlkZDAt
NjUxMjI5ODMwMTcwLzEvS3FPQTRqRExNME5odElZZUwybEJKRGhfaFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mMmM4MDMtNDNjOC00NGJiLTlkZDAtNjUxMjI5ODMwMTcw
LzEvS3FPQTRqRExNME5odElZZUwybEJKRGhfaFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrGUiV1F
QP8UzAbPZkrua6QFa1h46QTKQWF08VKg4PvyL55WazD0U+ni3YZhnUnYr9gqPlVf
p0wRfKybdud4kFt21jxM4jhKa1hBttLVg7KX1XOJRMzNoYqZycn+sEDxBrwzhy98
h1sU5qj8YiG7/VL9C4xKbIHOwzdgMukcLkO6OLcBB9NLVDLHvO7p9j10G6zdItPh
MTbWQuwnGwkYXEt306+h/p5sh2lnblLbu1bMCA492eORdchhx4J92W5Bm4t2XsJZ
bSkmuKk5Wu4dLVoekQBU+Px4Z+8O2wfWBY6KTg0+lW8AosKCDJtkGUB5L+urGx25
Gk/PFCHTxHhf6g==
-----END CERTIFICATE-----
Generated at Fri May 17 18:14:15 2024 by rpki-client on console-ams.rpki-client.org