Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File:                     k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier:          KMMiM9Hgcdq/cQS97ttdfHVngAVBQXTmq0715X1cy6U=
Subject key identifier:   C2:A4:75:9D:0A:BD:A3:17:C3:11:B3:66:FA:22:98:DA:29:B9:77:3B
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer:       /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial:       018E8301436999567E8790012D8677413C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number:          10F0
Signing time:             Thu 28 Mar 2024 03:01:21 +0000
Manifest this update:     Thu 28 Mar 2024 03:01:21 +0000
Manifest next update:     Fri 29 Mar 2024 03:01:21 +0000
Files and hashes:         1: BwH7iqZq6FdSl-vwSh47caHAm-o.roa (hash: /hoKIof5ZKKPcaltgC+oVP6lKEWHPWE72rUT9/mMuxQ=)
                          2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: nx5iYs0eZRSaW6Y8j66gc+xlATpQHyBQNikB1amLDuU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:83:01:43:69:99:56:7e:87:90:01:2d:86:77:41:3c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
        Validity
            Not Before: Mar 28 03:01:21 2024 GMT
            Not After : Mar 29 03:01:21 2024 GMT
        Subject: CN=c2a4759d0abda317c311b366fa2298da29b9773b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:e3:1b:ae:93:67:b6:42:5c:5b:72:3a:1b:
                    2c:73:a6:0d:90:47:5e:8b:b4:15:4f:a1:96:72:5b:
                    3b:bb:95:23:9f:6c:8f:52:3c:a3:ff:e7:7d:ca:00:
                    55:87:56:ab:2f:dc:7a:7a:fb:5b:ec:2c:ed:99:a6:
                    3e:b5:0a:4b:22:84:e7:4f:2c:89:4c:52:7c:3f:b3:
                    9f:21:80:5b:b7:21:df:84:c7:fc:49:de:8c:af:d6:
                    b4:e5:5a:aa:5e:e2:1d:c3:59:d3:b9:94:f6:4a:64:
                    0e:52:9b:dc:1b:37:0d:25:98:38:23:a4:a9:4c:20:
                    b7:14:4d:92:ec:60:c7:8d:82:4e:54:c1:19:01:1f:
                    6a:33:5e:89:0c:bb:5b:80:67:fa:93:19:9d:3b:52:
                    e9:e4:41:97:fa:c9:a2:15:62:cf:af:a6:61:4e:4a:
                    65:4f:1e:31:ad:33:dc:6b:f8:fd:88:6a:64:d7:e2:
                    cd:98:f2:ec:36:72:bc:03:24:7d:11:af:6b:86:fa:
                    a7:72:6f:74:5f:53:ec:52:15:48:ba:32:d8:35:ff:
                    2b:c1:f9:34:5c:82:ee:a3:2a:8f:2d:97:81:06:50:
                    e9:ff:84:60:0c:b9:e5:c9:f6:1a:b3:13:d0:72:88:
                    22:75:5d:6e:dc:39:e0:8a:16:1e:e2:f7:e2:61:e8:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A4:75:9D:0A:BD:A3:17:C3:11:B3:66:FA:22:98:DA:29:B9:77:3B
            X509v3 Authority Key Identifier:
                keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:97:98:54:c4:12:93:b4:3a:d8:c0:bd:40:ab:79:dc:1b:06:
         da:ab:03:77:af:66:37:be:a8:b4:cf:15:2a:7e:a5:6e:10:c8:
         83:c1:78:ba:ae:eb:f1:12:dc:19:85:09:80:c7:ad:f1:a4:d2:
         b2:78:29:f8:6c:fc:c0:4b:f8:a1:c5:3f:8c:7c:d3:93:eb:75:
         1c:5a:1c:3a:4a:80:b4:dd:e7:3b:91:6b:05:3a:66:ef:24:69:
         f7:b5:f9:ce:ae:6d:98:e8:e1:0d:9c:03:2e:95:f1:fe:c3:01:
         ce:da:e8:6c:df:82:3d:23:10:d0:32:70:02:b1:37:f8:f8:cc:
         64:2c:62:20:02:a4:28:b7:1e:b6:df:76:0e:9f:e7:aa:4e:19:
         13:fe:ef:51:28:13:89:97:e6:7f:e6:10:12:7b:36:e0:96:0f:
         60:48:d1:58:e0:49:ed:14:b0:e0:5d:63:5f:95:b4:dc:37:e6:
         28:e0:e8:64:0e:ce:20:88:34:8a:6f:1b:19:f4:73:03:ac:72:
         92:52:80:d6:7b:5e:29:ef:61:bc:de:58:d8:23:d1:5c:72:5e:
         b9:58:0c:39:f1:43:44:fb:d3:e1:c0:d6:2d:bd:9d:e5:30:be:
         89:82:c2:78:42:b7:b0:69:05:d9:1d:be:c8:48:8d:3b:d8:85:
         77:db:4b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY6DAUNpmVZ+h5ABLYZ3QTwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODJiZGZjOWIxYjI1MDAyMDM5MTIzNzc5ZmZhZjI0NzNm
ODUxYjcwHhcNMjQwMzI4MDMwMTIxWhcNMjQwMzI5MDMwMTIxWjAzMTEwLwYDVQQD
EyhjMmE0NzU5ZDBhYmRhMzE3YzMxMWIzNjZmYTIyOThkYTI5Yjk3NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5jjG66TZ7ZCXFtyOhssc6YNkEde
i7QVT6GWcls7u5Ujn2yPUjyj/+d9ygBVh1arL9x6evtb7CztmaY+tQpLIoTnTyyJ
TFJ8P7OfIYBbtyHfhMf8Sd6Mr9a05VqqXuIdw1nTuZT2SmQOUpvcGzcNJZg4I6Sp
TCC3FE2S7GDHjYJOVMEZAR9qM16JDLtbgGf6kxmdO1Lp5EGX+smiFWLPr6ZhTkpl
Tx4xrTPca/j9iGpk1+LNmPLsNnK8AyR9Ea9rhvqncm90X1PsUhVIujLYNf8rwfk0
XILuoyqPLZeBBlDp/4RgDLnlyfYasxPQcogidV1u3DngihYe4vfiYejBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKkdZ0KvaMXwxGzZvoimNopuXc7MB8GA1UdIwQY
MBaAFJOCvfybGyUAIDkSN3n/ryRz+FG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYt
MjRiZjQwYzEzMDhmLzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYtMjRiZjQwYzEzMDhm
LzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZeYVMQS
k7Q62MC9QKt53BsG2qsDd69mN76otM8VKn6lbhDIg8F4uq7r8RLcGYUJgMet8aTS
sngp+Gz8wEv4ocU/jHzTk+t1HFocOkqAtN3nO5FrBTpm7yRp97X5zq5tmOjhDZwD
LpXx/sMBztrobN+CPSMQ0DJwArE3+PjMZCxiIAKkKLcett92Dp/nqk4ZE/7vUSgT
iZfmf+YQEns24JYPYEjRWOBJ7RSw4F1jX5W03DfmKODoZA7OIIg0im8bGfRzA6xy
klKA1nteKe9hvN5Y2CPRXHJeuVgMOfFDRPvT4cDWLb2d5TC+iYLCeEK3sGkF2R2+
yEiNO9iFd9tLZw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 06:22:36 2024 by rpki-client on console-ams.rpki-client.org