Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File:                     JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier:          PzW6QNsbWaL/XQT2b8/BKm9yk7NmuO3o6V7WjQFsMI8=
Subject key identifier:   76:8D:2A:79:AE:B9:56:58:9C:2C:CF:15:C7:DB:61:EF:4D:1E:A8:EC
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer:       /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial:       0191FA7E416A8A9200B75451BEA934190334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number:          94
Signing time:             Mon 16 Sep 2024 11:01:03 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:03 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:03 +0000
Files and hashes:         1: 7rmYvqphLVbez-QXHLIdPx2SlrA.roa (hash: u4s/wk+aDtnPP5CJ2y9F3l1AfQRzExrH7x2fOSipHFg=)
                          2: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: UjZUl6mw24A8rlH846b3eY6lw8CBLGpxKV21VyEg+4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:41:6a:8a:92:00:b7:54:51:be:a9:34:19:03:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
        Validity
            Not Before: Sep 16 11:01:03 2024 GMT
            Not After : Sep 17 11:01:03 2024 GMT
        Subject: CN=768d2a79aeb956589c2ccf15c7db61ef4d1ea8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:c1:4d:7b:6d:2e:f7:a6:c9:b4:4a:bc:92:
                    b4:50:48:01:e4:a8:d3:89:33:6d:a5:e4:13:1c:f9:
                    5e:4f:78:2b:6b:50:e9:2a:8d:7f:75:b8:fe:1e:e5:
                    c3:06:8a:9c:06:af:06:7f:83:61:0c:19:1f:6c:3a:
                    89:20:cb:fe:44:db:1f:d6:12:5e:93:55:51:be:3a:
                    24:24:33:5f:c5:cc:01:98:d1:3d:e9:28:ee:d1:ea:
                    8f:d4:46:4f:e5:d8:34:8c:e8:19:a2:ea:a7:ef:58:
                    7b:65:4e:f2:93:35:cc:39:29:68:cf:0d:2d:b8:4a:
                    90:86:95:bd:cb:fe:d5:4e:d6:df:dd:14:9f:dc:24:
                    99:22:e9:9b:17:9b:4d:60:6d:27:a0:ba:c9:4a:d3:
                    7b:17:42:01:a4:b3:9c:83:4c:84:a3:f8:da:c6:55:
                    05:1d:02:ac:f4:35:bd:a3:f1:38:96:7b:20:42:0e:
                    01:bb:c4:fa:f1:dd:89:d8:13:00:47:31:d7:c9:6a:
                    4e:11:e8:dd:48:9c:3a:b0:fd:90:e7:47:5a:99:ee:
                    90:02:51:58:5e:59:88:c5:f4:46:33:41:da:cc:15:
                    f4:b7:86:46:ff:98:80:9b:82:90:9d:74:f7:4e:7b:
                    31:8a:60:54:a4:0d:ed:4d:d2:46:47:7f:9e:2b:a0:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8D:2A:79:AE:B9:56:58:9C:2C:CF:15:C7:DB:61:EF:4D:1E:A8:EC
            X509v3 Authority Key Identifier:
                keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:12:d5:50:28:32:ee:a7:4d:de:f1:f6:55:4c:ce:3b:c0:
         dc:c5:7d:d2:dc:0c:97:c1:4d:25:b9:31:7c:7a:bb:d3:dc:a6:
         4d:ad:91:ce:b4:57:16:16:69:4c:b2:93:c8:6b:14:62:62:9d:
         ec:70:fb:98:f0:ea:5a:33:26:97:97:da:d3:10:0f:1b:f0:91:
         34:4b:df:85:57:a0:07:08:f8:34:16:3a:56:31:5d:b7:e0:f1:
         ad:fe:b0:8f:b9:ad:6a:b2:99:eb:d6:c4:08:dd:2d:7d:7f:33:
         a8:bb:e2:7b:31:9f:7f:cb:6e:74:5a:9b:03:f0:7b:cf:ca:e8:
         dd:87:93:3a:57:bb:43:e2:90:a0:36:9e:cc:6b:36:c8:2f:37:
         2d:63:95:81:d3:b2:46:53:4e:95:5e:3c:f3:c0:92:34:98:b3:
         9c:40:8e:37:e7:b2:13:38:d7:e3:6f:f6:0a:8e:f5:12:cf:e2:
         aa:42:9e:33:f6:7b:83:91:4f:ea:62:fa:8d:e6:ae:00:4f:d3:
         b9:ca:2c:87:ca:65:1e:d6:91:33:23:88:70:c6:81:ca:1a:cc:
         27:b7:66:32:93:c7:2a:59:85:2d:55:e3:65:16:16:87:62:62:
         bf:d5:d3:96:dc:b0:e8:31:bf:3a:7e:f6:62:a8:9d:87:30:1d:
         1a:f7:ee:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6fkFqipIAt1RRvqk0GQM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTI1MGQ2YzQ2ZjI2ZjRjMzAwNWZhNDJlNDAxYThhOWU1
Yzg4NmUwHhcNMjQwOTE2MTEwMTAzWhcNMjQwOTE3MTEwMTAzWjAzMTEwLwYDVQQD
Eyg3NjhkMmE3OWFlYjk1NjU4OWMyY2NmMTVjN2RiNjFlZjRkMWVhOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BjBTXttLvemybRKvJK0UEgB5KjT
iTNtpeQTHPleT3gra1DpKo1/dbj+HuXDBoqcBq8Gf4NhDBkfbDqJIMv+RNsf1hJe
k1VRvjokJDNfxcwBmNE96Sju0eqP1EZP5dg0jOgZouqn71h7ZU7ykzXMOSlozw0t
uEqQhpW9y/7VTtbf3RSf3CSZIumbF5tNYG0noLrJStN7F0IBpLOcg0yEo/jaxlUF
HQKs9DW9o/E4lnsgQg4Bu8T68d2J2BMARzHXyWpOEejdSJw6sP2Q50dame6QAlFY
XlmIxfRGM0HazBX0t4ZG/5iAm4KQnXT3TnsximBUpA3tTdJGR3+eK6Ap5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaNKnmuuVZYnCzPFcfbYe9NHqjsMB8GA1UdIwQY
MBaAFCaiUNbEbyb0wwBfpC5AGoqeXIhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5Zjct
MWZmN2IzMWU1MmNkLzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5ZjctMWZmN2IzMWU1MmNk
LzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO0S1VAo
Mu6nTd7x9lVMzjvA3MV90twMl8FNJbkxfHq709ymTa2RzrRXFhZpTLKTyGsUYmKd
7HD7mPDqWjMml5fa0xAPG/CRNEvfhVegBwj4NBY6VjFdt+Dxrf6wj7mtarKZ69bE
CN0tfX8zqLviezGff8tudFqbA/B7z8ro3YeTOle7Q+KQoDaezGs2yC83LWOVgdOy
RlNOlV4888CSNJiznECON+eyEzjX42/2Co71Es/iqkKeM/Z7g5FP6mL6jeauAE/T
ucosh8plHtaRMyOIcMaByhrMJ7dmMpPHKlmFLVXjZRYWh2Jiv9XTltyw6DG/On72
YqidhzAdGvfuJQ==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:20:53 2024 by rpki-client on console-fra.rpki-client.org