Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File:                     1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier:          tq/LJ89Lt1a9AKF2WDtkr4WMXKmOLUh2p1lsUVTch28=
Subject key identifier:   0C:82:DB:57:80:ED:A9:18:DB:A5:7E:4F:A2:8B:AD:25:6C:FF:E9:EB
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer:       /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial:       018F497FFBB829BD98163488F1784538F4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number:          0C6B
Signing time:             Sun 05 May 2024 16:04:35 +0000
Manifest this update:     Sun 05 May 2024 16:04:35 +0000
Manifest next update:     Mon 06 May 2024 16:04:35 +0000
Files and hashes:         1: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: nRc0bPFq/MDFycdl8cNlmGXS2ZEPcFjIDz6kjH3LfsI=)
                          2: LkN4qMLmZa3r3JoBZM5u1Gja6r0.roa (hash: Orn0OZqn+7ofawOcNzVnOAVEFVwk3t+vplZ7mfvJ4xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:fb:b8:29:bd:98:16:34:88:f1:78:45:38:f4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
        Validity
            Not Before: May  5 16:04:35 2024 GMT
            Not After : May  6 16:04:35 2024 GMT
        Subject: CN=0c82db5780eda918dba57e4fa28bad256cffe9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:b5:34:e8:de:58:de:22:e7:19:a0:ff:eb:
                    e4:b7:01:7e:7d:6c:c9:2a:f0:6f:0e:89:46:61:34:
                    51:64:fc:7e:63:8f:4f:73:d0:0d:e7:c7:60:c4:7a:
                    8b:f3:c8:d8:a5:db:70:42:f7:bf:c8:cc:22:6e:b3:
                    ed:c1:6a:12:8d:43:0f:09:09:cd:3d:e2:e1:fe:96:
                    cb:26:57:3c:ae:95:0a:14:d4:52:da:43:4e:13:57:
                    38:73:0c:53:f5:5b:a9:ca:82:52:8d:c9:3e:d6:5f:
                    cf:4e:9d:f7:e5:12:b0:4c:3c:b4:2e:8d:f6:38:80:
                    16:a8:46:5e:72:02:35:9c:e3:94:07:bd:99:94:e9:
                    bd:ca:7d:ac:5d:dc:54:91:d4:c6:a5:d2:a2:c9:81:
                    b3:6b:a5:37:4a:b0:aa:18:ef:8b:3c:37:5e:9e:68:
                    1d:44:fd:4f:c6:28:11:e1:44:b5:a8:cc:ad:87:d0:
                    71:05:85:57:4d:f1:fa:c5:3b:4c:bd:ef:53:c0:c5:
                    bb:b2:0e:46:0a:54:39:85:52:49:16:99:b6:c9:a0:
                    1f:bb:a7:e1:85:20:20:da:88:32:5b:3c:f2:df:28:
                    b1:90:5a:1f:02:69:59:3f:3e:5b:33:a8:d2:eb:7d:
                    93:fa:13:f9:d1:3a:df:d7:e1:32:3f:41:0d:a1:27:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:DB:57:80:ED:A9:18:DB:A5:7E:4F:A2:8B:AD:25:6C:FF:E9:EB
            X509v3 Authority Key Identifier:
                keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:65:d7:7d:49:34:a4:93:b4:d5:9d:0c:62:3c:9e:5d:ea:74:
         e7:b9:6a:6c:76:75:ed:ce:75:cc:2c:89:97:7b:e6:32:cd:a6:
         11:5a:46:18:57:4e:5b:bb:8e:92:3b:88:e8:90:71:c7:a8:2f:
         c7:f2:e4:04:62:1e:7e:4b:74:3d:f4:99:80:68:2a:6c:ad:be:
         93:f2:b7:95:64:7c:67:53:19:57:0f:b5:de:08:26:58:09:e4:
         8d:75:4e:eb:4d:e2:22:5e:d6:ab:9d:3c:88:b6:2d:e7:36:9e:
         79:fb:a6:2c:8a:67:58:74:02:0e:ab:cd:e6:c8:5d:e1:82:4f:
         72:16:8c:af:bc:e0:2c:75:bc:66:b7:91:2a:b0:07:bf:af:16:
         07:76:45:a2:96:fc:c6:d8:82:bb:3f:6e:09:ee:6f:ca:6f:f1:
         f7:93:90:73:84:5f:c3:c8:e2:84:9a:22:96:0e:15:6b:07:f3:
         e7:e9:12:08:23:f5:d1:4a:b6:a4:5a:1e:1c:77:79:29:c9:93:
         5f:0f:9e:57:0a:8f:58:4d:0c:eb:4c:a6:3f:66:2c:f0:aa:e3:
         9f:e4:fd:95:89:83:23:63:fb:55:8f:6c:88:92:c2:05:01:1c:
         9b:7a:97:7d:f6:10:e5:be:c2:5f:8a:7b:0a:f2:42:9e:41:77:
         7c:ba:6a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Jf/u4Kb2YFjSI8XhFOPTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzYxOGQzNDE3OWMzZWE1MjMzMDI2NGExOTY0MTg3YjIz
Y2RkMjQwHhcNMjQwNTA1MTYwNDM1WhcNMjQwNTA2MTYwNDM1WjAzMTEwLwYDVQQD
EygwYzgyZGI1NzgwZWRhOTE4ZGJhNTdlNGZhMjhiYWQyNTZjZmZlOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij21NOjeWN4i5xmg/+vktwF+fWzJ
KvBvDolGYTRRZPx+Y49Pc9AN58dgxHqL88jYpdtwQve/yMwibrPtwWoSjUMPCQnN
PeLh/pbLJlc8rpUKFNRS2kNOE1c4cwxT9VupyoJSjck+1l/PTp335RKwTDy0Lo32
OIAWqEZecgI1nOOUB72ZlOm9yn2sXdxUkdTGpdKiyYGza6U3SrCqGO+LPDdenmgd
RP1PxigR4US1qMyth9BxBYVXTfH6xTtMve9TwMW7sg5GClQ5hVJJFpm2yaAfu6fh
hSAg2ogyWzzy3yixkFofAmlZPz5bM6jS632T+hP50Trf1+EyP0ENoScQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyC21eA7akY26V+T6KLrSVs/+nrMB8GA1UdIwQY
MBaAFNZ2GNNBecPqUjMCZKGWQYeyPN0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80N2Y1MTMtNzZkYi00YTYxLWIxYmUt
NzRkYzgzODZkYzZhLzEvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80N2Y1MTMtNzZkYi00YTYxLWIxYmUtNzRkYzgzODZkYzZh
LzEvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2XXfUk0
pJO01Z0MYjyeXep057lqbHZ17c51zCyJl3vmMs2mEVpGGFdOW7uOkjuI6JBxx6gv
x/LkBGIefkt0PfSZgGgqbK2+k/K3lWR8Z1MZVw+13ggmWAnkjXVO603iIl7Wq508
iLYt5zaeefumLIpnWHQCDqvN5shd4YJPchaMr7zgLHW8ZreRKrAHv68WB3ZFopb8
xtiCuz9uCe5vym/x95OQc4Rfw8jihJoilg4Vawfz5+kSCCP10Uq2pFoeHHd5KcmT
Xw+eVwqPWE0M60ymP2Ys8Krjn+T9lYmDI2P7VY9siJLCBQEcm3qXffYQ5b7CX4p7
CvJCnkF3fLpq+Q==
-----END CERTIFICATE-----
Generated at Sun May 5 17:48:45 2024 by rpki-client on console-fra.rpki-client.org