Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          Ebkyw7o2fGfW8rKLdUNWQIei6BPM0l3HdtfylTeiG6U=
Subject key identifier:   3F:8D:B7:5F:15:8A:3C:C4:7D:A9:DA:9C:3F:67:8B:4D:35:C8:F9:2A
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       018F3DE800EDF60CA258184DD76516581CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0847
Signing time:             Fri 03 May 2024 10:02:45 +0000
Manifest this update:     Fri 03 May 2024 10:02:45 +0000
Manifest next update:     Sat 04 May 2024 10:02:45 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: h+m23jjk06R4IZIHhE9NMcVLL7i27uI3V2O96w4pwjI=)
                          2: f-lyAlfRJhEJz3Klz_HhwIkkkM8.roa (hash: NJy4koiRrunP6ZOIRXeB5v+pLWAKHwTVw40T//ydpbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e8:00:ed:f6:0c:a2:58:18:4d:d7:65:16:58:1c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: May  3 10:02:45 2024 GMT
            Not After : May  4 10:02:45 2024 GMT
        Subject: CN=3f8db75f158a3cc47da9da9c3f678b4d35c8f92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:cc:fa:15:8a:45:38:32:c8:fa:52:84:49:
                    01:86:cc:05:32:45:c7:e7:ac:d7:30:cc:df:6f:dd:
                    3c:4b:a6:cf:0d:0d:ec:c8:7e:ea:de:e4:1c:08:75:
                    fa:4a:99:cd:c0:6b:30:24:11:0e:59:2a:51:28:00:
                    66:2d:9f:ce:5e:4b:61:d5:2e:40:89:ac:4d:5a:d4:
                    2a:77:a0:bb:6e:22:36:5e:db:1a:8f:aa:e8:72:d4:
                    85:10:78:69:2f:c9:d1:1e:e2:11:cf:84:8d:12:0f:
                    b8:d0:79:a9:ac:31:73:e5:57:67:6e:31:35:c8:72:
                    80:61:0e:ca:03:7c:2e:53:3c:cc:72:4a:d6:db:9a:
                    b8:2b:90:8c:4d:b5:7e:87:13:c2:4c:e9:f3:b1:34:
                    be:04:9e:e4:16:2b:d8:e1:39:65:40:fc:15:38:0a:
                    f1:ad:90:91:87:d2:22:cb:b3:49:94:ab:17:fe:01:
                    27:42:0b:cf:b1:5b:e3:64:b5:b8:53:aa:fb:bf:0d:
                    44:6d:c2:78:f0:1d:9a:52:6f:23:f7:25:f9:45:2a:
                    8b:06:23:44:87:a7:ee:5d:91:10:a7:d2:32:5c:be:
                    ab:cc:94:a7:9d:d2:82:73:d8:59:98:cd:b6:e6:07:
                    45:3f:4e:3f:9d:2f:66:1d:70:0e:4e:c7:4e:91:69:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8D:B7:5F:15:8A:3C:C4:7D:A9:DA:9C:3F:67:8B:4D:35:C8:F9:2A
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:d5:93:de:58:9b:01:55:d3:9e:c0:62:16:a2:13:86:6d:
         de:7b:bd:8a:9d:9e:4b:98:36:65:45:f6:19:b2:71:f0:a9:ef:
         5b:4c:20:5d:f0:30:45:19:63:45:19:7e:8f:cd:6b:5a:a2:19:
         fc:45:84:b9:f8:c0:5d:be:de:4b:00:cb:d0:57:8c:1a:bc:48:
         84:8b:f4:9f:7a:4f:05:6c:15:35:06:5e:23:21:ff:84:70:5c:
         c8:30:11:29:29:03:36:0a:b2:c7:50:27:ec:85:7d:0a:ca:25:
         43:9b:1c:15:44:3b:70:63:ec:6b:68:85:39:6e:94:2e:a2:60:
         bb:04:cf:70:7d:80:ab:84:9b:24:dd:93:26:45:9a:97:0e:5f:
         3f:d2:13:c4:a7:3e:0d:f7:f6:dc:09:66:ea:ab:9a:0a:02:fb:
         52:75:27:30:d6:8f:a9:63:09:ab:93:ae:1b:21:4e:77:e9:2f:
         35:f5:46:98:be:dc:6f:ce:85:91:ca:48:b0:62:4c:18:fc:d1:
         3b:d1:8e:21:11:fc:3e:5d:6c:b9:c8:67:26:e0:12:04:bd:6c:
         2a:fd:89:26:d9:57:9e:12:66:05:d1:51:39:62:ed:12:67:9b:
         9b:63:fd:85:00:b8:25:3a:30:99:9c:27:95:1c:b6:de:f0:00:
         ab:f0:d5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY896ADt9gyiWBhN12UWWBy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ODdlNWZjYmNiZjFhZDAzMjY4ZGFjOWVlNWQyOTIwMjUz
NjgwOTAwHhcNMjQwNTAzMTAwMjQ1WhcNMjQwNTA0MTAwMjQ1WjAzMTEwLwYDVQQD
EygzZjhkYjc1ZjE1OGEzY2M0N2RhOWRhOWMzZjY3OGI0ZDM1YzhmOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nfM+hWKRTgyyPpShEkBhswFMkXH
56zXMMzfb908S6bPDQ3syH7q3uQcCHX6SpnNwGswJBEOWSpRKABmLZ/OXkth1S5A
iaxNWtQqd6C7biI2Xtsaj6roctSFEHhpL8nRHuIRz4SNEg+40HmprDFz5VdnbjE1
yHKAYQ7KA3wuUzzMckrW25q4K5CMTbV+hxPCTOnzsTS+BJ7kFivY4TllQPwVOArx
rZCRh9Iiy7NJlKsX/gEnQgvPsVvjZLW4U6r7vw1EbcJ48B2aUm8j9yX5RSqLBiNE
h6fuXZEQp9IyXL6rzJSnndKCc9hZmM225gdFP04/nS9mHXAOTsdOkWm5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+Nt18VijzEfananD9ni001yPkqMB8GA1UdIwQY
MBaAFOiH5fy8vxrQMmjaye5dKSAlNoCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMWZiNDYtOGI0Ny00ZjkxLThiOWEt
ZDdmYWE3ZTdlODRkLzEvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMWZiNDYtOGI0Ny00ZjkxLThiOWEtZDdmYWE3ZTdlODRk
LzEvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxDVk95Y
mwFV057AYhaiE4Zt3nu9ip2eS5g2ZUX2GbJx8KnvW0wgXfAwRRljRRl+j81rWqIZ
/EWEufjAXb7eSwDL0FeMGrxIhIv0n3pPBWwVNQZeIyH/hHBcyDARKSkDNgqyx1An
7IV9CsolQ5scFUQ7cGPsa2iFOW6ULqJguwTPcH2Aq4SbJN2TJkWalw5fP9ITxKc+
Dff23Alm6quaCgL7UnUnMNaPqWMJq5OuGyFOd+kvNfVGmL7cb86FkcpIsGJMGPzR
O9GOIRH8Pl1suchnJuASBL1sKv2JJtlXnhJmBdFROWLtEmebm2P9hQC4JTowmZwn
lRy23vAAq/DVkg==
-----END CERTIFICATE-----
Generated at Fri May 3 12:59:25 2024 by rpki-client on console-fra.rpki-client.org