Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File:                     __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier:          C7gdR8EaHIWzhx7ZI0PfqZoOWQ0LqsoM2k6uLkvLyW0=
Subject key identifier:   E1:81:9F:5D:90:92:4D:C0:FA:8A:A7:1C:AF:3D:90:A2:1F:E5:23:2A
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer:       /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial:       019234DB748BCE7EBF147B0E2CF04A02B4B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number:          12DB
Signing time:             Fri 27 Sep 2024 19:00:50 +0000
Manifest this update:     Fri 27 Sep 2024 19:00:50 +0000
Manifest next update:     Sat 28 Sep 2024 19:00:50 +0000
Files and hashes:         1: U0byKZnITHTL6PzOfQnnL1LGyfU.roa (hash: +gIuQzaLQ4mZAVOQy5JQENcyJzbjHyMxjPkY6yW3xxc=)
                          2: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: q5bhcchFpTJl6KOqP704uIwgILs1tQnrpM+nSmhSX6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:db:74:8b:ce:7e:bf:14:7b:0e:2c:f0:4a:02:b4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
        Validity
            Not Before: Sep 27 19:00:50 2024 GMT
            Not After : Sep 28 19:00:50 2024 GMT
        Subject: CN=e1819f5d90924dc0fa8aa71caf3d90a21fe5232a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:37:7d:2f:cb:50:00:a9:fa:c7:6f:73:82:
                    10:a4:55:06:bc:6a:81:7e:20:00:24:82:b9:51:23:
                    23:a7:f8:0a:27:0b:32:21:68:7e:b2:b9:37:15:5f:
                    f9:7e:4f:61:62:11:51:82:ac:1c:1f:8f:3b:25:2c:
                    15:a6:7b:b6:c9:d9:51:8e:aa:dc:6f:cf:27:de:73:
                    1b:ec:0b:93:fe:77:cf:86:df:b2:62:30:09:3f:18:
                    33:de:a9:b7:b4:dc:4f:14:23:ff:83:4f:03:23:84:
                    45:87:4f:db:94:c4:87:dd:6d:3b:4e:a6:8f:c3:a2:
                    5a:53:cc:86:9b:6b:07:1f:67:a6:26:f3:d9:85:70:
                    3b:30:f0:5c:f1:5d:2f:3d:4d:41:1b:ae:93:1f:a2:
                    80:16:f2:67:40:c7:6e:99:4f:2d:02:06:d7:9b:61:
                    8c:e7:9d:59:94:09:df:6a:ed:51:4f:2f:45:21:c7:
                    4f:37:a4:d0:1a:6f:78:84:09:dc:53:ea:db:45:c4:
                    54:35:ae:e6:24:8d:c4:17:ba:32:e1:36:4e:b6:fe:
                    42:95:04:2d:ea:08:8d:61:17:9e:f7:6f:6c:cb:5e:
                    84:88:da:6a:92:5b:0f:90:c4:36:0a:d8:0f:bc:3e:
                    65:0e:87:6d:06:5e:a1:8a:7e:d5:89:ba:c7:a4:1d:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:81:9F:5D:90:92:4D:C0:FA:8A:A7:1C:AF:3D:90:A2:1F:E5:23:2A
            X509v3 Authority Key Identifier:
                keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:f7:31:16:6f:59:85:04:24:65:35:ab:8c:22:3c:4c:b1:
         13:b5:cb:ee:a7:33:6e:db:fc:9e:d9:c6:02:6c:a1:55:de:12:
         44:18:58:65:e8:d2:35:4f:a9:8f:97:29:15:d4:19:e2:1d:3a:
         39:c6:de:5d:7d:94:ff:87:c6:d3:46:7b:b4:2e:3c:ed:cd:95:
         e6:e5:61:7c:73:52:e4:1b:33:3a:9a:b5:69:12:3e:cb:34:ba:
         d3:96:7e:62:20:f8:8f:b5:7a:21:37:72:a5:c1:91:b0:48:e6:
         a3:22:73:30:d2:4b:eb:eb:c4:a3:ae:16:3d:c3:51:1a:4e:72:
         89:bc:ec:ed:d1:d7:08:10:ff:de:97:05:86:67:c0:14:3b:87:
         e9:97:24:2e:a3:94:6d:4e:f8:9f:56:75:a5:19:e0:fb:72:ed:
         2a:8b:99:eb:f8:45:ca:39:ee:5e:53:7d:5a:13:46:04:08:f5:
         48:0a:31:db:14:83:16:cb:09:0a:65:f1:67:59:ad:00:f6:a6:
         49:1b:d2:a2:fb:d5:97:0d:d0:68:59:3c:be:bd:95:ba:e8:2a:
         1c:32:9f:60:e8:48:2b:8a:43:42:ba:6e:53:fe:f2:6b:bb:63:
         d6:45:44:bb:9d:e3:73:df:3e:8c:fd:2f:dd:10:4b:94:74:f2:
         51:c4:cc:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI023SLzn6/FHsOLPBKArS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjQ0MmFmZmJhMWNmYWVmMzEwMmM5ODFkNzU2OTUwMmNl
NjUxNWMwHhcNMjQwOTI3MTkwMDUwWhcNMjQwOTI4MTkwMDUwWjAzMTEwLwYDVQQD
EyhlMTgxOWY1ZDkwOTI0ZGMwZmE4YWE3MWNhZjNkOTBhMjFmZTUyMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeU3fS/LUACp+sdvc4IQpFUGvGqB
fiAAJIK5USMjp/gKJwsyIWh+srk3FV/5fk9hYhFRgqwcH487JSwVpnu2ydlRjqrc
b88n3nMb7AuT/nfPht+yYjAJPxgz3qm3tNxPFCP/g08DI4RFh0/blMSH3W07TqaP
w6JaU8yGm2sHH2emJvPZhXA7MPBc8V0vPU1BG66TH6KAFvJnQMdumU8tAgbXm2GM
551ZlAnfau1RTy9FIcdPN6TQGm94hAncU+rbRcRUNa7mJI3EF7oy4TZOtv5ClQQt
6giNYRee929sy16EiNpqklsPkMQ2CtgPvD5lDodtBl6hin7VibrHpB3CDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGBn12Qkk3A+oqnHK89kKIf5SMqMB8GA1UdIwQY
MBaAFP/0Qq/7oc+u8xAsmB11aVAs5lFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMt
YjVjYTBhZGYyZjA4LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMtYjVjYTBhZGYyZjA4
LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoP3MRZv
WYUEJGU1q4wiPEyxE7XL7qczbtv8ntnGAmyhVd4SRBhYZejSNU+pj5cpFdQZ4h06
OcbeXX2U/4fG00Z7tC487c2V5uVhfHNS5BszOpq1aRI+yzS605Z+YiD4j7V6ITdy
pcGRsEjmoyJzMNJL6+vEo64WPcNRGk5yibzs7dHXCBD/3pcFhmfAFDuH6ZckLqOU
bU74n1Z1pRng+3LtKouZ6/hFyjnuXlN9WhNGBAj1SAox2xSDFssJCmXxZ1mtAPam
SRvSovvVlw3QaFk8vr2VuugqHDKfYOhIK4pDQrpuU/7ya7tj1kVEu53jc98+jP0v
3RBLlHTyUcTMiw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:10:03 2024 by rpki-client on console-ams.rpki-client.org