Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File:                     q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier:          x60AdmNd/fe9BUXKW907yNoBj2x1aOT0SIST2cRtoZw=
Subject key identifier:   BE:19:70:8D:9F:F7:ED:1C:CF:C2:50:FF:4F:99:EA:D4:A4:E7:27:DC
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer:       /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial:       018F96BBED122696BC19A97F43A2DA9462A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number:          0DC2
Signing time:             Mon 20 May 2024 16:00:49 +0000
Manifest this update:     Mon 20 May 2024 16:00:49 +0000
Manifest next update:     Tue 21 May 2024 16:00:49 +0000
Files and hashes:         1: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: geEMCtQraW70v92RFpUqRRBV6wCdlgOXbQayqbjqP34=)
                          2: vWgcEKTNxMC7tFT2zjOOtE_XzpQ.roa (hash: sUu7KyfF5P6WMStvQSbenwdIkyxcpmg0mRoKZmh0QN8=)
                          3: zmPS2ffR8OQr49t2pC-gQaf4MeI.roa (hash: v46iL4g8sGm3kAh6G8Omx6KlQ7R9qlsfIwvMTIrKh6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:ed:12:26:96:bc:19:a9:7f:43:a2:da:94:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
        Validity
            Not Before: May 20 16:00:49 2024 GMT
            Not After : May 21 16:00:49 2024 GMT
        Subject: CN=be19708d9ff7ed1ccfc250ff4f99ead4a4e727dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:7c:89:b3:9b:07:71:93:80:db:44:26:1d:
                    f0:63:67:db:77:c7:80:6d:ca:95:ec:b8:51:b3:65:
                    b8:d7:cb:2f:3f:02:30:3e:63:ae:c9:9e:1b:fb:a2:
                    1c:7d:78:32:d6:b8:4b:7a:1a:dd:4f:d3:46:32:c0:
                    46:85:8b:39:6d:fa:3b:ba:75:f4:20:1d:cc:f3:d4:
                    b8:78:fe:cb:07:a8:16:89:91:da:b8:46:11:01:da:
                    d0:95:ec:c1:ff:34:48:06:7b:9c:22:9b:9e:58:01:
                    6e:dc:a4:2a:0c:0c:98:0c:d0:7e:c2:49:51:9b:b3:
                    22:94:05:5a:f8:c7:3b:06:86:c6:07:eb:98:c4:c2:
                    4d:38:ec:ef:5f:57:85:ac:4d:98:12:96:ca:1a:b6:
                    49:25:3b:e1:16:20:9b:6e:65:91:89:02:7c:49:f6:
                    23:9a:35:58:e4:80:fc:e3:07:97:43:ec:cc:10:74:
                    96:d1:0b:a6:04:87:81:86:b7:d7:a8:5e:0b:7f:06:
                    71:6e:e7:ca:58:29:91:35:d6:8b:11:f1:01:0a:68:
                    c0:fc:97:10:3c:cf:97:fd:52:e8:55:14:da:f0:f0:
                    b9:80:db:3b:75:f7:fd:79:90:b0:20:c8:6d:b9:ea:
                    7a:b6:e7:06:f8:ae:3c:d3:d9:3d:36:8f:d0:01:d1:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:19:70:8D:9F:F7:ED:1C:CF:C2:50:FF:4F:99:EA:D4:A4:E7:27:DC
            X509v3 Authority Key Identifier:
                keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f5:ae:3b:1a:07:90:c1:f9:4d:8f:d6:c8:33:71:d2:c0:7f:
         25:b9:c2:d5:63:50:26:57:d2:27:50:68:55:82:54:1f:6f:bf:
         9b:71:5e:d4:89:8e:4f:34:ca:9c:28:32:6f:75:d8:79:3f:a5:
         ae:42:78:d2:9b:b8:e1:2e:2a:81:05:7a:54:59:42:32:4e:06:
         45:1d:c7:38:35:37:cb:f2:a5:27:86:de:4c:ff:54:0e:bd:13:
         29:60:1a:35:17:5b:eb:4a:d7:3b:ef:af:96:c4:0a:1a:95:da:
         0a:9f:7d:d8:d5:69:c1:de:28:16:24:5c:9f:be:b0:bf:a3:7e:
         39:f1:3e:37:4b:cd:61:63:da:78:c0:91:38:53:bc:fd:db:c1:
         89:73:34:12:f1:1d:95:13:2a:0f:58:5f:2a:60:79:88:1c:74:
         85:dc:bd:e6:c7:a3:0b:3f:70:c3:90:fc:fa:84:c4:22:a8:3e:
         75:b7:e3:a9:f3:7c:72:23:d8:fe:74:28:47:07:57:32:c1:02:
         04:94:5f:7d:56:14:29:97:f5:92:20:ab:0d:54:f0:84:22:b8:
         07:74:58:47:08:3a:d5:da:a3:8a:e1:de:5d:2b:17:7b:bf:d2:
         04:b7:71:15:5a:4c:e8:b6:87:bb:a4:e7:50:f9:c5:68:4d:de:
         a5:11:dc:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Wu+0SJpa8Gal/Q6LalGKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjQwNTIwMTYwMDQ5WhcNMjQwNTIxMTYwMDQ5WjAzMTEwLwYDVQQD
EyhiZTE5NzA4ZDlmZjdlZDFjY2ZjMjUwZmY0Zjk5ZWFkNGE0ZTcyN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspd8ibObB3GTgNtEJh3wY2fbd8eA
bcqV7LhRs2W418svPwIwPmOuyZ4b+6IcfXgy1rhLehrdT9NGMsBGhYs5bfo7unX0
IB3M89S4eP7LB6gWiZHauEYRAdrQlezB/zRIBnucIpueWAFu3KQqDAyYDNB+wklR
m7MilAVa+Mc7BobGB+uYxMJNOOzvX1eFrE2YEpbKGrZJJTvhFiCbbmWRiQJ8SfYj
mjVY5ID84weXQ+zMEHSW0QumBIeBhrfXqF4LfwZxbufKWCmRNdaLEfEBCmjA/JcQ
PM+X/VLoVRTa8PC5gNs7dff9eZCwIMhtuep6tucG+K4809k9No/QAdGS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4ZcI2f9+0cz8JQ/0+Z6tSk5yfcMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvWuOxoH
kMH5TY/WyDNx0sB/JbnC1WNQJlfSJ1BoVYJUH2+/m3Fe1ImOTzTKnCgyb3XYeT+l
rkJ40pu44S4qgQV6VFlCMk4GRR3HODU3y/KlJ4beTP9UDr0TKWAaNRdb60rXO++v
lsQKGpXaCp992NVpwd4oFiRcn76wv6N+OfE+N0vNYWPaeMCROFO8/dvBiXM0EvEd
lRMqD1hfKmB5iBx0hdy95sejCz9ww5D8+oTEIqg+dbfjqfN8ciPY/nQoRwdXMsEC
BJRffVYUKZf1kiCrDVTwhCK4B3RYRwg61dqjiuHeXSsXe7/SBLdxFVpM6LaHu6Tn
UPnFaE3epRHc5g==
-----END CERTIFICATE-----
Generated at Mon May 20 18:18:42 2024 by rpki-client on console-ams.rpki-client.org