Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.mft
File:                     61eixgC2ngu67ixomWeS9ihqv-c.mft (raw, json)
Hash identifier:          fIwa8Frz+GDKkHyrCKOwYpnfhbsw7uaGNctzFBFcEr0=
Subject key identifier:   C5:94:7C:26:98:BA:5C:50:83:5F:6F:A9:A5:84:0F:F9:DE:43:0F:49
Authority key identifier: EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
Certificate issuer:       /CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Certificate serial:       018EFE2D32D1320C1F8393C251BB2309BABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.mft
Manifest number:          082C
Signing time:             Sun 21 Apr 2024 01:02:38 +0000
Manifest this update:     Sun 21 Apr 2024 01:02:38 +0000
Manifest next update:     Mon 22 Apr 2024 01:02:38 +0000
Files and hashes:         1: 61eixgC2ngu67ixomWeS9ihqv-c.crl (hash: vMVBI9Z5TMRyJosFxJd0Cn788xyImo75FF+Bn7tRLk4=)
                          2: wOdjRZ6XjP6i2NMge6cUPrwy9JM.roa (hash: 9jw273CgeQI0tDM+bZorl1UVJE4KIV21O7ROcTioxEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fe:2d:32:d1:32:0c:1f:83:93:c2:51:bb:23:09:ba:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
        Validity
            Not Before: Apr 21 01:02:38 2024 GMT
            Not After : Apr 22 01:02:38 2024 GMT
        Subject: CN=c5947c2698ba5c50835f6fa9a5840ff9de430f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:da:07:48:6f:7c:cb:35:72:aa:25:4c:a2:
                    c7:6a:40:47:62:74:0c:e6:87:6d:1d:6c:ee:9e:d1:
                    39:f3:5b:f3:ac:7a:ef:c9:de:15:54:8c:09:e0:13:
                    29:96:47:0d:e1:79:44:9e:8e:d6:b9:67:1a:84:07:
                    47:5c:fd:3f:4c:44:2d:1b:6d:f7:6c:eb:de:05:5c:
                    7a:72:f6:42:3e:28:aa:90:89:61:73:67:98:af:3b:
                    1a:e2:95:24:b4:8c:db:25:ec:23:21:6b:9a:0e:26:
                    91:7c:65:5f:7f:35:a9:79:b9:42:c6:5a:82:c4:31:
                    39:c0:1e:4f:10:45:50:12:b9:5f:36:d9:c4:56:39:
                    c3:b8:3d:7c:37:dd:86:8d:16:d9:d3:8f:29:81:63:
                    d1:7f:19:98:11:49:b9:55:d5:19:55:f9:25:73:05:
                    0b:b8:95:fb:91:d3:76:a2:1b:49:35:cb:ff:a7:7a:
                    e5:fe:1a:c9:7f:e8:98:5d:29:f9:f0:81:e3:ad:52:
                    fc:75:0c:2c:d4:43:9a:44:06:f6:4a:cd:5f:04:b4:
                    86:83:b0:9f:fe:51:5d:39:57:f5:7b:ca:0e:53:20:
                    6e:97:75:8b:59:ba:a9:0c:ee:44:0a:8c:21:a0:11:
                    49:f0:e4:13:0f:a1:39:54:93:44:a4:52:4f:bb:5c:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:94:7C:26:98:BA:5C:50:83:5F:6F:A9:A5:84:0F:F9:DE:43:0F:49
            X509v3 Authority Key Identifier:
                keyid:EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:1b:4a:a8:b5:b7:85:d8:30:8d:ba:62:da:d3:e2:7b:7f:
         54:ed:f8:57:b1:4b:83:96:0a:3c:78:ea:4f:48:6e:e5:96:d4:
         20:c4:4c:2e:7f:f2:ec:8e:2e:5f:0f:52:53:ad:f3:b4:b2:7d:
         8e:6a:01:d3:87:c9:dd:2f:16:d8:f8:9a:3e:47:78:89:36:ee:
         fb:ab:3f:5b:de:b3:eb:3e:db:3b:91:cf:79:f1:7a:45:d0:25:
         34:a7:1b:12:d3:f7:dc:ad:3f:92:cf:26:3f:06:73:9e:8d:d4:
         80:fb:2a:9b:7b:d2:6d:0b:50:6c:7e:3e:ad:ed:22:a7:47:38:
         c6:96:6b:e8:68:f6:ea:0a:90:74:52:55:4f:35:da:0b:99:32:
         59:a6:cf:a8:c7:3e:9f:81:e4:62:bc:77:68:42:95:15:d3:69:
         56:e5:c5:cd:34:e0:ce:af:e0:5b:59:29:6d:e1:3d:8b:55:af:
         dc:d5:70:4d:89:75:31:76:92:c3:dd:41:ee:57:00:e4:cc:83:
         07:d8:f5:18:89:ab:b9:1b:d5:ee:5d:f6:fa:23:8f:d6:8b:d1:
         e8:de:a1:23:13:51:42:ac:e9:03:ef:85:f4:d9:63:a9:c0:ac:
         72:dd:da:c9:93:c6:21:bb:4e:1c:b6:68:a1:42:5f:0d:aa:fd:
         45:70:a2:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7+LTLRMgwfg5PCUbsjCbq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTdhMmM2MDBiNjllMGJiYWVlMmM2ODk5Njc5MmY2Mjg2
YWJmZTcwHhcNMjQwNDIxMDEwMjM4WhcNMjQwNDIyMDEwMjM4WjAzMTEwLwYDVQQD
EyhjNTk0N2MyNjk4YmE1YzUwODM1ZjZmYTlhNTg0MGZmOWRlNDMwZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO3aB0hvfMs1cqolTKLHakBHYnQM
5odtHWzuntE581vzrHrvyd4VVIwJ4BMplkcN4XlEno7WuWcahAdHXP0/TEQtG233
bOveBVx6cvZCPiiqkIlhc2eYrzsa4pUktIzbJewjIWuaDiaRfGVffzWpeblCxlqC
xDE5wB5PEEVQErlfNtnEVjnDuD18N92GjRbZ048pgWPRfxmYEUm5VdUZVfklcwUL
uJX7kdN2ohtJNcv/p3rl/hrJf+iYXSn58IHjrVL8dQws1EOaRAb2Ss1fBLSGg7Cf
/lFdOVf1e8oOUyBul3WLWbqpDO5ECowhoBFJ8OQTD6E5VJNEpFJPu1zlkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWUfCaYulxQg19vqaWED/neQw9JMB8GA1UdIwQY
MBaAFOtXosYAtp4Luu4saJlnkvYoar/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFlaXhnQzJuZ3U2N2l4b21XZVM5aWhxdi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83N2MyZGItZjdkMy00YThhLTllNTAt
NmQwYWY0NjBmY2VhLzEvNjFlaXhnQzJuZ3U2N2l4b21XZVM5aWhxdi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83N2MyZGItZjdkMy00YThhLTllNTAtNmQwYWY0NjBmY2Vh
LzEvNjFlaXhnQzJuZ3U2N2l4b21XZVM5aWhxdi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAge0bSqi1
t4XYMI26YtrT4nt/VO34V7FLg5YKPHjqT0hu5ZbUIMRMLn/y7I4uXw9SU63ztLJ9
jmoB04fJ3S8W2PiaPkd4iTbu+6s/W96z6z7bO5HPefF6RdAlNKcbEtP33K0/ks8m
PwZzno3UgPsqm3vSbQtQbH4+re0ip0c4xpZr6Gj26gqQdFJVTzXaC5kyWabPqMc+
n4HkYrx3aEKVFdNpVuXFzTTgzq/gW1kpbeE9i1Wv3NVwTYl1MXaSw91B7lcA5MyD
B9j1GImruRvV7l32+iOP1ovR6N6hIxNRQqzpA++F9NljqcCsct3ayZPGIbtOHLZo
oUJfDar9RXCiuA==
-----END CERTIFICATE-----
Generated at Sun Apr 21 05:13:28 2024 by rpki-client on console-ams.rpki-client.org