Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File:                     kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier:          8m8EHy67m2JXiM315JnAu6byKubOz/fla57Xt3UEZUo=
Subject key identifier:   22:24:7A:D7:09:04:31:3C:65:AD:89:08:EB:D4:3A:01:20:8A:10:35
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer:       /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial:       01906E2B00F36D6F3DCC36E85EF9AA0790B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number:          0508
Signing time:             Mon 01 Jul 2024 12:00:30 +0000
Manifest this update:     Mon 01 Jul 2024 12:00:30 +0000
Manifest next update:     Tue 02 Jul 2024 12:00:30 +0000
Files and hashes:         1: 82N0cLyt5vHepcJt7gWmGYiqRwQ.roa (hash: KNF8WIKRWP5kzyCxFrBRwO893YEyrs+z1+E7u8PhQQ0=)
                          2: buR4NaIGvE-c2GsWiaXmD18GyGg.roa (hash: tihymfCDs/+Antuhu3jr7iPR0Shk/iiSupYQSP0uTRA=)
                          3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: qdURv6szb+z25jfqEIqc8gjbabU9qdu2UbA/TZ0oyak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:2b:00:f3:6d:6f:3d:cc:36:e8:5e:f9:aa:07:90:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
        Validity
            Not Before: Jul  1 12:00:30 2024 GMT
            Not After : Jul  2 12:00:30 2024 GMT
        Subject: CN=22247ad70904313c65ad8908ebd43a01208a1035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:d5:3b:b2:e2:bb:c6:10:ac:21:5c:a5:70:
                    c5:49:a1:54:ae:fa:e7:ff:bb:6e:3b:84:41:71:0f:
                    bf:27:63:09:67:c4:48:9b:20:8b:59:36:d3:61:5b:
                    2a:1d:e3:a5:1d:ca:16:e8:ec:27:49:b4:6f:31:6f:
                    cf:18:75:ee:11:90:1f:70:9a:67:ca:66:19:26:55:
                    13:24:eb:8d:8b:5a:a7:8a:6d:39:a8:44:36:41:ef:
                    8a:f2:0c:65:d8:31:12:1f:62:19:72:8f:3a:1a:9c:
                    fa:9d:93:07:4f:13:10:91:25:2a:0e:d1:81:31:ea:
                    0e:e2:42:f3:7c:2e:db:96:be:1b:7f:81:0d:83:09:
                    19:a7:ad:fe:f9:96:2a:e5:0e:ba:6c:8b:f4:80:b0:
                    3e:59:d3:3d:80:6f:55:24:a4:81:ec:e3:1c:50:de:
                    f8:93:71:d7:19:58:19:aa:b5:c1:73:3e:79:99:80:
                    70:01:64:4d:07:ef:23:75:36:7b:b1:52:93:71:99:
                    d0:02:0f:70:79:be:a8:c3:5a:84:8f:4a:77:82:8b:
                    52:2a:66:40:2f:91:71:93:96:cc:96:a1:60:1b:4d:
                    3c:cc:f9:f2:e1:c3:80:79:d7:d3:80:7e:51:1a:fc:
                    2e:f9:40:64:eb:75:b4:76:c7:4a:3c:db:3f:8e:f4:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:24:7A:D7:09:04:31:3C:65:AD:89:08:EB:D4:3A:01:20:8A:10:35
            X509v3 Authority Key Identifier:
                keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:10:e4:03:2a:f9:21:ec:7c:f9:d0:9b:bb:99:ab:3b:36:c2:
         00:4f:ab:6a:66:56:25:0f:b2:4e:5d:40:79:12:3d:e6:49:07:
         a7:05:57:38:77:8a:45:32:13:a0:d0:7a:35:1c:4e:c9:47:38:
         c3:0c:40:61:7f:cd:69:58:da:17:4d:c5:a2:f5:c0:84:1a:f3:
         97:5a:38:f0:df:63:b3:d5:65:cf:0f:70:d4:7b:33:eb:00:e0:
         5b:9a:d3:06:7e:eb:36:de:04:d2:0c:bb:0f:6f:a0:e2:78:ec:
         91:0c:11:f0:22:0d:30:77:21:91:55:37:bc:dc:0b:ef:1e:35:
         49:a4:27:e4:55:26:1e:3a:10:ef:45:77:b4:bc:dd:cf:c4:49:
         58:6b:9b:a6:9a:20:b1:46:83:cd:97:4a:68:50:4f:13:23:ec:
         2d:8c:d3:5e:37:ef:3d:31:0d:cd:5f:d3:a7:d6:ba:a4:e9:7e:
         4a:f1:3e:08:99:64:a3:6d:8d:1b:a8:e1:90:1c:6c:b7:1e:bb:
         7e:57:64:58:35:40:e4:ad:79:33:3e:ad:8c:3a:e3:7a:36:ae:
         e0:b9:a0:03:82:e2:6f:cc:52:11:32:43:88:fb:85:0b:b9:95:
         ec:49:41:72:00:d7:c6:59:5a:a6:78:e2:98:74:fa:f2:ee:fa:
         22:1d:ac:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBuKwDzbW89zDboXvmqB5C2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy
NTBlYTYwHhcNMjQwNzAxMTIwMDMwWhcNMjQwNzAyMTIwMDMwWjAzMTEwLwYDVQQD
EygyMjI0N2FkNzA5MDQzMTNjNjVhZDg5MDhlYmQ0M2EwMTIwOGExMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AbVO7Liu8YQrCFcpXDFSaFUrvrn
/7tuO4RBcQ+/J2MJZ8RImyCLWTbTYVsqHeOlHcoW6OwnSbRvMW/PGHXuEZAfcJpn
ymYZJlUTJOuNi1qnim05qEQ2Qe+K8gxl2DESH2IZco86Gpz6nZMHTxMQkSUqDtGB
MeoO4kLzfC7blr4bf4ENgwkZp63++ZYq5Q66bIv0gLA+WdM9gG9VJKSB7OMcUN74
k3HXGVgZqrXBcz55mYBwAWRNB+8jdTZ7sVKTcZnQAg9web6ow1qEj0p3gotSKmZA
L5Fxk5bMlqFgG008zPny4cOAedfTgH5RGvwu+UBk63W0dsdKPNs/jvSa0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIketcJBDE8Za2JCOvUOgEgihA1MB8GA1UdIwQY
MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt
NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm
LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhDkAyr5
Iex8+dCbu5mrOzbCAE+ramZWJQ+yTl1AeRI95kkHpwVXOHeKRTIToNB6NRxOyUc4
wwxAYX/NaVjaF03FovXAhBrzl1o48N9js9Vlzw9w1Hsz6wDgW5rTBn7rNt4E0gy7
D2+g4njskQwR8CINMHchkVU3vNwL7x41SaQn5FUmHjoQ70V3tLzdz8RJWGubppog
sUaDzZdKaFBPEyPsLYzTXjfvPTENzV/Tp9a6pOl+SvE+CJlko22NG6jhkBxstx67
fldkWDVA5K15Mz6tjDrjejau4LmgA4Lib8xSETJDiPuFC7mV7ElBcgDXxllapnji
mHT68u76Ih2siA==
-----END CERTIFICATE-----
Generated at Mon Jul 1 19:32:52 2024 by rpki-client on console-ams.rpki-client.org