Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File:                     MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier:          g/ejGbaAutxsq6j/HBIpkKlBJwi++g8zP51tD3CHAsU=
Subject key identifier:   E2:A5:6E:62:DC:44:F8:F9:7E:40:0C:83:1E:DF:73:D6:24:18:CF:6B
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer:       /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial:       0191FAEC6D05F51E1C86A75B106CCA27E361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number:          012C
Signing time:             Mon 16 Sep 2024 13:01:23 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:23 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:23 +0000
Files and hashes:         1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: XkuZNrFE2QT/SmJmiggo6aouDAcFfVQFPEaTHyC3VLQ=)
                          2: tdmGzTiE02bU7mTmzJZcZdhRJc8.roa (hash: q//IDbX11Q3fTBNdbO95MSdxqInThIMUM4gputWQ2eU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:6d:05:f5:1e:1c:86:a7:5b:10:6c:ca:27:e3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
        Validity
            Not Before: Sep 16 13:01:23 2024 GMT
            Not After : Sep 17 13:01:23 2024 GMT
        Subject: CN=e2a56e62dc44f8f97e400c831edf73d62418cf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:97:52:53:dc:fe:5e:dc:b1:14:1f:98:33:
                    19:50:29:69:32:45:04:bf:d8:ac:02:3c:e7:c6:8c:
                    27:ca:6c:8d:bf:b6:13:e8:ce:c2:af:88:e6:74:a0:
                    e2:6a:ad:88:9d:77:87:c4:16:4b:99:5c:44:ae:ed:
                    81:ec:06:de:1b:31:1f:00:4c:bb:8b:09:fe:57:85:
                    c5:4e:28:b0:cc:d3:ce:e7:f7:31:fa:45:e5:de:95:
                    f1:1c:0c:ba:66:9d:a7:e1:12:b0:84:d8:5b:31:47:
                    50:ca:0d:ae:c9:1d:58:4a:9a:40:97:a2:e3:68:2e:
                    70:8a:34:c4:95:0d:a8:9c:2c:59:49:c3:2e:21:57:
                    8b:ce:31:dd:4d:42:85:4a:e0:e9:78:f8:35:a8:25:
                    96:79:ec:08:62:a7:59:36:80:41:2d:71:e2:b1:2c:
                    84:df:8f:21:24:9a:0b:52:3b:01:37:06:b5:12:80:
                    10:68:f5:ea:86:a3:6f:58:44:78:50:78:ab:71:88:
                    06:6a:86:de:da:ce:00:c2:ba:e9:6b:5f:2a:57:25:
                    1d:3e:47:c6:96:a8:4d:c3:c1:a7:ca:05:8d:07:34:
                    25:9c:72:32:94:ff:37:df:9a:1d:06:25:3c:9e:53:
                    b9:ed:bc:40:22:c0:df:f8:5e:07:33:f0:54:1b:b2:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:6E:62:DC:44:F8:F9:7E:40:0C:83:1E:DF:73:D6:24:18:CF:6B
            X509v3 Authority Key Identifier:
                keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:25:b3:ea:bd:07:61:3b:21:77:eb:e9:32:f0:49:3b:f9:5a:
         3f:fb:f8:b2:0f:45:07:e7:17:b0:a5:a1:80:d0:6e:e6:e7:e3:
         98:25:0a:7c:bb:c1:a4:07:9c:c0:67:a5:3d:5a:f8:2f:ab:42:
         be:84:f2:75:2e:30:b2:4b:bf:f4:2d:50:9c:a0:78:fa:35:ed:
         41:9d:5f:2b:5e:3f:eb:0b:75:b2:c2:0b:ce:cd:f9:51:4b:fe:
         2f:34:d7:63:1e:5e:f6:26:a8:f8:99:b9:02:8f:6c:a8:77:c5:
         78:d5:85:e7:9c:d2:b9:47:26:47:e7:17:dc:0b:cb:41:da:6b:
         66:d5:8f:86:18:d0:75:77:57:e4:ac:a0:98:41:f3:06:86:6d:
         4d:ff:8e:df:bb:46:a9:cf:e2:e3:20:35:db:9d:58:d0:1c:b5:
         4a:49:ad:9f:0f:36:e0:25:3c:a2:b3:21:62:62:c0:54:e0:8c:
         f7:c2:1c:55:3d:07:94:29:6d:d9:07:a3:be:6d:b4:23:c1:c8:
         8e:92:4d:63:44:da:da:1d:7a:46:e0:38:e4:35:03:29:d4:84:
         df:c4:64:9f:3f:ad:a3:14:53:93:7a:87:dd:1c:75:e7:2b:19:
         fd:54:18:df:fa:c9:e5:cd:e6:a4:2c:2e:a2:76:a6:6a:79:28:
         7c:9a:6b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67G0F9R4chqdbEGzKJ+NhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMTRiNDhhZjQ2ZmZjNmQ1NmRkMGJhYjNiMzE4N2RlNTNl
OWViMjMwHhcNMjQwOTE2MTMwMTIzWhcNMjQwOTE3MTMwMTIzWjAzMTEwLwYDVQQD
EyhlMmE1NmU2MmRjNDRmOGY5N2U0MDBjODMxZWRmNzNkNjI0MThjZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GOXUlPc/l7csRQfmDMZUClpMkUE
v9isAjznxownymyNv7YT6M7Cr4jmdKDiaq2InXeHxBZLmVxEru2B7AbeGzEfAEy7
iwn+V4XFTiiwzNPO5/cx+kXl3pXxHAy6Zp2n4RKwhNhbMUdQyg2uyR1YSppAl6Lj
aC5wijTElQ2onCxZScMuIVeLzjHdTUKFSuDpePg1qCWWeewIYqdZNoBBLXHisSyE
348hJJoLUjsBNwa1EoAQaPXqhqNvWER4UHircYgGaobe2s4Awrrpa18qVyUdPkfG
lqhNw8GnygWNBzQlnHIylP8335odBiU8nlO57bxAIsDf+F4HM/BUG7JmEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKlbmLcRPj5fkAMgx7fc9YkGM9rMB8GA1UdIwQY
MBaAFDIUtIr0b/xtVt0Lqzsxh95T6esjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUt
Y2Q4N2VlOTcwZTZmLzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUtY2Q4N2VlOTcwZTZm
LzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCWz6r0H
YTshd+vpMvBJO/laP/v4sg9FB+cXsKWhgNBu5ufjmCUKfLvBpAecwGelPVr4L6tC
voTydS4wsku/9C1QnKB4+jXtQZ1fK14/6wt1ssILzs35UUv+LzTXYx5e9iao+Jm5
Ao9sqHfFeNWF55zSuUcmR+cX3AvLQdprZtWPhhjQdXdX5KygmEHzBoZtTf+O37tG
qc/i4yA1251Y0By1Skmtnw824CU8orMhYmLAVOCM98IcVT0HlClt2Qejvm20I8HI
jpJNY0Ta2h16RuA45DUDKdSE38Rknz+toxRTk3qH3Rx15ysZ/VQY3/rJ5c3mpCwu
onamankofJpr3A==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:32:39 2024 by rpki-client on console-ams.rpki-client.org