Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File:                     ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier:          RPtbjtawaxyRjURrl+n/AIAM9ApgD3MTiSVVKbFzCvs=
Subject key identifier:   67:6D:27:8B:AC:D7:16:FE:71:53:32:98:F8:B4:4D:9A:81:77:AD:8F
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer:       /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial:       018F8824512DD5FF267D5CDF91F5AB436976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number:          0206
Signing time:             Fri 17 May 2024 20:00:32 +0000
Manifest this update:     Fri 17 May 2024 20:00:32 +0000
Manifest next update:     Sat 18 May 2024 20:00:32 +0000
Files and hashes:         1: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: pfa1hDx0GXLA+ESCrKTXPmsDo5LFB+Wh4+DGFhFth/8=)
                          2: lBKzzTH6xWOAi4s0U4hWrJFNxBg.roa (hash: 5Bv/rsXxZ35rNNvIAMuW0Wj+zcEMXZFrdpESKNLXo/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:51:2d:d5:ff:26:7d:5c:df:91:f5:ab:43:69:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
        Validity
            Not Before: May 17 20:00:32 2024 GMT
            Not After : May 18 20:00:32 2024 GMT
        Subject: CN=676d278bacd716fe71533298f8b44d9a8177ad8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:0a:8c:4d:a2:b7:d9:a6:22:f5:6b:b1:9f:
                    16:87:1a:61:80:ee:e9:a3:af:75:70:b8:ca:21:6e:
                    a6:eb:8e:4c:77:ac:60:91:d5:49:72:10:5c:d7:ca:
                    97:fc:d8:b8:43:96:15:43:a2:cc:e7:2f:86:2b:6e:
                    98:c8:87:64:c6:68:29:c9:4c:b5:60:4b:97:bd:bd:
                    39:6e:d6:1a:34:4a:f9:78:5e:b5:65:fe:b6:46:8c:
                    34:85:0c:a6:59:bf:78:f3:6f:ff:a4:af:bd:c1:73:
                    71:3a:a3:7d:ed:e6:93:c0:00:cd:e4:c4:18:f2:5b:
                    0e:d1:bd:5b:de:da:c6:eb:0c:fe:a9:16:52:a4:82:
                    83:b3:09:d2:21:a0:66:40:8a:a5:08:1c:fc:5a:64:
                    d8:0a:3c:48:c2:e4:b0:1e:53:0f:34:d0:77:71:e4:
                    a5:d9:a1:22:51:36:a8:41:7e:d1:1e:e9:0f:c6:6c:
                    2e:2d:0d:41:d4:6b:c8:0b:32:ac:a9:b5:87:28:53:
                    7c:4c:45:eb:44:d4:71:eb:18:12:35:85:aa:11:ec:
                    40:91:a9:d4:9c:7d:e1:48:7b:86:00:af:d4:0e:1a:
                    fd:7f:83:2b:9c:51:0a:ac:dc:2e:c1:31:1c:2f:28:
                    e5:9f:4f:83:7d:ca:08:3e:71:d1:6f:f9:f8:f7:b7:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:27:8B:AC:D7:16:FE:71:53:32:98:F8:B4:4D:9A:81:77:AD:8F
            X509v3 Authority Key Identifier:
                keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:03:79:e4:94:05:98:19:87:89:3b:fc:16:d9:cc:39:82:
         40:e1:63:d8:96:a0:d0:5d:5d:e8:2e:87:9c:1f:21:47:fc:cd:
         93:ad:eb:e7:a6:9d:fb:6d:95:f1:85:04:50:2d:ce:f6:65:d9:
         b1:00:d5:81:1d:bd:d0:cd:48:b2:bc:2d:c6:33:e5:f1:77:e5:
         a2:7c:f5:bc:15:cd:e1:04:1d:08:cb:2e:5b:bb:ea:c3:cb:9b:
         60:13:76:d8:b3:28:26:a0:04:dc:4a:24:41:47:54:42:75:b9:
         e6:4d:8d:e2:62:47:bb:71:04:a8:86:17:b2:91:8f:1d:54:a9:
         b6:22:3d:05:cf:9d:6c:a4:63:8e:d6:c3:02:a5:70:eb:9f:c4:
         b9:4c:68:5c:a6:b0:31:58:67:fc:ad:c2:83:d8:98:d3:6c:67:
         12:b4:65:69:50:7f:e1:1d:2a:f9:bf:5a:ac:f0:1a:c2:b6:10:
         f8:97:18:47:76:6f:75:de:77:1e:b4:c2:65:0c:c4:e8:07:9f:
         e8:fb:99:24:fe:a5:6d:a7:de:85:eb:40:67:69:38:75:b9:d4:
         ad:3c:12:81:03:a1:ad:b1:80:fc:86:a6:d9:e1:ce:0c:cb:e6:
         6d:a8:d4:04:0e:3e:38:c1:71:76:0a:97:19:fe:fd:1c:95:bd:
         7c:5f:d5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJFEt1f8mfVzfkfWrQ2l2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWViNzYyMmE0NGQyM2MyYTQ1YjRkMGRmNDBkNmNkY2Mz
MzI0MWQwHhcNMjQwNTE3MjAwMDMyWhcNMjQwNTE4MjAwMDMyWjAzMTEwLwYDVQQD
Eyg2NzZkMjc4YmFjZDcxNmZlNzE1MzMyOThmOGI0NGQ5YTgxNzdhZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSsKjE2it9mmIvVrsZ8WhxphgO7p
o691cLjKIW6m645Md6xgkdVJchBc18qX/Ni4Q5YVQ6LM5y+GK26YyIdkxmgpyUy1
YEuXvb05btYaNEr5eF61Zf62Row0hQymWb9482//pK+9wXNxOqN97eaTwADN5MQY
8lsO0b1b3trG6wz+qRZSpIKDswnSIaBmQIqlCBz8WmTYCjxIwuSwHlMPNNB3ceSl
2aEiUTaoQX7RHukPxmwuLQ1B1GvICzKsqbWHKFN8TEXrRNRx6xgSNYWqEexAkanU
nH3hSHuGAK/UDhr9f4MrnFEKrNwuwTEcLyjln0+DfcoIPnHRb/n497cEbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdtJ4us1xb+cVMymPi0TZqBd62PMB8GA1UdIwQY
MBaAFIGut2IqRNI8KkW00N9A1s3MMyQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAt
ZGIzYWZkM2Q3NjJlLzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAtZGIzYWZkM2Q3NjJl
LzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7ADeeSU
BZgZh4k7/BbZzDmCQOFj2Jag0F1d6C6HnB8hR/zNk63r56ad+22V8YUEUC3O9mXZ
sQDVgR290M1IsrwtxjPl8Xflonz1vBXN4QQdCMsuW7vqw8ubYBN22LMoJqAE3Eok
QUdUQnW55k2N4mJHu3EEqIYXspGPHVSptiI9Bc+dbKRjjtbDAqVw65/EuUxoXKaw
MVhn/K3Cg9iY02xnErRlaVB/4R0q+b9arPAawrYQ+JcYR3Zvdd53HrTCZQzE6Aef
6PuZJP6lbafehetAZ2k4dbnUrTwSgQOhrbGA/Iam2eHODMvmbajUBA4+OMFxdgqX
Gf79HJW9fF/V1w==
-----END CERTIFICATE-----
Generated at Sat May 18 02:40:09 2024 by rpki-client on console-fra.rpki-client.org