Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File:                     a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier:          UR2EMNSjyqF7NIRE1rfC4Sd2yEjXEYlg1LNlhwAzrrk=
Subject key identifier:   27:DC:FF:BD:6A:D6:12:5B:55:FB:3F:19:BD:9A:18:94:B1:71:55:60
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer:       /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial:       0191FAB51C84A8A66C880FF1977DC5DF0753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number:          0102
Signing time:             Mon 16 Sep 2024 12:00:58 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:58 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:58 +0000
Files and hashes:         1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: vfwH37GDwmrv0zt0tDCVdFT7oBNyeNJBt9H7YlJ3poY=)
                          2: sZ3BQLG3Sj21lrTfbC767zALcC4.roa (hash: 6k0HzhDWHCccuxc0F4LOcJBgGEWhN1GpStvrb6tKATc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:1c:84:a8:a6:6c:88:0f:f1:97:7d:c5:df:07:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
        Validity
            Not Before: Sep 16 12:00:58 2024 GMT
            Not After : Sep 17 12:00:58 2024 GMT
        Subject: CN=27dcffbd6ad6125b55fb3f19bd9a1894b1715560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:3e:ea:99:c6:fa:87:27:d9:08:32:09:74:
                    76:e5:51:5b:99:99:66:db:e6:8e:5f:4e:b3:3b:c2:
                    d0:17:0b:4c:99:ea:a2:9a:a1:c5:1a:2d:4c:62:b7:
                    49:99:73:4b:24:9c:03:31:49:af:d3:54:f6:eb:bd:
                    d4:43:6f:cb:70:57:ca:df:48:f5:fd:7d:75:81:b5:
                    bb:6b:a7:70:2a:76:d3:f3:4d:a6:ca:06:4c:e3:3f:
                    03:51:0e:14:65:69:34:88:4b:ad:8b:11:0b:ec:2b:
                    ef:ec:8f:10:6a:c9:45:1c:4d:d4:7e:8e:2e:b1:0f:
                    18:66:e1:63:23:5f:b0:ec:06:9d:f4:88:23:04:5b:
                    02:cf:e2:7c:24:80:b9:fb:ea:fe:60:07:65:04:a1:
                    45:ee:8b:e6:aa:07:fc:2e:f1:45:9f:e8:f7:58:6b:
                    9d:30:36:99:a6:56:36:de:c6:f1:28:f9:73:18:dd:
                    23:3a:fd:77:d0:0b:2a:67:25:d2:15:c7:90:66:47:
                    2f:35:e3:de:cf:db:c2:63:6c:93:34:23:9c:9a:d8:
                    ef:36:7e:a9:e9:c3:bd:ae:8b:2a:ef:10:51:b8:f3:
                    06:28:4b:62:0c:52:72:20:00:72:92:87:33:52:81:
                    00:b2:62:ad:15:04:73:71:ba:a4:d9:5e:2b:15:47:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DC:FF:BD:6A:D6:12:5B:55:FB:3F:19:BD:9A:18:94:B1:71:55:60
            X509v3 Authority Key Identifier:
                keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:fa:2a:31:6d:9e:ed:d7:61:b1:a0:1d:35:51:80:f6:c6:db:
         e2:7a:0e:05:36:45:e5:c1:d3:57:23:dd:db:92:22:c9:a4:3c:
         fd:50:ed:1e:41:4d:3a:ba:08:a6:d4:db:9b:a2:40:64:30:fd:
         85:f5:fc:5b:c1:17:57:02:a5:ea:3d:79:3b:87:c2:c0:dc:7b:
         d9:12:59:6a:15:43:49:64:b2:af:e4:02:16:0b:79:d6:d6:0e:
         94:a9:ad:5d:46:8d:98:13:8c:57:e1:e7:59:14:f5:8f:39:0f:
         02:39:14:81:61:17:ba:eb:b1:70:57:8f:05:d0:91:69:62:5b:
         ec:e0:22:1f:f8:eb:a6:3e:11:9e:ab:a3:da:f1:38:77:bf:55:
         9d:8f:bc:b5:f2:06:35:6d:fd:38:62:90:6e:cb:16:ec:e5:04:
         90:cc:7a:d5:11:37:4b:92:f8:18:48:25:de:05:b8:d6:1d:a3:
         5f:57:07:b7:68:35:c2:f9:6e:c7:30:f5:9c:ae:e7:ae:d9:2e:
         a1:98:2e:70:45:67:e2:d4:1d:6b:26:33:d9:01:a2:1b:2c:13:
         9b:06:f1:c4:f5:74:9b:0a:ca:5d:ef:7a:12:00:2b:b2:60:b9:
         cf:e4:6e:07:d7:f8:80:f8:a5:3b:75:d2:ec:4e:87:df:1a:e8:
         df:9e:40:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6tRyEqKZsiA/xl33F3wdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2
MmY4ZTgwHhcNMjQwOTE2MTIwMDU4WhcNMjQwOTE3MTIwMDU4WjAzMTEwLwYDVQQD
EygyN2RjZmZiZDZhZDYxMjViNTVmYjNmMTliZDlhMTg5NGIxNzE1NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbM+6pnG+ocn2QgyCXR25VFbmZlm
2+aOX06zO8LQFwtMmeqimqHFGi1MYrdJmXNLJJwDMUmv01T2673UQ2/LcFfK30j1
/X11gbW7a6dwKnbT802mygZM4z8DUQ4UZWk0iEutixEL7Cvv7I8QaslFHE3Ufo4u
sQ8YZuFjI1+w7Aad9IgjBFsCz+J8JIC5++r+YAdlBKFF7ovmqgf8LvFFn+j3WGud
MDaZplY23sbxKPlzGN0jOv130AsqZyXSFceQZkcvNePez9vCY2yTNCOcmtjvNn6p
6cO9rosq7xBRuPMGKEtiDFJyIABykoczUoEAsmKtFQRzcbqk2V4rFUfkXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfc/71q1hJbVfs/Gb2aGJSxcVVgMB8GA1UdIwQY
MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt
YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk
LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0voqMW2e
7ddhsaAdNVGA9sbb4noOBTZF5cHTVyPd25IiyaQ8/VDtHkFNOroIptTbm6JAZDD9
hfX8W8EXVwKl6j15O4fCwNx72RJZahVDSWSyr+QCFgt51tYOlKmtXUaNmBOMV+Hn
WRT1jzkPAjkUgWEXuuuxcFePBdCRaWJb7OAiH/jrpj4Rnquj2vE4d79VnY+8tfIG
NW39OGKQbssW7OUEkMx61RE3S5L4GEgl3gW41h2jX1cHt2g1wvluxzD1nK7nrtku
oZgucEVn4tQdayYz2QGiGywTmwbxxPV0mwrKXe96EgArsmC5z+RuB9f4gPilO3XS
7E6H3xro355Ahw==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:29:35 2024 by rpki-client on console-fra.rpki-client.org