Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          1XehIUdsITRALH+mUjoYxSZVuo9KI9frMJgx2zwmAuM=
Subject key identifier:   C9:0F:A8:0B:D4:28:B2:C0:13:45:5C:F3:54:7C:10:1F:8B:1B:C8:AB
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       018F4FEC99AAA5CBC76D97817297361439AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          0F9B
Signing time:             Mon 06 May 2024 22:00:56 +0000
Manifest this update:     Mon 06 May 2024 22:00:56 +0000
Manifest next update:     Tue 07 May 2024 22:00:56 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: Px+saz2bkjByGby3lD+iAeEOpaeCm+gu21qlg4baTMA=)
                          2: wAWGCgOGn42x04btliaEqSWrIic.roa (hash: HtjSL8DOFr1dgUUl5P8YVKdjHXwplmqEt7oA7RSDJWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:ec:99:aa:a5:cb:c7:6d:97:81:72:97:36:14:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: May  6 22:00:56 2024 GMT
            Not After : May  7 22:00:56 2024 GMT
        Subject: CN=c90fa80bd428b2c013455cf3547c101f8b1bc8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:93:1b:18:ee:51:5a:f6:7d:29:0c:c9:83:
                    93:36:3c:c9:ab:b4:9b:9a:83:c5:e7:d0:3a:2a:96:
                    3f:6d:28:a4:cd:0a:6e:e0:7d:f6:cc:95:2a:c9:7a:
                    53:ff:3b:0a:a9:51:13:21:8e:8c:ab:da:cb:a0:54:
                    76:06:b3:41:99:94:36:29:db:1a:75:a4:f9:58:a2:
                    6c:7e:ab:4a:5b:6a:c2:52:bc:43:51:63:74:fb:7e:
                    34:a8:f3:b8:00:72:b7:2e:06:e7:7b:35:23:65:aa:
                    48:45:b8:62:ae:a0:c1:5d:11:d2:49:c7:8e:33:98:
                    99:6d:8c:f4:86:ec:ee:aa:98:80:0e:53:6f:5b:58:
                    5e:da:c3:da:19:86:55:bb:6e:31:95:4c:be:f1:77:
                    a1:b7:72:65:39:2f:7f:92:70:ed:c2:13:f2:a6:93:
                    bd:68:7a:71:85:7c:b7:b1:97:3e:f0:1b:33:50:ec:
                    db:b4:35:60:f1:c9:fd:9c:e6:b0:7c:d3:9c:d8:f0:
                    f2:8b:ef:af:c7:8b:6f:1c:3e:f7:4e:46:81:d4:81:
                    01:b7:dc:a4:81:72:43:b7:3a:29:b9:8d:b9:d5:62:
                    2a:88:77:46:13:19:57:e2:f5:fa:bd:1d:cf:dd:d7:
                    b7:de:ee:14:cc:d1:24:36:47:b3:46:ad:07:d0:07:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0F:A8:0B:D4:28:B2:C0:13:45:5C:F3:54:7C:10:1F:8B:1B:C8:AB
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:9f:74:7c:f8:6b:1e:0c:24:62:02:2a:98:29:cb:18:ef:
         bf:cc:ce:30:42:0d:c2:32:c8:64:be:76:0c:e8:9e:63:bb:94:
         2a:46:27:f6:00:53:f8:e3:3b:9d:94:b5:9d:01:fc:b0:9f:64:
         17:e9:39:cd:0a:ef:1c:0c:4f:d9:76:06:7e:06:5c:7c:ea:2f:
         fc:b7:4e:a6:20:72:31:34:54:6e:78:fa:b9:8e:04:ca:fc:e0:
         2e:3b:ec:68:4d:62:6e:f5:aa:bf:7b:66:bb:eb:fa:fb:23:e3:
         f5:ab:1b:65:1e:2f:8f:9f:8e:1e:b4:5c:4d:a5:03:70:c4:7f:
         c7:df:73:0e:70:8d:04:7f:5b:7b:bb:d8:c2:c8:be:ec:7c:89:
         29:db:5d:5b:99:d5:03:9f:05:39:ab:c2:43:ad:c2:23:01:74:
         84:eb:52:b7:eb:30:1c:a2:34:e0:07:98:c0:d8:79:eb:95:f8:
         68:33:17:57:ed:d7:85:4b:75:b9:b2:6c:2b:8b:cf:ce:d0:d5:
         c3:d9:77:5b:a4:bb:0f:5a:60:63:4a:db:29:13:94:e9:ba:72:
         9c:90:81:18:53:3b:d8:a6:ad:38:ae:43:fe:68:9f:27:12:da:
         67:e3:1f:e9:8e:9e:cc:79:06:e1:73:de:57:00:23:8f:40:4c:
         24:39:46:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9P7JmqpcvHbZeBcpc2FDmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2
OWYzMDQwHhcNMjQwNTA2MjIwMDU2WhcNMjQwNTA3MjIwMDU2WjAzMTEwLwYDVQQD
EyhjOTBmYTgwYmQ0MjhiMmMwMTM0NTVjZjM1NDdjMTAxZjhiMWJjOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJKTGxjuUVr2fSkMyYOTNjzJq7Sb
moPF59A6KpY/bSikzQpu4H32zJUqyXpT/zsKqVETIY6Mq9rLoFR2BrNBmZQ2Kdsa
daT5WKJsfqtKW2rCUrxDUWN0+340qPO4AHK3LgbnezUjZapIRbhirqDBXRHSSceO
M5iZbYz0huzuqpiADlNvW1he2sPaGYZVu24xlUy+8Xeht3JlOS9/knDtwhPyppO9
aHpxhXy3sZc+8BszUOzbtDVg8cn9nOawfNOc2PDyi++vx4tvHD73TkaB1IEBt9yk
gXJDtzopuY251WIqiHdGExlX4vX6vR3P3de33u4UzNEkNkezRq0H0AerDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkPqAvUKLLAE0Vc81R8EB+LG8irMB8GA1UdIwQY
MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt
MmE1NTM5OWE4MGIwLzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw
LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIufdHz4
ax4MJGICKpgpyxjvv8zOMEINwjLIZL52DOieY7uUKkYn9gBT+OM7nZS1nQH8sJ9k
F+k5zQrvHAxP2XYGfgZcfOov/LdOpiByMTRUbnj6uY4EyvzgLjvsaE1ibvWqv3tm
u+v6+yPj9asbZR4vj5+OHrRcTaUDcMR/x99zDnCNBH9be7vYwsi+7HyJKdtdW5nV
A58FOavCQ63CIwF0hOtSt+swHKI04AeYwNh565X4aDMXV+3XhUt1ubJsK4vPztDV
w9l3W6S7D1pgY0rbKROU6bpynJCBGFM72KatOK5D/mifJxLaZ+Mf6Y6ezHkG4XPe
VwAjj0BMJDlGAA==
-----END CERTIFICATE-----
Generated at Tue May 7 00:39:04 2024 by rpki-client on console-fra.rpki-client.org