Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
File:                     SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json)
Hash identifier:          HiGlxLuj4S2ZKBymPFLZoufZxqDbKC/tDPNE7dU5OcA=
Subject key identifier:   9C:35:F8:25:DD:3C:D2:08:E8:E3:36:3B:D2:17:9E:CF:1B:7A:D2:2A
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Certificate issuer:       /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial:       01905F9491566C50B299104297A85149E992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
Manifest number:          11E8
Signing time:             Fri 28 Jun 2024 16:01:30 +0000
Manifest this update:     Fri 28 Jun 2024 16:01:30 +0000
Manifest next update:     Sat 29 Jun 2024 16:01:30 +0000
Files and hashes:         1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: C23DSLmP0W8/aeovHa87qgFlmUtXzRwtAHfF5WstHac=)
                          2: rDaLnnXQoOf0Nh1KRTZ2z9sCcdw.roa (hash: Df/vOhQWOVGGprMZ6Rt0ucuwuWEAIdgAx05TDYtZOrQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5f:94:91:56:6c:50:b2:99:10:42:97:a8:51:49:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
        Validity
            Not Before: Jun 28 16:01:30 2024 GMT
            Not After : Jun 29 16:01:30 2024 GMT
        Subject: CN=9c35f825dd3cd208e8e3363bd2179ecf1b7ad22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:6a:2f:94:4d:97:2d:57:90:bb:56:c4:01:
                    41:b6:2e:3a:82:d5:10:43:95:e7:89:c7:63:32:2f:
                    66:5c:33:df:71:26:80:a1:a3:4f:8a:04:f8:63:e3:
                    eb:3e:a3:e6:74:08:96:a5:42:cd:22:ff:14:4f:c2:
                    87:28:9e:23:49:c2:ea:12:a8:06:ab:06:03:9a:f1:
                    90:58:7c:83:48:f7:79:f4:b3:e9:83:61:9a:65:b4:
                    63:f3:35:63:de:86:57:47:48:97:1a:16:78:e3:80:
                    92:00:3c:2b:ae:66:bc:a5:29:8d:48:96:27:c6:8c:
                    31:b3:a9:2a:55:ca:68:9c:2d:d9:be:dd:ce:da:93:
                    60:cb:56:e8:7a:79:04:f8:28:0a:94:1c:ec:02:2c:
                    a6:9e:4b:c4:df:aa:c7:86:c9:23:4c:b6:2a:ce:68:
                    30:3e:49:78:8e:3d:13:6b:da:d1:0d:f2:9a:65:48:
                    c4:02:c6:02:5e:ff:23:c7:b3:1a:e0:bb:81:0d:ce:
                    e1:f2:1d:00:0e:23:38:38:26:53:72:bf:92:9d:cd:
                    0e:61:e6:8a:f3:ac:fd:c5:12:3c:80:14:5b:cb:38:
                    cc:3d:0b:f0:0d:ea:5a:42:c3:13:4d:fc:d7:5a:8e:
                    71:ac:db:a8:cf:1b:db:be:7c:0c:b8:37:02:f5:98:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:F8:25:DD:3C:D2:08:E8:E3:36:3B:D2:17:9E:CF:1B:7A:D2:2A
            X509v3 Authority Key Identifier:
                keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:63:76:9a:ee:81:36:b8:4d:af:17:e9:63:27:34:f9:3f:
         14:48:24:3d:9d:08:81:87:61:a6:18:7f:38:05:84:09:bb:4c:
         8e:eb:00:64:ac:da:b4:2f:2f:06:cc:bb:53:16:0f:b2:39:0f:
         52:0f:2a:be:aa:61:9b:0d:ec:98:a7:7e:17:6e:4c:31:9d:cf:
         3f:8b:33:17:b2:89:9c:df:cb:0e:16:b1:79:3d:e2:a7:46:fa:
         58:a4:29:1a:a9:10:50:67:16:7c:08:0e:d7:0d:ff:4d:89:6e:
         c1:ec:89:b5:c2:4b:e3:2e:54:e3:24:b3:f8:ce:fe:b4:4d:1d:
         40:f5:59:f0:73:c0:6d:ef:9e:01:e5:7a:6c:d4:3f:b1:74:a5:
         18:a5:12:08:c3:a7:45:39:d8:7b:44:c9:35:8f:a3:1f:c2:81:
         bd:a4:6a:c4:04:a0:26:53:63:4d:66:72:58:54:91:6d:a0:97:
         cb:b5:cf:56:a9:ff:e9:fc:59:94:9b:07:c5:34:72:6d:4b:0f:
         a6:1f:83:78:7a:4e:76:8f:d9:c6:a7:07:3c:ab:c3:14:5d:35:
         78:34:94:25:4d:ca:8c:d9:8c:9a:97:61:34:07:10:5d:45:12:
         16:33:d9:63:4c:30:b1:d7:81:c2:bd:96:50:a7:58:a1:79:25:
         7a:56:b7:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBflJFWbFCymRBCl6hRSemSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Yzc0MWM5ZGY1YjJlNDg5OTNiOTE4M2I3OWZmMzQ2YjQz
MTkzODEwHhcNMjQwNjI4MTYwMTMwWhcNMjQwNjI5MTYwMTMwWjAzMTEwLwYDVQQD
Eyg5YzM1ZjgyNWRkM2NkMjA4ZThlMzM2M2JkMjE3OWVjZjFiN2FkMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnJqL5RNly1XkLtWxAFBti46gtUQ
Q5XnicdjMi9mXDPfcSaAoaNPigT4Y+PrPqPmdAiWpULNIv8UT8KHKJ4jScLqEqgG
qwYDmvGQWHyDSPd59LPpg2GaZbRj8zVj3oZXR0iXGhZ444CSADwrrma8pSmNSJYn
xowxs6kqVcponC3Zvt3O2pNgy1boenkE+CgKlBzsAiymnkvE36rHhskjTLYqzmgw
Pkl4jj0Ta9rRDfKaZUjEAsYCXv8jx7Ma4LuBDc7h8h0ADiM4OCZTcr+Snc0OYeaK
86z9xRI8gBRbyzjMPQvwDepaQsMTTfzXWo5xrNuozxvbvnwMuDcC9ZgkYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw1+CXdPNII6OM2O9IXns8betIqMB8GA1UdIwQY
MBaAFEjHQcnfWy5ImTuRg7ef80a0MZOBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2Qt
N2NkNTk2MTljMGQ2LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2QtN2NkNTk2MTljMGQ2
LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/Fjdpru
gTa4Ta8X6WMnNPk/FEgkPZ0IgYdhphh/OAWECbtMjusAZKzatC8vBsy7UxYPsjkP
Ug8qvqphmw3smKd+F25MMZ3PP4szF7KJnN/LDhaxeT3ip0b6WKQpGqkQUGcWfAgO
1w3/TYluweyJtcJL4y5U4ySz+M7+tE0dQPVZ8HPAbe+eAeV6bNQ/sXSlGKUSCMOn
RTnYe0TJNY+jH8KBvaRqxASgJlNjTWZyWFSRbaCXy7XPVqn/6fxZlJsHxTRybUsP
ph+DeHpOdo/ZxqcHPKvDFF01eDSUJU3KjNmMmpdhNAcQXUUSFjPZY0wwsdeBwr2W
UKdYoXklela3sg==
-----END CERTIFICATE-----
Generated at Sat Jun 29 01:43:18 2024 by rpki-client on console-fra.rpki-client.org