Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File:                     cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier:          nHcy5+T5qIbJNpDMhEUOusPZTbVSYyZvvOZ5b97aqhk=
Subject key identifier:   E0:D1:0B:E0:80:FF:42:3D:F5:3D:72:51:3B:93:77:AE:61:1A:07:0A
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer:       /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial:       01923A38C5CF618FACEEA648D7A10E17ADA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 20:00:52 +0000
Manifest this update:     Sat 28 Sep 2024 20:00:52 +0000
Manifest next update:     Sun 29 Sep 2024 20:00:52 +0000
Files and hashes:         1: 4BNMvGoOImMvi43dSqoREoDa17I.roa (hash: azdbhYThtdkVS09xmxOWtVH0NQ5UTliRx5clg//W6+s=)
                          2: 8lMT6vqHPgd4FF2FbIALz1qCCnU.roa (hash: 3k3CD4VMukpSU1yLVPV6VScYv7/6D4mCm7ykk/o8QCQ=)
                          3: NDcvvFCbRQMBj6Ce7TxCvg78xRA.roa (hash: ZnoyCD71cWX9uJo81vQY/QbHbcImuSaohp8tyXcIjTI=)
                          4: VQCBN8uurWtUQ5RZdJWg77YcRWg.roa (hash: xi1XywUTIdxveyzoMyIdNUPPFcJ6kC1E4TbtPCZ/QGY=)
                          5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: DRQh1hZJ8Jlq4G1pjEefTSiPL6Oi0ARE7RN6w6S1b4w=)
                          6: miSX2bmrAhwwXa_iQcpweb0JJLM.roa (hash: ZH++IkQh8QbNCkQv6HfFWiB3gA0rLk/vqkLXJYImUGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:38:c5:cf:61:8f:ac:ee:a6:48:d7:a1:0e:17:ad:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
        Validity
            Not Before: Sep 28 20:00:52 2024 GMT
            Not After : Sep 29 20:00:52 2024 GMT
        Subject: CN=e0d10be080ff423df53d72513b9377ae611a070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:1b:a6:a4:d9:5c:7c:3b:d0:8a:ec:43:69:
                    71:d1:ce:9f:da:4e:e5:81:05:39:5c:9b:7b:78:9b:
                    1b:71:e5:94:40:cd:fd:d1:9b:43:bd:09:f4:77:1d:
                    14:28:09:45:77:67:86:c3:7c:22:11:38:cf:d9:c8:
                    6f:1d:af:d3:fd:1a:ff:94:86:12:0e:81:6b:0d:84:
                    b0:7d:b9:68:82:05:12:03:ee:d6:8a:85:4d:55:e7:
                    6d:de:d5:d5:07:de:18:be:65:70:1a:df:3c:44:8f:
                    8f:63:1d:8a:3c:a9:4c:53:8d:d2:e7:5e:ca:25:13:
                    a0:2c:b1:64:b4:7f:62:af:18:79:64:97:36:e5:c3:
                    80:61:79:23:7d:92:7d:2e:a9:14:86:33:c1:76:bc:
                    9a:5e:c2:4a:50:4f:f5:4c:39:e3:0a:db:5a:2b:fa:
                    4d:0e:e2:cc:c3:e4:5b:07:ff:8c:30:b5:5b:d4:d0:
                    a4:65:5e:b0:f1:53:09:0e:43:ea:58:41:08:85:5d:
                    7e:21:f4:33:f5:c6:71:5c:8a:75:07:92:c4:e0:bb:
                    22:6b:5e:ac:7c:31:18:a2:26:5b:17:c9:ba:4f:79:
                    d1:09:73:16:ab:e4:b0:e9:11:8f:c0:e6:ab:c2:67:
                    3a:66:64:47:a3:a1:7a:17:ef:77:18:4c:95:9e:4b:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D1:0B:E0:80:FF:42:3D:F5:3D:72:51:3B:93:77:AE:61:1A:07:0A
            X509v3 Authority Key Identifier:
                keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:9b:2d:84:e1:a3:85:fe:7b:7b:ae:8d:19:29:80:e5:ef:
         3b:c4:7e:58:83:2d:77:85:23:30:db:08:5a:21:7a:ba:15:16:
         cb:c7:5b:ef:06:fd:25:a1:bf:84:6a:9c:01:54:97:5f:39:19:
         6e:7c:28:d0:47:02:76:9a:d7:93:8e:aa:13:06:94:89:8b:b6:
         60:f6:27:63:47:60:6b:74:98:77:db:5f:b7:16:0e:38:1f:82:
         91:6d:5d:7f:97:ad:13:c4:53:0d:7d:41:34:7c:ff:53:e8:93:
         d2:f2:df:af:89:93:25:f7:48:74:9c:ec:2e:35:4f:93:bb:10:
         7b:a4:96:03:9e:16:d8:6c:68:5b:83:09:11:df:77:ad:93:08:
         ef:bc:5c:5b:9a:55:9d:0c:07:c4:c6:3c:08:4b:25:e0:41:17:
         e3:62:24:fc:1f:3e:e9:ea:cc:13:bb:76:ab:65:8c:91:72:fd:
         83:91:81:eb:8f:36:8b:df:4c:ec:52:9c:e1:7a:3a:13:41:3a:
         4b:2e:65:c3:8c:e2:46:c2:dc:b4:90:f5:cd:ba:97:27:02:42:
         12:17:bc:fc:f0:c0:03:dc:12:00:27:a3:0e:af:eb:91:b0:4e:
         ec:d2:09:43:13:43:35:e0:95:bc:17:9f:82:d0:f8:36:b5:12:
         d2:6c:d3:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6OMXPYY+s7qZI16EOF62hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj
NDM4YWMwHhcNMjQwOTI4MjAwMDUyWhcNMjQwOTI5MjAwMDUyWjAzMTEwLwYDVQQD
EyhlMGQxMGJlMDgwZmY0MjNkZjUzZDcyNTEzYjkzNzdhZTYxMWEwNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCEbpqTZXHw70IrsQ2lx0c6f2k7l
gQU5XJt7eJsbceWUQM390ZtDvQn0dx0UKAlFd2eGw3wiETjP2chvHa/T/Rr/lIYS
DoFrDYSwfbloggUSA+7WioVNVedt3tXVB94YvmVwGt88RI+PYx2KPKlMU43S517K
JROgLLFktH9irxh5ZJc25cOAYXkjfZJ9LqkUhjPBdryaXsJKUE/1TDnjCttaK/pN
DuLMw+RbB/+MMLVb1NCkZV6w8VMJDkPqWEEIhV1+IfQz9cZxXIp1B5LE4Lsia16s
fDEYoiZbF8m6T3nRCXMWq+Sw6RGPwOarwmc6ZmRHo6F6F+93GEyVnks+MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODRC+CA/0I99T1yUTuTd65hGgcKMB8GA1UdIwQY
MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt
OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2
LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKubLYTh
o4X+e3uujRkpgOXvO8R+WIMtd4UjMNsIWiF6uhUWy8db7wb9JaG/hGqcAVSXXzkZ
bnwo0EcCdprXk46qEwaUiYu2YPYnY0dga3SYd9tftxYOOB+CkW1df5etE8RTDX1B
NHz/U+iT0vLfr4mTJfdIdJzsLjVPk7sQe6SWA54W2GxoW4MJEd93rZMI77xcW5pV
nQwHxMY8CEsl4EEX42Ik/B8+6erME7t2q2WMkXL9g5GB6482i99M7FKc4Xo6E0E6
Sy5lw4ziRsLctJD1zbqXJwJCEhe8/PDAA9wSACejDq/rkbBO7NIJQxNDNeCVvBef
gtD4NrUS0mzTgw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:32 2024 by rpki-client on console-fra.rpki-client.org