Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File:                     AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier:          Yzk3+B8wpS4N2oY85Pw0FMHXtHHx4MtBm4DaEugsbmE=
Subject key identifier:   DC:02:8E:38:D2:4D:91:18:D2:21:D3:9C:B5:5D:B6:DB:9D:74:44:C9
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer:       /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial:       018F1DB640595009EA7656DC7436ABA13E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number:          0FDF
Signing time:             Sat 27 Apr 2024 04:00:34 +0000
Manifest this update:     Sat 27 Apr 2024 04:00:34 +0000
Manifest next update:     Sun 28 Apr 2024 04:00:34 +0000
Files and hashes:         1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: JFYx6COfYGkL/bjhfG8+T9+CH4V72IwpGf3H7FTOWME=)
                          2: L1wkwd75L3kHT3kTXjpM7C79ar0.roa (hash: qqbF2XHNLHVxVx5TLE1A6r08JxFU4w687ub768rWzhs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1d:b6:40:59:50:09:ea:76:56:dc:74:36:ab:a1:3e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
        Validity
            Not Before: Apr 27 04:00:34 2024 GMT
            Not After : Apr 28 04:00:34 2024 GMT
        Subject: CN=dc028e38d24d9118d221d39cb55db6db9d7444c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:93:6b:33:37:23:ce:51:4a:e8:11:04:c1:
                    ac:b8:fe:46:13:5f:f6:c7:23:2a:5b:95:e3:e0:f0:
                    85:1f:f9:8f:2b:a2:24:88:8a:4c:5d:88:0b:be:97:
                    42:e2:be:f4:14:b7:ab:ba:3d:4e:b7:b2:85:80:eb:
                    3f:2f:d1:ab:89:06:fe:e1:b0:27:d3:02:a5:c2:3f:
                    db:fb:8f:6d:ac:4e:4e:db:8b:31:d6:f1:79:45:5b:
                    7f:44:5c:9a:b5:22:47:30:9c:d9:e6:37:05:d4:82:
                    0f:1c:8c:8f:b8:57:9d:11:4f:39:5f:93:34:dd:6c:
                    b0:06:16:e1:36:29:20:02:6e:6f:01:65:f3:ec:ca:
                    50:9e:29:ac:be:e4:e5:ea:d4:cb:81:8a:02:fc:81:
                    fe:de:c8:6d:83:94:9d:fa:52:b0:16:76:5b:68:43:
                    27:e4:0b:0e:a9:81:31:f0:93:06:8c:9c:51:03:3f:
                    b5:00:0d:92:dd:d6:eb:e6:b0:b2:ca:e7:32:99:f7:
                    26:a1:9f:33:52:c0:38:f5:3c:da:f9:c4:11:0b:f9:
                    b7:40:36:8d:03:3a:ef:b6:51:99:73:ca:a8:73:5a:
                    ae:9e:67:7b:cf:d6:37:bb:d0:fe:1f:db:75:5f:5b:
                    f0:af:cc:55:cd:eb:14:16:99:60:64:7a:fd:e2:37:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:02:8E:38:D2:4D:91:18:D2:21:D3:9C:B5:5D:B6:DB:9D:74:44:C9
            X509v3 Authority Key Identifier:
                keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4e:3e:13:a1:44:dd:b8:32:f5:c9:90:7d:32:85:d9:38:54:
         34:b9:d6:e6:6d:0a:70:a1:fb:b5:cc:bb:9a:64:14:29:17:bc:
         f9:df:59:8d:bc:07:40:f4:1d:bb:a4:5c:aa:bb:bd:64:f9:67:
         a7:b1:dc:0a:97:f6:ca:22:21:9c:e7:e8:ce:06:eb:d5:28:71:
         7c:39:08:33:c1:13:57:6f:ef:75:f4:1b:fc:0a:84:46:f0:01:
         97:c0:48:b0:98:aa:e9:a5:a5:99:db:0d:69:cd:69:e0:e2:c6:
         ad:1e:0a:92:c6:ac:1c:cd:f2:91:08:14:aa:bf:31:7e:dd:92:
         96:a0:52:7d:b3:e0:f2:9f:b7:2b:57:14:f2:9e:d6:c9:39:0f:
         25:3b:b0:a6:db:cb:9c:bd:ab:29:b2:74:58:6c:a8:06:d0:25:
         f7:94:f6:bd:e7:ef:0d:0c:47:15:af:f8:a6:a1:64:f8:28:98:
         2a:91:54:ac:fa:05:1a:ee:ca:57:a3:7d:fc:84:9d:db:76:92:
         93:e8:81:05:80:9d:e3:e4:55:37:d8:b6:99:ee:49:16:b4:cc:
         86:e9:2d:bc:0c:cc:5e:f9:dd:3e:a0:48:d8:ef:1b:7b:b0:cc:
         da:dc:1e:10:38:f1:62:80:a8:7c:bd:ed:73:1d:15:21:1c:bd:
         d7:ff:e1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8dtkBZUAnqdlbcdDaroT4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFlYTM5NTA4ZTBlMTdhNjUxZmU5MmFjMjllYTM4ODMy
ZDBiZmYwHhcNMjQwNDI3MDQwMDM0WhcNMjQwNDI4MDQwMDM0WjAzMTEwLwYDVQQD
EyhkYzAyOGUzOGQyNGQ5MTE4ZDIyMWQzOWNiNTVkYjZkYjlkNzQ0NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMeTazM3I85RSugRBMGsuP5GE1/2
xyMqW5Xj4PCFH/mPK6IkiIpMXYgLvpdC4r70FLeruj1Ot7KFgOs/L9GriQb+4bAn
0wKlwj/b+49trE5O24sx1vF5RVt/RFyatSJHMJzZ5jcF1IIPHIyPuFedEU85X5M0
3WywBhbhNikgAm5vAWXz7MpQnimsvuTl6tTLgYoC/IH+3shtg5Sd+lKwFnZbaEMn
5AsOqYEx8JMGjJxRAz+1AA2S3dbr5rCyyucymfcmoZ8zUsA49Tza+cQRC/m3QDaN
AzrvtlGZc8qoc1qunmd7z9Y3u9D+H9t1X1vwr8xVzesUFplgZHr94jfDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwCjjjSTZEY0iHTnLVdttuddETJMB8GA1UdIwQY
MBaAFAMh6jlQjg4XplH+kqwp6jiDLQv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQt
OGNmODA1NTExMDAyLzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQtOGNmODA1NTExMDAy
LzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArE4+E6FE
3bgy9cmQfTKF2ThUNLnW5m0KcKH7tcy7mmQUKRe8+d9ZjbwHQPQdu6Rcqru9ZPln
p7HcCpf2yiIhnOfozgbr1ShxfDkIM8ETV2/vdfQb/AqERvABl8BIsJiq6aWlmdsN
ac1p4OLGrR4KksasHM3ykQgUqr8xft2SlqBSfbPg8p+3K1cU8p7WyTkPJTuwptvL
nL2rKbJ0WGyoBtAl95T2vefvDQxHFa/4pqFk+CiYKpFUrPoFGu7KV6N9/ISd23aS
k+iBBYCd4+RVN9i2me5JFrTMhuktvAzMXvndPqBI2O8be7DM2tweEDjxYoCofL3t
cx0VIRy91//hVw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 11:45:27 2024 by rpki-client on console-ams.rpki-client.org