Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File:                     syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier:          Pm0jogx2Zwf2Z6nrr4dVJDb3CPhuGbsJ58C/Ct7Fb74=
Subject key identifier:   1C:18:F0:6F:8C:50:57:78:D6:0B:29:4E:13:03:AF:B8:99:4B:64:4F
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer:       /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial:       0191FB5A451728BD603F69AABE73C9A16931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number:          B8
Signing time:             Mon 16 Sep 2024 15:01:22 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:22 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:22 +0000
Files and hashes:         1: _LIBqziFSfuVNlQZGD0nEjo-rek.roa (hash: 7OQUCJ2vajQFS+tSVITWfT1rHl+9oxMR5sEAhuiUT1I=)
                          2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: QKpgiUlH6nNr4aVkk9/CgrWYG+yefVweIqkLXE3XB2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:45:17:28:bd:60:3f:69:aa:be:73:c9:a1:69:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
        Validity
            Not Before: Sep 16 15:01:22 2024 GMT
            Not After : Sep 17 15:01:22 2024 GMT
        Subject: CN=1c18f06f8c505778d60b294e1303afb8994b644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:4a:8c:9d:26:e2:bc:93:5e:a3:d1:e7:83:
                    50:26:a5:93:38:55:ca:30:40:6a:7c:36:a6:53:98:
                    42:0c:1c:9c:68:9c:22:27:85:90:d9:91:5e:8c:79:
                    4b:de:a5:93:1e:2c:3d:43:f8:c2:0f:c2:79:53:50:
                    3d:d8:20:09:1f:dd:1f:d3:05:9f:94:a6:1f:c5:35:
                    c6:03:40:bd:d8:48:f9:1f:f1:a0:35:e7:97:6f:e6:
                    de:47:02:3a:23:14:a2:d5:84:02:00:5c:8e:2b:81:
                    b5:97:e4:64:42:80:0d:f7:53:5b:4e:c4:2c:6b:e5:
                    9c:91:84:8a:87:fe:16:bc:2e:b6:88:da:ea:7a:9c:
                    de:ba:c0:2e:cd:8d:c4:da:fe:a8:6f:e4:df:c3:f2:
                    b0:e2:49:4d:b4:02:b7:51:56:c7:f9:04:54:bf:09:
                    71:9b:44:ce:f3:22:6d:5f:4d:cb:6c:15:bc:26:12:
                    23:0b:21:25:e9:b9:9f:43:18:f8:88:17:f0:cd:ee:
                    4f:5a:d3:8a:58:ea:22:3d:c9:b2:20:84:32:3a:92:
                    1d:22:70:03:6c:b4:91:7d:39:8e:4c:fb:cc:61:df:
                    8e:05:61:56:71:b0:a9:02:9c:24:81:48:28:ff:de:
                    24:be:a0:dd:2a:18:d9:e8:25:4c:96:01:2c:33:29:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:18:F0:6F:8C:50:57:78:D6:0B:29:4E:13:03:AF:B8:99:4B:64:4F
            X509v3 Authority Key Identifier:
                keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:08:6a:f2:b3:17:f0:0d:e9:ee:77:f2:3f:0f:83:3f:93:
         e6:05:6e:e2:19:7a:0d:53:2e:9e:31:c8:75:0d:bf:d6:c5:0c:
         90:de:27:86:b8:40:e7:f5:7d:5a:29:23:12:37:4a:72:a5:75:
         e6:3c:0a:a9:43:2e:49:75:0c:1a:0a:9a:e6:d3:a1:bd:e0:aa:
         ca:18:e2:49:32:6f:d5:53:2b:d4:5b:d4:7c:52:71:69:3c:2c:
         63:82:44:8c:9f:e4:9c:e1:5d:5a:4f:a5:3d:9c:a2:fa:7d:28:
         13:62:0a:13:e5:53:ae:ea:fc:96:53:70:c4:8f:3d:6f:da:04:
         4f:f7:74:6d:2f:7e:e2:41:1a:ea:86:43:a2:cc:23:ee:c8:0e:
         c3:5d:e2:34:de:40:90:e9:0b:25:f5:df:4b:05:a3:0f:7b:9e:
         61:81:3f:b7:11:84:8d:75:00:a3:9f:8d:40:b7:9d:04:1d:3c:
         21:9e:17:bc:2c:34:27:f6:14:b4:12:b4:f9:5c:c4:c8:72:8a:
         16:27:09:c1:97:af:91:b0:03:7b:53:42:5a:85:3f:66:d2:c1:
         bf:26:37:58:8b:fb:e6:88:82:8c:81:80:f8:a8:8c:e8:56:49:
         5d:70:f6:ef:ef:9c:64:c3:c0:95:53:52:ca:41:67:6b:2d:a7:
         c3:39:45:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7WkUXKL1gP2mqvnPJoWkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmJiN2YyZmE4YzQxNGM2NzE4OGJkYWJiZmI3NjIxNTY5
M2JhODcwHhcNMjQwOTE2MTUwMTIyWhcNMjQwOTE3MTUwMTIyWjAzMTEwLwYDVQQD
EygxYzE4ZjA2ZjhjNTA1Nzc4ZDYwYjI5NGUxMzAzYWZiODk5NGI2NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv71KjJ0m4ryTXqPR54NQJqWTOFXK
MEBqfDamU5hCDBycaJwiJ4WQ2ZFejHlL3qWTHiw9Q/jCD8J5U1A92CAJH90f0wWf
lKYfxTXGA0C92Ej5H/GgNeeXb+beRwI6IxSi1YQCAFyOK4G1l+RkQoAN91NbTsQs
a+WckYSKh/4WvC62iNrqepzeusAuzY3E2v6ob+Tfw/Kw4klNtAK3UVbH+QRUvwlx
m0TO8yJtX03LbBW8JhIjCyEl6bmfQxj4iBfwze5PWtOKWOoiPcmyIIQyOpIdInAD
bLSRfTmOTPvMYd+OBWFWcbCpApwkgUgo/94kvqDdKhjZ6CVMlgEsMyn6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwY8G+MUFd41gspThMDr7iZS2RPMB8GA1UdIwQY
MBaAFLMrt/L6jEFMZxiL2rv7diFWk7qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEt
MjIzYTRkOTQ3MDllLzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEtMjIzYTRkOTQ3MDll
LzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABioIavKz
F/AN6e538j8Pgz+T5gVu4hl6DVMunjHIdQ2/1sUMkN4nhrhA5/V9WikjEjdKcqV1
5jwKqUMuSXUMGgqa5tOhveCqyhjiSTJv1VMr1FvUfFJxaTwsY4JEjJ/knOFdWk+l
PZyi+n0oE2IKE+VTrur8llNwxI89b9oET/d0bS9+4kEa6oZDoswj7sgOw13iNN5A
kOkLJfXfSwWjD3ueYYE/txGEjXUAo5+NQLedBB08IZ4XvCw0J/YUtBK0+VzEyHKK
FicJwZevkbADe1NCWoU/ZtLBvyY3WIv75oiCjIGA+KiM6FZJXXD27++cZMPAlVNS
ykFnay2nwzlFgA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:36:30 2024 by rpki-client on console-ams.rpki-client.org