Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File:                     1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier:          YLH6Z5HG9u8GojCOjiO/xS3mUsGehzk6hM53ulQAQEc=
Subject key identifier:   0C:1A:A7:DE:6E:39:BD:43:1C:F0:32:FF:02:EC:D5:48:61:75:8D:4F
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer:       /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial:       018F381CC44037F15A525CA813D6C2DE8597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number:          08E9
Signing time:             Thu 02 May 2024 07:02:40 +0000
Manifest this update:     Thu 02 May 2024 07:02:40 +0000
Manifest next update:     Fri 03 May 2024 07:02:40 +0000
Files and hashes:         1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: kbtXMyrbzYRwLhuYuB/eB85ObK73zUkm1yvr+j2wVbY=)
                          2: o4v0_5qAkMXoM_zWFbeBs6m_LSY.roa (hash: /hssgEsRrZg2oY/5bzUUtvuqB7+or/WnCblU6CfUA6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:c4:40:37:f1:5a:52:5c:a8:13:d6:c2:de:85:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
        Validity
            Not Before: May  2 07:02:40 2024 GMT
            Not After : May  3 07:02:40 2024 GMT
        Subject: CN=0c1aa7de6e39bd431cf032ff02ecd54861758d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:aa:21:ee:e2:47:da:b4:9e:d2:8b:91:75:
                    3d:1b:b3:ef:e6:ff:56:09:cb:63:cf:72:65:6b:a5:
                    4e:5f:6b:ec:83:12:9d:62:29:53:7c:02:6c:07:0a:
                    a3:d1:18:b2:0a:b3:0d:b0:c5:ce:00:87:ed:7a:ca:
                    8c:0e:96:c4:e7:c1:4f:ed:09:1f:a7:5a:d9:0b:98:
                    32:99:9e:2d:de:f7:88:cc:f8:78:81:9b:7d:ed:e2:
                    94:da:87:37:d2:2d:0e:19:d5:bb:7d:4f:4c:9d:93:
                    21:60:a3:b2:23:fe:35:a2:fd:5a:48:a8:12:03:90:
                    45:7e:a4:3d:2d:d3:58:f0:f8:53:66:e8:fe:43:ca:
                    3a:1f:f2:61:c1:87:4a:8a:0f:d3:2d:bc:7c:e8:d8:
                    6b:72:dc:0a:8b:5f:de:16:8c:76:48:11:18:0c:75:
                    3e:f0:27:7a:cd:b4:37:9c:98:26:6e:b2:e4:2d:a2:
                    c2:50:33:5d:b5:77:57:5d:d4:0d:73:1b:e2:35:06:
                    ce:f5:87:66:0f:2a:27:c6:92:da:e1:89:04:61:94:
                    5b:36:1f:89:9c:dc:60:95:1e:7d:71:54:45:c2:f4:
                    99:ca:9b:57:f8:4a:39:f8:15:32:2a:59:91:6e:cb:
                    ac:94:2c:07:cd:68:64:68:8d:c8:7c:4c:7c:59:2b:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:A7:DE:6E:39:BD:43:1C:F0:32:FF:02:EC:D5:48:61:75:8D:4F
            X509v3 Authority Key Identifier:
                keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8a:cc:30:ce:93:69:89:d2:d6:26:59:56:f4:66:29:08:c0:
         25:ce:f9:21:70:62:2d:cd:82:3f:76:78:10:62:65:ca:f9:93:
         54:7c:9a:fa:6d:b2:aa:c2:db:6f:8f:bb:1b:fc:04:82:1d:58:
         86:eb:2d:d6:cd:f7:70:29:10:21:59:bd:80:89:6d:8b:b8:6d:
         9a:21:e6:d7:a1:3c:8f:d1:89:f7:c0:af:f0:f1:f9:b7:c5:b9:
         5e:eb:bd:a4:b1:de:c8:17:7b:4b:6c:34:ae:df:7f:44:00:05:
         58:f8:7a:ca:74:fc:7b:c0:60:8f:32:e9:84:04:f5:6c:93:b6:
         3e:ce:2b:f5:6b:fe:77:26:6d:b9:c2:14:de:4c:7a:ca:42:5f:
         8c:70:41:6c:9b:56:95:05:39:72:73:ca:29:2a:eb:a3:cd:8b:
         c5:90:f6:57:d8:c0:ef:f3:b4:4c:50:59:a0:c4:36:0d:d4:d8:
         e4:47:1f:50:ca:36:c5:98:6c:e5:ce:b7:bb:fd:4a:82:b0:a6:
         96:c5:68:67:0d:e9:1d:aa:26:79:96:3c:15:99:3b:a2:90:53:
         74:0c:8e:90:7e:d1:ba:12:88:59:be:33:de:e6:28:20:04:a9:
         0f:58:d4:ba:d6:c5:d4:26:eb:90:29:11:ff:56:2e:17:28:2b:
         17:20:25:2b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY84HMRAN/FaUlyoE9bC3oWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0
YjZlMTMwHhcNMjQwNTAyMDcwMjQwWhcNMjQwNTAzMDcwMjQwWjAzMTEwLwYDVQQD
EygwYzFhYTdkZTZlMzliZDQzMWNmMDMyZmYwMmVjZDU0ODYxNzU4ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BCqIe7iR9q0ntKLkXU9G7Pv5v9W
Cctjz3Jla6VOX2vsgxKdYilTfAJsBwqj0RiyCrMNsMXOAIftesqMDpbE58FP7Qkf
p1rZC5gymZ4t3veIzPh4gZt97eKU2oc30i0OGdW7fU9MnZMhYKOyI/41ov1aSKgS
A5BFfqQ9LdNY8PhTZuj+Q8o6H/JhwYdKig/TLbx86NhrctwKi1/eFox2SBEYDHU+
8Cd6zbQ3nJgmbrLkLaLCUDNdtXdXXdQNcxviNQbO9YdmDyonxpLa4YkEYZRbNh+J
nNxglR59cVRFwvSZyptX+Eo5+BUyKlmRbsuslCwHzWhkaI3IfEx8WSt4xwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAwap95uOb1DHPAy/wLs1UhhdY1PMB8GA1UdIwQY
MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh
LTZiOWRjYTljNGVjZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzllNjdmNS1lNTgwLTQ2ODYtYjgyYS02YjlkY2E5YzRl
Y2UvMS8xLXRwQmQwZGxwTTJ3VU5ncThSdW4wdFZMYmhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASorM
MM6TaYnS1iZZVvRmKQjAJc75IXBiLc2CP3Z4EGJlyvmTVHya+m2yqsLbb4+7G/wE
gh1Yhust1s33cCkQIVm9gIlti7htmiHm16E8j9GJ98Cv8PH5t8W5Xuu9pLHeyBd7
S2w0rt9/RAAFWPh6ynT8e8BgjzLphAT1bJO2Ps4r9Wv+dyZtucIU3kx6ykJfjHBB
bJtWlQU5cnPKKSrro82LxZD2V9jA7/O0TFBZoMQ2DdTY5EcfUMo2xZhs5c63u/1K
grCmlsVoZw3pHaomeZY8FZk7opBTdAyOkH7RuhKIWb4z3uYoIASpD1jUutbF1Cbr
kCkR/1YuFygrFyAlKw==
-----END CERTIFICATE-----
Generated at Thu May 2 16:04:27 2024 by rpki-client on console-ams.rpki-client.org