Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File:                     mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier:          0y6bhybLRAVwBVh5xjZujUwhTJplR4CUoKxnp17iZ7M=
Subject key identifier:   BD:C3:04:9D:D5:15:F0:72:E6:FF:59:04:E2:0D:F2:D9:B2:A5:3E:08
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer:       /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial:       0191FAEED65C8BF5CB1E549E5B2B2AEB3945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number:          0122
Signing time:             Mon 16 Sep 2024 13:04:01 +0000
Manifest this update:     Mon 16 Sep 2024 13:04:01 +0000
Manifest next update:     Tue 17 Sep 2024 13:04:01 +0000
Files and hashes:         1: j9lpiOVUCefGpGWouaZDwPfPcIY.roa (hash: e1DqBqGlrS3swIoKIGL+j3suGSEyzVQ2A/4T7H/62/M=)
                          2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: 0EuN1oBXkquJ27PS98ZZczcq+u83tzrr2uZsmCE/SzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ee:d6:5c:8b:f5:cb:1e:54:9e:5b:2b:2a:eb:39:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
        Validity
            Not Before: Sep 16 13:04:01 2024 GMT
            Not After : Sep 17 13:04:01 2024 GMT
        Subject: CN=bdc3049dd515f072e6ff5904e20df2d9b2a53e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:c5:61:9f:31:65:b4:fe:22:c4:fb:5e:1f:
                    e8:fb:6d:50:93:b8:58:9e:ca:29:84:3b:08:91:38:
                    67:22:4b:ee:7f:90:8b:f0:36:0b:ad:f3:32:8c:28:
                    0c:7f:fa:7a:e5:16:c9:b8:74:3f:15:2b:f9:32:5b:
                    2c:fb:29:24:be:6e:fa:c3:23:b0:85:03:1c:0f:be:
                    06:54:65:94:ac:b5:95:2a:06:a6:25:08:53:f6:ee:
                    3f:ef:c7:b7:96:72:95:b8:43:f1:45:a5:32:9a:26:
                    d6:52:b3:e3:f8:82:51:a4:4a:b9:a3:2a:ec:82:0e:
                    d5:5b:04:e7:1a:7e:c5:c2:ce:99:28:54:8c:09:8c:
                    32:38:c3:12:8f:6a:f1:76:c0:15:64:2d:91:cd:7c:
                    7b:86:76:d0:ed:a9:4f:79:8f:2f:fd:a1:3c:80:92:
                    ed:1d:12:c7:91:b5:d4:73:9e:e7:47:67:62:26:da:
                    b8:bc:e1:cd:b0:36:4e:05:b2:62:fb:ed:8c:bd:0e:
                    50:a9:ac:7f:66:00:fc:c3:b3:53:cf:b5:9d:1a:c1:
                    93:e3:33:a5:a1:2b:0c:af:9a:36:5b:4b:d6:78:6a:
                    68:be:d5:ae:8b:21:79:f3:3e:5e:6c:22:5a:a0:08:
                    07:60:59:38:4b:35:b9:bb:be:ac:57:37:c2:ea:aa:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:04:9D:D5:15:F0:72:E6:FF:59:04:E2:0D:F2:D9:B2:A5:3E:08
            X509v3 Authority Key Identifier:
                keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:1c:42:36:8f:46:7c:65:21:55:47:11:07:d6:16:0d:5f:
         ac:98:f6:9c:f0:4e:ba:28:3b:c8:2b:48:f4:84:eb:ae:bc:bc:
         60:a2:52:1c:70:56:48:26:6c:ce:ba:03:0c:61:dd:db:c2:7e:
         44:ed:f1:43:42:34:0e:cd:32:c4:87:48:db:19:7e:29:2a:4d:
         0e:e4:af:07:80:cc:ad:65:ce:8c:4d:00:77:74:22:5d:ee:2b:
         44:e7:a3:05:bc:b4:0d:da:f3:e0:97:24:64:1f:1a:36:f7:70:
         1f:c1:c6:bc:c4:27:3b:0b:0e:60:a2:92:fd:5e:d3:03:0a:67:
         be:56:cd:6e:94:91:0e:a6:9e:07:0f:b5:17:e0:66:b3:ce:6c:
         59:fe:e6:e2:56:68:91:8f:44:c2:69:13:cd:99:b3:00:19:c7:
         6d:ee:39:98:3a:86:9f:64:cb:a3:d7:62:4f:92:60:f9:f5:20:
         67:1d:a0:dd:91:57:21:a8:ba:7d:a6:e3:8e:a0:a5:a1:ee:48:
         f4:47:b2:80:95:58:59:22:d0:b3:d9:fb:2d:a6:94:92:c1:da:
         b8:8f:c9:31:6c:ae:ab:5e:f2:0a:6b:06:2c:85:ff:f5:c0:ce:
         2d:35:26:98:17:da:d9:5f:0c:7a:8e:e4:5e:22:d0:70:7a:fe:
         89:97:25:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67tZci/XLHlSeWysq6zlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NmIyMjljYmYzNjY3YWNlMjc3YjE2MDA1YzM5MDcyZDA2
NzNmY2YwHhcNMjQwOTE2MTMwNDAxWhcNMjQwOTE3MTMwNDAxWjAzMTEwLwYDVQQD
EyhiZGMzMDQ5ZGQ1MTVmMDcyZTZmZjU5MDRlMjBkZjJkOWIyYTUzZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCHFYZ8xZbT+IsT7Xh/o+21Qk7hY
nsophDsIkThnIkvuf5CL8DYLrfMyjCgMf/p65RbJuHQ/FSv5Mlss+ykkvm76wyOw
hQMcD74GVGWUrLWVKgamJQhT9u4/78e3lnKVuEPxRaUymibWUrPj+IJRpEq5oyrs
gg7VWwTnGn7Fws6ZKFSMCYwyOMMSj2rxdsAVZC2RzXx7hnbQ7alPeY8v/aE8gJLt
HRLHkbXUc57nR2diJtq4vOHNsDZOBbJi++2MvQ5Qqax/ZgD8w7NTz7WdGsGT4zOl
oSsMr5o2W0vWeGpovtWuiyF58z5ebCJaoAgHYFk4SzW5u76sVzfC6qpn7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3DBJ3VFfBy5v9ZBOIN8tmypT4IMB8GA1UdIwQY
MBaAFJlrIpy/Nmes4nexYAXDkHLQZz/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNjYzYmEtYTgwZC00MTA4LTg3MDgt
MGIxNWQ5N2FkNTYxLzEvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNjYzYmEtYTgwZC00MTA4LTg3MDgtMGIxNWQ5N2FkNTYx
LzEvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAkcQjaP
RnxlIVVHEQfWFg1frJj2nPBOuig7yCtI9ITrrry8YKJSHHBWSCZszroDDGHd28J+
RO3xQ0I0Ds0yxIdI2xl+KSpNDuSvB4DMrWXOjE0Ad3QiXe4rROejBby0Ddrz4Jck
ZB8aNvdwH8HGvMQnOwsOYKKS/V7TAwpnvlbNbpSRDqaeBw+1F+Bms85sWf7m4lZo
kY9EwmkTzZmzABnHbe45mDqGn2TLo9diT5Jg+fUgZx2g3ZFXIai6fabjjqCloe5I
9EeygJVYWSLQs9n7LaaUksHauI/JMWyuq17yCmsGLIX/9cDOLTUmmBfa2V8Meo7k
XiLQcHr+iZclWg==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:28 2024 by rpki-client on console-ams.rpki-client.org