Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File:                     HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier:          wr1rA1AAocLyrM/z6tZjCUpp9ehi93LHoPGVL7U0LE4=
Subject key identifier:   50:BC:EA:E1:DB:58:04:A4:FF:26:83:83:C8:CA:53:76:E0:64:C4:CC
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer:       /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial:       01906DF47FF99693EC1A69154A676BCBB3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number:          0B5B
Signing time:             Mon 01 Jul 2024 11:00:58 +0000
Manifest this update:     Mon 01 Jul 2024 11:00:58 +0000
Manifest next update:     Tue 02 Jul 2024 11:00:58 +0000
Files and hashes:         1: 9nR9XgGkvlFqiAuH1wN7ug7WYzI.roa (hash: 9Q27ajwb8pWSsYx2J7Nn7F1OuuNbfJO4GMi8LjA7fHU=)
                          2: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: K6P2XuVCvt4nOZuz1ZhVzdBk6rw8wUjSqwvPSdYfONY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:f4:7f:f9:96:93:ec:1a:69:15:4a:67:6b:cb:b3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
        Validity
            Not Before: Jul  1 11:00:58 2024 GMT
            Not After : Jul  2 11:00:58 2024 GMT
        Subject: CN=50bceae1db5804a4ff268383c8ca5376e064c4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:98:b2:48:8c:1d:8e:b5:d2:1d:81:07:95:
                    5d:e6:18:b2:ac:69:5d:93:d8:7d:c7:49:ba:db:f7:
                    29:d1:18:0a:41:07:04:12:56:bb:9b:32:a0:3b:66:
                    6b:bc:9f:2e:0e:95:7b:94:88:ad:0d:c8:b1:38:47:
                    f9:d7:0c:59:98:ca:18:a6:92:42:cc:46:3e:d7:37:
                    65:05:4f:16:f3:5d:fe:59:a2:19:48:d6:99:0a:ac:
                    72:bd:b4:da:2c:bf:30:8c:c0:96:d1:1a:e6:e4:e1:
                    d0:89:41:29:44:dc:69:34:44:a9:e3:5c:d1:c3:71:
                    d2:3b:e7:eb:3c:ab:8d:cd:bf:89:de:4b:b9:c7:15:
                    05:44:cb:5f:e0:b8:61:5e:88:f4:3d:64:ea:80:ed:
                    19:f7:db:1b:a9:d6:7c:e3:c4:98:68:cd:50:da:05:
                    0a:e1:ed:f9:d2:4a:3a:c7:f7:cb:80:95:47:24:df:
                    25:90:a1:6c:bf:fd:87:e8:95:98:e9:a8:77:f3:e3:
                    92:a4:b4:29:19:b9:59:0a:35:fb:9a:37:40:ea:06:
                    4e:1c:9f:e3:ca:97:d9:ee:87:db:23:0b:9c:0a:68:
                    19:97:a1:11:91:bb:43:85:06:25:42:45:1f:18:7b:
                    8e:9d:22:c2:23:40:e0:3f:4d:ed:52:70:b4:10:64:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:EA:E1:DB:58:04:A4:FF:26:83:83:C8:CA:53:76:E0:64:C4:CC
            X509v3 Authority Key Identifier:
                keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:21:ba:a3:35:6d:b1:ea:5e:80:7b:d9:eb:a0:6a:78:ae:da:
         77:fe:63:48:6f:a0:e6:76:97:6a:08:f3:33:99:a2:5e:04:46:
         0e:51:bb:67:22:32:9a:ad:21:b3:95:bf:72:3a:a6:6e:1e:e3:
         92:ef:38:45:d6:0e:a4:fc:67:21:b1:74:91:82:34:f7:08:5f:
         37:c8:23:d0:c3:cf:53:32:a3:6b:ae:fa:4a:d7:80:ae:13:0d:
         9f:e5:bf:70:59:fc:87:e4:d2:1f:97:84:c4:1f:aa:b7:9c:af:
         5d:ee:b7:98:52:b8:c6:75:39:18:63:e3:17:c6:18:e6:a3:e9:
         b0:d8:4c:4f:9d:4b:ef:8c:16:0b:86:a0:58:83:93:f9:33:38:
         46:54:8b:cc:bb:89:3d:63:c1:f0:b1:39:f3:f4:43:1a:62:ee:
         2a:35:8f:22:e1:80:d1:ff:93:96:53:92:f6:30:5b:cc:b0:07:
         ef:d9:75:23:33:2a:8c:0e:2f:b1:da:17:e7:27:26:eb:41:8b:
         95:d3:11:3c:14:e1:02:c0:91:96:47:8d:4c:2e:7c:71:95:07:
         79:a6:28:a4:01:d8:3f:40:18:a6:c3:ec:d1:30:cb:e5:9f:07:
         e7:b9:4a:b5:a3:cb:54:32:53:b0:46:50:79:9f:35:2a:40:70:
         04:ec:be:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBt9H/5lpPsGmkVSmdry7PRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2
MGNkMGUwHhcNMjQwNzAxMTEwMDU4WhcNMjQwNzAyMTEwMDU4WjAzMTEwLwYDVQQD
Eyg1MGJjZWFlMWRiNTgwNGE0ZmYyNjgzODNjOGNhNTM3NmUwNjRjNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRCYskiMHY610h2BB5Vd5hiyrGld
k9h9x0m62/cp0RgKQQcEEla7mzKgO2ZrvJ8uDpV7lIitDcixOEf51wxZmMoYppJC
zEY+1zdlBU8W813+WaIZSNaZCqxyvbTaLL8wjMCW0Rrm5OHQiUEpRNxpNESp41zR
w3HSO+frPKuNzb+J3ku5xxUFRMtf4LhhXoj0PWTqgO0Z99sbqdZ848SYaM1Q2gUK
4e350ko6x/fLgJVHJN8lkKFsv/2H6JWY6ah38+OSpLQpGblZCjX7mjdA6gZOHJ/j
ypfZ7ofbIwucCmgZl6ERkbtDhQYlQkUfGHuOnSLCI0DgP03tUnC0EGSrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFC86uHbWASk/yaDg8jKU3bgZMTMMB8GA1UdIwQY
MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt
YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3
LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxiG6ozVt
sepegHvZ66BqeK7ad/5jSG+g5naXagjzM5miXgRGDlG7ZyIymq0hs5W/cjqmbh7j
ku84RdYOpPxnIbF0kYI09whfN8gj0MPPUzKja676SteArhMNn+W/cFn8h+TSH5eE
xB+qt5yvXe63mFK4xnU5GGPjF8YY5qPpsNhMT51L74wWC4agWIOT+TM4RlSLzLuJ
PWPB8LE58/RDGmLuKjWPIuGA0f+TllOS9jBbzLAH79l1IzMqjA4vsdoX5ycm60GL
ldMRPBThAsCRlkeNTC58cZUHeaYopAHYP0AYpsPs0TDL5Z8H57lKtaPLVDJTsEZQ
eZ81KkBwBOy+jQ==
-----END CERTIFICATE-----
Generated at Mon Jul 1 18:01:52 2024 by rpki-client on console-ams.rpki-client.org