Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File:                     KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier:          aF0W9s9LmOAZRmf3wQ4xo/2VagOTv9y7PPVrbWcubw0=
Subject key identifier:   23:8A:DD:00:42:BB:B8:6E:9D:BB:F7:65:79:E3:E6:F8:9D:D9:87:4D
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer:       /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial:       018F96BBB84388EF81E5611995E929E94154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number:          0355
Signing time:             Mon 20 May 2024 16:00:35 +0000
Manifest this update:     Mon 20 May 2024 16:00:35 +0000
Manifest next update:     Tue 21 May 2024 16:00:35 +0000
Files and hashes:         1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: hLQ1fSmkiQIHsFF4BxiKtbM9YeepsMOxyIWQGpsvFwo=)
                          2: ME-qP6b4bzDqlAzjXAKVXMcfnkY.roa (hash: uc/0Lc7pma8z/q9hlUYLmv5+Oa7gm1vZQ7zT9drWhB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:b8:43:88:ef:81:e5:61:19:95:e9:29:e9:41:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
        Validity
            Not Before: May 20 16:00:35 2024 GMT
            Not After : May 21 16:00:35 2024 GMT
        Subject: CN=238add0042bbb86e9dbbf76579e3e6f89dd9874d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:59:34:26:59:69:30:a4:bb:a0:0d:f3:c1:
                    ca:a4:49:26:be:6b:98:9b:1a:75:f8:0e:5a:13:b0:
                    57:9d:19:5f:32:27:4a:da:1f:fb:e0:73:54:c0:7d:
                    df:fe:2a:78:57:ef:fb:ac:09:47:b7:65:be:e0:81:
                    ca:12:f2:d3:ba:dd:03:c8:cb:c5:00:d1:6e:55:78:
                    d4:ee:50:31:c9:a6:68:61:14:ac:4c:f8:f7:9b:ff:
                    ed:63:e4:75:97:2f:7b:0c:0f:35:87:58:86:d2:22:
                    8d:35:8d:b4:2d:44:1b:1d:f6:db:e5:96:2d:66:3f:
                    c2:a7:7d:09:24:df:4a:f7:9c:c3:41:e2:a9:c7:63:
                    95:70:1f:08:76:c5:43:f8:a0:35:1a:8b:29:f1:1a:
                    ea:6e:e0:dc:45:55:74:fe:04:12:8a:a7:cc:96:b5:
                    6b:32:3c:c1:16:ca:2f:8a:5f:0a:2b:ce:70:ea:03:
                    39:4d:96:07:55:a6:fe:71:06:82:37:74:a4:9a:e8:
                    7c:c0:e1:8d:eb:8c:7c:4e:9e:8e:fb:a0:6e:42:6d:
                    6b:88:01:40:bf:cd:64:e5:4e:66:2e:0b:a7:1a:c9:
                    d1:ad:5b:73:58:30:f6:18:0b:e0:d3:a2:d8:2e:db:
                    0c:9c:d0:96:cf:23:e0:21:a3:96:4a:ca:6b:31:c5:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8A:DD:00:42:BB:B8:6E:9D:BB:F7:65:79:E3:E6:F8:9D:D9:87:4D
            X509v3 Authority Key Identifier:
                keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:01:87:52:7d:13:b7:49:9f:de:27:c5:42:2d:e7:99:08:
         18:98:3c:aa:ac:af:21:31:2a:66:74:61:e4:24:82:4e:41:77:
         f5:e4:36:2a:9c:66:8d:22:6f:35:07:78:93:b4:59:76:3f:21:
         0b:bb:e5:fc:99:4c:7d:d3:c3:61:6b:14:89:2c:c0:a8:98:38:
         da:7f:f5:7d:34:60:ac:6a:f6:35:04:43:2a:a1:67:fb:7a:a4:
         94:9b:50:3c:72:a6:18:e6:95:47:42:34:6b:c4:b2:1f:3f:a1:
         4c:9a:ad:c3:c7:1b:96:c7:ed:19:7d:56:16:f9:68:cd:f1:0e:
         ec:f7:bd:c3:dc:11:fb:99:18:9d:78:e0:6c:49:36:88:9b:7b:
         49:5d:12:e7:6b:3a:30:b3:91:b6:73:c8:db:4c:ee:71:5d:f0:
         01:4c:af:12:f7:b1:da:a1:90:4f:cb:f6:53:33:a1:d6:33:cd:
         11:7e:ea:77:b5:5b:8c:47:ef:89:1b:96:8a:f5:d1:be:10:7d:
         50:8b:51:2d:09:c2:dc:97:b7:5c:ab:75:f0:ad:b2:4a:30:88:
         7a:b5:f3:db:ee:54:2f:d6:c9:d5:a2:2c:96:c6:20:4a:11:56:
         c1:ac:19:50:de:cd:f9:c9:78:0f:40:ae:bb:74:e6:04:6f:7c:
         cf:fd:b9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Wu7hDiO+B5WEZlekp6UFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl
MjIxOWYwHhcNMjQwNTIwMTYwMDM1WhcNMjQwNTIxMTYwMDM1WjAzMTEwLwYDVQQD
EygyMzhhZGQwMDQyYmJiODZlOWRiYmY3NjU3OWUzZTZmODlkZDk4NzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVZNCZZaTCku6AN88HKpEkmvmuY
mxp1+A5aE7BXnRlfMidK2h/74HNUwH3f/ip4V+/7rAlHt2W+4IHKEvLTut0DyMvF
ANFuVXjU7lAxyaZoYRSsTPj3m//tY+R1ly97DA81h1iG0iKNNY20LUQbHfbb5ZYt
Zj/Cp30JJN9K95zDQeKpx2OVcB8IdsVD+KA1Gosp8RrqbuDcRVV0/gQSiqfMlrVr
MjzBFsovil8KK85w6gM5TZYHVab+cQaCN3Skmuh8wOGN64x8Tp6O+6BuQm1riAFA
v81k5U5mLgunGsnRrVtzWDD2GAvg06LYLtsMnNCWzyPgIaOWSsprMcViIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOK3QBCu7hunbv3ZXnj5vid2YdNMB8GA1UdIwQY
MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt
OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi
LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSYBh1J9
E7dJn94nxUIt55kIGJg8qqyvITEqZnRh5CSCTkF39eQ2KpxmjSJvNQd4k7RZdj8h
C7vl/JlMfdPDYWsUiSzAqJg42n/1fTRgrGr2NQRDKqFn+3qklJtQPHKmGOaVR0I0
a8SyHz+hTJqtw8cblsftGX1WFvlozfEO7Pe9w9wR+5kYnXjgbEk2iJt7SV0S52s6
MLORtnPI20zucV3wAUyvEvex2qGQT8v2UzOh1jPNEX7qd7VbjEfviRuWivXRvhB9
UItRLQnC3Je3XKt18K2ySjCIerXz2+5UL9bJ1aIslsYgShFWwawZUN7N+cl4D0Cu
u3TmBG98z/25eg==
-----END CERTIFICATE-----
Generated at Tue May 21 00:47:43 2024 by rpki-client on console-ams.rpki-client.org