Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File:                     4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier:          dh08IF27nLN4jfGg1YoRA55tHoZG+EUvdc90jp3ZQLQ=
Subject key identifier:   E7:3F:9A:98:1B:24:9E:78:BB:28:35:A0:5E:47:F6:05:0F:64:83:95
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer:       /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial:       019367EBD009371AE62FC267C6FE04521916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number:          0C61
Signing time:             Tue 26 Nov 2024 10:02:07 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:07 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:07 +0000
Files and hashes:         1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: Wj7JnNSbh5hZijuslMpLFCGDQnan7rSYnjG8GMGbnD0=)
                          2: _U-HnHT7POYzwUYeifj5_5TsMXc.roa (hash: otnB1Q3WqpTE2exGa0OPULqtvYVGyfqS/AtDqAUhXTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:d0:09:37:1a:e6:2f:c2:67:c6:fe:04:52:19:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
        Validity
            Not Before: Nov 26 10:02:07 2024 GMT
            Not After : Nov 27 10:02:07 2024 GMT
        Subject: CN=e73f9a981b249e78bb2835a05e47f6050f648395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:05:3c:ed:fc:9d:0a:3c:68:96:07:05:dd:
                    5f:0c:59:e2:e3:6d:72:fb:31:a6:36:e5:0d:7a:00:
                    3d:c6:eb:b4:2d:e0:ad:2e:e5:05:23:dd:39:77:aa:
                    86:e2:54:66:0f:4a:8b:50:5a:b8:84:ac:33:49:53:
                    ff:52:0d:e8:72:6e:53:15:30:71:7b:f3:65:9b:c7:
                    3c:3c:b8:7a:df:60:ff:d6:4a:c1:d0:09:cb:cd:1f:
                    e6:4f:72:cc:7c:02:81:39:cc:5b:7e:6c:70:85:61:
                    5c:11:b3:16:07:d2:ed:ef:2d:36:78:01:13:35:cf:
                    9e:46:4c:52:7b:41:9c:c0:57:42:a2:78:07:88:10:
                    b6:52:15:ba:b6:36:5a:2c:10:d5:d9:92:d0:56:25:
                    b4:82:c4:04:8c:9f:dc:d1:41:59:b8:57:d6:27:27:
                    99:6d:1f:05:1f:9f:ad:84:89:8f:83:27:e3:b1:3f:
                    d1:ab:ef:88:1d:5e:55:d6:a4:d7:61:28:6d:ba:38:
                    c8:fe:88:32:56:b4:c7:7a:cc:6f:1a:89:ab:32:d4:
                    ac:b4:fb:30:84:a7:1b:66:22:85:89:1f:87:c0:f1:
                    91:f4:6f:d8:f3:02:e7:d5:b1:96:e0:c0:16:26:42:
                    bb:0a:60:5b:95:4b:27:82:c5:11:9f:33:fe:74:be:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:9A:98:1B:24:9E:78:BB:28:35:A0:5E:47:F6:05:0F:64:83:95
            X509v3 Authority Key Identifier:
                keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4a:d1:fe:4c:23:18:97:5c:23:f2:a6:57:f5:21:72:03:8d:
         fd:20:fb:0c:22:5e:5e:32:41:da:30:6a:03:5d:75:a6:76:b3:
         65:c1:73:5b:8f:41:1c:47:3a:d5:7d:ff:1d:d3:3f:4c:e6:3e:
         03:6b:65:a7:42:36:6f:a4:2f:29:66:e6:35:34:7b:92:cc:86:
         f7:27:69:8d:3e:ab:b5:d4:2f:2e:d7:f2:6a:ee:1f:7a:c1:18:
         a0:51:8b:06:27:32:aa:6c:38:b3:d4:87:41:e4:9a:8b:bd:09:
         25:dd:50:82:8f:d5:8c:a9:18:e0:7a:d0:85:b4:e3:29:b2:44:
         f8:90:c3:1d:4b:88:9c:f7:45:63:f7:23:10:4e:33:33:51:38:
         45:fe:07:52:f0:16:a5:cf:93:07:50:91:3e:66:d6:57:c1:9d:
         f4:b9:c0:da:96:bc:eb:ce:15:aa:9a:f8:f2:3a:3e:23:db:a9:
         de:41:b0:99:66:03:ef:95:57:83:9d:9b:7b:65:9a:be:0e:b1:
         da:2c:ab:b1:e3:cb:07:33:99:53:3e:c9:d6:de:77:20:1d:6c:
         db:d1:3a:96:07:3c:dc:1a:b9:3d:68:f1:6c:38:c7:8c:1a:01:
         02:d6:92:fc:67:3e:06:65:c2:db:33:d2:e5:fb:00:6b:d1:30:
         a4:9f:e1:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn69AJNxrmL8Jnxv4EUhkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmRjY2IyNDUwYTFhMDUzYzg5Y2MyMTNlNGFlOWI4NjQ3
ODJkZTMwHhcNMjQxMTI2MTAwMjA3WhcNMjQxMTI3MTAwMjA3WjAzMTEwLwYDVQQD
EyhlNzNmOWE5ODFiMjQ5ZTc4YmIyODM1YTA1ZTQ3ZjYwNTBmNjQ4Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEsFPO38nQo8aJYHBd1fDFni421y
+zGmNuUNegA9xuu0LeCtLuUFI905d6qG4lRmD0qLUFq4hKwzSVP/Ug3ocm5TFTBx
e/Nlm8c8PLh632D/1krB0AnLzR/mT3LMfAKBOcxbfmxwhWFcEbMWB9Lt7y02eAET
Nc+eRkxSe0GcwFdCongHiBC2UhW6tjZaLBDV2ZLQViW0gsQEjJ/c0UFZuFfWJyeZ
bR8FH5+thImPgyfjsT/Rq++IHV5V1qTXYShtujjI/ogyVrTHesxvGomrMtSstPsw
hKcbZiKFiR+HwPGR9G/Y8wLn1bGW4MAWJkK7CmBblUsngsURnzP+dL5nxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc/mpgbJJ54uyg1oF5H9gUPZIOVMB8GA1UdIwQY
MBaAFOG9zLJFChoFPInMIT5K6bhkeC3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQt
ZWVkNTU2YWYyYzdmLzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQtZWVkNTU2YWYyYzdm
LzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0rR/kwj
GJdcI/KmV/UhcgON/SD7DCJeXjJB2jBqA111pnazZcFzW49BHEc61X3/HdM/TOY+
A2tlp0I2b6QvKWbmNTR7ksyG9ydpjT6rtdQvLtfyau4fesEYoFGLBicyqmw4s9SH
QeSai70JJd1Qgo/VjKkY4HrQhbTjKbJE+JDDHUuInPdFY/cjEE4zM1E4Rf4HUvAW
pc+TB1CRPmbWV8Gd9LnA2pa8684Vqpr48jo+I9up3kGwmWYD75VXg52be2Wavg6x
2iyrsePLBzOZUz7J1t53IB1s29E6lgc83Bq5PWjxbDjHjBoBAtaS/Gc+BmXC2zPS
5fsAa9EwpJ/h6w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:31 2024 by rpki-client on console-fra.rpki-client.org