Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          6dUWLS1M6uUtUfzwwouGennxabNCZsn/ydyUjlqhjyY=
Subject key identifier:   E8:7D:A8:5C:B6:7E:09:C3:77:D7:4D:13:3E:DC:6D:B0:C4:10:C0:F6
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019352AC3AE0A7F43A80AF1D85DA7BB9CC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          04DD
Signing time:             Fri 22 Nov 2024 07:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:39 +0000
Files and hashes:         1: 4vcI6NHvW3RMuSQruKx7lA_pbpo.roa (hash: dHO2G7CS6A8r2nsCkZYJMHVuQsbpHWlA/BqDHIFpTow=)
                          2: ZBy7Fz6DnFqFYZyZydiPZCzk1pM.roa (hash: alwFQtCLcujEeo5U/sL5yi4tnlB6DwQt3vJg1TTLjFE=)
                          3: cFPFb08wBSozccKvA9_61PcrByI.roa (hash: Fc/0o2ABxon4K03jjLCy6RzhOm6oF05VMZvC8TuXu90=)
                          4: cj-gipgwAayXHIUXQjVwK12HSDA.roa (hash: VeEcRxnxsMnsIMrOJWxETyl8KIs4uc3wLwLFQTWPmLw=)
                          5: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: 0WdcnPPogdR8IXXu/YrJN2GzjlE/jSXtE4jzuc9iHkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:3a:e0:a7:f4:3a:80:af:1d:85:da:7b:b9:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Nov 22 07:00:39 2024 GMT
            Not After : Nov 23 07:00:39 2024 GMT
        Subject: CN=e87da85cb67e09c377d74d133edc6db0c410c0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:20:65:9d:31:4e:d8:fb:2e:15:d6:98:4d:
                    be:55:5d:0f:f9:53:e2:2c:ef:2f:de:86:28:e4:48:
                    8d:1c:9b:6b:c2:12:3b:d4:97:5e:03:d1:4a:cf:59:
                    1b:a0:f8:ef:78:17:17:ad:62:90:33:58:e1:37:54:
                    7d:24:dc:e3:de:34:b9:48:46:9e:9d:ce:4b:82:9b:
                    49:40:15:e4:64:ec:5e:ff:be:8a:4a:fe:1c:8a:a5:
                    45:ed:a4:81:c2:1d:59:c9:c9:63:9b:5f:2a:85:51:
                    47:23:90:41:d9:85:6c:68:5c:d1:c6:cd:95:c6:16:
                    c8:b2:d8:48:2c:b8:d1:47:2b:f4:e9:ef:00:b5:8e:
                    64:1a:9d:22:71:30:4c:3e:69:ed:2f:41:4a:27:73:
                    14:dd:a3:ef:63:9a:f2:14:31:65:32:f8:03:24:ad:
                    60:48:9a:72:8c:19:7a:9e:ab:ed:e6:02:7a:8f:c2:
                    60:c8:fd:f0:03:08:9f:05:24:57:8c:e7:46:9c:4a:
                    f2:11:85:73:0b:7d:aa:b9:2f:eb:f7:64:e2:c7:68:
                    b6:be:80:63:af:11:9d:73:e8:b0:a8:0f:15:3d:99:
                    c8:ad:e9:5e:39:f8:3c:3f:9e:45:26:c5:c7:12:6c:
                    9f:93:ac:b7:4e:11:09:c0:01:5b:ec:16:bc:5f:59:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7D:A8:5C:B6:7E:09:C3:77:D7:4D:13:3E:DC:6D:B0:C4:10:C0:F6
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:a5:7c:7c:62:33:c4:39:74:d9:a6:2b:f0:f0:dc:2d:d4:
         ab:40:8d:16:37:af:17:b4:34:a7:80:1d:3e:93:48:e4:aa:10:
         fc:c3:67:5b:e6:cf:c3:c8:61:39:3c:f7:fa:b4:c8:35:2b:19:
         1a:8e:6b:ed:a5:35:52:b9:9b:b6:15:a2:fc:41:1c:c6:aa:dd:
         b4:3e:f2:7c:0b:84:90:9d:c7:74:df:11:34:34:e9:9b:13:99:
         63:08:32:57:28:94:b8:24:49:4b:9c:56:77:e1:96:9e:10:1e:
         41:60:f7:66:17:e8:3e:b8:21:47:4c:33:e8:8a:bd:48:15:ec:
         34:f3:4a:6e:0c:57:dc:9c:e7:64:14:ff:d4:a7:79:5d:42:b2:
         7d:4c:85:98:bd:7f:71:20:d5:45:b0:d1:d4:54:a2:ae:ee:c7:
         da:72:68:ad:1a:fc:82:53:d5:e4:e6:ba:b5:20:03:63:24:11:
         28:95:ea:cf:66:05:a8:f2:f7:4e:6e:83:1b:a2:93:f2:aa:af:
         61:40:29:a9:fd:78:c3:69:f6:65:43:98:a0:76:b7:eb:1a:ba:
         8d:c5:d7:24:5e:50:de:c2:5d:5c:25:1c:21:c0:0e:07:3b:78:
         10:c0:d2:07:83:7c:0b:6b:eb:d3:f0:36:49:1b:6b:63:a7:b9:
         cd:d6:c2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrDrgp/Q6gK8dhdp7ucxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5
ZjJmNjEwHhcNMjQxMTIyMDcwMDM5WhcNMjQxMTIzMDcwMDM5WjAzMTEwLwYDVQQD
EyhlODdkYTg1Y2I2N2UwOWMzNzdkNzRkMTMzZWRjNmRiMGM0MTBjMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37wgZZ0xTtj7LhXWmE2+VV0P+VPi
LO8v3oYo5EiNHJtrwhI71JdeA9FKz1kboPjveBcXrWKQM1jhN1R9JNzj3jS5SEae
nc5LgptJQBXkZOxe/76KSv4ciqVF7aSBwh1Zycljm18qhVFHI5BB2YVsaFzRxs2V
xhbIsthILLjRRyv06e8AtY5kGp0icTBMPmntL0FKJ3MU3aPvY5ryFDFlMvgDJK1g
SJpyjBl6nqvt5gJ6j8JgyP3wAwifBSRXjOdGnEryEYVzC32quS/r92Tix2i2voBj
rxGdc+iwqA8VPZnIreleOfg8P55FJsXHEmyfk6y3ThEJwAFb7Ba8X1mhYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh9qFy2fgnDd9dNEz7cbbDEEMD2MB8GA1UdIwQY
MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt
MDYzNjc1MzY3OWI2LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2
LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaGlfHxi
M8Q5dNmmK/Dw3C3Uq0CNFjevF7Q0p4AdPpNI5KoQ/MNnW+bPw8hhOTz3+rTINSsZ
Go5r7aU1UrmbthWi/EEcxqrdtD7yfAuEkJ3HdN8RNDTpmxOZYwgyVyiUuCRJS5xW
d+GWnhAeQWD3ZhfoPrghR0wz6Iq9SBXsNPNKbgxX3JznZBT/1Kd5XUKyfUyFmL1/
cSDVRbDR1FSiru7H2nJorRr8glPV5Oa6tSADYyQRKJXqz2YFqPL3Tm6DG6KT8qqv
YUApqf14w2n2ZUOYoHa36xq6jcXXJF5Q3sJdXCUcIcAOBzt4EMDSB4N8C2vr0/A2
SRtrY6e5zdbCIg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:59 2024 by rpki-client on console-fra.rpki-client.org