Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
File:                     7qArGX269963Tgon2dTs0_rh6O0.mft (raw, json)
Hash identifier:          zpP4WY67AUxH37ir6GWKkNPKr1dR7hGTL2Wmxns+Joo=
Subject key identifier:   1C:1F:FB:12:EB:B0:3A:9D:70:66:DB:7E:92:B5:4D:78:04:23:06:77
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Certificate issuer:       /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial:       0193542C8DE99C65EC5EA56410779BD2DC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
Manifest number:          138B
Signing time:             Fri 22 Nov 2024 14:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:26 +0000
Files and hashes:         1: 7qArGX269963Tgon2dTs0_rh6O0.crl (hash: JJBHvvFbfTTa9VvMGGNI6G4eFyMH2wbopV1TOIO+ywE=)
                          2: LzBcFhAlCWTgbcCzDhSLG6bZOVY.roa (hash: V6UES9bn3orwCliyUlQqG90EWkRSUOBE71Ue+dvv5XI=)
                          3: UvcNKE3leJiqjaGiga55RuT1OjA.roa (hash: jFkqcxWANobIROhaoG/+ZvCs0Uxx9I00Pfca67KiD2k=)
                          4: dzgtYDauTEDZHC8bHSIpBJ99lFA.roa (hash: ZGLzJ+9niSYTDICrH2MjNQZesA/7tlZdYY8ovKwatZQ=)
                          5: qCiEr-4OsxOGeR7Gn9aGoJR9Hoo.roa (hash: LltVSaFwyI2PbfS+p/oZLfHhHfCxRFgZQ6khOOqvZXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:8d:e9:9c:65:ec:5e:a5:64:10:77:9b:d2:dc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
        Validity
            Not Before: Nov 22 14:00:26 2024 GMT
            Not After : Nov 23 14:00:26 2024 GMT
        Subject: CN=1c1ffb12ebb03a9d7066db7e92b54d7804230677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:68:6d:5a:5d:4e:8d:ca:b1:0a:9b:7b:32:
                    d8:5d:97:18:97:be:a3:74:34:49:7e:43:80:c4:e9:
                    12:45:7b:cf:6c:d5:90:49:36:7a:2e:d9:eb:0c:c5:
                    09:d8:19:2e:0c:0a:36:93:1a:e2:17:8f:6e:62:75:
                    60:6e:0a:35:02:92:bb:63:15:e0:9c:1f:4f:50:5f:
                    2c:10:80:03:ca:47:d3:71:c5:f6:59:76:9b:70:27:
                    bf:56:61:5d:d7:85:52:0f:70:be:43:63:28:5f:6c:
                    b7:f4:d1:18:92:ce:c2:4c:b2:1d:c4:9e:56:e2:d3:
                    f7:2f:19:52:ca:22:c8:74:b2:51:a9:dc:7b:dc:5d:
                    19:74:b9:a2:33:8b:a0:39:a8:51:e9:da:cd:aa:6e:
                    99:b9:4c:4f:14:ab:b6:be:98:c8:8a:ad:19:be:bd:
                    d1:fb:f9:be:09:4a:1c:bf:8a:df:e2:21:25:89:e7:
                    a1:b6:6c:47:16:d3:a5:e6:04:16:58:2d:b3:01:47:
                    d6:ae:ad:dd:7a:e3:c3:40:fa:4a:03:a0:c6:55:18:
                    f7:17:26:5b:d6:f6:4f:1f:b3:98:af:9f:2e:a1:6e:
                    f2:e0:74:fe:c4:0b:78:d3:9d:2a:04:2e:2b:5a:17:
                    d0:44:02:8a:6e:7b:4e:af:0e:b0:18:ed:d7:17:54:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1F:FB:12:EB:B0:3A:9D:70:66:DB:7E:92:B5:4D:78:04:23:06:77
            X509v3 Authority Key Identifier:
                keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:ef:d1:2d:90:d9:74:fb:bd:8e:55:3b:a9:78:d0:72:f7:
         ca:3c:56:d4:b0:bc:d1:56:fa:ef:07:f3:0e:7c:d6:75:6b:a6:
         bb:2a:99:09:91:27:31:88:47:f5:7d:84:8e:9b:05:a7:58:2e:
         19:3c:87:89:29:e1:6b:9a:dd:75:ec:b0:a7:9e:dc:04:e2:eb:
         a3:5a:7b:59:8f:7a:fd:18:4f:b7:ec:8f:cd:5d:2a:b2:72:bb:
         bc:23:98:64:a8:90:e8:6d:3c:45:36:cf:12:a3:95:68:b8:01:
         28:7d:a5:32:71:93:0f:c7:fd:41:fd:eb:fd:7e:bc:cc:2d:8a:
         7d:23:01:57:9a:0f:c9:7d:32:24:0e:9a:db:ef:ca:a3:2e:76:
         11:0e:5c:2d:1e:98:2c:3c:b4:cf:7a:14:95:4d:59:1a:86:cf:
         aa:e5:2a:ba:1c:91:c9:ee:3d:8a:68:03:90:de:07:70:c9:b0:
         44:cf:db:83:5d:95:53:9e:fb:26:a0:7d:16:19:6f:0f:a1:e7:
         89:64:73:ef:ca:54:ef:6f:72:d8:ae:51:1d:d6:0f:c1:fc:24:
         dc:5f:0a:71:cf:22:3d:f3:ef:3f:1d:c8:d5:86:d5:71:84:d6:
         bf:d2:30:83:66:a3:fb:d9:e1:f5:eb:d0:8e:28:40:cd:d2:32:
         76:a8:a8:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNULI3pnGXsXqVkEHeb0txpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYTAyYjE5N2RiYWY3ZGViNzRlMGEyN2Q5ZDRlY2QzZmFl
MWU4ZWQwHhcNMjQxMTIyMTQwMDI2WhcNMjQxMTIzMTQwMDI2WjAzMTEwLwYDVQQD
EygxYzFmZmIxMmViYjAzYTlkNzA2NmRiN2U5MmI1NGQ3ODA0MjMwNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRhobVpdTo3KsQqbezLYXZcYl76j
dDRJfkOAxOkSRXvPbNWQSTZ6LtnrDMUJ2BkuDAo2kxriF49uYnVgbgo1ApK7YxXg
nB9PUF8sEIADykfTccX2WXabcCe/VmFd14VSD3C+Q2MoX2y39NEYks7CTLIdxJ5W
4tP3LxlSyiLIdLJRqdx73F0ZdLmiM4ugOahR6drNqm6ZuUxPFKu2vpjIiq0Zvr3R
+/m+CUocv4rf4iElieehtmxHFtOl5gQWWC2zAUfWrq3deuPDQPpKA6DGVRj3FyZb
1vZPH7OYr58uoW7y4HT+xAt4050qBC4rWhfQRAKKbntOrw6wGO3XF1RXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwf+xLrsDqdcGbbfpK1TXgEIwZ3MB8GA1UdIwQY
MBaAFO6gKxl9uvfet04KJ9nU7NP64ejtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FBckdYMjY5OTYzVGdvbjJkVHMwX3JoNk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85NzFiMTEtMjgwZS00Y2VkLWI5OWMt
YmJjY2FiOTEzYjVkLzEvN3FBckdYMjY5OTYzVGdvbjJkVHMwX3JoNk8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85NzFiMTEtMjgwZS00Y2VkLWI5OWMtYmJjY2FiOTEzYjVk
LzEvN3FBckdYMjY5OTYzVGdvbjJkVHMwX3JoNk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoV/v0S2Q
2XT7vY5VO6l40HL3yjxW1LC80Vb67wfzDnzWdWumuyqZCZEnMYhH9X2EjpsFp1gu
GTyHiSnha5rddeywp57cBOLro1p7WY96/RhPt+yPzV0qsnK7vCOYZKiQ6G08RTbP
EqOVaLgBKH2lMnGTD8f9Qf3r/X68zC2KfSMBV5oPyX0yJA6a2+/Koy52EQ5cLR6Y
LDy0z3oUlU1ZGobPquUquhyRye49imgDkN4HcMmwRM/bg12VU577JqB9FhlvD6Hn
iWRz78pU729y2K5RHdYPwfwk3F8Kcc8iPfPvPx3I1YbVcYTWv9Iwg2aj+9nh9evQ
jihAzdIydqio7g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:32 2024 by rpki-client on console-fra.rpki-client.org