Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File:                     Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier:          FlTXPKA6xjApYH4tGolk5pLp11+lWfrGnKow/JV66pw=
Subject key identifier:   CA:AF:14:7F:BE:64:22:C5:A1:E8:5C:39:28:99:C4:7B:4B:BF:AD:0E
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer:       /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial:       019357D2298C68329B8656216F4B79896E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number:          079C
Signing time:             Sat 23 Nov 2024 07:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:10 +0000
Files and hashes:         1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: ViK8GykwY6NMqIxgIP2cxjaNhenU/lePi+SPwYN/mmg=)
                          2: eg_F7AYXbZRzzw2AoPGlLRMH7Rk.roa (hash: WJjEoYjGIZUXHQxGS/As9r/R5OoEweIby6UZs/gGD0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:29:8c:68:32:9b:86:56:21:6f:4b:79:89:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
        Validity
            Not Before: Nov 23 07:00:10 2024 GMT
            Not After : Nov 24 07:00:10 2024 GMT
        Subject: CN=caaf147fbe6422c5a1e85c392899c47b4bbfad0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:8d:63:ae:f6:40:e0:11:a8:64:a6:46:c9:
                    1d:57:14:52:81:4c:ec:33:77:b1:7f:22:19:9d:43:
                    2f:e0:42:a1:33:4c:05:98:7b:f0:7a:28:6a:a8:c8:
                    ad:07:e0:d2:b0:5a:f0:d4:b2:0f:0b:14:e5:69:a4:
                    5f:61:ee:7b:b3:96:46:69:31:6d:68:4f:15:ef:c7:
                    7f:7c:a4:5e:bb:dd:c3:1c:93:9e:66:28:7f:4f:40:
                    e5:37:5c:d3:07:d4:df:4d:bf:e7:ca:2b:83:02:5a:
                    fb:fa:7c:98:b6:70:db:eb:66:fc:0d:62:7a:e1:91:
                    48:c0:28:a9:76:5f:fa:44:8f:86:11:ce:6f:ee:9d:
                    f7:23:88:73:52:66:8d:14:be:ad:78:d0:44:6d:25:
                    bc:35:87:d9:6a:16:57:91:86:95:86:43:79:42:24:
                    a4:df:de:3e:0b:43:7c:95:b8:ba:17:5c:7b:46:5a:
                    e2:24:3b:9f:08:a5:4e:3c:38:d7:ae:8a:8c:60:f2:
                    c2:64:b2:e1:4f:6e:ab:67:91:5a:94:c2:1b:44:53:
                    ff:a8:e1:94:a7:cf:79:e3:45:bf:df:e0:12:76:d5:
                    33:c2:5b:ce:11:cf:a9:bd:d1:a4:27:5a:98:1c:4a:
                    09:75:eb:5b:a7:ea:e1:a3:b3:7a:d2:a4:75:5f:0c:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:14:7F:BE:64:22:C5:A1:E8:5C:39:28:99:C4:7B:4B:BF:AD:0E
            X509v3 Authority Key Identifier:
                keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:89:2a:a6:00:b5:c3:da:82:c7:56:3b:f5:7e:86:75:0a:c1:
         ae:17:af:2f:1c:a8:fc:1e:e6:17:c5:8d:31:2f:a4:28:a5:50:
         e1:a4:f5:84:c5:60:2c:0a:7b:9f:05:8d:81:ad:19:99:38:5e:
         b7:7e:ff:85:cb:1c:08:62:e2:d0:04:42:7b:04:d4:f6:6e:06:
         86:27:54:c1:09:99:02:58:80:a3:3d:ac:a1:bb:a9:eb:02:6d:
         0d:96:97:0f:68:d1:e1:cf:1c:c2:da:c1:6c:b4:34:7f:c0:22:
         4d:53:66:a8:4a:20:b7:7f:34:79:23:d1:ed:73:9d:c4:55:13:
         e9:bc:21:c6:2f:8c:5c:9e:98:21:40:8a:15:e6:58:8a:88:3e:
         54:61:10:1b:e4:2f:0e:69:17:03:6d:68:9d:46:43:6e:af:87:
         1d:61:3e:4a:74:dd:f6:d7:25:2a:d4:08:ea:3c:0d:5c:f4:0e:
         2e:b9:9e:e6:6f:90:8d:4e:7d:f2:a9:e0:12:70:80:1f:a4:ec:
         9d:11:a8:d1:b6:52:7d:c9:dc:15:1e:5e:1c:aa:88:1b:38:74:
         34:dd:69:cf:4e:c6:65:71:6e:35:4b:84:e2:db:f1:ed:09:f6:
         69:82:d6:b2:94:7c:35:f1:d6:93:7d:5a:88:54:6a:a3:60:ce:
         dd:2a:9a:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0imMaDKbhlYhb0t5iW5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw
MDRmODUwHhcNMjQxMTIzMDcwMDEwWhcNMjQxMTI0MDcwMDEwWjAzMTEwLwYDVQQD
EyhjYWFmMTQ3ZmJlNjQyMmM1YTFlODVjMzkyODk5YzQ3YjRiYmZhZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh2NY672QOARqGSmRskdVxRSgUzs
M3exfyIZnUMv4EKhM0wFmHvweihqqMitB+DSsFrw1LIPCxTlaaRfYe57s5ZGaTFt
aE8V78d/fKReu93DHJOeZih/T0DlN1zTB9TfTb/nyiuDAlr7+nyYtnDb62b8DWJ6
4ZFIwCipdl/6RI+GEc5v7p33I4hzUmaNFL6teNBEbSW8NYfZahZXkYaVhkN5QiSk
394+C0N8lbi6F1x7RlriJDufCKVOPDjXroqMYPLCZLLhT26rZ5FalMIbRFP/qOGU
p89540W/3+ASdtUzwlvOEc+pvdGkJ1qYHEoJdetbp+rho7N60qR1XwzqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqvFH++ZCLFoehcOSiZxHtLv60OMB8GA1UdIwQY
MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt
YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk
LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4kqpgC1
w9qCx1Y79X6GdQrBrhevLxyo/B7mF8WNMS+kKKVQ4aT1hMVgLAp7nwWNga0ZmThe
t37/hcscCGLi0ARCewTU9m4GhidUwQmZAliAoz2sobup6wJtDZaXD2jR4c8cwtrB
bLQ0f8AiTVNmqEogt380eSPR7XOdxFUT6bwhxi+MXJ6YIUCKFeZYiog+VGEQG+Qv
DmkXA21onUZDbq+HHWE+SnTd9tclKtQI6jwNXPQOLrme5m+QjU598qngEnCAH6Ts
nRGo0bZSfcncFR5eHKqIGzh0NN1pz07GZXFuNUuE4tvx7Qn2aYLWspR8NfHWk31a
iFRqo2DO3Sqa8g==
-----END CERTIFICATE-----