Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File:                     D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier:          9r5XI/JR4DLvZlMZkIFiQ5KflcoW66kWNW+bc3T2nKo=
Subject key identifier:   9A:6C:04:90:08:0A:0A:35:A1:10:66:3B:0E:AC:B9:B0:8A:A2:D5:E7
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer:       /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial:       019353880A5E656ADDE15EA4A70B796BBB0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number:          0E06
Signing time:             Fri 22 Nov 2024 11:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:44 +0000
Files and hashes:         1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: 0uM5OIuljGzqOmagsRfo9nIVO/2oGQ0QHDmWnUdVei8=)
                          2: zaSKpF2sXN10hG7kkAflZzJv_DM.roa (hash: A/vtZtbag9cSGoLxmWXAvZrP/K9FMWhUP3VJQ078BTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:88:0a:5e:65:6a:dd:e1:5e:a4:a7:0b:79:6b:bb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
        Validity
            Not Before: Nov 22 11:00:44 2024 GMT
            Not After : Nov 23 11:00:44 2024 GMT
        Subject: CN=9a6c0490080a0a35a110663b0eacb9b08aa2d5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dd:17:a1:02:f6:d7:45:8f:4d:7e:34:17:f6:
                    d8:9d:f0:bb:0e:b8:ee:b6:91:9a:79:3d:90:56:fc:
                    25:b5:89:d9:1d:a3:f9:3c:0c:0b:a8:c8:39:04:e3:
                    20:77:84:d9:c0:11:de:6d:3c:18:01:14:14:6e:8e:
                    5d:33:96:27:01:8d:14:bc:be:d0:07:09:b4:34:3d:
                    5b:9a:7c:5c:8d:b3:f1:ab:e8:dd:cf:7d:f4:43:00:
                    7e:a8:cc:cd:9e:f9:cb:53:10:47:b6:ad:8d:2d:e6:
                    b1:c6:16:42:8e:b6:ae:42:28:bb:84:59:60:e5:d1:
                    a8:0c:db:d8:1a:65:23:30:f5:18:0f:fe:ba:53:06:
                    30:20:8c:95:22:87:7f:aa:b3:b6:ad:58:86:fc:61:
                    db:c5:b9:f4:a1:1c:0a:28:55:63:d8:89:e9:a7:82:
                    a9:35:9a:78:da:eb:cc:1d:40:01:40:d7:3a:3e:7a:
                    a9:c5:b1:05:5f:80:56:f7:5c:00:62:42:9c:c4:7b:
                    ee:fe:5e:fd:3d:83:0d:56:da:9f:5c:8e:02:e0:c5:
                    92:49:ae:18:ee:fe:af:90:b4:cb:81:b4:7b:a2:64:
                    9a:a0:33:dd:c0:b9:53:03:a7:70:67:39:71:db:e6:
                    59:ad:71:bc:2c:77:84:df:75:72:6d:7e:3d:f3:eb:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:04:90:08:0A:0A:35:A1:10:66:3B:0E:AC:B9:B0:8A:A2:D5:E7
            X509v3 Authority Key Identifier:
                keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:61:7c:ef:cc:cb:80:ba:e3:91:a4:56:c0:d0:df:36:42:
         06:21:f4:c5:28:5c:76:09:7c:07:d5:20:80:c9:8f:79:d9:99:
         a3:70:ad:01:0f:2e:0d:74:3e:af:88:16:72:a6:d9:2e:1c:19:
         23:85:3a:60:64:0c:c9:54:d3:45:96:c0:71:f6:47:c7:23:2d:
         47:cf:77:34:75:10:96:fb:e9:f6:9b:58:e8:85:c3:4d:cb:39:
         92:4d:fc:42:e2:3a:9d:c8:45:3c:63:22:8e:4d:27:02:d6:39:
         1a:8c:d3:6b:78:9f:4f:d7:6e:7c:0b:a9:c2:4f:a8:a3:b5:65:
         1c:2a:b6:b7:77:32:d6:40:12:be:8d:7c:4d:81:ef:ec:49:f4:
         d6:d9:34:a0:e0:38:7b:17:43:3e:3a:62:50:7f:55:c7:81:4a:
         dc:08:13:51:2a:8e:9d:5c:30:b2:e8:f6:58:00:de:dc:f1:8b:
         57:e4:3f:e9:3a:d7:45:d1:f7:b5:ad:ea:6e:5d:27:71:db:c8:
         05:ce:35:a5:4d:f2:6d:63:da:e5:ab:19:9b:cc:b7:eb:cb:f6:
         92:79:ef:99:e5:4c:2a:56:7f:26:11:7d:84:39:e3:ad:1e:a9:
         c7:b5:e8:bb:f0:cf:dc:17:8f:44:11:11:59:e1:58:7a:d6:dd:
         5a:50:cc:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTiApeZWrd4V6kpwt5a7sNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx
ODE3ZmEwHhcNMjQxMTIyMTEwMDQ0WhcNMjQxMTIzMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg5YTZjMDQ5MDA4MGEwYTM1YTExMDY2M2IwZWFjYjliMDhhYTJkNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA690XoQL210WPTX40F/bYnfC7Drju
tpGaeT2QVvwltYnZHaP5PAwLqMg5BOMgd4TZwBHebTwYARQUbo5dM5YnAY0UvL7Q
Bwm0ND1bmnxcjbPxq+jdz330QwB+qMzNnvnLUxBHtq2NLeaxxhZCjrauQii7hFlg
5dGoDNvYGmUjMPUYD/66UwYwIIyVIod/qrO2rViG/GHbxbn0oRwKKFVj2Inpp4Kp
NZp42uvMHUABQNc6PnqpxbEFX4BW91wAYkKcxHvu/l79PYMNVtqfXI4C4MWSSa4Y
7v6vkLTLgbR7omSaoDPdwLlTA6dwZzlx2+ZZrXG8LHeE33VybX498+vItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpsBJAICgo1oRBmOw6subCKotXnMB8GA1UdIwQY
MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt
YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5
LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN5hfO/M
y4C645GkVsDQ3zZCBiH0xShcdgl8B9UggMmPedmZo3CtAQ8uDXQ+r4gWcqbZLhwZ
I4U6YGQMyVTTRZbAcfZHxyMtR893NHUQlvvp9ptY6IXDTcs5kk38QuI6nchFPGMi
jk0nAtY5GozTa3ifT9dufAupwk+oo7VlHCq2t3cy1kASvo18TYHv7En01tk0oOA4
exdDPjpiUH9Vx4FK3AgTUSqOnVwwsuj2WADe3PGLV+Q/6TrXRdH3ta3qbl0ncdvI
Bc41pU3ybWPa5asZm8y368v2knnvmeVMKlZ/JhF9hDnjrR6px7Xou/DP3BePRBER
WeFYetbdWlDMDQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:31 2024 by rpki-client on console-ams.rpki-client.org