Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File:                     skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier:          VQxvG/wanp1GWrcCFVr9VTLDIwRFHzG9P1jY9wl6SRo=
Subject key identifier:   0C:22:36:A7:05:A5:7A:ED:19:73:A3:87:27:12:A5:00:E5:FA:2C:03
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer:       /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial:       0193549A98492EED8E31D9CF3C1D94288BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number:          0853
Signing time:             Fri 22 Nov 2024 16:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:37 +0000
Files and hashes:         1: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: r+hXe6WeuR513AZctb28aWNTA/SyCzXg+SwYA+p14Co=)
                          2: uZlahCMaC8cwLCm05kPj-SfmKdQ.roa (hash: wWvfLCQJUaXCEyn5kp86QLSu2tL7sX6GeTM8FzbJ0uE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:98:49:2e:ed:8e:31:d9:cf:3c:1d:94:28:8b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
        Validity
            Not Before: Nov 22 16:00:37 2024 GMT
            Not After : Nov 23 16:00:37 2024 GMT
        Subject: CN=0c2236a705a57aed1973a3872712a500e5fa2c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:26:a8:42:62:ce:53:4a:f9:72:a4:ee:86:
                    a7:40:62:45:81:75:12:f2:ea:3d:cc:7e:4a:6a:72:
                    fb:37:12:37:96:fe:1a:6c:f8:85:97:34:7b:05:64:
                    31:de:4c:ed:16:4b:2b:e8:cd:cb:84:f4:7f:4c:43:
                    3c:c8:14:85:84:ad:0c:54:62:a8:51:3f:9f:a5:b9:
                    84:d4:d1:ee:f1:34:15:98:56:cb:06:87:e6:c6:6c:
                    1f:f2:fb:25:52:a5:02:45:4b:36:e5:23:bc:d8:25:
                    00:25:fe:8b:e8:ed:e5:aa:41:96:a0:90:25:63:3c:
                    a7:8f:4a:6c:4c:95:19:42:f7:9d:b4:39:1c:91:78:
                    8f:aa:b7:fd:48:e9:0f:5d:f3:2c:6b:36:ea:39:69:
                    9e:27:62:c1:cb:a4:19:7b:bc:2d:65:4b:9c:dc:7a:
                    d6:bc:2c:8f:9c:25:bb:7c:46:29:cc:1b:79:7b:4e:
                    27:04:03:e4:c6:1d:b6:9f:33:20:85:f8:13:5a:ff:
                    84:37:b2:1f:cc:8a:df:fc:cc:a5:9d:f2:ab:77:85:
                    05:04:a7:c6:7c:af:91:6f:75:ab:3d:8f:e8:18:89:
                    69:56:fd:c3:b0:0b:7f:60:4e:a5:eb:53:e4:1e:9f:
                    43:ad:5f:03:74:b1:df:20:01:08:7b:33:d0:c4:9d:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:36:A7:05:A5:7A:ED:19:73:A3:87:27:12:A5:00:E5:FA:2C:03
            X509v3 Authority Key Identifier:
                keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:de:e3:fb:bd:12:19:a5:1c:bf:ce:d9:7f:2b:df:18:3f:a2:
         fe:1e:a0:32:f7:f5:c1:b2:89:b2:8d:b3:61:28:f1:7b:45:3a:
         7b:f9:dc:55:6a:65:d0:5c:4b:52:69:46:e3:ec:5d:5f:e3:a7:
         5f:32:c2:45:40:0e:d5:b7:2e:5c:73:79:31:b2:29:a1:d3:2c:
         60:fa:02:c2:cb:f8:cc:16:2c:37:e3:b9:e7:41:fa:67:c1:db:
         2f:1c:5b:9f:f0:04:2b:1e:0b:45:17:94:0b:8b:90:f6:3e:c5:
         8e:30:98:88:55:3b:02:62:d4:7c:ca:db:b0:ce:71:3a:b1:b8:
         f3:34:67:9c:9d:55:b6:71:38:3b:5e:e0:d3:02:49:1a:af:2e:
         e1:49:d3:cd:ea:e4:60:2e:1d:60:ac:97:d9:56:69:71:14:66:
         c2:51:0e:04:15:09:58:0e:66:eb:62:cb:35:a0:5a:b4:e0:88:
         e3:e2:ec:de:bc:b9:a6:eb:7c:80:11:bf:9c:9b:4a:9b:5a:e9:
         8f:45:35:d3:58:20:35:39:61:e1:53:cc:78:ca:d3:6c:61:be:
         9c:8c:34:75:a7:0a:ad:fc:b3:45:36:23:bf:15:eb:59:c3:d2:
         b1:6d:23:a5:04:6d:dc:c5:23:08:3e:13:d9:ca:49:57:ab:38:
         62:0f:49:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmphJLu2OMdnPPB2UKIv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4
YWRmZjMwHhcNMjQxMTIyMTYwMDM3WhcNMjQxMTIzMTYwMDM3WjAzMTEwLwYDVQQD
EygwYzIyMzZhNzA1YTU3YWVkMTk3M2EzODcyNzEyYTUwMGU1ZmEyYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31omqEJizlNK+XKk7oanQGJFgXUS
8uo9zH5KanL7NxI3lv4abPiFlzR7BWQx3kztFksr6M3LhPR/TEM8yBSFhK0MVGKo
UT+fpbmE1NHu8TQVmFbLBofmxmwf8vslUqUCRUs25SO82CUAJf6L6O3lqkGWoJAl
Yzynj0psTJUZQvedtDkckXiPqrf9SOkPXfMsazbqOWmeJ2LBy6QZe7wtZUuc3HrW
vCyPnCW7fEYpzBt5e04nBAPkxh22nzMghfgTWv+EN7IfzIrf/MylnfKrd4UFBKfG
fK+Rb3WrPY/oGIlpVv3DsAt/YE6l61PkHp9DrV8DdLHfIAEIezPQxJ1oiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwiNqcFpXrtGXOjhycSpQDl+iwDMB8GA1UdIwQY
MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt
OTk1YzM2OWRhNjcyLzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy
LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAud7j+70S
GaUcv87ZfyvfGD+i/h6gMvf1wbKJso2zYSjxe0U6e/ncVWpl0FxLUmlG4+xdX+On
XzLCRUAO1bcuXHN5MbIpodMsYPoCwsv4zBYsN+O550H6Z8HbLxxbn/AEKx4LRReU
C4uQ9j7FjjCYiFU7AmLUfMrbsM5xOrG48zRnnJ1VtnE4O17g0wJJGq8u4UnTzerk
YC4dYKyX2VZpcRRmwlEOBBUJWA5m62LLNaBatOCI4+Ls3ry5put8gBG/nJtKm1rp
j0U101ggNTlh4VPMeMrTbGG+nIw0dacKrfyzRTYjvxXrWcPSsW0jpQRt3MUjCD4T
2cpJV6s4Yg9JUQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:57 2024 by rpki-client on console-fra.rpki-client.org