Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
File:                     DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft (raw, json)
Hash identifier:          GfNk2v/cZpMEtgOZIqd6f4tRJhYhVm89s69RH83KkVQ=
Subject key identifier:   87:95:5D:3E:8A:27:53:18:73:52:3C:B5:D7:48:BC:C8:42:B2:28:9B
Authority key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Certificate issuer:       /CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Certificate serial:       0193568AB6427D5F6294CF2021F55D5E2B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
Manifest number:          0319
Signing time:             Sat 23 Nov 2024 01:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:31 +0000
Files and hashes:         1: DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl (hash: B48Cu/l7zKflstozTOiREcm4AMX4AXqG7WqbuxxrgyU=)
                          2: SVTH_KodM5ZU_GycIqoTXe-jfmE.roa (hash: wakLJ50UTCxx308P5+AvoEzZbcyK09eLhAy4pdvj8gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:b6:42:7d:5f:62:94:cf:20:21:f5:5d:5e:2b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
        Validity
            Not Before: Nov 23 01:02:31 2024 GMT
            Not After : Nov 24 01:02:31 2024 GMT
        Subject: CN=87955d3e8a27531873523cb5d748bcc842b2289b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:fa:40:58:07:eb:0d:a3:eb:57:d9:dd:4f:
                    ad:7a:72:eb:16:b3:d8:5b:47:00:72:49:57:a8:33:
                    11:3c:51:9f:7a:c8:7e:00:9f:04:4d:a6:2f:f8:d6:
                    0f:d9:b0:c7:56:0d:04:7b:90:98:43:75:24:63:8d:
                    09:8b:5a:8a:7a:c5:a0:e9:03:e2:c8:4f:f9:bf:11:
                    34:fc:48:a0:81:f3:8a:88:0a:8a:11:d1:fb:d7:3c:
                    d1:1d:ab:16:f4:57:f3:79:05:c4:d6:58:66:03:65:
                    a0:e7:2a:b2:0c:c3:57:f2:8b:ce:ba:d5:7f:a2:e5:
                    ac:46:48:57:fc:d3:9b:a5:2f:05:5d:01:43:0a:db:
                    61:26:2a:97:7c:c9:0f:41:fa:8e:6c:ee:44:e5:9a:
                    f5:ee:67:f3:f9:17:40:b6:96:65:bc:8f:aa:ab:c1:
                    6d:85:87:82:ea:23:b3:9f:70:9a:09:a1:4e:fc:51:
                    bd:f1:46:77:f1:9b:eb:79:5a:de:20:65:00:c7:9f:
                    70:b3:2e:f7:58:ba:93:d1:2c:f6:16:b3:d2:1a:d0:
                    31:47:82:f0:ef:3a:f4:d3:d6:9b:3c:cb:89:d6:91:
                    24:1e:01:c3:83:88:42:35:dd:57:3d:de:34:cc:4c:
                    d4:02:ae:9c:2d:9f:1f:6f:f2:10:91:49:a1:4d:eb:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:5D:3E:8A:27:53:18:73:52:3C:B5:D7:48:BC:C8:42:B2:28:9B
            X509v3 Authority Key Identifier:
                keyid:0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:16:1b:7b:98:9f:85:33:89:2c:0b:19:06:1a:96:d2:c1:
         39:b4:ee:c0:10:0d:31:5c:c8:a4:0e:4e:d9:18:3b:e3:9c:dc:
         9d:4b:54:d4:f3:da:d4:b3:06:75:47:90:d8:0b:95:9d:ae:cb:
         c6:d9:a6:cc:93:8f:13:3a:3d:82:91:c7:46:53:44:b3:54:ab:
         6d:6e:aa:fa:96:35:cb:d7:3a:f3:d6:52:79:5d:4a:e0:37:7f:
         f8:66:93:d4:5c:65:c7:2f:a6:74:a8:16:0c:e1:a3:7a:3e:e9:
         34:ce:09:ee:50:e8:bb:fa:b6:17:82:be:c3:a6:10:76:a2:78:
         94:04:45:23:9e:09:e7:af:af:16:40:9d:81:2b:36:5f:fd:90:
         96:18:19:45:bc:f2:22:70:0d:05:51:e1:95:62:06:1c:3f:b2:
         f9:3c:13:ba:e6:f4:d8:02:4a:5a:28:a2:03:4a:48:a9:1e:0b:
         d7:8c:7a:ea:f0:ab:ec:bb:20:cb:fa:ad:05:f3:a0:c6:e2:8d:
         02:37:d6:c0:d1:be:9f:7b:60:5a:18:e4:80:3e:3d:30:1f:eb:
         28:4f:a1:db:c6:a7:01:29:16:dd:4a:15:ea:f4:d1:fa:45:d4:
         1f:0c:b9:e9:55:a4:17:87:71:f8:69:9f:94:12:94:cf:0e:0c:
         37:56:81:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWirZCfV9ilM8gIfVdXiuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOWRiMmYzYzBhZGVhYjM3NjdjMGIzMTcyMTg0NWFiM2Q0
NDVkMWMwHhcNMjQxMTIzMDEwMjMxWhcNMjQxMTI0MDEwMjMxWjAzMTEwLwYDVQQD
Eyg4Nzk1NWQzZThhMjc1MzE4NzM1MjNjYjVkNzQ4YmNjODQyYjIyODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLv6QFgH6w2j61fZ3U+tenLrFrPY
W0cAcklXqDMRPFGfesh+AJ8ETaYv+NYP2bDHVg0Ee5CYQ3UkY40Ji1qKesWg6QPi
yE/5vxE0/EiggfOKiAqKEdH71zzRHasW9FfzeQXE1lhmA2Wg5yqyDMNX8ovOutV/
ouWsRkhX/NObpS8FXQFDCtthJiqXfMkPQfqObO5E5Zr17mfz+RdAtpZlvI+qq8Ft
hYeC6iOzn3CaCaFO/FG98UZ38ZvreVreIGUAx59wsy73WLqT0Sz2FrPSGtAxR4Lw
7zr009abPMuJ1pEkHgHDg4hCNd1XPd40zEzUAq6cLZ8fb/IQkUmhTesBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeVXT6KJ1MYc1I8tddIvMhCsiibMB8GA1UdIwQY
MBaAFA2dsvPAreqzdnwLMXIYRas9RF0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFoyeTg4Q3Q2ck4yZkFzeGNoaEZxejFFWFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83Yzk0NTctNzgyYi00MTE1LTg4YjEt
MGQ1YWM4M2M1ZTYwLzEvRFoyeTg4Q3Q2ck4yZkFzeGNoaEZxejFFWFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83Yzk0NTctNzgyYi00MTE1LTg4YjEtMGQ1YWM4M2M1ZTYw
LzEvRFoyeTg4Q3Q2ck4yZkFzeGNoaEZxejFFWFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm0WG3uY
n4UziSwLGQYaltLBObTuwBANMVzIpA5O2Rg745zcnUtU1PPa1LMGdUeQ2AuVna7L
xtmmzJOPEzo9gpHHRlNEs1SrbW6q+pY1y9c689ZSeV1K4Dd/+GaT1Fxlxy+mdKgW
DOGjej7pNM4J7lDou/q2F4K+w6YQdqJ4lARFI54J56+vFkCdgSs2X/2QlhgZRbzy
InANBVHhlWIGHD+y+TwTuub02AJKWiiiA0pIqR4L14x66vCr7Lsgy/qtBfOgxuKN
AjfWwNG+n3tgWhjkgD49MB/rKE+h28anASkW3UoV6vTR+kXUHwy56VWkF4dx+Gmf
lBKUzw4MN1aBQA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:46 2024 by rpki-client on console-ams.rpki-client.org