Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File:                     dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier:          4OnXo7vmZDHOggREGwNNNyKvnkjVg1yG/wV9wQd8NXY=
Subject key identifier:   7E:30:F9:0A:4D:12:71:AF:18:38:22:15:C8:C0:D4:D2:59:3B:7C:B5
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer:       /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial:       019352AD0AFE8E28101F19132F0F2DB59189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number:          051A
Signing time:             Fri 22 Nov 2024 07:01:32 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:32 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:32 +0000
Files and hashes:         1: FmnHpZ9CH0axs1VGQuge-SIZhus.roa (hash: qKXosX2r81tVLH0vPQ1G1DSi1nyO7wboXBPAY5eyLxs=)
                          2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: 4/QCsZl+F83BXGEXaz0FS7H3NevgmxCgs5hQgizxdWI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:0a:fe:8e:28:10:1f:19:13:2f:0f:2d:b5:91:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
        Validity
            Not Before: Nov 22 07:01:32 2024 GMT
            Not After : Nov 23 07:01:32 2024 GMT
        Subject: CN=7e30f90a4d1271af18382215c8c0d4d2593b7cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ba:75:ae:27:9a:8e:2e:74:f6:02:b3:87:0e:
                    8d:3e:a9:73:8b:bf:e7:f9:c6:82:d5:18:d3:26:c0:
                    36:5b:02:27:f7:e0:db:34:96:8c:a7:c8:ba:61:c9:
                    fc:77:e5:39:e0:53:a3:a8:d9:01:2a:7f:6f:53:8d:
                    c2:f2:43:d5:25:ff:d8:e9:d9:99:6f:3d:28:c5:45:
                    e6:80:55:3f:fd:ba:83:c6:8a:68:f3:b2:a9:76:ed:
                    f9:a3:b8:9c:dc:76:65:4e:4f:4a:f3:b1:08:5c:c8:
                    04:8f:4a:45:52:37:d6:43:da:22:23:dd:c4:bb:8a:
                    5f:11:42:a4:40:e0:84:7f:e1:b2:ff:7f:b9:3e:c3:
                    e7:7f:d9:12:80:fc:77:4e:b4:0b:1f:e0:37:ea:33:
                    e3:ff:d8:91:7b:46:d4:5e:6d:c0:2f:4f:f5:40:29:
                    6e:a4:c2:70:80:38:50:4f:05:ff:b1:56:5a:34:4b:
                    d1:31:62:ac:c5:57:30:85:32:56:8b:f3:36:4b:85:
                    27:33:d0:9a:7a:03:dd:5e:41:d8:a2:6f:31:da:44:
                    b0:47:45:17:41:96:0c:de:8a:fe:bb:e3:1f:70:1e:
                    de:a9:10:5f:fa:08:18:ce:27:24:02:59:e2:f5:96:
                    0d:be:33:5d:92:65:ea:6a:6d:ff:de:50:b2:6f:2e:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:F9:0A:4D:12:71:AF:18:38:22:15:C8:C0:D4:D2:59:3B:7C:B5
            X509v3 Authority Key Identifier:
                keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:59:f7:e5:ee:8d:ab:4b:38:e8:04:c4:d4:67:ba:ca:76:a3:
         6f:f3:3c:45:fa:ea:04:be:38:51:d7:85:74:e8:05:34:23:ba:
         3c:ba:af:1d:c8:d8:52:ab:9e:fe:63:5c:87:1f:34:1e:c1:56:
         fc:ec:43:67:11:94:f1:ad:eb:07:da:58:98:00:e7:7e:e6:02:
         08:84:34:11:46:85:93:f3:7b:11:3f:0f:ad:b7:d3:dd:11:c6:
         24:ab:93:58:ec:dd:74:b1:0b:bc:f9:22:85:43:d7:78:8e:28:
         d3:2a:46:6e:60:95:a0:4e:e1:30:d0:e8:81:a5:53:36:c4:c0:
         16:81:f1:c0:36:e3:01:df:94:f3:38:a3:de:57:c5:4f:fd:80:
         56:83:3b:9f:ac:0e:34:9a:30:b6:55:15:73:dd:9d:d0:d1:71:
         01:ce:cf:c2:bb:77:18:21:fa:59:94:99:5f:c3:04:65:b7:3c:
         78:5f:cd:fa:9f:f5:fa:f2:50:95:78:09:33:0d:bb:11:10:2e:
         6a:f0:70:7c:c0:f7:48:17:bd:5d:02:01:85:df:7a:62:d9:e4:
         9b:76:03:85:f9:10:65:94:c4:06:dc:a3:b4:be:3c:2c:3e:08:
         99:64:87:80:f8:c3:a7:03:45:82:b1:75:b7:53:3b:ff:a8:23:
         a3:96:7e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrQr+jigQHxkTLw8ttZGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm
ZDk4MjgwHhcNMjQxMTIyMDcwMTMyWhcNMjQxMTIzMDcwMTMyWjAzMTEwLwYDVQQD
Eyg3ZTMwZjkwYTRkMTI3MWFmMTgzODIyMTVjOGMwZDRkMjU5M2I3Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bp1rieaji509gKzhw6NPqlzi7/n
+caC1RjTJsA2WwIn9+DbNJaMp8i6Ycn8d+U54FOjqNkBKn9vU43C8kPVJf/Y6dmZ
bz0oxUXmgFU//bqDxopo87Kpdu35o7ic3HZlTk9K87EIXMgEj0pFUjfWQ9oiI93E
u4pfEUKkQOCEf+Gy/3+5PsPnf9kSgPx3TrQLH+A36jPj/9iRe0bUXm3AL0/1QClu
pMJwgDhQTwX/sVZaNEvRMWKsxVcwhTJWi/M2S4UnM9CaegPdXkHYom8x2kSwR0UX
QZYM3or+u+MfcB7eqRBf+ggYzickAlni9ZYNvjNdkmXqam3/3lCyby6DFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4w+QpNEnGvGDgiFcjA1NJZO3y1MB8GA1UdIwQY
MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt
MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4
LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFn35e6N
q0s46ATE1Ge6ynajb/M8RfrqBL44UdeFdOgFNCO6PLqvHcjYUque/mNchx80HsFW
/OxDZxGU8a3rB9pYmADnfuYCCIQ0EUaFk/N7ET8PrbfT3RHGJKuTWOzddLELvPki
hUPXeI4o0ypGbmCVoE7hMNDogaVTNsTAFoHxwDbjAd+U8zij3lfFT/2AVoM7n6wO
NJowtlUVc92d0NFxAc7Pwrt3GCH6WZSZX8MEZbc8eF/N+p/1+vJQlXgJMw27ERAu
avBwfMD3SBe9XQIBhd96Ytnkm3YDhfkQZZTEBtyjtL48LD4ImWSHgPjDpwNFgrF1
t1M7/6gjo5Z+Tg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:30 2024 by rpki-client on console-fra.rpki-client.org