Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          RL6b37Ow8SNWl/aEUCwhM3/bW0dn7QV3Slvq0VYblX4=
Subject key identifier:   35:C1:9A:7D:65:DE:B8:48:66:C0:E4:B0:A8:4C:62:68:20:2C:DC:7B
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       019353BEB48BD7BDE8E7149880191BF95DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 12:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:27 +0000
Files and hashes:         1: U-GwdYn22x6wc52P77sS1nkoYOw.roa (hash: NltJwpZJvpPRo87gk2uHwTkCJnlDGc1qdB+C2920fwI=)
                          2: ZduWdzOn2TM7bRQ-dyVmhB5qMjQ.roa (hash: TLoTuM1z+ia2mWJwT3SXy6mwbQtRC1S9wHkbUO7ZY0c=)
                          3: fLanwPAHb5S9CMtzYgv7JYwodxA.roa (hash: kRr4Dh0evT26FuIldcEJKxkoN7TcMB/cIarHYFQvQS0=)
                          4: hA1eAbq918bBFuCL11RtHypTmYg.roa (hash: Xj7xpSe7959fix+wl7oVbvHU1bhFAr9FXhbXjqsqlSY=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: b6jRoOu7fVUjfCnmOz4JBZlumhFHEInKQZx/DDhzons=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:b4:8b:d7:bd:e8:e7:14:98:80:19:1b:f9:5d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Nov 22 12:00:27 2024 GMT
            Not After : Nov 23 12:00:27 2024 GMT
        Subject: CN=35c19a7d65deb84866c0e4b0a84c6268202cdc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c3:f7:4c:ed:ba:1e:4d:e6:8d:5e:e5:73:ad:
                    af:b4:a0:87:66:2f:22:e0:77:f9:2b:ef:72:e8:98:
                    c6:2d:43:51:aa:45:5a:6c:c1:3e:d3:ef:75:6b:ad:
                    d8:0a:a5:ea:96:71:f6:c5:ed:20:ac:d4:3c:26:d4:
                    81:a9:41:e9:b1:42:23:00:61:a5:a4:97:e1:16:e0:
                    73:3c:5e:00:d7:d5:2f:e5:f4:18:0e:e4:2a:36:6c:
                    8b:91:66:82:2d:68:3f:f3:f5:1b:07:61:eb:4a:f4:
                    b4:89:dc:0e:40:92:65:de:31:2a:66:e0:55:9e:03:
                    ec:67:07:6b:25:49:ad:66:79:7d:6b:17:06:7f:4e:
                    32:a7:a7:a8:8d:16:8c:c7:be:c6:fa:a2:29:5e:f5:
                    e7:bc:6a:8b:65:9e:e1:2d:25:4e:b7:26:91:80:18:
                    91:8b:e4:1c:7b:5a:6f:0c:01:cf:40:20:b7:e3:8e:
                    be:4a:39:0b:ba:0d:5a:a3:dc:fd:5b:f1:2e:f8:f8:
                    31:c7:15:fa:57:7e:b1:e7:9c:7e:40:2c:ec:44:de:
                    ec:00:5d:0c:63:59:a6:0e:81:96:1b:0f:0b:eb:04:
                    89:77:fc:fd:c8:3c:82:71:0d:66:97:95:20:45:ca:
                    8f:45:a3:05:4b:67:d3:2b:a7:c4:bf:29:3e:75:4c:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C1:9A:7D:65:DE:B8:48:66:C0:E4:B0:A8:4C:62:68:20:2C:DC:7B
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:ee:5a:0d:77:29:44:8e:c2:27:10:80:a0:1b:1b:39:e3:
         00:33:ac:ca:50:57:b5:83:bc:15:01:44:71:33:a3:db:6a:0f:
         b4:d9:e0:df:ea:83:e7:f0:4a:f4:05:39:aa:7a:1f:7f:d5:ea:
         9c:68:9a:fd:d4:37:7a:a9:a0:bb:9b:d2:d1:d1:b0:f9:a9:a4:
         c7:c8:ca:09:8e:8e:2b:9d:30:d9:26:97:7a:8a:15:98:da:2d:
         fd:cb:68:3d:60:96:c4:44:f5:f4:2e:9f:e9:05:fb:e0:a6:05:
         aa:53:80:ce:9a:c9:e6:f0:92:07:3f:43:65:f1:2e:61:9d:40:
         1c:57:fc:96:72:cb:dc:57:ae:cd:98:d0:69:36:e4:cb:d8:b8:
         97:71:e2:9b:4d:4d:a1:a1:67:ea:d3:38:02:2a:40:80:cf:02:
         b0:99:7e:5a:67:c1:a4:49:4b:61:8e:f6:50:b7:cc:65:44:01:
         0e:8b:1f:10:18:4f:11:5a:0d:f3:99:f1:b7:aa:a8:57:6e:84:
         da:04:28:19:d2:9e:a5:4d:e3:d9:fd:29:7e:d9:45:65:5a:fa:
         ac:3e:d8:4b:f9:1d:22:38:c3:05:af:55:a8:9f:d5:1b:01:50:
         b0:1e:ea:7b:3e:70:b5:38:20:35:dd:cc:14:80:13:21:3b:f1:
         d1:ad:91:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTvrSL173o5xSYgBkb+V3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk
NTY4ZmEwHhcNMjQxMTIyMTIwMDI3WhcNMjQxMTIzMTIwMDI3WjAzMTEwLwYDVQQD
EygzNWMxOWE3ZDY1ZGViODQ4NjZjMGU0YjBhODRjNjI2ODIwMmNkYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cP3TO26Hk3mjV7lc62vtKCHZi8i
4Hf5K+9y6JjGLUNRqkVabME+0+91a63YCqXqlnH2xe0grNQ8JtSBqUHpsUIjAGGl
pJfhFuBzPF4A19Uv5fQYDuQqNmyLkWaCLWg/8/UbB2HrSvS0idwOQJJl3jEqZuBV
ngPsZwdrJUmtZnl9axcGf04yp6eojRaMx77G+qIpXvXnvGqLZZ7hLSVOtyaRgBiR
i+Qce1pvDAHPQCC3446+SjkLug1ao9z9W/Eu+PgxxxX6V36x55x+QCzsRN7sAF0M
Y1mmDoGWGw8L6wSJd/z9yDyCcQ1ml5UgRcqPRaMFS2fTK6fEvyk+dUyYaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXBmn1l3rhIZsDksKhMYmggLNx7MB8GA1UdIwQY
MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt
MDRjNTM5N2ZlNWY4LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4
LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9juWg13
KUSOwicQgKAbGznjADOsylBXtYO8FQFEcTOj22oPtNng3+qD5/BK9AU5qnoff9Xq
nGia/dQ3eqmgu5vS0dGw+amkx8jKCY6OK50w2SaXeooVmNot/ctoPWCWxET19C6f
6QX74KYFqlOAzprJ5vCSBz9DZfEuYZ1AHFf8lnLL3FeuzZjQaTbky9i4l3Him01N
oaFn6tM4AipAgM8CsJl+WmfBpElLYY72ULfMZUQBDosfEBhPEVoN85nxt6qoV26E
2gQoGdKepU3j2f0pftlFZVr6rD7YS/kdIjjDBa9VqJ/VGwFQsB7qez5wtTggNd3M
FIATITvx0a2RZw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:01:01 2024 by rpki-client on console-ams.rpki-client.org