Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File:                     8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier:          0QbKpxVqr06/DyZp6V4+vUK9o5W5j6vwFjQlJVqoHMY=
Subject key identifier:   70:A0:CC:71:EA:B9:B9:24:F0:87:1D:92:34:98:D8:13:29:52:53:40
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer:       /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial:       019355769E4C71FE0C659C72E38A26AA0FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 20:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:57 +0000
Files and hashes:         1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: vFsOEo17pmGDRsMx6NGiJ6r02BjykDoWLP81jPD94B0=)
                          2: q33QRvzty8QJXzB3z-qOc2cslrI.roa (hash: DgSG67MJQ4dH3pw/gd9rfZfw8b6Z/WOG3uzApAVVe+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:9e:4c:71:fe:0c:65:9c:72:e3:8a:26:aa:0f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
        Validity
            Not Before: Nov 22 20:00:57 2024 GMT
            Not After : Nov 23 20:00:57 2024 GMT
        Subject: CN=70a0cc71eab9b924f0871d923498d81329525340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:aa:5d:4b:ae:ad:14:dc:ff:be:95:cc:2b:
                    5c:ed:25:0f:52:98:a8:72:81:78:2e:21:25:13:c9:
                    db:ee:f4:20:4f:2b:30:35:1a:d7:bf:cb:84:0a:15:
                    03:7f:42:77:a2:d8:c9:68:4b:75:e8:3f:bb:ba:19:
                    8d:28:3a:12:c4:bf:a5:5c:b2:44:66:16:1b:44:3a:
                    1c:f5:2b:a9:a3:ab:12:63:2e:9f:9b:d9:02:93:24:
                    54:45:2c:48:7a:0a:8e:3a:e0:2f:5a:b4:84:37:8d:
                    98:18:9c:96:d7:41:15:46:d2:45:15:26:a9:15:eb:
                    34:5c:40:95:98:ee:29:0a:52:13:3a:96:82:07:75:
                    46:e3:c5:a2:92:28:df:57:7b:7b:63:ad:c8:a7:53:
                    98:fe:fc:f5:e9:eb:ae:5e:45:7f:19:c2:21:ea:5d:
                    fd:00:9a:b7:c5:81:52:b9:82:23:9b:1a:7a:f6:7e:
                    85:f2:20:d5:34:91:b4:7d:0c:b7:bf:6e:d7:af:05:
                    94:ae:41:60:ee:0c:b5:93:f9:24:99:93:e6:64:c9:
                    c4:0f:f5:cd:e5:68:33:b6:70:29:42:f0:a9:c3:a4:
                    06:c6:9a:a5:85:43:93:76:aa:4e:c9:22:c1:e5:8c:
                    e1:54:81:64:a6:4f:f9:37:df:44:4b:c9:e5:6f:4f:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A0:CC:71:EA:B9:B9:24:F0:87:1D:92:34:98:D8:13:29:52:53:40
            X509v3 Authority Key Identifier:
                keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:43:95:b6:b6:f0:d6:6a:5c:11:51:d0:d5:a1:24:ee:b1:
         78:e3:6b:5f:17:84:c2:45:3b:b1:12:27:bf:d9:15:79:08:55:
         15:d9:e6:7f:4d:e7:20:60:e4:03:36:44:c9:d1:15:dd:11:8a:
         36:5d:59:05:4c:ce:0c:90:ef:78:b1:ac:f3:47:fd:a9:b4:17:
         5e:f3:11:0c:b3:f3:cb:33:b8:7f:c4:43:17:f6:1f:05:4d:4e:
         da:8e:e9:5e:b4:ef:77:76:16:03:f7:3c:4f:2e:80:28:e4:35:
         b6:d3:52:da:92:58:bc:d0:9f:fd:76:e7:1c:fd:0c:3d:6e:98:
         6e:c6:3c:fb:2b:15:f9:87:a1:8c:31:22:c6:6a:1f:e8:5e:36:
         e0:0e:dd:d7:96:42:9f:98:bc:27:89:cf:7b:a3:92:6b:ae:c0:
         6c:fe:40:4f:28:21:35:4f:33:57:85:8f:8c:11:d2:b9:f5:d8:
         98:f0:3d:d4:4b:ce:f5:45:1b:0a:9c:e2:d5:59:fa:6b:18:86:
         4f:7b:f0:64:e8:3b:51:dc:82:f1:eb:87:48:7b:32:83:b7:0e:
         7f:be:76:e9:0a:c0:54:54:eb:be:aa:22:d9:e9:37:16:ae:10:
         23:70:00:55:cb:af:30:87:21:3f:d8:ad:dc:76:7d:d8:b9:50:
         25:af:c8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdp5Mcf4MZZxy44omqg/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjQxMTIyMjAwMDU3WhcNMjQxMTIzMjAwMDU3WjAzMTEwLwYDVQQD
Eyg3MGEwY2M3MWVhYjliOTI0ZjA4NzFkOTIzNDk4ZDgxMzI5NTI1MzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr6qXUuurRTc/76VzCtc7SUPUpio
coF4LiElE8nb7vQgTyswNRrXv8uEChUDf0J3otjJaEt16D+7uhmNKDoSxL+lXLJE
ZhYbRDoc9Supo6sSYy6fm9kCkyRURSxIegqOOuAvWrSEN42YGJyW10EVRtJFFSap
Fes0XECVmO4pClITOpaCB3VG48WikijfV3t7Y63Ip1OY/vz16euuXkV/GcIh6l39
AJq3xYFSuYIjmxp69n6F8iDVNJG0fQy3v27XrwWUrkFg7gy1k/kkmZPmZMnED/XN
5WgztnApQvCpw6QGxpqlhUOTdqpOySLB5YzhVIFkpk/5N99ES8nlb08Y0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCgzHHqubkk8IcdkjSY2BMpUlNAMB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPNDlba2
8NZqXBFR0NWhJO6xeONrXxeEwkU7sRInv9kVeQhVFdnmf03nIGDkAzZEydEV3RGK
Nl1ZBUzODJDveLGs80f9qbQXXvMRDLPzyzO4f8RDF/YfBU1O2o7pXrTvd3YWA/c8
Ty6AKOQ1ttNS2pJYvNCf/XbnHP0MPW6YbsY8+ysV+YehjDEixmof6F424A7d15ZC
n5i8J4nPe6OSa67AbP5ATyghNU8zV4WPjBHSufXYmPA91EvO9UUbCpzi1Vn6axiG
T3vwZOg7UdyC8euHSHsyg7cOf7526QrAVFTrvqoi2ek3Fq4QI3AAVcuvMIchP9it
3HZ92LlQJa/Iww==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:05 2024 by rpki-client on console-ams.rpki-client.org