Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          O4nszTswE15SLd6LXH9GknXREUgYGa5OwRAtmpmS5+c=
Subject key identifier:   44:5E:FE:69:92:E8:7F:78:3F:F1:2F:11:61:44:77:9F:1A:2D:0C:22
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       01935688B6B709D4017DF4C3B84CD7296D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:20 +0000
Files and hashes:         1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: l3Ky3NA11ODy7lxf41MArx0DIh8NM0gZqVyDUkrOOs4=)
                          2: bqXy6bBIEO3k5zsVlcH4uIh3L8g.roa (hash: jUfjBxlEQM2dDoPxwIkLaj80LU2MxlU9sd2IsS9X0zA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:b6:b7:09:d4:01:7d:f4:c3:b8:4c:d7:29:6d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Nov 23 01:00:20 2024 GMT
            Not After : Nov 24 01:00:20 2024 GMT
        Subject: CN=445efe6992e87f783ff12f116144779f1a2d0c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:9c:d0:92:fb:6a:f5:df:e9:e0:b1:6a:9c:
                    13:83:9b:9e:be:ab:97:d5:51:2d:fa:ee:47:97:25:
                    8a:7a:5e:4a:c1:9f:0e:38:3e:fa:98:b1:24:9f:bf:
                    1b:55:a4:ee:90:ec:01:18:f9:1b:99:bf:b6:89:69:
                    f7:0a:82:d8:45:5b:b3:a7:86:52:21:ee:ee:c1:43:
                    32:5c:14:ff:3c:34:a6:19:c1:51:6c:55:45:16:19:
                    61:70:5c:14:05:fe:40:43:3f:8f:0c:af:41:94:b2:
                    69:19:57:c4:89:83:c7:26:98:54:c1:f1:b3:ad:31:
                    40:81:2e:85:30:94:41:00:2e:c7:76:c5:07:b5:87:
                    7d:14:a5:4d:14:81:38:d7:65:d2:a3:5b:af:11:8b:
                    c1:ea:3a:b1:7f:5d:da:af:95:a7:71:07:40:f7:aa:
                    d9:6c:a5:e0:af:55:f1:a7:46:4f:0d:e6:83:f2:ba:
                    00:b1:2e:81:b1:de:af:fc:4e:97:80:95:b7:40:4b:
                    29:3e:ab:8d:f8:79:e8:69:eb:f0:28:df:12:60:d5:
                    82:b9:09:a0:c5:1f:05:99:27:0a:58:1d:10:13:b8:
                    7b:ae:13:15:21:f9:ef:e1:44:bb:20:e9:26:81:23:
                    aa:1c:2d:43:ef:20:ad:c0:e0:5e:c3:b0:d5:23:97:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:FE:69:92:E8:7F:78:3F:F1:2F:11:61:44:77:9F:1A:2D:0C:22
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:85:eb:a6:ac:7a:94:6e:97:3f:c9:3a:80:81:65:78:b8:
         85:71:b0:4e:da:2c:53:bc:b2:ab:1c:fe:fe:c6:a9:74:61:6d:
         77:02:6a:41:8d:1c:ed:e5:ae:a2:ed:e9:77:57:d0:ef:16:93:
         b9:f9:0b:d8:fa:0d:b3:f6:dc:04:c0:23:35:19:e6:cb:77:9a:
         29:98:e4:fd:6c:f4:59:b8:e6:80:bc:a0:7b:9a:bf:47:f3:05:
         55:4c:ea:62:22:ac:7e:a2:a0:bd:cf:3b:e7:d0:a0:00:5c:70:
         88:39:13:26:45:87:fd:65:91:ec:d9:65:c6:f0:ab:db:7e:14:
         76:d2:d8:68:01:78:3b:9f:de:51:d9:84:b5:42:2d:2a:b8:26:
         d5:20:d5:96:5d:55:b2:01:2a:82:7e:5e:9b:91:3b:c6:55:20:
         a6:91:69:c3:89:d2:1c:dc:69:1b:2d:ac:8a:26:16:23:41:85:
         67:38:63:84:80:4c:f7:38:12:7a:37:f1:f5:a4:d1:89:02:84:
         26:ca:2f:9d:ae:b5:ec:9b:18:9c:da:aa:ed:90:b3:a3:37:b0:
         cc:8e:2e:5c:24:1c:ab:46:02:88:d1:b8:a9:40:2c:4c:91:99:
         c1:72:ad:0a:c5:b1:8d:52:30:7d:cf:d3:77:c1:74:26:94:48:
         e3:36:dd:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiLa3CdQBffTDuEzXKW0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNWU4MzgzMTJlMDRhZWY5Zjk1MzZlMjBjZDQxMjgzYTdi
OGI3N2IwHhcNMjQxMTIzMDEwMDIwWhcNMjQxMTI0MDEwMDIwWjAzMTEwLwYDVQQD
Eyg0NDVlZmU2OTkyZTg3Zjc4M2ZmMTJmMTE2MTQ0Nzc5ZjFhMmQwYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6+c0JL7avXf6eCxapwTg5uevquX
1VEt+u5HlyWKel5KwZ8OOD76mLEkn78bVaTukOwBGPkbmb+2iWn3CoLYRVuzp4ZS
Ie7uwUMyXBT/PDSmGcFRbFVFFhlhcFwUBf5AQz+PDK9BlLJpGVfEiYPHJphUwfGz
rTFAgS6FMJRBAC7HdsUHtYd9FKVNFIE412XSo1uvEYvB6jqxf13ar5WncQdA96rZ
bKXgr1Xxp0ZPDeaD8roAsS6Bsd6v/E6XgJW3QEspPquN+HnoaevwKN8SYNWCuQmg
xR8FmScKWB0QE7h7rhMVIfnv4US7IOkmgSOqHC1D7yCtwOBew7DVI5fD7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERe/mmS6H94P/EvEWFEd58aLQwiMB8GA1UdIwQY
MBaAFO1eg4MS4Ervn5U24gzUEoOnuLd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYt
ZWRhY2E5ZDEzNjFhLzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYtZWRhY2E5ZDEzNjFh
LzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG6F66as
epRulz/JOoCBZXi4hXGwTtosU7yyqxz+/sapdGFtdwJqQY0c7eWuou3pd1fQ7xaT
ufkL2PoNs/bcBMAjNRnmy3eaKZjk/Wz0WbjmgLyge5q/R/MFVUzqYiKsfqKgvc87
59CgAFxwiDkTJkWH/WWR7NllxvCr234UdtLYaAF4O5/eUdmEtUItKrgm1SDVll1V
sgEqgn5em5E7xlUgppFpw4nSHNxpGy2siiYWI0GFZzhjhIBM9zgSejfx9aTRiQKE
Jsovna617JsYnNqq7ZCzozewzI4uXCQcq0YCiNG4qUAsTJGZwXKtCsWxjVIwfc/T
d8F0JpRI4zbdXQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:05 2024 by rpki-client on console-fra.rpki-client.org