Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File:                     hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier:          pwwDcPKKAyvWwURhRW2d4ZGcwR0Ye6XeSsoSzr234Co=
Subject key identifier:   6D:E9:DB:C5:94:EE:4A:F2:3A:7A:53:DF:B1:40:F2:20:72:EB:AB:E9
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer:       /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial:       019352ACEC652904A363706715A0331613CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number:          0EBF
Signing time:             Fri 22 Nov 2024 07:01:24 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:24 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:24 +0000
Files and hashes:         1: _8rJuTQOL6dA7I04wwPydxCa3_I.roa (hash: Cu5wVONAKbIO6p9xyDmta5EinVSBkwim6xF3jQ6wQkE=)
                          2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: aKGOWYGFW1ngNGqlEpqTYFNhXG5Spb0cD4vuhA6Fa5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:ec:65:29:04:a3:63:70:67:15:a0:33:16:13:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
        Validity
            Not Before: Nov 22 07:01:24 2024 GMT
            Not After : Nov 23 07:01:24 2024 GMT
        Subject: CN=6de9dbc594ee4af23a7a53dfb140f22072ebabe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:56:36:f0:1b:a6:39:48:be:f1:2c:16:c0:
                    0a:d3:66:f4:f5:1e:bb:4a:0a:ff:b9:fb:e5:6e:cc:
                    b8:a2:f6:95:9a:2d:83:9b:7f:6e:8e:5a:a3:18:aa:
                    1c:76:2e:b0:7a:cb:40:d0:43:36:bb:72:50:b8:79:
                    b4:08:99:cb:ed:e2:63:a5:45:bc:bd:5d:79:d3:64:
                    5e:18:17:e9:44:bf:65:5b:44:70:d7:31:25:19:02:
                    75:21:9d:14:73:2f:94:47:e2:c4:74:48:57:cc:81:
                    20:8d:df:d5:5a:a2:c3:0e:10:75:67:22:4f:29:cf:
                    7c:8a:a2:53:51:b3:e3:80:b3:3c:d5:19:c7:df:fc:
                    1d:0b:46:b4:1e:8e:32:a3:22:50:56:27:cf:0b:e5:
                    1a:dc:dd:8c:1f:6f:a7:3a:dd:81:c6:57:5e:9c:31:
                    41:26:a0:8f:17:a9:46:21:d8:45:c1:aa:cf:7f:e8:
                    88:ad:e9:95:a4:8a:47:e5:e4:c0:32:8c:12:ca:1c:
                    02:79:71:ee:57:95:7a:9e:f5:c8:e0:bd:6d:28:c7:
                    1c:60:04:33:c6:bd:54:82:b1:c0:c9:6c:18:49:5f:
                    5f:12:44:52:2f:c9:c5:d2:61:16:ac:95:bf:e0:6d:
                    60:95:63:22:5c:54:88:63:68:d0:a4:7f:c5:e4:ee:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:DB:C5:94:EE:4A:F2:3A:7A:53:DF:B1:40:F2:20:72:EB:AB:E9
            X509v3 Authority Key Identifier:
                keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:a3:2a:20:9a:0a:6b:6b:9f:91:81:fb:36:1f:f4:46:28:
         88:c0:b7:cc:38:19:ab:d4:bc:88:9c:69:71:24:f5:0e:a1:11:
         ff:6f:c5:52:f5:2e:7a:fe:3e:8a:40:2a:e9:2e:aa:08:03:c0:
         4e:3c:32:3a:70:fe:25:09:ba:6c:69:e1:a4:da:1e:52:dc:b9:
         cb:dd:95:b5:05:db:a2:62:3f:f2:d8:14:1c:71:99:a2:e2:24:
         2c:c3:e3:ba:9a:98:bf:48:29:f5:11:45:b5:3e:3c:73:22:b0:
         21:a0:3c:bb:d7:0f:cb:64:07:a2:45:34:1c:30:30:6f:f2:d6:
         3a:89:b2:56:0f:be:00:4f:f7:30:b3:d1:f2:40:f2:f9:21:54:
         81:d6:ee:bc:5a:99:91:65:fd:b5:e5:79:16:de:69:f5:64:27:
         50:33:38:7f:b7:6f:e5:01:77:8a:86:b7:b3:14:f3:0d:71:28:
         bc:1b:29:4b:08:e9:f8:ac:03:ca:c9:5e:1e:40:2f:60:7e:e3:
         e2:57:62:05:ff:63:cf:2e:06:46:fb:ec:14:a7:2a:0c:93:96:
         56:b3:d2:c2:bb:3f:1c:8d:62:f7:e4:f8:f4:7b:a4:4d:4d:89:
         b0:ba:5a:af:62:6a:a6:a4:d2:28:33:8b:a6:11:04:f0:9c:f3:
         81:03:d3:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrOxlKQSjY3BnFaAzFhPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz
ODM5YjEwHhcNMjQxMTIyMDcwMTI0WhcNMjQxMTIzMDcwMTI0WjAzMTEwLwYDVQQD
Eyg2ZGU5ZGJjNTk0ZWU0YWYyM2E3YTUzZGZiMTQwZjIyMDcyZWJhYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszdWNvAbpjlIvvEsFsAK02b09R67
Sgr/ufvlbsy4ovaVmi2Dm39ujlqjGKocdi6westA0EM2u3JQuHm0CJnL7eJjpUW8
vV1502ReGBfpRL9lW0Rw1zElGQJ1IZ0Ucy+UR+LEdEhXzIEgjd/VWqLDDhB1ZyJP
Kc98iqJTUbPjgLM81RnH3/wdC0a0Ho4yoyJQVifPC+Ua3N2MH2+nOt2BxldenDFB
JqCPF6lGIdhFwarPf+iIremVpIpH5eTAMowSyhwCeXHuV5V6nvXI4L1tKMccYAQz
xr1UgrHAyWwYSV9fEkRSL8nF0mEWrJW/4G1glWMiXFSIY2jQpH/F5O7ioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3p28WU7kryOnpT37FA8iBy66vpMB8GA1UdIwQY
MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt
YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky
LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUijKiCa
Cmtrn5GB+zYf9EYoiMC3zDgZq9S8iJxpcST1DqER/2/FUvUuev4+ikAq6S6qCAPA
TjwyOnD+JQm6bGnhpNoeUty5y92VtQXbomI/8tgUHHGZouIkLMPjupqYv0gp9RFF
tT48cyKwIaA8u9cPy2QHokU0HDAwb/LWOomyVg++AE/3MLPR8kDy+SFUgdbuvFqZ
kWX9teV5Ft5p9WQnUDM4f7dv5QF3ioa3sxTzDXEovBspSwjp+KwDysleHkAvYH7j
4ldiBf9jzy4GRvvsFKcqDJOWVrPSwrs/HI1i9+T49HukTU2JsLpar2JqpqTSKDOL
phEE8JzzgQPT/w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:51 2024 by rpki-client on console-fra.rpki-client.org