Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          GLOqUei3XbJp9p9YUUNiiKnGGOxDj0qGJkyV2OtMyDE=
Subject key identifier:   E3:0D:AF:7D:3F:B8:A6:20:B0:DA:C6:59:37:A3:37:8B:9B:30:46:22
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       019352AD1EECC83837406CA150ACA77FE37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 07:01:37 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:37 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:37 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: lv734vLr6KCdWh/VsEhfE5Cg5A/zPm0TIKQrdxTqmsU=)
                          2: BXFsTtG9DflVaL53ShkCzXhNABE.roa (hash: y2fSfWkpwpRnGZPtUWGQScCa1z9GEf34wtyZqz/plKU=)
                          3: SZGOOruPKWedfDmxobKaRzxqqAY.roa (hash: bYNMchdUgB6HNSo8VEiNFDSqv4Wh26h28oLdhvQgQzM=)
                          4: V0ORlc8Li9a61J61LJutNmd0Gwo.roa (hash: qACTxU6bTjvNUbJbBDN0FKDFXSff73aYHWItEY37V5o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:1e:ec:c8:38:37:40:6c:a1:50:ac:a7:7f:e3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: Nov 22 07:01:37 2024 GMT
            Not After : Nov 23 07:01:37 2024 GMT
        Subject: CN=e30daf7d3fb8a620b0dac65937a3378b9b304622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:0c:79:57:80:3a:ca:4c:4c:2b:d9:27:1e:
                    84:f9:11:97:6a:34:bb:8c:2e:f2:b4:6f:b5:fd:7d:
                    33:9a:a4:9e:ed:72:31:96:40:8e:f8:c2:7e:84:8e:
                    6d:22:50:96:16:bf:cd:a7:64:5b:c0:d0:d1:4f:a2:
                    db:c2:66:f3:db:9b:b3:d9:40:1e:81:3a:71:84:92:
                    18:46:1e:5d:ce:11:cf:b7:94:14:7d:17:78:c6:4b:
                    cc:86:8f:27:64:9a:43:8b:4a:dd:6e:a4:60:b8:06:
                    d7:a3:b4:cc:ec:09:0f:ab:e8:4d:20:8b:d7:05:37:
                    03:21:1b:d0:31:e7:6b:69:a9:b6:1c:c7:85:36:ac:
                    e1:c8:4a:98:0f:e6:a5:30:91:bd:e6:e2:de:89:46:
                    c5:24:74:46:e2:fb:8e:d1:ab:f7:e9:1a:ae:ea:a2:
                    b4:a1:69:3a:a2:f6:97:ff:0c:f1:2d:5a:8d:3e:83:
                    3a:53:35:2d:10:14:6a:c0:e4:33:4c:4d:a9:99:67:
                    84:92:14:f8:ed:70:91:8d:59:d9:19:03:da:a5:3f:
                    a0:4a:0a:ef:67:33:f7:a8:7f:3a:d6:03:f7:48:02:
                    6f:d9:bc:d1:93:8d:76:e6:5f:c3:ea:53:1a:71:ed:
                    aa:4b:49:29:69:46:d6:f9:1f:ec:91:15:11:99:6d:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:AF:7D:3F:B8:A6:20:B0:DA:C6:59:37:A3:37:8B:9B:30:46:22
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:69:fc:8b:a9:f3:da:4f:16:aa:a1:7b:52:30:bf:68:de:
         12:bd:41:2e:03:96:c7:97:14:69:9b:a9:ef:b8:87:4a:26:37:
         b1:66:e2:15:a8:3f:d8:24:e9:d8:48:02:80:b0:0d:dd:0e:46:
         9d:b8:b1:3d:cd:80:27:f7:93:66:65:06:d7:bb:4d:74:3b:91:
         7b:25:b4:e6:bd:e6:12:a3:3b:46:b6:f1:19:60:d0:9a:cf:fa:
         13:ee:2a:dc:54:37:d8:87:59:b7:cd:fa:86:31:82:8b:1b:d6:
         ee:09:5b:86:1a:ab:e3:57:1b:42:82:38:88:92:64:3d:bd:a8:
         56:00:a0:ea:a8:45:98:37:15:84:4e:21:02:da:be:ae:6f:00:
         b6:02:5a:4c:d9:b2:28:e0:d3:73:dc:f0:57:ba:49:72:65:e1:
         5d:45:65:b2:b5:83:a5:92:ee:33:6f:5e:94:df:db:cb:fe:c3:
         03:6c:34:df:18:37:90:ac:c7:fa:9d:33:e6:5d:d3:70:00:88:
         5b:f8:f5:d6:6f:a2:d2:24:9b:4f:62:bd:8e:16:7d:0f:b4:5b:
         bf:4a:de:6c:aa:d0:93:a4:ff:d5:6f:f6:61:64:3e:eb:16:2e:
         0b:34:42:0e:cb:7a:56:84:cc:41:65:96:80:e8:13:a8:75:26:
         6c:59:9f:c5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNSrR7syDg3QGyhUKynf+N8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4
YmM4NmQwHhcNMjQxMTIyMDcwMTM3WhcNMjQxMTIzMDcwMTM3WjAzMTEwLwYDVQQD
EyhlMzBkYWY3ZDNmYjhhNjIwYjBkYWM2NTkzN2EzMzc4YjliMzA0NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RYMeVeAOspMTCvZJx6E+RGXajS7
jC7ytG+1/X0zmqSe7XIxlkCO+MJ+hI5tIlCWFr/Np2RbwNDRT6Lbwmbz25uz2UAe
gTpxhJIYRh5dzhHPt5QUfRd4xkvMho8nZJpDi0rdbqRguAbXo7TM7AkPq+hNIIvX
BTcDIRvQMedraam2HMeFNqzhyEqYD+alMJG95uLeiUbFJHRG4vuO0av36Rqu6qK0
oWk6ovaX/wzxLVqNPoM6UzUtEBRqwOQzTE2pmWeEkhT47XCRjVnZGQPapT+gSgrv
ZzP3qH861gP3SAJv2bzRk4125l/D6lMace2qS0kpaUbW+R/skRURmW3sTwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOMNr30/uKYgsNrGWTejN4ubMEYiMB8GA1UdIwQY
MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1
LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm
NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX9p
/Iup89pPFqqhe1Iwv2jeEr1BLgOWx5cUaZup77iHSiY3sWbiFag/2CTp2EgCgLAN
3Q5GnbixPc2AJ/eTZmUG17tNdDuReyW05r3mEqM7RrbxGWDQms/6E+4q3FQ32IdZ
t836hjGCixvW7glbhhqr41cbQoI4iJJkPb2oVgCg6qhFmDcVhE4hAtq+rm8AtgJa
TNmyKODTc9zwV7pJcmXhXUVlsrWDpZLuM29elN/by/7DA2w03xg3kKzH+p0z5l3T
cACIW/j11m+i0iSbT2K9jhZ9D7Rbv0rebKrQk6T/1W/2YWQ+6xYuCzRCDst6VoTM
QWWWgOgTqHUmbFmfxQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:10:01 2024 by rpki-client on console-fra.rpki-client.org