Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File:                     7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier:          EsRdZe+sfxdu/F6r+3/F7cE7z6BQ1oips4cmR94sjPM=
Subject key identifier:   57:BD:E9:A1:70:A8:70:57:14:43:98:DD:E0:F9:27:58:16:91:5B:34
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer:       /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial:       019369D895003796A5808CB90FBC5B0E63EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number:          05EC
Signing time:             Tue 26 Nov 2024 19:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:21 +0000
Files and hashes:         1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: MaLFxtjqrvsWzBgpQF6Cbgo8WnZvHfazKMpP1UXWNSc=)
                          2: 8dvjc1GD5UexScXj9MISlSPdCeg.roa (hash: z3aYDUtRgxZsVk+oUibdwQb6O5jmgTOkxJfBIRzviaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:95:00:37:96:a5:80:8c:b9:0f:bc:5b:0e:63:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
        Validity
            Not Before: Nov 26 19:00:21 2024 GMT
            Not After : Nov 27 19:00:21 2024 GMT
        Subject: CN=57bde9a170a87057144398dde0f9275816915b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:9d:37:54:3d:24:e2:74:61:9c:a6:fa:2a:
                    1b:ce:da:78:c0:26:61:ee:4f:6c:43:01:5b:1c:60:
                    2d:02:e5:5f:68:6f:48:86:40:82:00:a9:13:55:2d:
                    ed:52:fa:ca:d6:8a:99:13:3d:bb:d3:b7:03:4d:a4:
                    78:57:15:20:fa:ff:ef:3d:a0:ff:e4:11:41:37:b9:
                    e0:8b:e2:fd:a0:8b:e4:f9:d8:93:9f:f7:1d:57:04:
                    1d:a6:be:e0:ba:4d:aa:b1:40:d3:43:6e:15:fa:73:
                    b1:19:b0:1e:fc:55:11:e9:06:e5:05:6b:e1:bd:ee:
                    f4:9a:82:88:4c:b7:6e:7e:87:7b:e8:a7:2c:ef:28:
                    39:78:f0:12:71:41:cd:24:36:a8:43:15:db:3e:60:
                    1e:bc:af:26:8a:a5:8e:e3:de:7a:0f:ee:23:87:d1:
                    11:b4:bb:c5:dd:05:08:7a:b0:a5:8e:ee:28:f6:4c:
                    0e:e6:89:c0:6f:2f:8f:39:10:40:a5:aa:dc:65:f3:
                    cf:7e:91:bd:31:be:67:a7:08:fd:04:5d:0e:61:88:
                    aa:28:ba:63:9b:c5:fe:c8:53:99:ff:fa:b6:11:d0:
                    2e:4d:38:70:49:d4:9e:b6:9c:96:66:9f:79:cd:63:
                    db:10:e6:04:62:51:12:65:b6:38:fb:10:74:e5:fa:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:E9:A1:70:A8:70:57:14:43:98:DD:E0:F9:27:58:16:91:5B:34
            X509v3 Authority Key Identifier:
                keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:10:95:98:6f:6a:26:10:65:df:68:89:ba:7d:3f:7a:60:06:
         ef:76:f0:fc:e2:7a:aa:89:14:7e:df:2d:c9:75:9a:bd:2a:42:
         22:93:b2:af:b6:41:49:e0:51:90:27:25:2f:ae:70:35:f0:6d:
         25:d8:be:79:75:8a:0a:ee:c8:96:e2:cc:55:93:55:5f:12:99:
         5a:29:23:50:b4:be:6b:08:c5:32:2e:07:35:a0:79:a3:ad:d7:
         50:a7:e6:9d:a9:e2:9c:55:d3:6e:51:68:f8:c3:2c:81:25:f3:
         4e:cb:aa:d0:3e:7e:03:8b:07:3f:4e:c8:72:c2:91:8f:fb:4d:
         db:04:fc:de:c4:90:e9:dc:ce:b6:8c:81:af:bb:a8:35:a8:ca:
         1f:a4:65:ec:1b:66:ee:89:51:35:fd:d1:7d:2f:42:4c:e7:ea:
         61:45:c1:a4:7d:25:23:4c:c0:86:3e:8c:e4:bb:ab:13:b8:1d:
         e6:d5:c4:60:2d:84:75:cb:28:f2:4f:5c:98:19:1f:06:27:22:
         f7:15:d2:67:f7:c0:09:4e:f7:4b:31:d6:4a:12:c0:48:99:66:
         d7:b8:84:8e:ab:5b:61:5c:e7:5a:3e:eb:11:85:fb:dc:1d:7b:
         03:be:d6:38:2e:2d:f0:b6:94:de:45:23:0b:43:8e:7c:79:5f:
         96:52:ea:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2JUAN5algIy5D7xbDmPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4
ZTNjYTgwHhcNMjQxMTI2MTkwMDIxWhcNMjQxMTI3MTkwMDIxWjAzMTEwLwYDVQQD
Eyg1N2JkZTlhMTcwYTg3MDU3MTQ0Mzk4ZGRlMGY5Mjc1ODE2OTE1YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsGdN1Q9JOJ0YZym+iobztp4wCZh
7k9sQwFbHGAtAuVfaG9IhkCCAKkTVS3tUvrK1oqZEz2707cDTaR4VxUg+v/vPaD/
5BFBN7ngi+L9oIvk+diTn/cdVwQdpr7guk2qsUDTQ24V+nOxGbAe/FUR6QblBWvh
ve70moKITLdufod76Kcs7yg5ePAScUHNJDaoQxXbPmAevK8miqWO4956D+4jh9ER
tLvF3QUIerClju4o9kwO5onAby+PORBAparcZfPPfpG9Mb5npwj9BF0OYYiqKLpj
m8X+yFOZ//q2EdAuTThwSdSetpyWZp95zWPbEOYEYlESZbY4+xB05foamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe96aFwqHBXFEOY3eD5J1gWkVs0MB8GA1UdIwQY
MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt
NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0
LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRCVmG9q
JhBl32iJun0/emAG73bw/OJ6qokUft8tyXWavSpCIpOyr7ZBSeBRkCclL65wNfBt
Jdi+eXWKCu7IluLMVZNVXxKZWikjULS+awjFMi4HNaB5o63XUKfmnaninFXTblFo
+MMsgSXzTsuq0D5+A4sHP07IcsKRj/tN2wT83sSQ6dzOtoyBr7uoNajKH6Rl7Btm
7olRNf3RfS9CTOfqYUXBpH0lI0zAhj6M5LurE7gd5tXEYC2Edcso8k9cmBkfBici
9xXSZ/fACU73SzHWShLASJlm17iEjqtbYVznWj7rEYX73B17A77WOC4t8LaU3kUj
C0OOfHlfllLqMA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:45 2024 by rpki-client on console-fra.rpki-client.org