Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          3sDFBXWG59gjoMuYCdhi2VzdCZ/hf0BJF6DJIWgt4Xc=
Subject key identifier:   97:AF:9E:1E:8C:62:7B:A9:1C:E1:5C:72:F8:D1:B5:29:84:6E:2C:96
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       019369D915BBAD3B458098ADD4AE06D59653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          0E79
Signing time:             Tue 26 Nov 2024 19:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:54 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: gsMYwsQuFA5Pzsfa6MbPrb8AsASPXhtpSnKPvwu2hUk=)
                          2: jc1KLHw7atZ0xZSnrLqLzF_JwKg.roa (hash: o0lUYf09k14cg0xOSln/N0PQQ6wtB8ilMvwb5d52R/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:15:bb:ad:3b:45:80:98:ad:d4:ae:06:d5:96:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Nov 26 19:00:54 2024 GMT
            Not After : Nov 27 19:00:54 2024 GMT
        Subject: CN=97af9e1e8c627ba91ce15c72f8d1b529846e2c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:78:25:81:a1:28:e8:c6:9b:aa:ea:8e:24:
                    4d:66:50:e4:b1:a8:2e:be:eb:5f:38:6a:cf:da:1f:
                    af:3c:4b:8d:91:12:75:3c:b5:68:bf:80:67:7e:68:
                    b0:07:fa:ac:5f:ff:fa:d9:67:05:4a:56:88:80:38:
                    80:88:c2:6c:6b:6a:05:36:01:ba:f8:41:b2:7a:e5:
                    cb:85:71:68:6e:96:79:3b:92:5c:2a:8c:06:cd:b9:
                    ce:6c:5d:7c:ce:b5:d2:d0:fa:7a:88:e6:78:45:5e:
                    3d:f5:e9:8d:04:5d:f5:ae:f1:52:b8:3f:6e:4e:0b:
                    98:ba:e6:e5:6c:d2:d2:aa:57:4b:18:8b:75:4c:0e:
                    61:54:2b:91:0d:32:16:6d:30:77:b4:8b:f7:1e:a6:
                    97:68:be:5d:cf:d6:1d:af:b3:c2:e6:f8:25:d7:5d:
                    14:71:db:e2:75:c7:66:69:dd:60:f9:da:fc:51:04:
                    7d:68:7e:4e:e1:0b:03:a0:74:38:2d:ec:e9:49:d8:
                    8d:49:c6:9a:26:d2:b3:c0:7f:9d:55:a5:0d:99:25:
                    e2:5b:ae:61:bb:b8:a3:be:1e:88:ee:f1:f2:8a:ff:
                    61:40:b1:26:8f:65:58:30:b9:b8:3e:36:ed:18:00:
                    63:ce:8f:57:a1:39:1e:06:11:df:6e:f7:49:c4:56:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:9E:1E:8C:62:7B:A9:1C:E1:5C:72:F8:D1:B5:29:84:6E:2C:96
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fe:3d:6b:8a:81:22:58:57:7b:f2:bc:2e:44:32:30:e8:29:
         80:af:3d:84:72:a9:43:2f:3c:3c:b3:7e:20:18:0e:35:0b:e0:
         79:b2:55:ae:9b:2b:9d:f4:3e:54:da:1d:e6:68:6c:a8:e1:de:
         50:11:86:a7:b2:ca:7b:77:e2:63:27:88:e1:4d:b2:7c:a2:47:
         bd:69:c1:30:eb:cf:7c:9f:96:ab:04:5c:a7:42:cd:13:17:4a:
         d9:5c:c3:96:0b:28:47:d6:8e:6f:96:cc:71:68:52:65:e3:b5:
         50:8d:f7:54:5c:c8:86:34:5c:9a:03:d7:40:fe:d9:49:31:f2:
         7a:df:f0:c3:7e:b1:44:b5:a2:15:bd:88:1f:1f:ac:56:0e:b6:
         20:b9:bb:50:50:67:8d:60:a7:e3:06:a9:65:dc:f7:0f:dc:5c:
         e3:a1:d6:58:a5:b5:41:ba:c2:cd:05:17:1d:9f:82:a4:41:1d:
         e7:cc:c0:ea:e0:fd:37:0d:e6:4a:f3:be:85:c4:f7:da:0b:ef:
         b1:1b:b4:c6:74:36:2e:f6:97:a2:c1:78:a4:b1:a2:03:8d:0d:
         32:99:63:6a:22:07:d5:87:5c:fe:72:c7:8d:65:76:23:9a:14:
         b9:d6:fb:0b:4b:36:9c:b3:3e:ab:4f:c2:23:8b:6f:98:9f:d0:
         1a:d3:aa:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2RW7rTtFgJit1K4G1ZZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODFlZTg2OWQyZTFjMjAwZmY4YzY5N2UyZDM3ZWFhNDI5
NDBhMzYwHhcNMjQxMTI2MTkwMDU0WhcNMjQxMTI3MTkwMDU0WjAzMTEwLwYDVQQD
Eyg5N2FmOWUxZThjNjI3YmE5MWNlMTVjNzJmOGQxYjUyOTg0NmUyYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu14JYGhKOjGm6rqjiRNZlDksagu
vutfOGrP2h+vPEuNkRJ1PLVov4BnfmiwB/qsX//62WcFSlaIgDiAiMJsa2oFNgG6
+EGyeuXLhXFobpZ5O5JcKowGzbnObF18zrXS0Pp6iOZ4RV499emNBF31rvFSuD9u
TguYuublbNLSqldLGIt1TA5hVCuRDTIWbTB3tIv3HqaXaL5dz9Ydr7PC5vgl110U
cdvidcdmad1g+dr8UQR9aH5O4QsDoHQ4LezpSdiNScaaJtKzwH+dVaUNmSXiW65h
u7ijvh6I7vHyiv9hQLEmj2VYMLm4PjbtGABjzo9XoTkeBhHfbvdJxFaCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJevnh6MYnupHOFccvjRtSmEbiyWMB8GA1UdIwQY
MBaAFAeB7oadLhwgD/jGl+LTfqpClAo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYt
M2U3NTA1MWI4ZWFjLzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYtM2U3NTA1MWI4ZWFj
LzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/49a4qB
IlhXe/K8LkQyMOgpgK89hHKpQy88PLN+IBgONQvgebJVrpsrnfQ+VNod5mhsqOHe
UBGGp7LKe3fiYyeI4U2yfKJHvWnBMOvPfJ+WqwRcp0LNExdK2VzDlgsoR9aOb5bM
cWhSZeO1UI33VFzIhjRcmgPXQP7ZSTHyet/ww36xRLWiFb2IHx+sVg62ILm7UFBn
jWCn4wapZdz3D9xc46HWWKW1QbrCzQUXHZ+CpEEd58zA6uD9Nw3mSvO+hcT32gvv
sRu0xnQ2LvaXosF4pLGiA40NMpljaiIH1Ydc/nLHjWV2I5oUudb7C0s2nLM+q0/C
I4tvmJ/QGtOqzw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:12 2024 by rpki-client on console-fra.rpki-client.org