Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File:                     _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier:          vR8xlgssImazpaHOE1IVeyI0zrU66ER37pJaJCiT9pw=
Subject key identifier:   CF:C8:37:96:B3:C9:6A:42:18:01:12:47:1B:23:17:E3:8E:D5:5C:24
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer:       /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial:       019355E45309E42E6387EEF9B4C2AA1B186E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 22:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:46 +0000
Files and hashes:         1: 9QgsHS1CfWY2DjJu0C1oJREowME.roa (hash: Cf3awILXaSNqkdfati8ka7OEDEhv+DN3EiS8flpyKNE=)
                          2: MNVuiGSBYQu7gD-mttA2FoqxkvI.roa (hash: rkMBqxDX2Qvct5Teim6LIQJEnlfIb2VXvoE1ReE3y34=)
                          3: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: YTo+qifbal5IXuij1PmboJ9CTZLhRxWqWFaG3cksoVA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:53:09:e4:2e:63:87:ee:f9:b4:c2:aa:1b:18:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
        Validity
            Not Before: Nov 22 22:00:46 2024 GMT
            Not After : Nov 23 22:00:46 2024 GMT
        Subject: CN=cfc83796b3c96a42180112471b2317e38ed55c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:a2:4f:fb:c2:da:62:bb:1e:73:dc:9d:65:
                    50:00:95:2f:82:f9:b3:93:e5:c9:eb:f4:14:db:91:
                    14:9f:37:75:2e:9e:64:9b:06:2d:20:e6:db:a9:53:
                    8c:fb:a2:c0:b8:61:a1:26:e2:cd:90:37:fa:5c:c1:
                    9a:23:31:6f:cd:d8:e9:93:1c:4a:f2:d9:f1:ff:c5:
                    15:2d:4d:19:42:24:eb:81:e0:19:04:62:9f:0f:55:
                    e7:5e:9c:b3:09:52:83:c4:ab:0a:c7:95:85:00:ad:
                    2f:6e:42:51:c4:da:6b:ba:9d:d7:90:80:b1:f3:25:
                    31:e7:78:80:f9:1f:c0:a1:74:79:d6:bb:03:cb:11:
                    6f:9a:34:17:87:8f:c4:69:c5:ab:6b:6a:1d:98:ff:
                    3c:1e:3b:a8:bb:7e:85:85:8a:90:b0:28:9a:29:41:
                    e7:af:a5:b9:6d:78:54:4b:f4:54:cb:ce:4c:4a:a5:
                    56:b1:34:fb:2c:5f:1a:52:df:d4:02:3f:16:37:ae:
                    28:63:a8:5b:8c:19:5b:ec:c0:af:4e:e9:74:67:37:
                    64:b6:76:a9:62:96:80:74:78:75:7a:d5:df:bb:7f:
                    31:e9:7b:31:96:fd:87:bd:e1:68:a4:26:8f:ef:6e:
                    18:58:a3:ec:07:52:1e:89:0f:1e:62:1e:d0:81:7c:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:37:96:B3:C9:6A:42:18:01:12:47:1B:23:17:E3:8E:D5:5C:24
            X509v3 Authority Key Identifier:
                keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:86:d8:28:65:ed:6d:db:42:c9:b4:c0:a1:3e:1a:8b:30:7b:
         60:22:af:02:25:29:50:ad:c0:8c:84:e8:ff:ca:15:7c:41:c6:
         91:3c:1d:c1:19:8c:66:21:d3:fe:e6:b2:34:9f:f4:b1:71:05:
         80:c2:50:9a:15:7f:86:f7:c1:e0:fb:98:b8:97:16:80:5e:9c:
         86:c6:20:d9:51:1e:fb:8d:6f:2f:7a:b0:53:71:fa:3a:20:16:
         f1:46:d2:51:87:d9:8a:c0:ed:22:9b:bf:fe:ee:0e:8b:9f:62:
         2f:7a:6b:d5:67:e9:99:50:ad:b4:ae:7d:c3:f6:c1:bb:4d:c9:
         15:31:0c:25:8d:da:c9:b1:bc:96:79:68:06:85:fb:ad:12:d5:
         48:08:a4:0d:fe:34:d9:1d:68:49:c8:7e:85:0d:52:6e:b7:9c:
         cf:6a:9b:af:94:67:3f:29:52:31:70:f8:8b:ea:68:50:77:ac:
         57:95:1e:d9:bf:36:b2:52:e4:2c:24:b3:13:41:aa:3d:6d:30:
         78:25:ef:2f:19:68:5a:a1:fd:67:ed:01:7c:09:ea:9d:5c:1c:
         6b:3b:a1:67:23:0a:22:6a:6b:39:c1:19:fd:44:47:6a:62:f9:
         71:22:ee:4a:d6:6d:34:f1:6b:73:9a:ea:ef:c2:91:ac:8c:07:
         19:69:ef:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5FMJ5C5jh+75tMKqGxhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk
ZDE2ZWIwHhcNMjQxMTIyMjIwMDQ2WhcNMjQxMTIzMjIwMDQ2WjAzMTEwLwYDVQQD
EyhjZmM4Mzc5NmIzYzk2YTQyMTgwMTEyNDcxYjIzMTdlMzhlZDU1YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU2iT/vC2mK7HnPcnWVQAJUvgvmz
k+XJ6/QU25EUnzd1Lp5kmwYtIObbqVOM+6LAuGGhJuLNkDf6XMGaIzFvzdjpkxxK
8tnx/8UVLU0ZQiTrgeAZBGKfD1XnXpyzCVKDxKsKx5WFAK0vbkJRxNprup3XkICx
8yUx53iA+R/AoXR51rsDyxFvmjQXh4/EacWra2odmP88Hjuou36FhYqQsCiaKUHn
r6W5bXhUS/RUy85MSqVWsTT7LF8aUt/UAj8WN64oY6hbjBlb7MCvTul0Zzdktnap
YpaAdHh1etXfu38x6Xsxlv2HveFopCaP724YWKPsB1IeiQ8eYh7QgXzHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/IN5azyWpCGAESRxsjF+OO1VwkMB8GA1UdIwQY
MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt
YzdhYzI2YmNjMmRhLzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh
LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYbYKGXt
bdtCybTAoT4aizB7YCKvAiUpUK3AjITo/8oVfEHGkTwdwRmMZiHT/uayNJ/0sXEF
gMJQmhV/hvfB4PuYuJcWgF6chsYg2VEe+41vL3qwU3H6OiAW8UbSUYfZisDtIpu/
/u4Oi59iL3pr1WfpmVCttK59w/bBu03JFTEMJY3aybG8lnloBoX7rRLVSAikDf40
2R1oSch+hQ1Sbrecz2qbr5RnPylSMXD4i+poUHesV5Ue2b82slLkLCSzE0GqPW0w
eCXvLxloWqH9Z+0BfAnqnVwcazuhZyMKImprOcEZ/URHamL5cSLuStZtNPFrc5rq
78KRrIwHGWnvFQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:12 2024 by rpki-client on console-fra.rpki-client.org