Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File:                     3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier:          IbAp9mbJUJSz8aUAMKiCgHsJiie6kdQpUr90HQnNJ0c=
Subject key identifier:   0A:A7:01:B9:CC:BF:3E:49:CB:A7:2E:B6:70:BB:A3:8E:17:38:CE:BE
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer:       /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial:       0193579BBC094A84E6574C6D81E92CA4DEE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number:          0FF9
Signing time:             Sat 23 Nov 2024 06:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:44 +0000
Files and hashes:         1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: hfmeKc5+vJEtVk9E4kG2j3wi1EPC6ycxDjzUEL8kcuU=)
                          2: yL5wto_W6Wtz7jl3y_YLl3Wtex0.roa (hash: 9RNeM+1S/DooF+vDJGgQDEHW/saPfropJJIxpqpHv9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:bc:09:4a:84:e6:57:4c:6d:81:e9:2c:a4:de:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
        Validity
            Not Before: Nov 23 06:00:44 2024 GMT
            Not After : Nov 24 06:00:44 2024 GMT
        Subject: CN=0aa701b9ccbf3e49cba72eb670bba38e1738cebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:bf:da:a4:a6:9a:49:42:5f:cd:26:8a:9a:
                    c7:05:9f:e7:b8:b5:af:46:3c:2b:42:95:91:86:91:
                    4c:86:ea:ea:21:0b:7e:c6:b1:c0:cc:16:b7:4c:7d:
                    8d:8c:e4:bf:4f:5b:ef:41:cf:e5:83:eb:c4:69:6f:
                    25:60:ff:e0:50:b1:6a:42:6f:89:0a:ba:1b:a3:69:
                    0c:e9:03:00:e1:f2:1e:54:e6:ff:90:81:45:8c:0e:
                    27:04:c9:c4:fe:15:1f:ac:02:fc:f8:a8:7b:68:e0:
                    03:38:c0:19:87:72:b9:e3:ad:82:0f:a3:a1:83:20:
                    32:57:a0:db:a7:7f:6b:9d:56:d2:2a:9e:b6:50:dd:
                    ba:ae:72:b1:b3:b0:8a:5a:54:fe:9a:3f:71:f6:79:
                    5c:28:a0:73:66:5f:69:20:7d:72:58:4f:55:14:ac:
                    28:a1:35:58:57:04:1b:ec:e9:99:e6:1c:cc:88:ee:
                    ab:79:4d:d2:cd:ed:70:ef:56:35:00:cb:3b:1a:e1:
                    60:3c:b2:a3:c5:e3:8b:7b:d3:0d:66:82:86:59:ce:
                    7a:3b:9e:bd:60:96:b2:b4:27:f1:ea:13:30:f6:9e:
                    2f:4e:7f:1f:4f:61:dc:6e:8a:bd:ee:6e:e1:20:46:
                    7e:c2:f0:c3:a2:fe:a7:53:de:f2:23:89:4f:3f:05:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:01:B9:CC:BF:3E:49:CB:A7:2E:B6:70:BB:A3:8E:17:38:CE:BE
            X509v3 Authority Key Identifier:
                keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:67:e7:e6:6c:69:d2:ba:b0:7f:ea:bd:29:cd:98:87:59:6f:
         8e:89:7c:69:31:92:32:52:73:6b:a8:50:cd:2d:e9:07:97:72:
         a2:c8:07:45:0d:64:ad:52:b4:02:45:75:3e:1d:1e:5d:ff:6d:
         bb:92:0b:f5:51:b8:ec:19:75:4e:b0:dc:f6:9e:82:f0:c0:f1:
         2b:ca:12:b1:21:c7:c5:a5:ff:bd:d6:6d:ce:3d:02:6d:43:86:
         15:d0:a8:2f:03:ef:55:87:b3:f2:15:81:6d:02:0c:e2:bf:74:
         87:8e:c1:fd:87:ab:d1:3a:ad:32:3a:b9:03:e7:79:06:3d:97:
         0d:3a:50:0e:97:61:5e:fe:09:d1:29:5c:56:d7:50:96:21:7c:
         7d:9e:04:95:c5:39:3f:4f:f7:54:6c:1e:af:ae:00:e4:9f:3b:
         f6:03:f2:f4:a0:2d:52:d9:84:a2:ab:4c:bf:5d:45:7a:cf:7f:
         23:c4:fb:36:4b:06:4c:1a:12:69:64:c1:0e:73:77:24:fe:27:
         2d:04:75:60:86:28:a2:ae:70:50:17:59:53:46:5b:d0:b8:19:
         d7:48:2c:e3:ec:06:ed:7c:e0:2e:89:78:f8:dd:a2:88:e0:ec:
         cd:39:ab:99:87:ce:3a:44:0f:d7:c9:79:b8:26:e1:fa:32:72:
         09:44:81:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm7wJSoTmV0xtgekspN7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDU1NTY5MTc3YTg4OWQzMzdmMDNmMmU2OThhY2FiY2Nj
YmI1ODkwHhcNMjQxMTIzMDYwMDQ0WhcNMjQxMTI0MDYwMDQ0WjAzMTEwLwYDVQQD
EygwYWE3MDFiOWNjYmYzZTQ5Y2JhNzJlYjY3MGJiYTM4ZTE3MzhjZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbS/2qSmmklCX80miprHBZ/nuLWv
RjwrQpWRhpFMhurqIQt+xrHAzBa3TH2NjOS/T1vvQc/lg+vEaW8lYP/gULFqQm+J
Crobo2kM6QMA4fIeVOb/kIFFjA4nBMnE/hUfrAL8+Kh7aOADOMAZh3K5462CD6Oh
gyAyV6Dbp39rnVbSKp62UN26rnKxs7CKWlT+mj9x9nlcKKBzZl9pIH1yWE9VFKwo
oTVYVwQb7OmZ5hzMiO6reU3Sze1w71Y1AMs7GuFgPLKjxeOLe9MNZoKGWc56O569
YJaytCfx6hMw9p4vTn8fT2Hcboq97m7hIEZ+wvDDov6nU97yI4lPPwWwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqnAbnMvz5Jy6cutnC7o44XOM6+MB8GA1UdIwQY
MBaAFN7VVWkXeoidM38D8uaYrKvMy7WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2Mt
ODRhMWZlOWQ0Yjc4LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2MtODRhMWZlOWQ0Yjc4
LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmfn5mxp
0rqwf+q9Kc2Yh1lvjol8aTGSMlJza6hQzS3pB5dyosgHRQ1krVK0AkV1Ph0eXf9t
u5IL9VG47Bl1TrDc9p6C8MDxK8oSsSHHxaX/vdZtzj0CbUOGFdCoLwPvVYez8hWB
bQIM4r90h47B/Yer0TqtMjq5A+d5Bj2XDTpQDpdhXv4J0SlcVtdQliF8fZ4ElcU5
P0/3VGwer64A5J879gPy9KAtUtmEoqtMv11Fes9/I8T7NksGTBoSaWTBDnN3JP4n
LQR1YIYooq5wUBdZU0Zb0LgZ10gs4+wG7XzgLol4+N2iiODszTmrmYfOOkQP18l5
uCbh+jJyCUSBHQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:36 2024 by rpki-client on console-ams.rpki-client.org