Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          Zw6Juze1/JJwSGypx2cbs8x/IS+2th/xOm6tQWny1Bk=
Subject key identifier:   64:7F:00:2E:24:6A:52:93:EA:AD:43:13:EC:2A:2D:62:12:B3:7C:71
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       01936A46C0BA58FF47D05D889D42E534BC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          0EEB
Signing time:             Tue 26 Nov 2024 21:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:41 +0000
Files and hashes:         1: ELq1vd5UXElum5a7M8vdDcMmocE.roa (hash: QLaQk0l7Nzhms+RyYZsUAQGtLSnwLE37oNVw4MPeeLc=)
                          2: b6XzgssuddUO2gxgLD7KQu-nSZE.roa (hash: +m3En8RiBU9EDA5QAqo7YAqlWhNtcf3a2UXGnrRfmIY=)
                          3: fBepe3eeK-8PKmvqiv1b-dyLJT8.roa (hash: nfv8rfVU37/nhmGQ7kFChB8QQoMvD8iNdo3PvcSWLsE=)
                          4: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: OpF6KIWd9aRr4U7GFDZGs9FEjmEpFehu+2CyTH8XGoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:c0:ba:58:ff:47:d0:5d:88:9d:42:e5:34:bc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Nov 26 21:00:41 2024 GMT
            Not After : Nov 27 21:00:41 2024 GMT
        Subject: CN=647f002e246a5293eaad4313ec2a2d6212b37c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:e6:6f:b1:31:33:c6:d3:47:e3:67:da:58:
                    4d:b6:09:70:87:0f:a7:89:aa:9e:81:50:5f:5b:65:
                    22:65:c6:8b:33:c6:66:e3:bd:8a:a2:d1:61:53:bb:
                    21:01:ac:e6:82:06:ec:b2:e1:c2:18:85:f3:9f:9b:
                    09:6d:94:38:dd:bc:3b:20:8f:a8:bf:e2:23:86:57:
                    3f:1e:eb:1f:78:59:22:85:d3:fe:3e:a0:01:e2:6c:
                    c0:62:cd:c2:22:81:59:48:e1:fb:e3:b5:b6:c9:b1:
                    21:c0:dc:e2:57:45:51:ec:bd:de:1d:63:a0:af:79:
                    96:8a:38:aa:b4:90:51:69:ab:35:c4:60:99:b5:41:
                    15:63:30:50:d3:f2:67:fc:37:57:82:ea:37:50:11:
                    91:04:80:64:a1:bf:14:d7:c0:61:9f:dd:83:a0:58:
                    54:18:f9:f7:96:c1:25:65:e6:10:a1:8e:91:81:e4:
                    cd:5a:77:88:a3:0d:fa:ee:3e:f5:bc:8c:7a:8f:91:
                    ca:db:06:2b:f3:4a:1d:ca:db:a0:b4:f6:84:85:a7:
                    5c:28:4d:b7:71:e9:28:f9:be:66:44:f8:ae:9f:0c:
                    77:b0:01:b0:0a:29:32:0b:ca:1a:3a:3b:9d:64:d6:
                    e0:ae:73:6f:16:60:98:ec:9f:1a:30:dd:b4:f4:97:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:00:2E:24:6A:52:93:EA:AD:43:13:EC:2A:2D:62:12:B3:7C:71
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9e:1a:d2:4a:74:43:60:68:f8:71:0a:95:0f:8a:c6:53:97:
         e4:e9:1a:7d:dd:97:dd:61:2e:df:c2:46:a5:28:10:ed:9f:3d:
         df:ad:9f:c0:4c:ca:f4:be:2a:51:d3:ef:d2:d1:2f:92:76:7e:
         6c:ae:86:bc:f7:2b:64:19:4c:85:fe:3c:ae:3a:ca:08:e5:2b:
         11:58:55:5d:e0:c7:a4:dc:7f:12:4c:94:0b:da:b2:4b:33:c2:
         e0:51:26:c0:ca:18:81:18:88:43:69:85:27:6b:a0:7b:da:15:
         fb:51:32:31:f0:e5:81:e4:fd:b3:cf:1d:56:a1:6d:55:e1:7e:
         54:62:98:6b:f2:3c:71:c3:0b:e5:61:b6:c8:9a:67:73:35:e4:
         6e:9e:fa:26:12:3b:ae:19:37:f8:2c:98:17:d4:9e:5a:7c:6b:
         bf:05:d4:7a:71:98:8b:c9:6b:9b:7a:57:5b:71:8e:87:12:45:
         08:7d:f4:78:45:43:0c:5c:1f:8f:64:c1:d1:08:85:3e:75:19:
         3b:b6:6c:8d:91:e9:0a:85:bb:ed:29:5d:1f:c0:6c:a5:2b:85:
         4a:a0:21:6e:73:47:78:6e:e6:53:ee:4b:40:1f:db:65:82:eb:
         6c:7c:88:c1:b4:8e:d4:b8:0c:57:83:cd:db:1e:ce:96:d5:18:
         50:b6:1f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRsC6WP9H0F2InULlNLwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2
ZDU0NDMwHhcNMjQxMTI2MjEwMDQxWhcNMjQxMTI3MjEwMDQxWjAzMTEwLwYDVQQD
Eyg2NDdmMDAyZTI0NmE1MjkzZWFhZDQzMTNlYzJhMmQ2MjEyYjM3YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbvmb7ExM8bTR+Nn2lhNtglwhw+n
iaqegVBfW2UiZcaLM8Zm472KotFhU7shAazmggbssuHCGIXzn5sJbZQ43bw7II+o
v+Ijhlc/HusfeFkihdP+PqAB4mzAYs3CIoFZSOH747W2ybEhwNziV0VR7L3eHWOg
r3mWijiqtJBRaas1xGCZtUEVYzBQ0/Jn/DdXguo3UBGRBIBkob8U18Bhn92DoFhU
GPn3lsElZeYQoY6RgeTNWneIow367j71vIx6j5HK2wYr80odytugtPaEhadcKE23
ceko+b5mRPiunwx3sAGwCikyC8oaOjudZNbgrnNvFmCY7J8aMN209JfK1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR/AC4kalKT6q1DE+wqLWISs3xxMB8GA1UdIwQY
MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt
NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2
LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ4a0kp0
Q2Bo+HEKlQ+KxlOX5Okafd2X3WEu38JGpSgQ7Z89362fwEzK9L4qUdPv0tEvknZ+
bK6GvPcrZBlMhf48rjrKCOUrEVhVXeDHpNx/EkyUC9qySzPC4FEmwMoYgRiIQ2mF
J2uge9oV+1EyMfDlgeT9s88dVqFtVeF+VGKYa/I8ccML5WG2yJpnczXkbp76JhI7
rhk3+CyYF9SeWnxrvwXUenGYi8lrm3pXW3GOhxJFCH30eEVDDFwfj2TB0QiFPnUZ
O7ZsjZHpCoW77SldH8BspSuFSqAhbnNHeG7mU+5LQB/bZYLrbHyIwbSO1LgMV4PN
2x7OltUYULYfXg==
-----END CERTIFICATE-----