Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          f/g31Suy1n1yQEY2Z+Q+0fNVXLpdVxX6v7VwetbpyME=
Subject key identifier:   7C:6C:C1:CB:12:7B:89:73:86:15:BE:2C:84:59:AF:2F:AB:B7:C8:11
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       019358ADF91D02A91175EE298B9556FC1309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          13DC
Signing time:             Sat 23 Nov 2024 11:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:16 +0000
Files and hashes:         1: 5lVTztc6kXPBUoo7SKJunUNJjAU.roa (hash: Mnwh9m/kbzJIiSSaY92k5RkWj4gcugLdCDIhGIgItpg=)
                          2: UfyvRqFQ443XR7JE0YlCsyUfoNI.roa (hash: 10a9zl5nqJqJcV9IYRmBTA5j4X45PZnIzqkf0M5Z21E=)
                          3: aCvb0EYuYDj917tVsHZl5tKwyMM.roa (hash: HSCt0AHMCiiQfNtI12iUCMjviq3LK8fcb4NX1CEPrh8=)
                          4: qacPbiq8ActYewxMVy9fz7utAlo.roa (hash: bTtpufeDvQ6jUVMy6a/7ImnA+/428DIXQPk3NNBBOlU=)
                          5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: OrMqGvApu47W7WDL2hq/J4eAX+QUJCgsL0rwlw339qQ=)
                          6: rtZ4z4VIUE6AGqC28Z0-sdhBbc4.roa (hash: IqsHa7pX0ZgO7sJ6iQiHcy01n1SFlB/FJ9k6LLrSVpc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ad:f9:1d:02:a9:11:75:ee:29:8b:95:56:fc:13:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Nov 23 11:00:16 2024 GMT
            Not After : Nov 24 11:00:16 2024 GMT
        Subject: CN=7c6cc1cb127b89738615be2c8459af2fabb7c811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:6f:c9:3e:90:8a:d8:34:3e:53:e6:e0:28:
                    01:31:77:3d:32:4b:6c:ad:bb:36:f0:8a:6a:98:b8:
                    d0:89:ed:f3:ee:fe:b3:7c:6f:7a:7f:41:08:5c:94:
                    3b:c6:a8:06:c3:61:57:dc:2b:4a:d8:1f:af:24:2f:
                    1b:9f:84:ea:3e:2f:96:1d:3f:90:71:e0:30:84:d6:
                    3d:bf:06:0b:5c:0a:91:64:6d:77:4d:58:fc:db:fc:
                    33:d5:0f:5e:ea:e7:c8:e8:40:da:32:a0:31:94:78:
                    11:a7:7a:66:08:c6:f5:42:55:e7:b8:57:26:54:5b:
                    41:1f:b7:c6:1a:86:64:4c:51:38:1b:8b:fa:c5:a5:
                    c0:03:5f:40:d9:a0:19:e4:75:3e:83:3a:cb:3b:79:
                    ae:d4:e6:0c:47:c8:3c:6e:80:40:82:b1:fe:d9:f4:
                    30:f4:ad:77:82:fb:19:66:3c:f8:92:d5:27:ac:1f:
                    f0:9e:c5:69:81:a7:0f:1f:6c:95:4c:bb:0f:81:56:
                    4a:73:19:65:a2:3f:59:ea:ad:13:89:b1:8f:e0:7a:
                    17:79:3c:64:d7:08:80:29:2b:6f:f8:17:1a:69:32:
                    d0:22:95:5b:1d:e3:fd:03:e8:35:3d:36:d9:5b:15:
                    39:67:1d:54:ff:48:1d:f9:b3:26:c4:98:87:6c:d7:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:C1:CB:12:7B:89:73:86:15:BE:2C:84:59:AF:2F:AB:B7:C8:11
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:1d:3d:bc:8c:70:62:b6:a3:a7:0d:16:d7:f5:6a:d6:93:
         26:23:2a:69:99:ab:94:0b:27:43:d1:e3:63:0d:aa:76:00:fa:
         7d:dc:20:e1:94:88:3c:5d:5f:e4:1c:67:93:9d:c1:6c:d9:70:
         88:0c:89:30:38:b2:54:ea:23:7b:9c:12:83:71:88:8f:0e:80:
         77:61:7f:fd:46:ff:bf:40:e7:04:e0:6c:28:73:c9:fd:4f:a5:
         7b:04:bc:3d:a1:d0:47:34:67:c6:17:37:a3:9e:c8:06:d7:42:
         24:4c:fe:d7:10:77:9f:cc:7f:8f:56:87:e7:9f:87:0d:10:df:
         f4:e0:2c:19:64:0c:51:62:b2:7d:84:4b:19:da:30:ab:3b:dd:
         29:51:7f:33:57:07:eb:b5:66:fe:9e:0d:c5:7c:e3:d0:0b:a3:
         00:d7:9d:d0:8e:ad:81:83:a8:9e:19:81:96:e8:cf:b9:83:d9:
         29:87:af:45:cf:89:7d:3c:46:3a:40:f0:6e:93:4c:ad:40:7d:
         5d:c7:75:37:58:7e:5a:7a:c8:de:97:6e:71:44:ca:f7:54:ca:
         dd:92:f1:33:d6:f3:2c:00:04:1b:f9:57:c3:dc:96:68:87:f8:
         22:fe:53:2f:f8:12:c6:17:db:6f:27:f3:d4:61:3f:92:e2:08:
         17:ff:46:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYrfkdAqkRde4pi5VW/BMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjQxMTIzMTEwMDE2WhcNMjQxMTI0MTEwMDE2WjAzMTEwLwYDVQQD
Eyg3YzZjYzFjYjEyN2I4OTczODYxNWJlMmM4NDU5YWYyZmFiYjdjODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjtvyT6Qitg0PlPm4CgBMXc9Mkts
rbs28IpqmLjQie3z7v6zfG96f0EIXJQ7xqgGw2FX3CtK2B+vJC8bn4TqPi+WHT+Q
ceAwhNY9vwYLXAqRZG13TVj82/wz1Q9e6ufI6EDaMqAxlHgRp3pmCMb1QlXnuFcm
VFtBH7fGGoZkTFE4G4v6xaXAA19A2aAZ5HU+gzrLO3mu1OYMR8g8boBAgrH+2fQw
9K13gvsZZjz4ktUnrB/wnsVpgacPH2yVTLsPgVZKcxlloj9Z6q0TibGP4HoXeTxk
1wiAKStv+BcaaTLQIpVbHeP9A+g1PTbZWxU5Zx1U/0gd+bMmxJiHbNdUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxswcsSe4lzhhW+LIRZry+rt8gRMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL8dPbyM
cGK2o6cNFtf1ataTJiMqaZmrlAsnQ9HjYw2qdgD6fdwg4ZSIPF1f5Bxnk53BbNlw
iAyJMDiyVOoje5wSg3GIjw6Ad2F//Ub/v0DnBOBsKHPJ/U+lewS8PaHQRzRnxhc3
o57IBtdCJEz+1xB3n8x/j1aH55+HDRDf9OAsGWQMUWKyfYRLGdowqzvdKVF/M1cH
67Vm/p4NxXzj0AujANed0I6tgYOonhmBlujPuYPZKYevRc+JfTxGOkDwbpNMrUB9
Xcd1N1h+WnrI3pducUTK91TK3ZLxM9bzLAAEG/lXw9yWaIf4Iv5TL/gSxhfbbyfz
1GE/kuIIF/9GEw==
-----END CERTIFICATE-----