Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File:                     al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier:          ZJcjr6lVoJGTMxnjqaMugduwv6SJqI9EexRXOgOnZz0=
Subject key identifier:   28:FE:42:F0:AA:BF:EC:7D:C6:8E:2B:9E:E0:49:C0:42:39:F1:E3:2B
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer:       /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial:       019356F694C845479237DD58EDB3DD798707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number:          1302
Signing time:             Sat 23 Nov 2024 03:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:20 +0000
Files and hashes:         1: acgNHn3NDFSibEMSVIeJfy12OrI.roa (hash: 3noDiwXbc9+G2e4tdlDTuzo/AfsAPbx3axFcJuQj/N8=)
                          2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: embyDkk+ate+g44EPFv1Ufnh3oDVvXUSoxwAMicIRjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:94:c8:45:47:92:37:dd:58:ed:b3:dd:79:87:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
        Validity
            Not Before: Nov 23 03:00:20 2024 GMT
            Not After : Nov 24 03:00:20 2024 GMT
        Subject: CN=28fe42f0aabfec7dc68e2b9ee049c04239f1e32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:24:f9:6e:c7:a6:f4:7c:23:ae:cb:d6:2e:51:
                    92:94:a5:24:7d:2a:51:da:8c:36:18:ea:4c:cb:34:
                    15:ed:f2:77:94:55:75:98:9a:5f:c4:ff:83:46:7d:
                    f9:e1:46:16:d8:0d:ce:39:82:7e:f5:7e:a3:dd:18:
                    f9:59:b8:fd:23:51:e9:03:2f:22:4d:c5:81:d9:7c:
                    08:10:27:c8:c6:3d:f5:e8:14:0d:c2:65:c3:8f:21:
                    12:2c:54:ee:85:2a:44:94:e0:99:fb:c0:c3:b1:b3:
                    e8:39:60:6b:44:ef:d0:09:63:9f:f0:7a:11:2b:30:
                    80:10:b6:4b:dc:57:ac:cd:3d:b9:95:08:5e:dc:67:
                    2f:3e:77:9a:3c:9f:d5:06:3f:79:b6:05:75:c9:62:
                    23:bd:42:5b:95:5c:25:ae:78:67:9c:4c:f0:5a:b5:
                    4b:10:f7:11:e5:50:34:37:e8:5e:51:5e:f8:f2:f1:
                    da:dd:32:3d:7c:59:b6:35:5c:ac:b9:6b:d7:ec:5f:
                    6c:2f:09:4d:b3:10:52:ec:c5:3f:94:39:22:2d:6a:
                    1b:e3:24:67:c4:87:3b:29:8b:29:1f:1f:0e:25:fb:
                    8c:72:9e:ea:d8:4d:29:db:61:24:b7:2d:00:60:b8:
                    92:cd:79:c6:da:91:8a:6e:c5:a7:73:fe:08:d1:5a:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:42:F0:AA:BF:EC:7D:C6:8E:2B:9E:E0:49:C0:42:39:F1:E3:2B
            X509v3 Authority Key Identifier:
                keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:19:75:e9:8b:37:2b:f4:a6:a0:7b:d0:d2:c3:09:bf:a8:25:
         85:4b:f0:62:0a:c5:4e:4a:37:62:98:5d:63:49:1a:95:94:1e:
         67:9d:86:72:9e:c0:c3:62:13:25:76:af:70:6c:0b:98:5a:9e:
         e3:05:92:2e:b2:42:d3:20:86:7e:48:36:96:2d:c3:cb:6b:11:
         45:11:6c:da:aa:1d:70:5c:85:ab:4d:5f:00:8c:79:81:09:2b:
         98:7c:7c:5c:e2:b8:f0:37:c9:7d:d4:bc:09:ca:8f:56:bf:27:
         e1:06:0a:cb:de:06:7c:c8:b6:f4:6e:af:2b:2b:37:35:8d:43:
         f8:59:b9:84:1a:70:8b:3a:32:ce:10:56:f8:0c:2d:b5:84:02:
         0d:6e:29:69:39:5f:5d:2a:05:14:af:ff:80:ed:12:96:2f:c8:
         41:35:df:5c:91:7a:9a:00:97:84:af:1b:21:2f:8c:12:1f:8c:
         7b:6c:55:11:00:a5:41:93:b6:a0:47:fb:b3:f3:f7:bb:62:47:
         7d:f6:fd:a6:3d:2a:43:24:f1:fe:b4:34:a0:b9:c9:5f:3b:a2:
         62:9a:d8:ed:9f:34:dd:69:4e:ac:79:aa:f6:be:ea:94:68:09:
         67:8f:30:84:35:ee:26:74:86:ef:f0:b9:2d:01:49:58:75:b1:
         89:47:2b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9pTIRUeSN91Y7bPdeYcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNWQ0MTBmNDI1ZDM1ZTc0ZDQ1NmY3Zjg3YmFlOGVkOTJi
M2M4MjkwHhcNMjQxMTIzMDMwMDIwWhcNMjQxMTI0MDMwMDIwWjAzMTEwLwYDVQQD
EygyOGZlNDJmMGFhYmZlYzdkYzY4ZTJiOWVlMDQ5YzA0MjM5ZjFlMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhST5bsem9HwjrsvWLlGSlKUkfSpR
2ow2GOpMyzQV7fJ3lFV1mJpfxP+DRn354UYW2A3OOYJ+9X6j3Rj5Wbj9I1HpAy8i
TcWB2XwIECfIxj316BQNwmXDjyESLFTuhSpElOCZ+8DDsbPoOWBrRO/QCWOf8HoR
KzCAELZL3FeszT25lQhe3GcvPneaPJ/VBj95tgV1yWIjvUJblVwlrnhnnEzwWrVL
EPcR5VA0N+heUV748vHa3TI9fFm2NVysuWvX7F9sLwlNsxBS7MU/lDkiLWob4yRn
xIc7KYspHx8OJfuMcp7q2E0p22Ekty0AYLiSzXnG2pGKbsWnc/4I0VqrUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj+QvCqv+x9xo4rnuBJwEI58eMrMB8GA1UdIwQY
MBaAFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt
NjkzNGNhZmI2YmNkLzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk
LzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRl16Ys3
K/SmoHvQ0sMJv6glhUvwYgrFTko3YphdY0kalZQeZ52Gcp7Aw2ITJXavcGwLmFqe
4wWSLrJC0yCGfkg2li3Dy2sRRRFs2qodcFyFq01fAIx5gQkrmHx8XOK48DfJfdS8
CcqPVr8n4QYKy94GfMi29G6vKys3NY1D+Fm5hBpwizoyzhBW+AwttYQCDW4paTlf
XSoFFK//gO0Sli/IQTXfXJF6mgCXhK8bIS+MEh+Me2xVEQClQZO2oEf7s/P3u2JH
ffb9pj0qQyTx/rQ0oLnJXzuiYprY7Z803WlOrHmq9r7qlGgJZ48whDXuJnSG7/C5
LQFJWHWxiUcr7w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:00 2024 by rpki-client on console-ams.rpki-client.org