Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File:                     F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier:          0lf5XwiT+/7l3CgHdhaMf2Tofu61Blro1dL3IM7N6Yc=
Subject key identifier:   B0:D2:75:07:37:BC:CF:6F:59:57:00:A0:34:17:6D:39:02:91:BA:60
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer:       /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial:       019406B436C3B6874D45944FDB198B0592A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number:          0687
Signing time:             Fri 27 Dec 2024 06:01:01 +0000
Manifest this update:     Fri 27 Dec 2024 06:01:01 +0000
Manifest next update:     Sat 28 Dec 2024 06:01:01 +0000
Files and hashes:         1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: tfw4b1FAjGsc3uJXE4Tpt3mRvJTjgy0BNul/gmyvH/A=)
                          2: NkbufksIxVJ8T0tvcGLRlO9Uma4.roa (hash: a03cVY5rxZg+Kf1X+HQteTedl3ORnHdR7YPmnlMG7EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:36:c3:b6:87:4d:45:94:4f:db:19:8b:05:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
        Validity
            Not Before: Dec 27 06:01:01 2024 GMT
            Not After : Dec 28 06:01:01 2024 GMT
        Subject: CN=b0d2750737bccf6f595700a034176d390291ba60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:8f:01:60:98:c2:aa:a0:2c:e9:62:d2:04:
                    e6:7f:44:50:27:50:d8:95:f3:93:bd:1f:15:14:ca:
                    84:8b:14:7f:eb:68:53:e1:90:1b:7f:ce:ed:4d:6a:
                    3f:4f:4a:40:96:2b:92:16:b9:29:90:4f:62:f4:45:
                    a8:8d:ba:a2:29:28:b6:29:56:34:09:16:cc:8d:48:
                    fc:3a:09:8b:04:93:68:41:66:a4:e9:2a:09:88:64:
                    d9:ec:e3:cb:a9:9e:ee:3e:b8:35:89:1f:6e:58:fa:
                    e8:1d:52:e7:a6:66:3f:dd:13:89:8e:02:eb:3f:34:
                    5e:d9:69:74:7d:94:b4:16:8d:8e:ff:54:42:58:06:
                    b4:9a:20:2e:e9:d6:f8:8d:29:23:7d:69:26:69:65:
                    10:e4:88:8c:bf:7d:6b:72:78:87:20:74:24:a6:a0:
                    21:6e:74:2f:3c:7f:b1:37:d1:d5:60:a1:4c:94:c1:
                    17:25:34:e4:5c:9f:f9:5d:5e:bf:48:d9:fd:1b:ed:
                    9f:5a:59:3f:43:f6:75:62:44:b2:f9:6c:8b:5c:ca:
                    ca:4e:24:46:98:d1:97:9a:76:10:40:d3:21:fb:28:
                    bb:b4:e0:a6:41:23:d4:a1:27:b5:d2:d0:94:81:b4:
                    89:ad:fd:7f:2e:a8:be:2f:10:69:d1:ca:ea:f4:cd:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D2:75:07:37:BC:CF:6F:59:57:00:A0:34:17:6D:39:02:91:BA:60
            X509v3 Authority Key Identifier:
                keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:10:57:66:cf:0f:a3:91:03:23:ad:d3:f8:12:1b:29:db:
         77:e7:b7:3e:2b:fb:93:12:3b:05:da:a6:23:ff:48:e5:bb:36:
         34:43:f2:82:51:bc:d8:1e:de:9d:01:2c:53:88:4a:d5:37:3e:
         ed:e8:53:7e:73:bf:27:52:70:99:4f:d3:63:ba:4b:4a:84:30:
         2d:dd:fb:bf:11:f3:62:cb:98:0c:05:a0:11:b7:b8:12:c3:56:
         1f:14:c9:96:23:80:7e:e1:83:43:47:0e:ce:63:c3:7a:3e:10:
         54:45:fa:7b:0c:c3:53:2e:2f:d5:24:0c:2c:bb:c3:47:5a:eb:
         4d:1b:26:da:92:1b:1a:7b:ea:fa:c7:6a:3a:f9:3d:5a:53:92:
         64:ae:5d:6c:4e:1d:4e:fd:2c:38:ed:39:ac:21:df:72:f5:99:
         0c:b7:fd:5a:46:74:98:2b:89:77:84:fc:52:8d:d0:a0:df:f8:
         8e:9a:66:2c:c9:9f:fa:96:1e:7c:a3:d3:5d:7b:25:76:37:33:
         03:45:10:bd:5f:b2:d4:17:15:eb:49:66:38:a9:a0:69:5d:98:
         ce:ee:1b:2b:e8:a1:b9:e6:06:d1:86:54:ae:55:00:3b:89:70:
         67:44:0e:85:bb:6f:fd:71:87:c8:1e:04:fe:06:37:a2:d1:e7:
         c8:9f:b9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGtDbDtodNRZRP2xmLBZKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy
ZDZmZjkwHhcNMjQxMjI3MDYwMTAxWhcNMjQxMjI4MDYwMTAxWjAzMTEwLwYDVQQD
EyhiMGQyNzUwNzM3YmNjZjZmNTk1NzAwYTAzNDE3NmQzOTAyOTFiYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzaPAWCYwqqgLOli0gTmf0RQJ1DY
lfOTvR8VFMqEixR/62hT4ZAbf87tTWo/T0pAliuSFrkpkE9i9EWojbqiKSi2KVY0
CRbMjUj8OgmLBJNoQWak6SoJiGTZ7OPLqZ7uPrg1iR9uWProHVLnpmY/3ROJjgLr
PzRe2Wl0fZS0Fo2O/1RCWAa0miAu6db4jSkjfWkmaWUQ5IiMv31rcniHIHQkpqAh
bnQvPH+xN9HVYKFMlMEXJTTkXJ/5XV6/SNn9G+2fWlk/Q/Z1YkSy+WyLXMrKTiRG
mNGXmnYQQNMh+yi7tOCmQSPUoSe10tCUgbSJrf1/Lqi+LxBp0crq9M1yeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDSdQc3vM9vWVcAoDQXbTkCkbpgMB8GA1UdIwQY
MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt
MjI3NTBjZmE2ZWJmLzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm
LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwQQV2bP
D6ORAyOt0/gSGynbd+e3Piv7kxI7BdqmI/9I5bs2NEPyglG82B7enQEsU4hK1Tc+
7ehTfnO/J1JwmU/TY7pLSoQwLd37vxHzYsuYDAWgEbe4EsNWHxTJliOAfuGDQ0cO
zmPDej4QVEX6ewzDUy4v1SQMLLvDR1rrTRsm2pIbGnvq+sdqOvk9WlOSZK5dbE4d
Tv0sOO05rCHfcvWZDLf9WkZ0mCuJd4T8Uo3QoN/4jppmLMmf+pYefKPTXXsldjcz
A0UQvV+y1BcV60lmOKmgaV2Yzu4bK+ihueYG0YZUrlUAO4lwZ0QOhbtv/XGHyB4E
/gY3otHnyJ+56Q==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:09 2024 by rpki-client on console-fra.rpki-client.org