Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          5EiIS338peTb9IQg+KNqSvvHL/ZKFK4/woKd/aIHEyk=
Subject key identifier:   2A:06:16:91:1F:18:6A:DA:6E:5C:FE:8B:BA:66:27:1C:5D:9E:87:5D
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       0193572DDDF52FA3F3E95D6AB86C78977C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 04:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:43 +0000
Files and hashes:         1: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: 3atdMHxjIRkoo7tOS/C1fn0itK0oG0/dn/A8ZNQYwy4=)
                          2: UWypJWf4J4k9A_J6gVeA-b9z9sk.roa (hash: sXu2FsZ8aNEwl2Qe5PNKlL5rlGRmKgG1nVRFIIUn15c=)
                          3: Z2vQZMuJvo8_IA5P7Jfll_LkK2o.roa (hash: 3XN4ihVUuxK87Qp8zXzGKFUOlEqqoH1ObBsF0ZB3Cj8=)
                          4: j-I7BfJcK5RMRmos0eGWPDPOK8Y.roa (hash: 3AKuVbl1J6qOsuyHHtgC700+ZVrgE2L7wiDy2STenho=)
                          5: psUvVyJfkvggd6FqAc4CYtFz-bQ.roa (hash: JEKQYTfqNn+O+OC9ulS9dSLGE06OJ5surhL9ty6Vwvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:dd:f5:2f:a3:f3:e9:5d:6a:b8:6c:78:97:7c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Nov 23 04:00:43 2024 GMT
            Not After : Nov 24 04:00:43 2024 GMT
        Subject: CN=2a0616911f186ada6e5cfe8bba66271c5d9e875d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:f0:c3:7a:b1:5c:14:af:86:f8:de:ae:63:
                    28:9c:81:b1:df:62:38:bd:8c:77:7b:2e:61:fc:a9:
                    bf:d0:f0:1c:60:81:1c:36:39:1a:43:96:ea:b7:dd:
                    fb:63:38:71:55:55:dc:a2:f3:22:da:74:d8:b0:13:
                    76:12:b0:b7:5b:07:5d:18:09:0d:33:7f:a9:c7:3c:
                    26:0d:2e:3b:7b:86:d1:89:ed:b8:2a:60:43:c1:92:
                    7b:44:67:0f:9b:bc:e9:15:47:3f:99:a8:63:21:c3:
                    dc:bd:16:87:d4:3d:94:a1:0d:ec:5b:ae:80:10:bc:
                    f8:3d:87:eb:8e:f8:4a:20:77:7f:11:60:11:2c:51:
                    1f:74:26:93:5a:8d:26:dc:09:85:47:ce:2b:72:3e:
                    86:d0:79:7c:d4:2b:23:b9:5b:4f:3b:c0:30:e8:f6:
                    aa:81:2c:9c:97:db:26:fd:fe:0c:61:3d:01:0d:89:
                    00:1b:07:7b:ef:d6:b7:a1:9b:6f:80:82:17:8a:a6:
                    9b:49:78:1b:9a:1e:92:bd:57:b3:af:a6:57:47:65:
                    b1:8e:58:06:e2:24:2f:72:56:43:20:fe:aa:c0:d3:
                    1a:02:f6:14:9d:b1:da:bc:41:27:68:4c:81:f8:ca:
                    9e:ef:0d:ef:1b:f3:62:b1:58:15:c8:3c:a6:de:36:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:06:16:91:1F:18:6A:DA:6E:5C:FE:8B:BA:66:27:1C:5D:9E:87:5D
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:69:00:ce:29:92:4c:37:0d:62:e1:ad:39:ef:36:df:1d:82:
         3c:aa:9f:76:65:cd:ec:17:6f:f4:ee:1c:3a:6b:5e:59:ed:bc:
         d6:a3:ab:35:22:03:19:ee:b0:eb:d6:2d:56:d9:b9:5c:07:52:
         e5:7c:dc:5b:f9:28:52:e2:7e:d7:5a:4a:b0:6c:88:1d:7b:59:
         db:79:7b:e1:93:63:ed:df:e1:df:cf:50:ca:07:f8:b1:17:a8:
         19:fa:37:51:bf:76:45:a0:06:37:38:53:f7:ba:29:7d:ca:66:
         42:d5:bd:7a:09:35:41:a0:67:ca:fd:57:56:6f:c9:1b:7b:54:
         14:18:69:0b:68:8a:32:49:7a:b5:7e:97:4f:9b:6a:7b:31:9a:
         fe:74:8d:44:90:35:97:73:df:4c:80:07:fb:7a:93:7f:17:48:
         b3:da:e5:60:15:bf:70:d5:16:90:02:7d:3f:6d:a7:3f:01:16:
         7b:62:bf:65:de:de:1d:cb:4b:40:6e:e4:d1:d8:be:ae:f4:72:
         df:cb:1c:f1:7e:f2:c6:96:51:4f:7f:cb:75:b8:16:2f:2c:b1:
         17:1c:b5:2b:b4:89:41:e8:e3:98:c9:3d:45:0a:f4:9b:06:b7:
         58:9a:f0:2d:2a:51:f3:4c:e8:7e:08:36:b4:81:de:0c:ce:74:
         fb:bb:1e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLd31L6Pz6V1quGx4l3waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjQxMTIzMDQwMDQzWhcNMjQxMTI0MDQwMDQzWjAzMTEwLwYDVQQD
EygyYTA2MTY5MTFmMTg2YWRhNmU1Y2ZlOGJiYTY2MjcxYzVkOWU4NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32bww3qxXBSvhvjermMonIGx32I4
vYx3ey5h/Km/0PAcYIEcNjkaQ5bqt937YzhxVVXcovMi2nTYsBN2ErC3WwddGAkN
M3+pxzwmDS47e4bRie24KmBDwZJ7RGcPm7zpFUc/mahjIcPcvRaH1D2UoQ3sW66A
ELz4PYfrjvhKIHd/EWARLFEfdCaTWo0m3AmFR84rcj6G0Hl81CsjuVtPO8Aw6Paq
gSycl9sm/f4MYT0BDYkAGwd779a3oZtvgIIXiqabSXgbmh6SvVezr6ZXR2WxjlgG
4iQvclZDIP6qwNMaAvYUnbHavEEnaEyB+Mqe7w3vG/NisVgVyDym3jaoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoGFpEfGGrablz+i7pmJxxdnoddMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2kAzimS
TDcNYuGtOe823x2CPKqfdmXN7Bdv9O4cOmteWe281qOrNSIDGe6w69YtVtm5XAdS
5XzcW/koUuJ+11pKsGyIHXtZ23l74ZNj7d/h389Qygf4sReoGfo3Ub92RaAGNzhT
97opfcpmQtW9egk1QaBnyv1XVm/JG3tUFBhpC2iKMkl6tX6XT5tqezGa/nSNRJA1
l3PfTIAH+3qTfxdIs9rlYBW/cNUWkAJ9P22nPwEWe2K/Zd7eHctLQG7k0di+rvRy
38sc8X7yxpZRT3/LdbgWLyyxFxy1K7SJQejjmMk9RQr0mwa3WJrwLSpR80zofgg2
tIHeDM50+7seqw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:39 2024 by rpki-client on console-fra.rpki-client.org