Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          qBO6iBxk9ETSQrlovYfekXIreC8JvTs9wSaRRCjmVBU=
Subject key identifier:   53:D8:94:19:F6:38:4B:BD:49:56:15:82:9D:31:9F:F6:8E:8B:F6:2B
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       0193553FAFFDD5C14AFD367C3E5BD268DAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          0C85
Signing time:             Fri 22 Nov 2024 19:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:57 +0000
Files and hashes:         1: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: TmfYCUbGYu1+7ktI8H+b/zXKjKpNF5Zugwl12MRLi3w=)
                          2: Seb5rPab5xtCbQegNJU_L3HuXOE.roa (hash: yZk8kPZ9OKX3DHzQOAO4BANuXdUjoCHf+djtzQySF2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:af:fd:d5:c1:4a:fd:36:7c:3e:5b:d2:68:da:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Nov 22 19:00:57 2024 GMT
            Not After : Nov 23 19:00:57 2024 GMT
        Subject: CN=53d89419f6384bbd495615829d319ff68e8bf62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:4f:1b:98:14:4c:50:cf:a4:9e:de:81:5b:
                    f5:43:86:8d:5f:cd:e8:1d:2a:e4:e0:ea:23:18:ac:
                    48:ec:3a:6a:a6:8b:6a:a8:d2:c3:65:45:25:55:b3:
                    0f:6b:04:57:f0:60:c9:28:2d:1e:83:a6:c8:84:3a:
                    39:cc:03:c3:06:26:84:c2:71:48:3d:9b:ed:8a:40:
                    7a:99:df:58:92:81:33:af:75:8d:46:0b:e5:af:d9:
                    dd:fe:53:75:b6:6c:53:cc:61:b4:cd:a6:37:7e:ed:
                    07:1a:df:73:3f:a3:eb:3c:eb:f8:a0:46:21:da:b0:
                    1b:37:86:84:75:d0:0c:43:40:6c:2b:60:19:cb:ff:
                    9b:41:67:3d:27:b6:12:55:e6:ae:e4:88:18:48:85:
                    bc:f1:91:fc:b6:1b:04:08:9e:bb:36:05:ed:86:52:
                    ae:eb:20:28:15:3d:80:76:6a:89:fd:88:82:37:23:
                    1c:da:91:67:74:a9:94:1d:da:a1:ee:7b:46:19:bb:
                    3f:6e:3f:45:ce:3d:71:0e:f1:a3:0e:32:a0:5c:c8:
                    49:2c:02:15:b1:82:c6:e6:46:54:7c:6b:c7:b9:24:
                    ac:35:5b:92:11:79:9a:7d:46:b5:0f:b7:d3:e6:2a:
                    e1:b7:e5:5f:9e:d3:aa:1a:ad:6e:91:4a:90:24:af:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D8:94:19:F6:38:4B:BD:49:56:15:82:9D:31:9F:F6:8E:8B:F6:2B
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:29:df:59:0a:25:5f:02:6e:fe:8e:b5:e5:f5:dd:28:6a:7a:
         d6:cf:9c:da:24:1a:70:b7:5e:b2:99:8b:b8:38:ad:16:18:1e:
         17:29:a6:dd:26:ad:01:f5:11:3f:a9:b5:71:5c:3a:79:05:fc:
         18:44:13:ff:f0:e9:95:be:e8:1d:69:c6:bc:b8:9b:10:59:cb:
         f7:e6:11:92:49:34:d8:25:b5:a4:7d:09:6b:e2:b1:bc:66:37:
         ca:dc:71:e7:c5:8c:20:8f:7d:73:6f:31:e6:36:9e:01:84:eb:
         10:ed:07:3b:33:90:2e:ca:55:5e:af:d2:d2:d7:87:c3:12:76:
         02:19:de:d2:91:bd:0e:ed:61:9c:ad:ee:05:1b:df:ee:fc:6d:
         ec:c4:ce:5c:ee:78:e2:c6:95:15:41:a7:0b:48:3f:26:dc:3f:
         34:a5:ca:9d:09:93:b7:30:c3:52:bc:ee:eb:92:6c:3e:9e:03:
         7c:13:01:8c:88:1b:13:5d:17:11:67:06:de:63:32:ac:56:c6:
         27:53:65:73:6e:25:b8:7c:d9:6c:5c:70:bf:48:2b:b3:f6:32:
         03:c3:b8:2f:3c:22:33:ee:9d:92:55:b9:5b:f5:68:c6:52:c1:
         82:5d:9b:b9:5a:3e:e1:84:e1:28:84:8c:9c:5c:e6:71:68:f4:
         21:04:ce:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP6/91cFK/TZ8PlvSaNrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjQxMTIyMTkwMDU3WhcNMjQxMTIzMTkwMDU3WjAzMTEwLwYDVQQD
Eyg1M2Q4OTQxOWY2Mzg0YmJkNDk1NjE1ODI5ZDMxOWZmNjhlOGJmNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArltPG5gUTFDPpJ7egVv1Q4aNX83o
HSrk4OojGKxI7DpqpotqqNLDZUUlVbMPawRX8GDJKC0eg6bIhDo5zAPDBiaEwnFI
PZvtikB6md9YkoEzr3WNRgvlr9nd/lN1tmxTzGG0zaY3fu0HGt9zP6PrPOv4oEYh
2rAbN4aEddAMQ0BsK2AZy/+bQWc9J7YSVeau5IgYSIW88ZH8thsECJ67NgXthlKu
6yAoFT2AdmqJ/YiCNyMc2pFndKmUHdqh7ntGGbs/bj9Fzj1xDvGjDjKgXMhJLAIV
sYLG5kZUfGvHuSSsNVuSEXmafUa1D7fT5irht+VfntOqGq1ukUqQJK/3bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPYlBn2OEu9SVYVgp0xn/aOi/YrMB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFynfWQol
XwJu/o615fXdKGp61s+c2iQacLdespmLuDitFhgeFymm3SatAfURP6m1cVw6eQX8
GEQT//Dplb7oHWnGvLibEFnL9+YRkkk02CW1pH0Ja+KxvGY3ytxx58WMII99c28x
5jaeAYTrEO0HOzOQLspVXq/S0teHwxJ2Ahne0pG9Du1hnK3uBRvf7vxt7MTOXO54
4saVFUGnC0g/Jtw/NKXKnQmTtzDDUrzu65JsPp4DfBMBjIgbE10XEWcG3mMyrFbG
J1Nlc24luHzZbFxwv0grs/YyA8O4LzwiM+6dklW5W/VoxlLBgl2buVo+4YThKISM
nFzmcWj0IQTOug==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:48 2024 by rpki-client on console-ams.rpki-client.org