Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
File:                     gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json)
Hash identifier:          ina0YyBnxeJ39uRDwWHl9g0hnwpn+58XpOpuEn00f4s=
Subject key identifier:   14:28:9F:36:8C:6C:2F:D3:87:51:CB:07:3D:AA:90:DD:74:7C:75:77
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Certificate issuer:       /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial:       01936B227892A1C0CCD94B0680958E1D9CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
Manifest number:          05BA
Signing time:             Wed 27 Nov 2024 01:00:41 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:41 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:41 +0000
Files and hashes:         1: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: DlWCx8u4zvZS5fHxg37GJBUpATIoVeugZQ4MmC4y3+0=)
                          2: vpmB5uxofGV9voGf1u33PSs0PFE.roa (hash: /RI7xbJHRGoQkccLubfNShh0gpEnFmo91a7sc0u/LJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:78:92:a1:c0:cc:d9:4b:06:80:95:8e:1d:9c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
        Validity
            Not Before: Nov 27 01:00:41 2024 GMT
            Not After : Nov 28 01:00:41 2024 GMT
        Subject: CN=14289f368c6c2fd38751cb073daa90dd747c7577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:2a:96:df:99:1f:65:2e:a4:0d:b7:13:92:
                    31:c0:12:8a:bf:77:b8:ed:40:9d:ae:45:e0:18:35:
                    d7:6c:ef:49:58:05:1a:f2:71:f8:0f:f9:bb:df:72:
                    89:6e:83:c8:fd:cb:71:fb:8e:56:4f:97:7e:72:e8:
                    e7:26:3d:9e:4f:82:78:34:3e:88:1a:6a:50:f1:76:
                    2b:33:24:d1:1c:91:f6:44:02:6a:79:2b:ef:72:6e:
                    f1:f5:d4:f8:e8:d6:3e:c6:c0:ef:ba:3b:30:cc:b3:
                    6f:9b:74:49:d7:8b:9b:d5:6a:95:1f:73:77:f2:55:
                    d7:f2:a5:4e:b5:1a:9a:8b:ee:01:78:e6:c9:3d:7c:
                    ff:ac:ca:cf:a5:61:c4:72:8a:58:71:b6:99:b5:7a:
                    c2:95:c7:83:c9:fd:d3:9d:dc:c5:19:5e:56:0a:85:
                    78:fc:54:dc:93:82:ec:a0:a8:14:68:b3:05:ef:ef:
                    c3:b3:4b:a2:60:1e:ac:68:3f:d3:46:87:1c:b3:f3:
                    f1:c1:4b:5c:ec:b0:24:58:4b:49:90:76:ac:70:72:
                    46:52:1b:29:d4:1e:44:a2:18:a2:2c:82:10:60:5c:
                    63:51:0a:9d:b8:5d:29:26:25:39:9b:2b:3d:62:ae:
                    90:24:4c:42:04:91:fe:44:39:44:af:1a:67:61:70:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:28:9F:36:8C:6C:2F:D3:87:51:CB:07:3D:AA:90:DD:74:7C:75:77
            X509v3 Authority Key Identifier:
                keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:61:23:0d:a8:cb:e8:87:ca:f8:d5:5c:68:00:f9:7f:dc:
         7e:03:ad:fb:1a:85:11:fb:6b:b8:b2:54:eb:02:e9:bc:0f:4d:
         d8:55:05:2f:fa:d7:af:8b:b0:94:4b:33:f3:20:4c:7c:00:af:
         69:84:63:a4:fc:f0:d2:f7:d2:44:e1:2b:1f:31:be:fe:4c:38:
         64:72:2f:eb:4f:e8:30:b0:89:0f:77:07:e2:f7:d3:e0:b1:0c:
         f9:8f:41:49:09:21:e6:04:36:d2:aa:6e:1c:aa:ba:52:0f:34:
         b7:40:39:53:ed:7f:20:ce:ce:3c:80:e4:f2:ed:48:e6:29:ee:
         e3:5b:10:0f:c4:b9:68:7c:ca:4e:61:56:7f:ae:3c:9d:f8:d0:
         90:72:0d:03:58:1e:bf:6e:8f:7f:a3:da:b4:56:08:06:9e:06:
         99:ab:50:5f:3d:5d:38:c0:4a:be:e0:cd:a3:ba:7d:1e:68:14:
         91:4e:f4:09:2f:27:8a:eb:15:17:9b:41:e8:5b:5a:1b:15:95:
         b8:34:52:ee:a9:cf:65:d6:b5:dd:a7:f1:12:1d:53:f1:af:2c:
         3e:48:0f:ff:4b:b3:55:2a:fb:62:38:54:1c:9e:94:57:2d:ea:
         35:5b:7a:46:c3:d7:f3:c6:07:94:20:58:59:d5:cf:6c:1f:d8:
         36:cb:f3:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIniSocDM2UsGgJWOHZz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzQ4NjFkZGVmMDZhMDczNTIzYzk5MzkxNjhkNWI3MTY5
ZDY4NzUwHhcNMjQxMTI3MDEwMDQxWhcNMjQxMTI4MDEwMDQxWjAzMTEwLwYDVQQD
EygxNDI4OWYzNjhjNmMyZmQzODc1MWNiMDczZGFhOTBkZDc0N2M3NTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHQqlt+ZH2UupA23E5IxwBKKv3e4
7UCdrkXgGDXXbO9JWAUa8nH4D/m733KJboPI/ctx+45WT5d+cujnJj2eT4J4ND6I
GmpQ8XYrMyTRHJH2RAJqeSvvcm7x9dT46NY+xsDvujswzLNvm3RJ14ub1WqVH3N3
8lXX8qVOtRqai+4BeObJPXz/rMrPpWHEcopYcbaZtXrClceDyf3TndzFGV5WCoV4
/FTck4LsoKgUaLMF7+/Ds0uiYB6saD/TRoccs/PxwUtc7LAkWEtJkHascHJGUhsp
1B5EohiiLIIQYFxjUQqduF0pJiU5mys9Yq6QJExCBJH+RDlErxpnYXBjIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQonzaMbC/Th1HLBz2qkN10fHV3MB8GA1UdIwQY
MBaAFIF0hh3e8GoHNSPJk5Fo1bcWnWh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYmQxNWEtNGM0OS00MGZjLTkxOTIt
YjJhNDdlZDQxNmIyLzEvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYmQxNWEtNGM0OS00MGZjLTkxOTItYjJhNDdlZDQxNmIy
LzEvZ1hTR0hkN3dhZ2MxSThtVGtXalZ0eGFkYUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw9hIw2o
y+iHyvjVXGgA+X/cfgOt+xqFEftruLJU6wLpvA9N2FUFL/rXr4uwlEsz8yBMfACv
aYRjpPzw0vfSROErHzG+/kw4ZHIv60/oMLCJD3cH4vfT4LEM+Y9BSQkh5gQ20qpu
HKq6Ug80t0A5U+1/IM7OPIDk8u1I5inu41sQD8S5aHzKTmFWf648nfjQkHINA1ge
v26Pf6PatFYIBp4GmatQXz1dOMBKvuDNo7p9HmgUkU70CS8niusVF5tB6FtaGxWV
uDRS7qnPZda13afxEh1T8a8sPkgP/0uzVSr7YjhUHJ6UVy3qNVt6RsPX88YHlCBY
WdXPbB/YNsvz5Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:03 2024 by rpki-client on console-fra.rpki-client.org