Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File:                     1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier:          vQPLFopOLNeNKOsCAZNz0UwuyRR5lka/T0SfWvUt0GY=
Subject key identifier:   89:73:B9:79:82:D8:46:19:8D:D1:4E:5F:BE:29:B2:88:BA:A7:34:A8
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer:       /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial:       0193587914A2A977DED156DCFF3373EC679C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number:          0E9E
Signing time:             Sat 23 Nov 2024 10:02:30 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:30 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:30 +0000
Files and hashes:         1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: nGzxPPit1A1RpRbw/EnEmH5YVblsePn7B+ZOQxRa6wc=)
                          2: ZBKEUvb9g4hH0W5VyutV1wT7XdQ.roa (hash: t6pB9LZ1otDuRmFWKOEPGbShH3a6F+K9dm5eTn/3Jb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:14:a2:a9:77:de:d1:56:dc:ff:33:73:ec:67:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
        Validity
            Not Before: Nov 23 10:02:30 2024 GMT
            Not After : Nov 24 10:02:30 2024 GMT
        Subject: CN=8973b97982d846198dd14e5fbe29b288baa734a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:79:c4:95:a4:e5:1f:ac:c3:ab:a8:a7:c7:
                    12:07:64:61:8b:e9:ab:d5:0f:8c:8d:6a:f4:a2:e2:
                    a2:3e:d5:6a:58:f9:a0:57:52:ce:8a:53:e0:72:cf:
                    66:46:78:d4:f2:66:75:38:41:f6:3d:48:35:94:df:
                    19:26:7f:83:5e:a0:1e:0c:75:d8:8b:bf:04:41:be:
                    76:45:f3:59:9d:d2:87:29:1c:39:e1:48:ab:ca:37:
                    50:6e:e0:a2:be:27:00:63:90:45:76:12:6b:33:36:
                    89:b2:87:42:b6:fc:cc:2c:1c:c7:f6:e5:fc:97:56:
                    11:0f:7c:0b:93:93:ca:1e:9a:5b:7f:95:89:34:81:
                    48:9d:d8:e7:fa:92:65:0d:ce:d7:5f:ff:5e:33:92:
                    55:6e:80:d1:a0:24:11:9a:0d:4e:5c:54:fa:0f:86:
                    ab:5b:13:68:02:96:72:67:7c:75:67:0e:16:eb:59:
                    f8:78:8b:af:2f:0d:39:fd:a5:cc:e1:4f:93:8b:c9:
                    a3:a5:1c:8a:79:90:a1:a1:3e:92:47:a3:bf:be:4b:
                    53:1d:6f:61:eb:35:0a:d3:c6:ed:96:6b:67:2f:0f:
                    87:c3:43:92:a8:45:0e:19:a3:c2:53:99:29:58:b0:
                    4c:36:ae:77:a5:17:e2:e3:7b:3b:f2:15:5f:0b:22:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:73:B9:79:82:D8:46:19:8D:D1:4E:5F:BE:29:B2:88:BA:A7:34:A8
            X509v3 Authority Key Identifier:
                keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:87:d6:36:df:75:56:51:a5:46:96:f1:f9:91:f3:61:58:
         c9:9a:42:f1:52:30:fe:0a:b9:9e:8b:21:d3:54:48:b0:67:f9:
         d5:b1:15:51:7d:d3:6d:5d:af:6b:74:12:5b:19:47:a0:7f:a1:
         bf:29:2d:b2:60:f1:2b:ad:97:63:d2:0e:f2:3e:d3:6a:4a:35:
         fc:11:96:cc:8e:cc:4a:fb:dd:bf:05:00:77:35:0a:6d:77:10:
         de:ec:54:48:71:55:2e:14:90:7b:21:57:0b:06:c2:df:f8:f3:
         f7:bc:09:6d:a8:b3:d9:ef:25:23:64:01:3b:1d:43:01:bf:85:
         e5:60:44:69:07:23:6c:2c:ea:90:4e:dc:c8:5f:97:fb:87:c1:
         7c:ea:26:44:1d:8c:32:12:75:d0:0c:08:02:57:2c:b9:b6:23:
         2c:18:0a:3b:9f:b8:15:a7:b5:7d:fe:08:bf:b0:30:66:7d:e2:
         d5:f2:1b:cd:e1:c6:c0:bd:e5:d2:e1:36:ae:ca:7d:7b:9b:36:
         5f:73:b8:dc:ea:db:99:d0:09:df:2b:a8:49:91:2a:eb:16:fc:
         0a:88:bc:eb:4b:53:d8:dd:6b:80:3e:07:97:46:6f:91:5e:a9:
         04:e7:b9:2a:37:69:d0:76:0f:da:c3:32:c0:3c:03:29:1d:38:
         ba:4d:aa:b3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNYeRSiqXfe0Vbc/zNz7GecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2FhNzk3YjkwMGZjMzU1ZmMyNDEyNDY3NzUxZWViMmMx
YzY0YmUwHhcNMjQxMTIzMTAwMjMwWhcNMjQxMTI0MTAwMjMwWjAzMTEwLwYDVQQD
Eyg4OTczYjk3OTgyZDg0NjE5OGRkMTRlNWZiZTI5YjI4OGJhYTczNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDR5xJWk5R+sw6uop8cSB2Rhi+mr
1Q+MjWr0ouKiPtVqWPmgV1LOilPgcs9mRnjU8mZ1OEH2PUg1lN8ZJn+DXqAeDHXY
i78EQb52RfNZndKHKRw54UiryjdQbuCivicAY5BFdhJrMzaJsodCtvzMLBzH9uX8
l1YRD3wLk5PKHppbf5WJNIFIndjn+pJlDc7XX/9eM5JVboDRoCQRmg1OXFT6D4ar
WxNoApZyZ3x1Zw4W61n4eIuvLw05/aXM4U+Ti8mjpRyKeZChoT6SR6O/vktTHW9h
6zUK08btlmtnLw+Hw0OSqEUOGaPCU5kpWLBMNq53pRfi43s78hVfCyL6YwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIlzuXmC2EYZjdFOX74psoi6pzSoMB8GA1UdIwQY
MBaAFPjKp5e5APw1X8JBJGd1HussHGS+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NcW5sN2tBX0RWZndrRWtaM1VlNnl3Y1pMNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWI1NWNmLWJlOTQtNDlhZC05ZWI4
LTlkYjNkNDRjNmQyZi8xLzEtTXFubDdrQV9EVmZ3a0VrWjNVZTZ5d2NaTDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ3LzFiNTVjZi1iZTk0LTQ5YWQtOWViOC05ZGIzZDQ0YzZk
MmYvMS8xLU1xbmw3a0FfRFZmd2tFa1ozVWU2eXdjWkw0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOSH
1jbfdVZRpUaW8fmR82FYyZpC8VIw/gq5nosh01RIsGf51bEVUX3TbV2va3QSWxlH
oH+hvyktsmDxK62XY9IO8j7Tako1/BGWzI7MSvvdvwUAdzUKbXcQ3uxUSHFVLhSQ
eyFXCwbC3/jz97wJbaiz2e8lI2QBOx1DAb+F5WBEaQcjbCzqkE7cyF+X+4fBfOom
RB2MMhJ10AwIAlcsubYjLBgKO5+4Fae1ff4Iv7AwZn3i1fIbzeHGwL3l0uE2rsp9
e5s2X3O43OrbmdAJ3yuoSZEq6xb8Coi860tT2N1rgD4Hl0ZvkV6pBOe5Kjdp0HYP
2sMywDwDKR04uk2qsw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:02 2024 by rpki-client on console-fra.rpki-client.org